This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/xJLUaEqq1ZnsryMWFK1TiSGmxHs.roa File: xJLUaEqq1ZnsryMWFK1TiSGmxHs.roa (raw, json) Hash identifier: CgFHk+Ek6FTFUMY85fF8eDyesBRdCZysUJ3S3cGo/uM= Subject key identifier: C4:92:D4:68:4A:AA:D5:99:EC:AF:23:16:14:AD:53:89:21:A6:C4:7B Certificate issuer: /CN=a4b707300e869467be5e5273222d90e0b618f924 Certificate serial: 019B77C7715C9716906F7AE2260D1CE6EFC6 Authority key identifier: A4:B7:07:30:0E:86:94:67:BE:5E:52:73:22:2D:90:E0:B6:18:F9:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/xJLUaEqq1ZnsryMWFK1TiSGmxHs.roa Signing time: Thu 01 Jan 2026 04:18:37 +0000 ROA not before: Thu 01 Jan 2026 04:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6453 IP address blocks: 45.152.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.crl rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:71:5c:97:16:90:6f:7a:e2:26:0d:1c:e6:ef:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4b707300e869467be5e5273222d90e0b618f924 Validity Not Before: Jan 1 04:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c492d4684aaad599ecaf231614ad538921a6c47b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:42:66:6c:7c:a0:47:2f:cc:7c:16:91:45:17: 41:62:61:2a:eb:f5:1e:7a:69:c1:a0:8a:d7:5f:b2: ba:21:8d:63:c1:f7:71:e7:f1:3e:2e:8b:1f:fe:1d: 37:8c:4c:bc:b9:6f:10:33:fd:ec:e6:9c:c4:ab:d3: 48:1f:3e:d3:05:4e:e3:2e:3a:a5:7b:02:39:98:7c: ea:82:14:16:4c:00:ed:25:54:52:d4:4a:46:23:a2: ab:99:38:41:e5:8d:4a:64:20:b6:58:db:5b:d9:0d: c6:38:d8:3f:ee:31:6a:27:ea:08:15:11:4e:2d:8f: 8b:9c:19:ac:71:8b:60:cd:e1:98:d2:67:6e:72:c1: 24:ec:f1:96:b8:a5:c8:04:0c:eb:f7:83:cb:40:8c: fd:7d:9d:77:1e:76:3a:e1:f9:ca:26:d9:21:8c:81: b3:84:ef:b5:e9:f9:bf:d1:12:a0:f7:b5:21:e4:1a: 6c:c3:c6:53:07:73:04:4c:73:76:03:5a:8a:94:19: b9:26:fd:b4:2d:7a:e7:96:19:4d:8b:d9:9c:6a:e0: c2:55:e3:27:29:60:59:de:c0:24:b0:3d:fd:c5:e1: 82:c3:1d:ce:a5:43:16:ff:99:e1:7d:07:f8:a4:55: 43:1b:92:9a:bf:48:4a:c4:9e:ff:55:31:45:3a:7d: 21:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:92:D4:68:4A:AA:D5:99:EC:AF:23:16:14:AD:53:89:21:A6:C4:7B X509v3 Authority Key Identifier: keyid:A4:B7:07:30:0E:86:94:67:BE:5E:52:73:22:2D:90:E0:B6:18:F9:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/xJLUaEqq1ZnsryMWFK1TiSGmxHs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.56.0/22 Signature Algorithm: sha256WithRSAEncryption 86:85:c5:ce:8b:b0:14:50:4e:23:b2:b0:b6:b9:90:66:1f:b7: 52:68:7e:e6:18:7b:3f:67:c4:74:71:cd:f9:d7:98:f9:be:31: 65:de:82:ef:e5:4d:62:d7:4a:10:fa:63:6a:ba:44:d7:65:54: 4e:de:38:a4:39:ed:60:51:6a:f0:0f:97:46:c8:bb:8c:5b:fd: da:60:47:2e:7f:6b:ca:99:4f:3b:31:5c:ab:05:e2:3e:f5:3d: 14:3e:a6:02:2f:c4:7d:d2:e0:08:2d:15:d2:6b:1c:ad:38:e1: ba:94:77:8b:09:7a:18:d5:b8:84:a8:89:34:da:1c:43:89:ba: 53:3e:aa:10:7c:76:6e:5d:c3:06:1b:42:2e:15:24:c3:03:72: 08:55:34:4e:04:67:da:0b:72:18:3d:29:23:12:9a:8a:e8:14: ab:6a:69:ae:9f:38:a3:2f:dc:f0:ac:4d:17:5b:5a:54:ae:ec: 68:19:09:11:a8:5c:77:65:43:1f:c5:b9:a8:91:fc:ab:4d:1e: 1c:34:81:2e:6c:36:d6:a2:00:26:5a:38:f9:b8:b6:d4:70:f4: bf:54:2b:e1:4d:2c:08:dd:44:eb:59:28:62:ab:83:eb:bc:a5: 1b:10:7d:ab:1e:c5:cf:7b:82:f7:a1:a7:b7:77:13:84:58:da: 65:37:35:22 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3FclxaQb3riJg0c5u/GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YjcwNzMwMGU4Njk0NjdiZTVlNTI3MzIyMmQ5MGUwYjYx OGY5MjQwHhcNMjYwMTAxMDQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDkyZDQ2ODRhYWFkNTk5ZWNhZjIzMTYxNGFkNTM4OTIxYTZjNDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EJmbHygRy/MfBaRRRdBYmEq6/Ue emnBoIrXX7K6IY1jwfdx5/E+Losf/h03jEy8uW8QM/3s5pzEq9NIHz7TBU7jLjql ewI5mHzqghQWTADtJVRS1EpGI6KrmThB5Y1KZCC2WNtb2Q3GONg/7jFqJ+oIFRFO LY+LnBmscYtgzeGY0mducsEk7PGWuKXIBAzr94PLQIz9fZ13HnY64fnKJtkhjIGz hO+16fm/0RKg97Uh5Bpsw8ZTB3METHN2A1qKlBm5Jv20LXrnlhlNi9mcauDCVeMn KWBZ3sAksD39xeGCwx3OpUMW/5nhfQf4pFVDG5Kav0hKxJ7/VTFFOn0hiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMSS1GhKqtWZ7K8jFhStU4khpsR7MB8GA1UdIwQY MBaAFKS3BzAOhpRnvl5ScyItkOC2GPkkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcExjSE1BNkdsR2UtWGxKeklpMlE0TFlZLVNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9mYzg1MTktNjJlNC00Mjg5LTk5MTct M2U1NWM0OWYyZDRlLzEveEpMVWFFcXExWm5zcnlNV0ZLMVRpU0dteEhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9mYzg1MTktNjJlNC00Mjg5LTk5MTctM2U1NWM0OWYyZDRl LzEvcExjSE1BNkdsR2UtWGxKeklpMlE0TFlZLVNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZg4MA0G CSqGSIb3DQEBCwUAA4IBAQCGhcXOi7AUUE4jsrC2uZBmH7dSaH7mGHs/Z8R0cc35 15j5vjFl3oLv5U1i10oQ+mNqukTXZVRO3jikOe1gUWrwD5dGyLuMW/3aYEcuf2vK mU87MVyrBeI+9T0UPqYCL8R90uAILRXSaxytOOG6lHeLCXoY1biEqIk02hxDibpT PqoQfHZuXcMGG0IuFSTDA3IIVTROBGfaC3IYPSkjEpqK6BSrammunzijL9zwrE0X W1pUruxoGQkRqFx3ZUMfxbmokfyrTR4cNIEubDbWogAmWjj5uLbUcPS/VCvhTSwI 3UTrWShiq4PrvKUbEH2rHsXPe4L3oae3dxOEWNplNzUi -----END CERTIFICATE-----Generated at Mon Jan 12 04:03:43 2026 by rpki-client