This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/xAJAqKl5Srwo2ARzZhLG6xPoMEY.roa File: xAJAqKl5Srwo2ARzZhLG6xPoMEY.roa (raw, json) Hash identifier: zXin4xfG6I9ng2fyOSNQGYSR3toHXgB+MkkZOtI6MnY= Subject key identifier: C4:02:40:A8:A9:79:4A:BC:28:D8:04:73:66:12:C6:EB:13:E8:30:46 Certificate issuer: /CN=cda843e812b16dec60bb7098ca4133117db8474d Certificate serial: 019B7C1304BE9DBE05591670F5EC6B73202F Authority key identifier: CD:A8:43:E8:12:B1:6D:EC:60:BB:70:98:CA:41:33:11:7D:B8:47:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/xAJAqKl5Srwo2ARzZhLG6xPoMEY.roa Signing time: Fri 02 Jan 2026 00:19:39 +0000 ROA not before: Fri 02 Jan 2026 00:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60781 IP address blocks: 185.96.140.0/24 maxlen: 24 2a00:5020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.crl rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 06:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:04:be:9d:be:05:59:16:70:f5:ec:6b:73:20:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cda843e812b16dec60bb7098ca4133117db8474d Validity Not Before: Jan 2 00:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c40240a8a9794abc28d804736612c6eb13e83046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:07:4a:f8:ec:5b:e1:96:3d:a1:96:83:7b:f9: 79:30:08:94:ea:6e:23:29:8b:5e:20:bc:25:a4:2a: ef:c2:38:09:be:99:5a:48:a9:5a:63:b9:97:e6:87: 5c:5c:91:22:94:0a:3d:29:23:da:df:f5:88:2f:06: 75:e3:1d:5d:65:e5:3f:48:b5:05:9d:80:31:8b:78: 14:b9:d9:a8:6a:f9:25:b7:42:a6:51:b9:f7:83:67: 37:32:37:9e:40:55:77:75:b5:62:24:d5:e2:9a:51: d9:19:c7:7f:d0:6f:e4:a1:50:1c:74:84:67:50:d7: 08:7f:7f:a1:e9:5e:d5:5f:35:f6:d8:f7:fc:cd:ff: 9b:b7:11:c4:e2:33:2f:66:b1:7f:23:ae:2d:fc:1d: 94:89:54:52:df:3d:3f:ce:6f:7e:aa:51:6b:8b:95: 64:bd:c9:77:ad:e5:b3:e4:54:16:4c:36:41:c2:3b: 81:78:7e:46:b3:cd:34:e4:d5:f5:49:fd:42:8c:ed: 34:c8:d7:5b:a2:af:7b:36:cf:e2:66:d4:74:04:72: a0:f1:26:98:6f:6d:30:24:e6:61:8a:43:ae:dd:1e: 3a:2b:c1:6f:d1:b8:71:14:ce:ac:f6:0f:bb:51:e3: 0e:b0:09:9d:9d:b4:e5:b2:f5:e3:83:47:83:5c:f7: b1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:02:40:A8:A9:79:4A:BC:28:D8:04:73:66:12:C6:EB:13:E8:30:46 X509v3 Authority Key Identifier: keyid:CD:A8:43:E8:12:B1:6D:EC:60:BB:70:98:CA:41:33:11:7D:B8:47:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/xAJAqKl5Srwo2ARzZhLG6xPoMEY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.96.140.0/24 IPv6: 2a00:5020::/48 Signature Algorithm: sha256WithRSAEncryption 49:f4:7e:75:be:28:60:86:56:60:f4:cf:1c:55:55:c2:25:2b: fd:73:0d:c2:73:4c:3e:4d:fa:8f:fd:d1:9c:c1:df:ac:3d:cc: 8a:c8:a2:b2:7a:3c:02:ea:99:60:61:a6:3a:17:01:29:8b:72: bd:a8:1e:d8:ec:7f:a9:e5:a7:e3:8f:42:d6:36:3f:93:17:a2: 36:97:07:23:61:b9:c2:90:70:e5:bd:d8:53:03:47:41:b8:22: d9:ec:b8:4b:f8:7a:3a:c0:8d:c1:f1:cf:af:03:08:0b:d0:b0: 61:c2:95:7a:95:96:4e:42:20:9b:59:00:ac:54:9c:69:ab:2c: 61:91:13:c6:0d:e6:8e:1d:76:f2:67:49:4b:a3:97:72:d7:73: af:cd:cf:e3:18:d0:3c:98:1d:3f:e7:fd:d9:5c:5a:a2:f6:3e: e3:e1:55:91:50:69:6f:89:1d:fc:a5:74:38:08:00:3b:db:c2: 3d:66:ba:22:ba:9e:c0:23:f5:af:b9:51:2b:53:91:43:a0:ed: 48:24:d6:3b:42:2d:eb:fc:2e:71:05:a1:d8:d0:7d:44:d5:d7: b1:eb:19:c7:07:c4:95:18:97:4c:53:db:06:4f:37:1a:55:20: df:7e:3f:d5:03:0a:c0:7a:83:3e:c3:dd:d9:22:2f:ba:8b:82: d0:b7:9f:a5 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8EwS+nb4FWRZw9exrcyAvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYTg0M2U4MTJiMTZkZWM2MGJiNzA5OGNhNDEzMzExN2Ri ODQ3NGQwHhcNMjYwMTAyMDAxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDAyNDBhOGE5Nzk0YWJjMjhkODA0NzM2NjEyYzZlYjEzZTgzMDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwdK+Oxb4ZY9oZaDe/l5MAiU6m4j KYteILwlpCrvwjgJvplaSKlaY7mX5odcXJEilAo9KSPa3/WILwZ14x1dZeU/SLUF nYAxi3gUudmoavklt0KmUbn3g2c3MjeeQFV3dbViJNXimlHZGcd/0G/koVAcdIRn UNcIf3+h6V7VXzX22Pf8zf+btxHE4jMvZrF/I64t/B2UiVRS3z0/zm9+qlFri5Vk vcl3reWz5FQWTDZBwjuBeH5Gs8005NX1Sf1CjO00yNdboq97Ns/iZtR0BHKg8SaY b20wJOZhikOu3R46K8Fv0bhxFM6s9g+7UeMOsAmdnbTlsvXjg0eDXPexkQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFMQCQKipeUq8KNgEc2YSxusT6DBGMB8GA1UdIwQY MBaAFM2oQ+gSsW3sYLtwmMpBMxF9uEdNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemFoRDZCS3hiZXhndTNDWXlrRXpFWDI0UjAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84ZWIzMmQtZjdlMy00YTljLWFhYTQt ODQyMWQ3ODFiMDNiLzEveEFKQXFLbDVTcndvMkFSelpoTEc2eFBvTUVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC84ZWIzMmQtZjdlMy00YTljLWFhYTQtODQyMWQ3ODFiMDNi LzEvemFoRDZCS3hiZXhndTNDWXlrRXpFWDI0UjAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuWCMMA8E AgACMAkDBwAqAFAgAAAwDQYJKoZIhvcNAQELBQADggEBAEn0fnW+KGCGVmD0zxxV VcIlK/1zDcJzTD5N+o/90ZzB36w9zIrIorJ6PALqmWBhpjoXASmLcr2oHtjsf6nl p+OPQtY2P5MXojaXByNhucKQcOW92FMDR0G4ItnsuEv4ejrAjcHxz68DCAvQsGHC lXqVlk5CIJtZAKxUnGmrLGGRE8YN5o4ddvJnSUujl3LXc6/Nz+MY0DyYHT/n/dlc WqL2PuPhVZFQaW+JHfyldDgIADvbwj1muiK6nsAj9a+5UStTkUOg7Ugk1jtCLev8 LnEFodjQfUTV17HrGccHxJUYl0xT2wZPNxpVIN9+P9UDCsB6gz7D3dkiL7qLgtC3 n6U= -----END CERTIFICATE-----Generated at Mon Jan 19 16:55:24 2026 by rpki-client