This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/XktNhibRI0-PzcETN2KpqeiB7yU.roa File: XktNhibRI0-PzcETN2KpqeiB7yU.roa (raw, json) Hash identifier: ub5KLahjRSng7WQAYOkZYLUuIHH+I9Wig1Tcpx/w0X0= Subject key identifier: 5E:4B:4D:86:26:D1:23:4F:8F:CD:C1:13:37:62:A9:A9:E8:81:EF:25 Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7 Certificate serial: 019B7CEDEBF5B1DB76A934A49034664D3A35 Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/XktNhibRI0-PzcETN2KpqeiB7yU.roa Signing time: Fri 02 Jan 2026 04:18:45 +0000 ROA not before: Fri 02 Jan 2026 04:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 62.72.185.0/24 maxlen: 24 176.57.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:eb:f5:b1:db:76:a9:34:a4:90:34:66:4d:3a:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7 Validity Not Before: Jan 2 04:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e4b4d8626d1234f8fcdc1133762a9a9e881ef25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:67:fd:86:64:95:39:a3:92:28:10:26:71:d8: 98:63:38:1f:e5:00:97:12:d2:28:9b:44:1c:09:cb: 00:9a:62:93:c6:52:f4:a8:fd:fc:e8:fd:1e:52:2f: 0d:ae:de:9b:7a:fa:d5:30:ae:67:72:9c:5f:fd:db: ad:f3:26:ea:ab:b4:3f:f9:ed:05:8c:34:05:a4:c1: 2b:41:8d:81:7f:9a:f7:8f:67:21:a6:b6:86:79:26: 26:ed:2c:14:59:0d:78:85:7f:fd:cf:a4:19:8d:00: 6c:5b:b5:8d:2f:d1:13:bc:39:6a:13:1d:a3:71:0e: 40:36:c4:3d:77:09:b5:19:cd:2e:1d:63:db:84:48: 76:f6:be:da:49:aa:be:d6:49:d2:71:2d:9f:95:fd: 0d:8e:1c:5b:97:60:a7:46:ac:cb:95:7e:67:e5:03: eb:a0:05:3e:75:45:95:15:f6:97:d4:d4:13:c1:e4: 11:0f:1e:74:be:1c:92:22:53:f1:c3:e8:48:67:a5: 50:63:db:95:e3:41:5e:d2:84:4f:56:b9:ac:c8:0d: ca:b7:7f:a8:f8:9f:44:92:b9:7c:f2:83:4f:3d:c2: 47:32:4e:90:66:2e:ae:40:f3:86:3f:07:29:be:1a: b9:81:ee:30:b4:c6:c7:82:c0:c9:c9:53:87:28:58: 6a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:4B:4D:86:26:D1:23:4F:8F:CD:C1:13:37:62:A9:A9:E8:81:EF:25 X509v3 Authority Key Identifier: keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/XktNhibRI0-PzcETN2KpqeiB7yU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.72.185.0/24 176.57.55.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:5c:12:c2:db:95:94:db:66:72:e3:38:5c:10:b3:2a:38:10: b6:68:ea:1c:8c:bd:d3:a7:45:a5:bd:8c:98:eb:c1:bb:31:b9: 72:ed:a2:40:1e:d3:b6:92:c2:5c:4d:ec:28:ed:61:1c:fd:23: 80:6a:ac:b6:45:ee:4b:36:32:94:61:05:64:37:fd:73:46:de: 9b:0b:56:d7:5a:72:c3:3d:d0:7d:19:7f:95:2d:0c:12:9a:68: b5:6f:90:c6:10:c6:bb:75:71:4c:01:dc:64:a1:e0:49:07:c5: 4b:df:48:e9:f4:d3:6f:78:4d:b5:7f:8c:82:da:66:1c:52:66: da:cb:3e:f3:8e:49:32:ca:5e:d0:77:f6:31:fd:b9:26:c9:30: e5:2e:25:ae:eb:ac:a9:2a:2e:54:71:95:0e:1a:eb:e3:c1:b0: 5d:df:4e:22:83:57:5e:cf:b0:3d:3d:7e:36:72:b6:ff:95:d2: 5a:e6:bc:5e:49:d1:4d:7f:b6:db:94:c6:69:8d:c9:c6:4b:38: 0f:1a:75:de:35:17:fe:54:fe:c7:de:4f:b7:5c:72:e4:b7:9e: fb:85:96:d5:4e:0e:b6:0f:94:c5:43:85:33:27:73:3d:9a:fc: a5:d8:81:e7:4f:40:88:12:6f:0b:6f:78:39:1b:43:b7:bd:7a: 96:bc:41:92 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87ev1sdt2qTSkkDRmTTo1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl ZTQ2ZDcwHhcNMjYwMTAyMDQxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTRiNGQ4NjI2ZDEyMzRmOGZjZGMxMTMzNzYyYTlhOWU4ODFlZjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmf9hmSVOaOSKBAmcdiYYzgf5QCX EtIom0QcCcsAmmKTxlL0qP386P0eUi8Nrt6bevrVMK5ncpxf/dut8ybqq7Q/+e0F jDQFpMErQY2Bf5r3j2chpraGeSYm7SwUWQ14hX/9z6QZjQBsW7WNL9ETvDlqEx2j cQ5ANsQ9dwm1Gc0uHWPbhEh29r7aSaq+1knScS2flf0Njhxbl2CnRqzLlX5n5QPr oAU+dUWVFfaX1NQTweQRDx50vhySIlPxw+hIZ6VQY9uV40Fe0oRPVrmsyA3Kt3+o +J9Ekrl88oNPPcJHMk6QZi6uQPOGPwcpvhq5ge4wtMbHgsDJyVOHKFhqEwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFF5LTYYm0SNPj83BEzdiqanoge8lMB8GA1UdIwQY MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt NTYyNDRmNDMwZGNjLzEvWGt0TmhpYlJJMC1QemNFVE4yS3BxZWlCN3lVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPki5AwQA sDk3MA0GCSqGSIb3DQEBCwUAA4IBAQA9XBLC25WU22Zy4zhcELMqOBC2aOocjL3T p0WlvYyY68G7Mbly7aJAHtO2ksJcTewo7WEc/SOAaqy2Re5LNjKUYQVkN/1zRt6b C1bXWnLDPdB9GX+VLQwSmmi1b5DGEMa7dXFMAdxkoeBJB8VL30jp9NNveE21f4yC 2mYcUmbayz7zjkkyyl7Qd/Yx/bkmyTDlLiWu66ypKi5UcZUOGuvjwbBd304ig1de z7A9PX42crb/ldJa5rxeSdFNf7bblMZpjcnGSzgPGnXeNRf+VP7H3k+3XHLkt577 hZbVTg62D5TFQ4UzJ3M9mvyl2IHnT0CIEm8Lb3g5G0O3vXqWvEGS -----END CERTIFICATE-----Generated at Fri Jan 2 17:57:17 2026 by rpki-client