This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/XJdLl-bPQ8q_zbXD4AS2SB-7kIo.roa File: XJdLl-bPQ8q_zbXD4AS2SB-7kIo.roa (raw, json) Hash identifier: 0BskkM0mLyzjYlWTURXWwr/DgTkFtz5de7yH1kzkwwc= Subject key identifier: 5C:97:4B:97:E6:CF:43:CA:BF:CD:B5:C3:E0:04:B6:48:1F:BB:90:8A Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346 Certificate serial: 019B7E38ABD5A721B417AFE2E27520CCA443 Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/XJdLl-bPQ8q_zbXD4AS2SB-7kIo.roa Signing time: Fri 02 Jan 2026 10:20:01 +0000 ROA not before: Fri 02 Jan 2026 10:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 54339 IP address blocks: 77.47.180.0/22 maxlen: 24 212.111.211.0/24 maxlen: 24 212.111.218.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:ab:d5:a7:21:b4:17:af:e2:e2:75:20:cc:a4:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19426325acb8ce609a686fa655b058968809b346 Validity Not Before: Jan 2 10:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c974b97e6cf43cabfcdb5c3e004b6481fbb908a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2e:75:44:f0:df:df:61:ef:21:02:98:c9:dc: 87:19:c0:c0:7b:86:9a:d3:1e:85:c0:7e:14:30:65: ac:81:fc:39:bb:ac:80:9e:4e:a1:2a:e0:40:fa:56: 90:80:74:47:a9:09:56:06:fd:66:7b:40:e9:e6:7f: 72:73:c8:67:33:03:39:e6:82:db:d0:a6:b3:e3:6d: e4:6b:0a:43:72:2e:df:3f:87:a9:91:05:e2:96:f1: 36:f1:78:cc:68:ef:eb:b0:82:f7:84:99:ae:68:ee: 8a:61:38:4c:0a:de:71:44:fc:37:34:8c:c7:92:3a: f8:ec:7b:c5:32:91:f6:a7:62:f4:8e:4f:a6:83:c7: 2e:21:46:33:55:a5:da:6f:90:31:93:6d:6d:b2:c9: f0:49:59:51:46:01:ce:ca:73:d2:b6:29:05:90:3e: f4:23:8e:1f:93:36:3c:5e:9a:5b:d1:66:2e:f2:c9: e7:57:f3:82:2c:9a:51:b2:24:09:be:38:c5:f0:44: 25:4d:49:2d:12:a8:d6:45:62:a5:98:83:9d:e3:c3: 5d:05:7c:76:e6:3d:b3:d1:d3:6d:45:a6:e3:c5:53: e3:f3:3d:4a:73:99:a9:a2:3c:5f:0b:bf:03:65:1d: 76:f8:5c:91:69:b3:50:58:a0:2a:57:e0:ab:cf:37: 39:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:97:4B:97:E6:CF:43:CA:BF:CD:B5:C3:E0:04:B6:48:1F:BB:90:8A X509v3 Authority Key Identifier: keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/XJdLl-bPQ8q_zbXD4AS2SB-7kIo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.47.180.0/22 212.111.211.0/24 212.111.218.0/23 Signature Algorithm: sha256WithRSAEncryption 6c:e8:c0:48:48:fb:08:1f:12:e5:08:fa:51:f2:07:02:2c:3b: 31:f3:89:ff:23:6d:35:6c:de:7d:16:ad:64:05:7b:d7:9f:46: bd:0f:0d:0e:7f:10:db:60:68:bc:f7:a3:67:59:a1:b4:4a:b8: 75:58:75:b3:2b:9c:3a:1b:2a:ca:a7:b0:3a:c4:af:fd:16:37: 38:f7:f8:40:78:6c:2f:ad:f9:e5:1c:03:1a:ac:d5:c1:db:ba: f0:d2:1a:19:39:6e:45:4d:06:35:95:34:3a:f1:25:95:c9:92: c6:4f:51:61:b3:fc:2e:d8:53:f0:63:34:1a:44:22:3b:43:57: c6:a4:58:cf:a5:37:35:6c:52:f7:aa:62:77:ea:de:36:69:2d: 81:05:3e:9e:f5:92:72:5e:69:7f:00:a4:99:7a:25:1f:1e:09: 86:36:ec:eb:ec:60:bb:4f:22:65:60:a3:ee:3c:e5:40:59:58: 6f:fa:e5:5f:18:d4:93:b8:7c:22:c7:40:79:03:ba:a0:e5:e1: db:75:ec:b8:ac:ec:fa:5c:07:a0:6c:71:51:65:10:d6:0d:1f: 46:bd:a4:13:56:f1:7e:30:01:eb:23:25:3b:cf:98:57:c5:b1: 8b:fe:13:ed:70:c2:81:69:68:b4:d4:6a:1b:05:46:a6:b7:01: 42:8a:da:55 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+OKvVpyG0F6/i4nUgzKRDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw OWIzNDYwHhcNMjYwMTAyMTAyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Yzk3NGI5N2U2Y2Y0M2NhYmZjZGI1YzNlMDA0YjY0ODFmYmI5MDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsy51RPDf32HvIQKYydyHGcDAe4aa 0x6FwH4UMGWsgfw5u6yAnk6hKuBA+laQgHRHqQlWBv1me0Dp5n9yc8hnMwM55oLb 0Kaz423kawpDci7fP4epkQXilvE28XjMaO/rsIL3hJmuaO6KYThMCt5xRPw3NIzH kjr47HvFMpH2p2L0jk+mg8cuIUYzVaXab5Axk21tssnwSVlRRgHOynPStikFkD70 I44fkzY8Xppb0WYu8snnV/OCLJpRsiQJvjjF8EQlTUktEqjWRWKlmIOd48NdBXx2 5j2z0dNtRabjxVPj8z1Kc5mpojxfC78DZR12+FyRabNQWKAqV+Crzzc5ZwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFyXS5fmz0PKv821w+AEtkgfu5CKMB8GA1UdIwQY MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt MDNmNGM3MTEzYzM0LzEvWEpkTGwtYlBROHFfemJYRDRBUzJTQi03a0lvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0 LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCTS+0AwQA 1G/TAwQB1G/aMA0GCSqGSIb3DQEBCwUAA4IBAQBs6MBISPsIHxLlCPpR8gcCLDsx 84n/I201bN59Fq1kBXvXn0a9Dw0OfxDbYGi896NnWaG0Srh1WHWzK5w6GyrKp7A6 xK/9Fjc49/hAeGwvrfnlHAMarNXB27rw0hoZOW5FTQY1lTQ68SWVyZLGT1Fhs/wu 2FPwYzQaRCI7Q1fGpFjPpTc1bFL3qmJ36t42aS2BBT6e9ZJyXml/AKSZeiUfHgmG Nuzr7GC7TyJlYKPuPOVAWVhv+uVfGNSTuHwix0B5A7qg5eHbdey4rOz6XAegbHFR ZRDWDR9GvaQTVvF+MAHrIyU7z5hXxbGL/hPtcMKBaWi01GobBUamtwFCitpV -----END CERTIFICATE-----Generated at Sat Jan 10 04:58:26 2026 by rpki-client