This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/XDVduxSIkpS11pXZHeJS-aKav7Q.roa File: XDVduxSIkpS11pXZHeJS-aKav7Q.roa (raw, json) Hash identifier: SfyTGsf7PDF8ROE8Q2ZqFpVgQ6J1N56sdhiAJokZbbw= Subject key identifier: 5C:35:5D:BB:14:88:92:94:B5:D6:95:D9:1D:E2:52:F9:A2:9A:BF:B4 Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019B7BA3FFF9B553DE3D96B4AE1094784FF5 Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/XDVduxSIkpS11pXZHeJS-aKav7Q.roa Signing time: Thu 01 Jan 2026 22:18:24 +0000 ROA not before: Thu 01 Jan 2026 22:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51200 IP address blocks: 185.102.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:ff:f9:b5:53:de:3d:96:b4:ae:10:94:78:4f:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Jan 1 22:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c355dbb14889294b5d695d91de252f9a29abfb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:46:bf:2f:39:29:66:61:75:96:c0:da:8c:71: 54:f8:d9:58:f4:2f:29:87:81:8e:fd:10:e1:85:12: bd:71:40:37:9d:e2:6d:e4:f8:a6:56:00:d8:f6:a2: 86:41:26:32:0c:cc:96:28:cc:a9:61:f8:1e:d3:bb: c9:c2:9e:a8:ea:5a:e6:45:5e:47:ab:2c:12:60:9e: 2b:ea:74:77:3e:f2:8c:09:c2:f6:b7:fe:d7:1d:fb: 17:b5:66:1c:12:fd:a8:b9:7a:64:54:d4:49:4e:3c: ad:be:30:cb:93:6e:f7:1f:b1:fd:81:db:21:8c:13: 15:89:ed:83:85:53:c1:7f:50:b1:00:bb:7c:b3:27: cb:d5:72:da:29:e8:8e:6e:dc:19:aa:38:b5:35:05: b7:74:0d:9d:39:5e:bb:8c:23:66:22:00:cd:a7:25: 93:9e:0d:3e:da:e5:b5:1e:9d:fd:ba:58:7a:92:11: d4:15:35:f2:20:af:5a:2b:7b:7b:67:67:89:d0:85: 5f:89:01:4a:ae:b5:9d:09:1e:96:b5:02:b6:0c:ae: 69:3c:42:51:72:4f:f6:1b:8a:44:3a:2a:59:18:12: da:5f:32:61:f0:1c:9b:3b:c7:33:df:0c:04:81:1d: 1a:f2:44:cd:d4:da:4a:d1:74:99:62:ff:d5:b9:be: 97:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:35:5D:BB:14:88:92:94:B5:D6:95:D9:1D:E2:52:F9:A2:9A:BF:B4 X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/XDVduxSIkpS11pXZHeJS-aKav7Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.102.138.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:81:63:8d:6f:4e:33:8f:40:a7:cb:1d:26:ae:fa:a4:d8:5c: 94:56:e5:52:17:5a:6a:c8:c5:72:a4:1b:c8:81:1c:d4:de:10: 15:06:61:f7:1e:e0:f8:a5:8d:39:91:4e:5c:37:fa:f9:31:54: 16:da:fa:c9:55:5f:b8:7e:8f:5e:cc:a4:25:d1:25:6d:98:4f: 28:f9:9e:4a:df:dc:ef:e8:ba:a2:49:55:4d:e9:5b:f9:15:18: 05:3b:57:24:e6:bd:9e:6c:5d:60:e0:e4:ea:9e:47:1b:77:72: 19:9e:61:15:60:fe:a7:b6:81:09:a6:32:f7:0d:a3:04:9b:bb: 8f:8d:d5:80:68:63:d3:36:47:17:82:c4:f2:48:c4:ab:09:57: 3f:ed:c3:b0:4d:60:43:d5:2c:3f:6f:19:b6:c3:aa:72:9a:e3: 10:09:d2:46:c6:f8:46:cd:73:57:9c:b1:d2:0c:c8:9e:e6:f5: 54:a7:2a:f8:c2:b3:65:bd:0d:f6:fa:fd:ac:78:8e:31:cd:4a: 19:a0:05:73:9e:8e:2b:47:73:ce:2d:7a:17:b9:f8:fe:3d:05: 81:30:bf:22:78:d1:55:65:7e:a9:cb:c6:39:d0:88:61:96:fd: fa:a7:c6:69:df:e3:9e:24:05:55:75:0c:72:b5:01:07:ec:ea: d3:b4:59:66 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o//5tVPePZa0rhCUeE/1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjYwMTAxMjIxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzM1NWRiYjE0ODg5Mjk0YjVkNjk1ZDkxZGUyNTJmOWEyOWFiZmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUa/LzkpZmF1lsDajHFU+NlY9C8p h4GO/RDhhRK9cUA3neJt5PimVgDY9qKGQSYyDMyWKMypYfge07vJwp6o6lrmRV5H qywSYJ4r6nR3PvKMCcL2t/7XHfsXtWYcEv2ouXpkVNRJTjytvjDLk273H7H9gdsh jBMVie2DhVPBf1CxALt8syfL1XLaKeiObtwZqji1NQW3dA2dOV67jCNmIgDNpyWT ng0+2uW1Hp39ulh6khHUFTXyIK9aK3t7Z2eJ0IVfiQFKrrWdCR6WtQK2DK5pPEJR ck/2G4pEOipZGBLaXzJh8BybO8cz3wwEgR0a8kTN1NpK0XSZYv/Vub6XYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFw1XbsUiJKUtdaV2R3iUvmimr+0MB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvWERWZHV4U0lrcFMxMXBYWkhlSlMtYUthdjdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWaKMA0G CSqGSIb3DQEBCwUAA4IBAQAtgWONb04zj0Cnyx0mrvqk2FyUVuVSF1pqyMVypBvI gRzU3hAVBmH3HuD4pY05kU5cN/r5MVQW2vrJVV+4fo9ezKQl0SVtmE8o+Z5K39zv 6LqiSVVN6Vv5FRgFO1ck5r2ebF1g4OTqnkcbd3IZnmEVYP6ntoEJpjL3DaMEm7uP jdWAaGPTNkcXgsTySMSrCVc/7cOwTWBD1Sw/bxm2w6pymuMQCdJGxvhGzXNXnLHS DMie5vVUpyr4wrNlvQ32+v2seI4xzUoZoAVzno4rR3POLXoXufj+PQWBML8ieNFV ZX6py8Y50Ihhlv36p8Zp3+OeJAVVdQxytQEH7OrTtFlm -----END CERTIFICATE-----Generated at Tue Jan 20 04:28:21 2026 by rpki-client