This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/XHQHVO3ABPSL9vqoOxsaeVYxcxo.roa File: XHQHVO3ABPSL9vqoOxsaeVYxcxo.roa (raw, json) Hash identifier: GuRLyw3vk/F/JPl4DlGHOy2Uf88g/mB66Og6aMpTYbQ= Subject key identifier: 5C:74:07:54:ED:C0:04:F4:8B:F6:FA:A8:3B:1B:1A:79:56:31:73:1A Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019B7E37A7F02456C9F612A774D0C5953F19 Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/XHQHVO3ABPSL9vqoOxsaeVYxcxo.roa Signing time: Fri 02 Jan 2026 10:18:55 +0000 ROA not before: Fri 02 Jan 2026 10:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3758 IP address blocks: 45.144.198.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:10:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:a7:f0:24:56:c9:f6:12:a7:74:d0:c5:95:3f:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Jan 2 10:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c740754edc004f48bf6faa83b1b1a795631731a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:91:22:00:23:2d:c8:b1:97:ee:5f:47:0f:70: fe:22:28:2e:0e:aa:42:f7:34:a6:79:01:d9:d1:fe: c9:1e:1c:d1:a6:c0:ca:5b:c8:55:11:9d:7b:98:dc: b5:2c:32:73:46:d0:0b:04:80:1a:47:c0:69:f1:a8: 0e:29:e7:5b:bf:45:95:c9:7c:7e:d5:fe:01:bd:4f: fb:d0:73:16:fa:05:30:58:1a:09:74:95:cb:e9:8a: a5:4b:ec:a5:35:85:a1:a0:6c:a3:40:a4:48:b7:18: 14:4f:5f:2d:9e:d8:a6:69:e7:9a:16:bf:ee:05:3b: f9:97:03:c3:0e:ef:64:5b:a1:db:62:89:44:3d:ff: 79:05:87:ab:1e:05:d2:43:77:db:d3:6c:5f:ff:69: 15:a2:80:35:a8:9f:a8:e8:e8:8a:d0:82:f6:f4:72: 63:e0:9c:18:18:d1:45:58:37:d2:64:6f:64:b3:d9: b4:d6:5f:f5:b6:67:2c:fc:70:c4:a0:a9:63:08:95: 3b:6a:45:7d:e1:74:df:6a:56:e2:68:ec:be:a6:cc: 3c:4f:56:61:d0:fe:8c:3a:04:81:39:b4:09:45:35: f3:f9:04:79:1a:e9:d7:83:33:2d:f0:ce:83:df:46: 72:db:c3:db:c6:e6:0d:4a:cc:6b:53:da:c1:6b:ed: 45:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:74:07:54:ED:C0:04:F4:8B:F6:FA:A8:3B:1B:1A:79:56:31:73:1A X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/XHQHVO3ABPSL9vqoOxsaeVYxcxo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.144.198.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:f4:f7:eb:13:a5:83:f3:f8:5d:ef:86:bc:d4:52:05:49:a8: 11:d1:51:17:93:5d:3a:0d:e4:89:0f:59:8d:b1:0f:cd:e4:75: fa:6b:d6:48:0f:ac:3e:0d:5d:32:87:d7:59:4a:cc:2e:69:9e: 2e:c0:5f:ab:b9:d1:33:4a:2d:59:01:3d:be:73:df:c9:2b:9e: 37:d3:e3:86:17:b8:b2:4a:c6:aa:6d:6a:7f:8a:46:a8:f7:23: 23:36:52:95:fe:76:6b:65:5b:99:d4:b4:21:ed:3f:13:ab:e7: d3:8a:07:75:6c:b3:0d:8e:67:49:78:cb:99:f4:77:e7:ee:e0: b5:81:44:41:eb:a2:6c:e4:a0:d0:9c:58:95:97:af:f0:b9:b8: 8f:8e:cb:43:3c:29:70:25:eb:de:d2:46:63:5e:83:95:af:64: a2:d8:24:3b:40:ca:7e:b4:4b:a4:f3:5e:51:38:88:0a:92:87: 33:d0:35:c0:2b:f5:c5:b6:bb:c4:21:59:6b:01:07:f9:bd:f2: 9b:38:4a:1e:55:45:00:5a:6f:82:29:15:af:43:85:99:a3:17: ba:4a:37:0c:d0:89:22:7b:b2:d8:50:65:77:3d:9f:50:4d:d1: 3e:58:50:10:0c:02:d3:c6:07:7c:46:8a:26:60:29:55:ba:ba: 02:27:7a:dc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N6fwJFbJ9hKndNDFlT8ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjYwMTAyMTAxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Yzc0MDc1NGVkYzAwNGY0OGJmNmZhYTgzYjFiMWE3OTU2MzE3MzFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZEiACMtyLGX7l9HD3D+IiguDqpC 9zSmeQHZ0f7JHhzRpsDKW8hVEZ17mNy1LDJzRtALBIAaR8Bp8agOKedbv0WVyXx+ 1f4BvU/70HMW+gUwWBoJdJXL6YqlS+ylNYWhoGyjQKRItxgUT18tntimaeeaFr/u BTv5lwPDDu9kW6HbYolEPf95BYerHgXSQ3fb02xf/2kVooA1qJ+o6OiK0IL29HJj 4JwYGNFFWDfSZG9ks9m01l/1tmcs/HDEoKljCJU7akV94XTfalbiaOy+psw8T1Zh 0P6MOgSBObQJRTXz+QR5GunXgzMt8M6D30Zy28PbxuYNSsxrU9rBa+1FZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFx0B1TtwAT0i/b6qDsbGnlWMXMaMB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvWEhRSFZPM0FCUFNMOXZxb094c2FlVll4Y3hvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZDGMA0G CSqGSIb3DQEBCwUAA4IBAQAq9PfrE6WD8/hd74a81FIFSagR0VEXk106DeSJD1mN sQ/N5HX6a9ZID6w+DV0yh9dZSswuaZ4uwF+rudEzSi1ZAT2+c9/JK5430+OGF7iy SsaqbWp/ikao9yMjNlKV/nZrZVuZ1LQh7T8Tq+fTigd1bLMNjmdJeMuZ9Hfn7uC1 gURB66Js5KDQnFiVl6/wubiPjstDPClwJeve0kZjXoOVr2Si2CQ7QMp+tEuk815R OIgKkocz0DXAK/XFtrvEIVlrAQf5vfKbOEoeVUUAWm+CKRWvQ4WZoxe6SjcM0Iki e7LYUGV3PZ9QTdE+WFAQDALTxgd8RoomYClVuroCJ3rc -----END CERTIFICATE-----Generated at Wed Jan 21 12:21:05 2026 by rpki-client