This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/XxafcWrqigcei8twCDxLEVcXx-k.roa File: XxafcWrqigcei8twCDxLEVcXx-k.roa (raw, json) Hash identifier: X0ZzEgm2MrbDLqcDEwEaIQr4XWARhWnTZEDfmH9QhjI= Subject key identifier: 5F:16:9F:71:6A:EA:8A:07:1E:8B:CB:70:08:3C:4B:11:57:17:C7:E9 Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B797E0D39A025771DA214634238D3D134 Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/XxafcWrqigcei8twCDxLEVcXx-k.roa Signing time: Thu 01 Jan 2026 12:17:42 +0000 ROA not before: Thu 01 Jan 2026 12:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216262 IP address blocks: 37.156.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 10:40:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:0d:39:a0:25:77:1d:a2:14:63:42:38:d3:d1:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Jan 1 12:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f169f716aea8a071e8bcb70083c4b115717c7e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b7:92:3a:ef:b5:a2:d5:0e:b1:aa:48:2c:12: e5:33:7a:42:8b:05:98:58:83:c8:1a:3b:41:c1:19: c2:75:e1:e0:72:83:3a:26:8d:72:8a:03:87:67:e1: 59:8f:a5:54:fb:2f:ac:2a:91:9e:fb:28:3b:8a:03: 27:a1:2d:14:9d:2e:78:0a:28:68:1c:ef:cd:01:30: 27:f6:98:9f:69:af:4f:69:b5:ca:ed:bf:ee:13:96: 80:42:e5:2e:8e:19:81:63:0f:9e:b4:95:91:54:bd: 98:50:e0:47:be:0b:41:24:61:a4:52:2f:d3:c4:14: 96:23:1e:5d:6c:13:63:f7:37:16:e6:bd:8d:7a:65: 2f:60:8e:be:5a:4f:25:6f:7f:99:e8:9a:c4:c5:16: 9b:95:c7:99:43:99:2f:ba:21:3d:ff:71:f5:51:81: 48:88:23:23:d2:ce:ad:75:e2:3e:a6:3d:6b:c5:84: 12:e4:e4:a8:77:d7:fe:ba:b9:1e:df:2d:eb:f1:2f: 3e:28:1a:a5:f5:ee:f8:6e:3b:ff:bd:2b:fa:36:78: 75:af:6c:17:a2:bb:70:31:d6:13:2d:33:08:48:9c: 12:f2:3c:e7:d1:b9:dd:c1:63:3a:ac:e4:d3:ef:ae: 99:9a:de:5c:53:39:6a:91:f6:67:44:7a:0a:a4:84: 42:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:16:9F:71:6A:EA:8A:07:1E:8B:CB:70:08:3C:4B:11:57:17:C7:E9 X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/XxafcWrqigcei8twCDxLEVcXx-k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.156.5.0/24 Signature Algorithm: sha256WithRSAEncryption 85:2c:d0:64:a2:ea:30:24:40:bf:a1:09:8b:98:7d:cc:c1:8d: ed:06:26:e4:04:dd:40:a9:21:e8:36:ae:47:2f:31:00:e7:91: 9a:16:4e:9a:c8:2b:6f:b6:a9:51:64:b4:c3:ed:4e:58:38:13: 84:20:6f:41:8b:bb:84:c4:c1:83:54:c5:45:77:8e:81:93:5d: 2e:6d:01:bf:c5:db:36:f3:22:04:4d:c9:96:11:c9:95:e9:ca: 8e:eb:d0:e2:e1:50:11:67:c7:b0:ee:08:df:03:01:6e:ab:43: eb:3c:b4:49:1d:6f:8c:53:07:e4:52:bd:57:c8:34:cc:c3:5b: 18:16:81:54:15:19:c9:c8:df:4e:ea:c2:1f:5b:d8:ea:4b:92: c2:dc:d3:c4:a6:ba:3b:ac:9d:6d:72:e0:3e:e3:eb:f0:23:f0: d5:42:bd:d0:e1:56:d5:4e:ad:ff:07:20:c6:bb:ef:e6:3f:a5: c2:d1:96:97:8a:f4:1f:0d:0e:df:88:78:8d:6a:2f:f9:66:24: 5f:60:50:b5:9e:8a:f8:5d:13:64:e7:4b:76:01:47:1a:33:c7: 3d:62:65:28:ff:79:3f:77:6e:fb:ec:1a:47:b4:14:2c:1f:1c: dc:2c:26:73:a8:e0:db:b3:b5:99:fb:07:50:b5:a1:fc:2a:5a: b1:0c:28:59 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fg05oCV3HaIUY0I409E0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjYwMTAxMTIxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjE2OWY3MTZhZWE4YTA3MWU4YmNiNzAwODNjNGIxMTU3MTdjN2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7eSOu+1otUOsapILBLlM3pCiwWY WIPIGjtBwRnCdeHgcoM6Jo1yigOHZ+FZj6VU+y+sKpGe+yg7igMnoS0UnS54Ciho HO/NATAn9pifaa9PabXK7b/uE5aAQuUujhmBYw+etJWRVL2YUOBHvgtBJGGkUi/T xBSWIx5dbBNj9zcW5r2NemUvYI6+Wk8lb3+Z6JrExRablceZQ5kvuiE9/3H1UYFI iCMj0s6tdeI+pj1rxYQS5OSod9f+urke3y3r8S8+KBql9e74bjv/vSv6Nnh1r2wX ortwMdYTLTMISJwS8jzn0bndwWM6rOTT766Zmt5cUzlqkfZnRHoKpIRC8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF8Wn3Fq6ooHHovLcAg8SxFXF8fpMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvWHhhZmNXcnFpZ2NlaTh0d0NEeExFVmNYeC1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJZwFMA0G CSqGSIb3DQEBCwUAA4IBAQCFLNBkouowJEC/oQmLmH3MwY3tBibkBN1AqSHoNq5H LzEA55GaFk6ayCtvtqlRZLTD7U5YOBOEIG9Bi7uExMGDVMVFd46Bk10ubQG/xds2 8yIETcmWEcmV6cqO69Di4VARZ8ew7gjfAwFuq0PrPLRJHW+MUwfkUr1XyDTMw1sY FoFUFRnJyN9O6sIfW9jqS5LC3NPEpro7rJ1tcuA+4+vwI/DVQr3Q4VbVTq3/ByDG u+/mP6XC0ZaXivQfDQ7fiHiNai/5ZiRfYFC1nor4XRNk50t2AUcaM8c9YmUo/3k/ d2777BpHtBQsHxzcLCZzqODbs7WZ+wdQtaH8KlqxDChZ -----END CERTIFICATE-----Generated at Fri Jan 9 16:52:28 2026 by rpki-client