This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/My-XsHw-pAeUCYdehCsmsl-d7DU.roa File: My-XsHw-pAeUCYdehCsmsl-d7DU.roa (raw, json) Hash identifier: 88o/CECVw6Fg0CLNL8t4XNZPZxB1Y0nAWpPz410mWEk= Subject key identifier: 33:2F:97:B0:7C:3E:A4:07:94:09:87:5E:84:2B:26:B2:5F:9D:EC:35 Certificate issuer: /CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Certificate serial: 019B77C6F6143E7A304D1D7C0A634E17735C Authority key identifier: 0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/My-XsHw-pAeUCYdehCsmsl-d7DU.roa Signing time: Thu 01 Jan 2026 04:18:06 +0000 ROA not before: Thu 01 Jan 2026 04:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55933 IP address blocks: 45.128.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:f6:14:3e:7a:30:4d:1d:7c:0a:63:4e:17:73:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Validity Not Before: Jan 1 04:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=332f97b07c3ea4079409875e842b26b25f9dec35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:14:c9:3a:c8:f6:1a:b3:d8:7f:bb:3b:0f:ca: 4c:c3:da:38:28:8b:25:05:8f:2a:ce:db:3b:63:3e: 4f:09:b9:52:a2:5e:e8:10:db:53:40:f3:58:b2:20: 74:40:3d:d5:10:cc:65:86:22:2a:37:81:1a:64:5e: 82:5d:a9:c3:74:8e:57:8e:63:1a:59:ee:19:da:9c: be:08:61:7f:8e:29:cc:91:3c:ca:fa:9e:aa:a7:c4: 0b:aa:84:2b:a8:27:04:3e:02:30:c4:ef:98:39:3b: 81:25:7a:09:ef:f4:8d:0d:0b:84:23:c1:4f:67:82: 75:71:36:b5:5b:da:9d:97:da:35:24:be:50:33:15: 75:8c:f9:17:bb:1f:9e:fa:b4:a3:52:9c:87:39:ac: dc:13:51:9a:20:1b:92:11:73:f7:cd:95:9d:54:a5: d4:c4:62:25:f5:37:2e:87:50:42:f0:b4:42:53:75: 3e:2e:a3:f9:81:0f:4d:c0:c4:52:84:5a:74:7e:16: fe:90:37:88:e9:48:2c:60:d0:f1:40:52:cd:3d:da: db:61:4b:f2:24:ce:bc:33:d0:86:64:f3:f9:5d:49: 7d:6f:61:a5:99:23:72:1b:dc:f5:4a:ed:e7:62:60: ed:81:48:d4:ad:2a:4d:8a:52:9e:9d:ed:4b:d9:96: 7f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:2F:97:B0:7C:3E:A4:07:94:09:87:5E:84:2B:26:B2:5F:9D:EC:35 X509v3 Authority Key Identifier: keyid:0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/My-XsHw-pAeUCYdehCsmsl-d7DU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.128.221.0/24 Signature Algorithm: sha256WithRSAEncryption 76:b4:c9:02:e0:31:95:4a:10:51:86:9c:03:f4:3c:fb:40:1a: 5b:4f:aa:8e:36:a7:16:c4:11:d1:30:00:7e:d1:8f:c1:e5:e5: f4:7a:b4:02:67:17:43:8e:c2:97:d8:b4:c5:00:4d:41:e6:00: 8f:f5:6a:35:31:36:52:86:8c:f3:85:c4:71:4f:d1:e6:12:97: e1:51:00:31:0a:44:ac:f7:c9:58:7b:7f:8d:2b:dc:60:82:41: 1c:fd:8f:f1:e2:d3:2a:4b:70:07:4e:6d:f5:01:d6:19:03:11: dd:9b:7f:42:56:a3:60:e8:b0:c5:97:48:3c:57:f0:bd:8c:1b: 57:5a:8d:97:0d:dd:66:38:8e:fb:c5:e6:8d:a6:ed:92:2f:b9: 1e:bf:ca:c1:e6:45:82:3d:da:5c:69:9c:8b:31:60:d0:8a:af: 58:4e:2c:4a:9e:9a:91:37:c3:94:57:f0:ab:3b:3c:aa:5a:65: e3:28:f8:d5:0b:99:37:65:de:59:f5:06:b2:e4:85:54:d3:48: 2e:b5:ed:43:38:9f:29:79:f5:0f:4c:1c:fd:82:4a:4f:e7:7a: ad:c3:98:4b:0d:44:33:84:54:39:e0:d5:9e:ea:ce:4f:61:48: e0:2d:dd:06:1c:11:0f:a6:98:fc:2d:88:a2:de:4a:f2:c8:98: c3:f5:89:c6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xvYUPnowTR18CmNOF3NcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMTdiZjI0OThmMzY4MmQ3MTgzZTQ3Zjc1YjI4YWY0MWMy ODE1YjkwHhcNMjYwMTAxMDQxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzJmOTdiMDdjM2VhNDA3OTQwOTg3NWU4NDJiMjZiMjVmOWRlYzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRTJOsj2GrPYf7s7D8pMw9o4KIsl BY8qzts7Yz5PCblSol7oENtTQPNYsiB0QD3VEMxlhiIqN4EaZF6CXanDdI5XjmMa We4Z2py+CGF/jinMkTzK+p6qp8QLqoQrqCcEPgIwxO+YOTuBJXoJ7/SNDQuEI8FP Z4J1cTa1W9qdl9o1JL5QMxV1jPkXux+e+rSjUpyHOazcE1GaIBuSEXP3zZWdVKXU xGIl9Tcuh1BC8LRCU3U+LqP5gQ9NwMRShFp0fhb+kDeI6UgsYNDxQFLNPdrbYUvy JM68M9CGZPP5XUl9b2GlmSNyG9z1Su3nYmDtgUjUrSpNilKene1L2ZZ/LQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDMvl7B8PqQHlAmHXoQrJrJfnew1MB8GA1UdIwQY MBaAFA8XvySY82gtcYPkf3WyivQcKBW5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMt YTQ5Y2JiODRmOTgyLzEvTXktWHNIdy1wQWVVQ1lkZWhDc21zbC1kN0RVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMtYTQ5Y2JiODRmOTgy LzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYDdMA0G CSqGSIb3DQEBCwUAA4IBAQB2tMkC4DGVShBRhpwD9Dz7QBpbT6qONqcWxBHRMAB+ 0Y/B5eX0erQCZxdDjsKX2LTFAE1B5gCP9Wo1MTZShozzhcRxT9HmEpfhUQAxCkSs 98lYe3+NK9xggkEc/Y/x4tMqS3AHTm31AdYZAxHdm39CVqNg6LDFl0g8V/C9jBtX Wo2XDd1mOI77xeaNpu2SL7kev8rB5kWCPdpcaZyLMWDQiq9YTixKnpqRN8OUV/Cr OzyqWmXjKPjVC5k3Zd5Z9Qay5IVU00gute1DOJ8pefUPTBz9gkpP53qtw5hLDUQz hFQ54NWe6s5PYUjgLd0GHBEPppj8LYii3kryyJjD9YnG -----END CERTIFICATE-----Generated at Sun Jan 18 04:08:43 2026 by rpki-client