This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/xtauWxo0exg2gLqphzXNftjxUSc.roa File: xtauWxo0exg2gLqphzXNftjxUSc.roa (raw, json) Hash identifier: IQeg+OdMkUSXXzMWLgumvNF6674dwh9/LgkRyD3xmF4= Subject key identifier: C6:D6:AE:5B:1A:34:7B:18:36:80:BA:A9:87:35:CD:7E:D8:F1:51:27 Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4 Certificate serial: 019B77C6A06F2FDBA5616D90CF653AA88B8D Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/xtauWxo0exg2gLqphzXNftjxUSc.roa Signing time: Thu 01 Jan 2026 04:17:44 +0000 ROA not before: Thu 01 Jan 2026 04:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52000 IP address blocks: 109.248.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 14:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:a0:6f:2f:db:a5:61:6d:90:cf:65:3a:a8:8b:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4 Validity Not Before: Jan 1 04:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6d6ae5b1a347b183680baa98735cd7ed8f15127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d1:87:a6:9e:c3:5c:b0:14:96:34:58:de:6b: be:78:74:2b:6c:c1:3c:75:38:7b:4b:5e:2b:29:b2: 9a:83:f9:21:f6:57:ab:b8:b5:76:fc:4b:f2:fa:ad: 15:79:34:75:58:97:d8:4c:b9:05:bb:f6:f6:c7:b8: e8:38:91:0b:d2:8e:ed:4d:fe:70:32:d7:33:ff:4b: 05:d9:5e:f9:87:19:92:99:3e:22:c5:2b:b1:6b:76: 97:65:a8:6d:4e:d0:95:63:61:f7:93:a7:a0:a0:29: 7d:dd:a1:e3:5f:3e:45:8f:80:8d:42:cb:25:32:5c: 38:ec:83:a2:7c:a1:54:50:7b:03:67:0e:c5:ae:42: 17:89:a8:d7:7a:02:1c:cc:da:de:3d:aa:62:bd:30: b7:98:2d:3d:64:ae:33:3d:66:f3:e5:4e:cd:8a:25: 14:7e:c7:cd:4a:b4:8e:6b:24:b1:af:b2:4e:61:a5: 6a:90:d1:1e:11:cc:fc:82:f2:1a:1e:a6:5b:5c:b9: 8b:8a:c7:cd:5c:5e:34:20:40:24:fb:91:d1:f7:c8: 2e:bd:b8:2d:1e:b5:06:b1:0d:83:f9:6c:e6:f9:fe: 5c:03:ba:87:30:5d:61:94:fa:2c:59:88:04:95:59: a3:ed:bd:b7:40:94:cf:fb:e9:15:23:e4:52:b3:2b: d4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D6:AE:5B:1A:34:7B:18:36:80:BA:A9:87:35:CD:7E:D8:F1:51:27 X509v3 Authority Key Identifier: keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/xtauWxo0exg2gLqphzXNftjxUSc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.248.42.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:d9:29:05:cd:b6:fc:4f:91:55:66:bf:35:60:28:c1:73:8d: 59:6e:79:de:6f:53:79:ec:16:3e:ee:b7:24:3d:2f:a6:b3:01: 06:5b:96:b0:2b:7d:aa:dd:3b:d3:0d:d7:5f:a1:c1:c6:8d:26: 47:8e:2c:72:13:32:4f:68:c9:cd:91:10:a1:b2:c0:16:ac:da: c2:d7:bb:f4:c4:c3:88:68:38:2b:e6:86:a0:f4:5e:98:11:c1: 67:8d:7a:fe:61:ca:74:f4:a7:0d:81:c0:dd:77:64:1b:d6:50: 64:dd:59:67:35:96:a8:9c:de:cf:a4:29:f6:43:e7:4a:cf:44: 1e:0b:c4:cd:82:d5:36:5f:94:0f:cf:87:d5:b8:21:e3:48:7d: 93:02:51:7e:63:26:65:a3:46:ad:b0:9b:88:3e:0d:5f:c9:2e: 08:0b:46:d5:b2:47:c8:4e:88:17:0d:8c:1e:09:6c:cf:a0:03: 39:34:cd:c2:37:de:2e:30:33:48:6a:dd:fd:e0:b6:01:00:36: c1:ab:01:04:dd:a9:3c:b0:61:24:e0:f9:be:f6:d6:aa:a9:9a: 07:3d:9b:10:45:a6:3f:dd:29:cc:de:0f:df:63:99:77:d6:aa: 95:58:44:04:ff:58:c9:57:73:1c:7e:8e:16:05:17:e1:63:15: 0e:db:a4:94 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xqBvL9ulYW2Qz2U6qIuNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0 MjAzYjQwHhcNMjYwMTAxMDQxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmQ2YWU1YjFhMzQ3YjE4MzY4MGJhYTk4NzM1Y2Q3ZWQ4ZjE1MTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5tGHpp7DXLAUljRY3mu+eHQrbME8 dTh7S14rKbKag/kh9leruLV2/Evy+q0VeTR1WJfYTLkFu/b2x7joOJEL0o7tTf5w Mtcz/0sF2V75hxmSmT4ixSuxa3aXZahtTtCVY2H3k6egoCl93aHjXz5Fj4CNQssl Mlw47IOifKFUUHsDZw7FrkIXiajXegIczNrePapivTC3mC09ZK4zPWbz5U7NiiUU fsfNSrSOaySxr7JOYaVqkNEeEcz8gvIaHqZbXLmLisfNXF40IEAk+5HR98guvbgt HrUGsQ2D+Wzm+f5cA7qHMF1hlPosWYgElVmj7b23QJTP++kVI+RSsyvUgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMbWrlsaNHsYNoC6qYc1zX7Y8VEnMB8GA1UdIwQY MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt MTY2OTljOTZkZDVlLzEveHRhdVd4bzBleGcyZ0xxcGh6WE5mdGp4VVNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbfgqMA0G CSqGSIb3DQEBCwUAA4IBAQCO2SkFzbb8T5FVZr81YCjBc41Zbnneb1N57BY+7rck PS+mswEGW5awK32q3TvTDddfocHGjSZHjixyEzJPaMnNkRChssAWrNrC17v0xMOI aDgr5oag9F6YEcFnjXr+Ycp09KcNgcDdd2Qb1lBk3VlnNZaonN7PpCn2Q+dKz0Qe C8TNgtU2X5QPz4fVuCHjSH2TAlF+YyZlo0atsJuIPg1fyS4IC0bVskfITogXDYwe CWzPoAM5NM3CN94uMDNIat394LYBADbBqwEE3ak8sGEk4Pm+9taqqZoHPZsQRaY/ 3SnM3g/fY5l31qqVWEQE/1jJV3Mcfo4WBRfhYxUO26SU -----END CERTIFICATE-----Generated at Thu Jan 8 23:54:38 2026 by rpki-client