This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/xayrb7DPbERTIkSh9q7yrJaQDZk.roa File: xayrb7DPbERTIkSh9q7yrJaQDZk.roa (raw, json) Hash identifier: QRTweIp4vhoDsvnbQiGDMedwg40u82afuQyNjrt9nvU= Subject key identifier: C5:AC:AB:6F:B0:CF:6C:44:53:22:44:A1:F6:AE:F2:AC:96:90:0D:99 Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C13472CF2E169473D163F927F83F6D2 Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/xayrb7DPbERTIkSh9q7yrJaQDZk.roa Signing time: Fri 02 Jan 2026 00:19:56 +0000 ROA not before: Fri 02 Jan 2026 00:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 273267 IP address blocks: 45.133.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 18:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:47:2c:f2:e1:69:47:3d:16:3f:92:7f:83:f6:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5acab6fb0cf6c44532244a1f6aef2ac96900d99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b4:e5:ee:91:ec:46:7e:91:26:10:b7:2d:00: 81:e4:bd:b1:85:f6:8a:77:0d:92:74:e4:76:c6:2c: b2:54:72:5e:47:be:13:bf:ed:ff:b3:ad:d5:57:0b: c9:88:5d:89:d9:9c:9a:72:d9:9e:47:db:8a:73:87: e0:ea:1f:d2:af:31:0d:e0:e2:f2:d0:e2:fe:77:3b: e2:d9:5a:5d:e8:26:cd:39:65:9c:27:e5:6f:ca:fb: e7:54:30:da:82:70:54:72:45:50:96:79:f0:06:bb: 03:ea:fe:98:eb:05:4c:fc:93:25:8a:43:0d:ab:47: cf:2e:f0:b4:69:80:e2:7c:72:1f:5a:20:e9:f1:d9: b4:c8:66:4e:8d:99:db:e8:9c:3d:05:f7:b6:99:bf: 74:a1:c5:c5:ba:54:42:df:8b:83:40:ec:53:72:ec: 46:2d:32:e9:aa:39:d6:b2:a6:72:e7:d0:e3:ba:bb: 71:8b:97:7c:12:73:31:ed:68:bc:4e:d6:0b:6d:25: a7:63:50:49:55:25:11:af:dd:42:ee:56:ae:89:e9: f4:6f:a5:c2:d2:30:b0:15:30:11:6e:e1:f1:60:0f: d6:93:88:b8:da:fd:56:7e:51:a0:17:f8:56:1c:c0: b1:ad:94:a4:67:f4:04:bc:63:56:18:14:7d:dc:73: d0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:AC:AB:6F:B0:CF:6C:44:53:22:44:A1:F6:AE:F2:AC:96:90:0D:99 X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/xayrb7DPbERTIkSh9q7yrJaQDZk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.133.60.0/23 Signature Algorithm: sha256WithRSAEncryption 96:62:aa:a1:ea:04:87:f6:7e:d3:12:ef:e0:5f:04:3f:32:ad: 70:96:72:e8:58:27:3c:f8:69:b8:eb:21:27:1a:7a:9b:d4:df: 74:a5:2c:c2:5c:e1:12:55:4c:eb:0a:af:5e:36:87:e0:47:88: 31:7a:38:6f:35:06:af:5a:18:73:d4:5d:9a:50:ff:ac:97:ce: da:bb:6f:0f:22:b2:b3:f8:c8:58:98:83:48:a9:5b:44:a9:b3: db:09:80:a3:04:dc:99:14:6d:87:1a:f5:e1:a2:b8:62:81:6a: d6:3f:a4:f7:10:10:25:fb:ec:2b:c0:9a:43:ca:76:8a:65:b1: 21:73:76:74:4f:6a:d3:74:86:a9:b2:36:be:9f:bb:6e:b7:95: 47:5f:ba:ab:fd:64:2b:0b:5f:11:43:26:31:ad:d1:c1:c9:9e: 62:65:1e:3b:70:a8:fb:ff:88:48:e2:1e:c3:d5:66:2c:09:47: d7:8a:45:2c:b1:5f:44:13:99:a1:3b:1e:4f:56:6e:39:40:d5: 52:d8:30:b0:7c:cd:09:e9:5c:b5:c1:b8:dc:23:a6:ed:32:51: e2:46:fd:11:5e:df:8e:fd:38:fa:23:dd:63:60:4c:f6:e0:74: b8:6f:7b:37:df:cb:c9:5d:05:66:29:3b:c5:b8:87:08:51:3c: 36:f2:b3:51 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E0cs8uFpRz0WP5J/g/bSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNWFjYWI2ZmIwY2Y2YzQ0NTMyMjQ0YTFmNmFlZjJhYzk2OTAwZDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7Tl7pHsRn6RJhC3LQCB5L2xhfaK dw2SdOR2xiyyVHJeR74Tv+3/s63VVwvJiF2J2ZyactmeR9uKc4fg6h/SrzEN4OLy 0OL+dzvi2Vpd6CbNOWWcJ+VvyvvnVDDagnBUckVQlnnwBrsD6v6Y6wVM/JMlikMN q0fPLvC0aYDifHIfWiDp8dm0yGZOjZnb6Jw9Bfe2mb90ocXFulRC34uDQOxTcuxG LTLpqjnWsqZy59Djurtxi5d8EnMx7Wi8TtYLbSWnY1BJVSURr91C7lauien0b6XC 0jCwFTARbuHxYA/Wk4i42v1WflGgF/hWHMCxrZSkZ/QEvGNWGBR93HPQ5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMWsq2+wz2xEUyJEofau8qyWkA2ZMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEveGF5cmI3RFBiRVJUSWtTaDlxN3lySmFRRFprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLYU8MA0G CSqGSIb3DQEBCwUAA4IBAQCWYqqh6gSH9n7TEu/gXwQ/Mq1wlnLoWCc8+Gm46yEn Gnqb1N90pSzCXOESVUzrCq9eNofgR4gxejhvNQavWhhz1F2aUP+sl87au28PIrKz +MhYmINIqVtEqbPbCYCjBNyZFG2HGvXhorhigWrWP6T3EBAl++wrwJpDynaKZbEh c3Z0T2rTdIapsja+n7tut5VHX7qr/WQrC18RQyYxrdHByZ5iZR47cKj7/4hI4h7D 1WYsCUfXikUssV9EE5mhOx5PVm45QNVS2DCwfM0J6Vy1wbjcI6btMlHiRv0RXt+O /Tj6I91jYEz24HS4b3s338vJXQVmKTvFuIcIUTw28rNR -----END CERTIFICATE-----Generated at Fri Jan 23 21:36:09 2026 by rpki-client