This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/XWq1ZbkqqPa1WUZZPLZb9hXPbJ4.roa File: XWq1ZbkqqPa1WUZZPLZb9hXPbJ4.roa (raw, json) Hash identifier: bsx69qk8HF50mAvraEtz+WGnMYImpTOafO+LH91tZrs= Subject key identifier: 5D:6A:B5:65:B9:2A:A8:F6:B5:59:46:59:3C:B6:5B:F6:15:CF:6C:9E Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Certificate serial: 019B7AC7E46997D3BF01D56247E6C11D06B9 Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/XWq1ZbkqqPa1WUZZPLZb9hXPbJ4.roa Signing time: Thu 01 Jan 2026 18:17:59 +0000 ROA not before: Thu 01 Jan 2026 18:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2914 IP address blocks: 80.174.248.0/24 maxlen: 24 103.85.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:e4:69:97:d3:bf:01:d5:62:47:e6:c1:1d:06:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Validity Not Before: Jan 1 18:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d6ab565b92aa8f6b55946593cb65bf615cf6c9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e2:24:da:84:47:b8:5c:21:cd:50:d0:17:58: ab:75:28:f4:1d:1e:3d:99:1a:1f:3d:2e:11:1e:8d: 9c:20:2f:f2:5e:a9:83:d7:08:d8:82:80:71:94:c9: d1:7c:80:4d:c6:1d:53:99:94:ff:f5:e2:9f:d6:26: fb:bb:46:82:54:e3:d0:a8:74:65:d6:f4:69:ec:75: 1a:82:5a:21:59:d5:f1:85:cf:32:5a:f8:01:e7:25: 65:53:6a:13:47:c9:59:e0:87:1c:4f:5b:22:75:90: 64:0b:8d:67:7b:85:a4:fd:b5:ba:ab:cc:71:4d:4c: 4b:19:4a:c4:3b:fe:78:bb:0d:61:29:22:96:20:2c: 80:a4:e0:6b:f1:d8:4d:77:4e:b2:f2:9d:6b:d9:87: d7:36:fc:e0:70:d3:46:82:6e:57:98:c1:12:16:5c: 2c:87:ff:87:0c:d3:25:64:17:e4:de:66:61:9b:e1: 40:dc:20:28:3f:91:d2:60:5d:b4:34:4e:43:c6:48: 57:57:3d:03:da:c3:75:25:55:5d:f3:78:db:91:ab: 89:23:85:48:26:46:fd:28:07:02:aa:45:de:09:c9: e9:4b:aa:54:da:39:3d:4b:e3:47:4c:81:64:c6:c5: f2:b8:62:9a:86:4d:8b:90:ab:ed:05:e3:75:54:4b: 8d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:6A:B5:65:B9:2A:A8:F6:B5:59:46:59:3C:B6:5B:F6:15:CF:6C:9E X509v3 Authority Key Identifier: keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/XWq1ZbkqqPa1WUZZPLZb9hXPbJ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.174.248.0/24 103.85.35.0/24 Signature Algorithm: sha256WithRSAEncryption 12:83:5f:25:87:c3:84:d3:d4:3b:0b:e2:bc:76:d1:41:c4:41: ec:cb:e5:a1:c5:2a:9d:08:47:8f:9f:60:10:61:ef:78:94:a3: 84:0e:2a:95:6a:e7:bd:53:1b:9a:9a:7b:ad:ac:21:2d:d8:23: ad:20:9f:ab:a1:4d:56:84:54:9b:cd:a8:0e:27:8d:8c:a8:51: 03:0a:71:a8:9d:85:7e:cd:85:f3:3b:e9:e4:95:e8:e1:8b:6e: d9:c7:d9:eb:5a:ac:d3:05:09:a1:0d:fe:9d:0a:36:2a:30:24: a6:61:d9:45:74:8c:47:be:d4:4d:6e:5a:8f:94:ca:a4:cf:0a: c5:3a:fd:45:6a:1d:c4:41:b6:1e:13:cb:bc:e0:1c:c9:61:ad: d5:dd:42:bc:63:90:91:69:7f:62:7c:39:a7:cd:6c:23:ac:f6: 7b:f2:8e:48:e4:88:6a:ce:d6:8f:68:0f:77:3a:50:ec:f4:1e: ca:3f:d0:41:f4:37:25:ca:86:e6:d4:6d:83:19:18:3e:02:ad: 69:c9:36:d1:6b:a0:d1:a8:13:61:cb:d0:e9:c1:b5:ca:08:d9: 85:0a:13:0d:11:e2:1d:5d:ed:09:3d:03:01:dd:07:7e:d2:bb: 73:b0:26:bc:9c:38:20:30:21:dd:ad:c9:d5:e4:b1:6e:af:72: c6:0d:65:64 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6x+Rpl9O/AdViR+bBHQa5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NTk5OTg5OWY3NmQyZTJlNGNjZGZjODE3Zjk4NzljZmFj MDZiYmUwHhcNMjYwMTAxMTgxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDZhYjU2NWI5MmFhOGY2YjU1OTQ2NTkzY2I2NWJmNjE1Y2Y2YzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOIk2oRHuFwhzVDQF1irdSj0HR49 mRofPS4RHo2cIC/yXqmD1wjYgoBxlMnRfIBNxh1TmZT/9eKf1ib7u0aCVOPQqHRl 1vRp7HUaglohWdXxhc8yWvgB5yVlU2oTR8lZ4IccT1sidZBkC41ne4Wk/bW6q8xx TUxLGUrEO/54uw1hKSKWICyApOBr8dhNd06y8p1r2YfXNvzgcNNGgm5XmMESFlws h/+HDNMlZBfk3mZhm+FA3CAoP5HSYF20NE5DxkhXVz0D2sN1JVVd83jbkauJI4VI Jkb9KAcCqkXeCcnpS6pU2jk9S+NHTIFkxsXyuGKahk2LkKvtBeN1VEuNywIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFF1qtWW5Kqj2tVlGWTy2W/YVz2yeMB8GA1UdIwQY MBaAFLRZmYmfdtLi5MzfyBf5h5z6wGu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUt NzM0MjhmOWM3YmZmLzEvWFdxMVpia3FxUGExV1VaWlBMWmI5aFhQYko0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUtNzM0MjhmOWM3YmZm LzEvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUK74AwQA Z1UjMA0GCSqGSIb3DQEBCwUAA4IBAQASg18lh8OE09Q7C+K8dtFBxEHsy+WhxSqd CEePn2AQYe94lKOEDiqVaue9UxuamnutrCEt2COtIJ+roU1WhFSbzagOJ42MqFED CnGonYV+zYXzO+nklejhi27Zx9nrWqzTBQmhDf6dCjYqMCSmYdlFdIxHvtRNblqP lMqkzwrFOv1Fah3EQbYeE8u84BzJYa3V3UK8Y5CRaX9ifDmnzWwjrPZ78o5I5Ihq ztaPaA93OlDs9B7KP9BB9Dclyobm1G2DGRg+Aq1pyTbRa6DRqBNhy9DpwbXKCNmF ChMNEeIdXe0JPQMB3Qd+0rtzsCa8nDggMCHdrcnV5LFur3LGDWVk -----END CERTIFICATE-----Generated at Thu Jan 8 00:16:36 2026 by rpki-client