This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/xJiK9PyhaAqcxYB8Aiw7Fv_TmaY.roa File: xJiK9PyhaAqcxYB8Aiw7Fv_TmaY.roa (raw, json) Hash identifier: l2//kwEVxmYAhAAeP0g1fPw8aXt0cKX6RabVhra8PNU= Subject key identifier: C4:98:8A:F4:FC:A1:68:0A:9C:C5:80:7C:02:2C:3B:16:FF:D3:99:A6 Certificate issuer: /CN=6dbd51576b4a93460a465af35e6bf550f5548894 Certificate serial: 019B7758C7810E6AABA2C1D62DFC6397AB4E Authority key identifier: 6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/xJiK9PyhaAqcxYB8Aiw7Fv_TmaY.roa Signing time: Thu 01 Jan 2026 02:17:45 +0000 ROA not before: Thu 01 Jan 2026 02:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35815 IP address blocks: 31.25.24.0/21 maxlen: 21 45.9.212.0/22 maxlen: 22 109.198.96.0/19 maxlen: 19 109.198.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:c7:81:0e:6a:ab:a2:c1:d6:2d:fc:63:97:ab:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dbd51576b4a93460a465af35e6bf550f5548894 Validity Not Before: Jan 1 02:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4988af4fca1680a9cc5807c022c3b16ffd399a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:12:5e:ca:f7:cc:15:42:e5:53:d4:d8:ef:09: b7:c2:30:3a:bb:fb:f5:56:e7:28:17:23:ff:5c:8b: 13:00:c8:34:ee:7c:d3:a0:31:a8:a9:3c:64:c3:b6: 34:ab:63:2b:f0:d0:d4:31:68:02:28:20:c1:43:d6: 35:5b:19:9c:9d:bf:d9:a7:4e:f4:4e:1e:d8:08:0f: d7:79:53:1a:36:f2:3d:fe:9e:29:90:9c:1e:3e:1d: ff:c1:55:59:4b:22:61:81:f3:36:6e:68:41:be:d8: a1:42:35:f7:8e:ae:e7:4c:f0:51:15:f4:71:db:28: 11:a5:7e:ea:3c:91:a2:a0:c8:bc:13:a6:f9:55:0e: 73:27:56:f6:77:c2:54:12:d9:a9:d8:dc:2a:c6:36: c1:6f:58:df:30:19:2a:c1:bf:b4:b8:17:21:f3:6b: 20:05:32:ce:ea:68:26:a3:ac:7a:3c:59:98:1e:cd: 4f:4e:dc:61:0d:bf:43:06:9f:80:c2:9a:8f:08:cb: f7:59:ee:10:0e:61:97:bf:95:fc:6e:d2:55:04:7e: c2:3d:7e:39:14:1c:cf:43:f6:19:e1:a9:8b:e4:9d: b5:a0:9f:45:87:90:78:3e:f9:6e:83:16:08:3d:d7: 1e:ec:68:95:de:f4:0e:4d:3e:62:72:50:83:fa:60: 15:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:98:8A:F4:FC:A1:68:0A:9C:C5:80:7C:02:2C:3B:16:FF:D3:99:A6 X509v3 Authority Key Identifier: keyid:6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/xJiK9PyhaAqcxYB8Aiw7Fv_TmaY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.25.24.0/21 45.9.212.0/22 109.198.96.0/19 Signature Algorithm: sha256WithRSAEncryption a5:2c:5a:c9:f5:32:fc:85:32:8b:03:6d:60:ee:2a:a8:0c:73: 4f:e4:e0:4e:b3:df:03:ee:54:35:d0:0e:a1:8b:62:1e:e8:d7: 5d:4a:59:89:09:fd:eb:25:6a:8c:16:a0:eb:47:c2:9e:50:66: 4c:9b:af:57:5a:fa:36:64:82:0c:c5:4b:8e:a6:08:dd:93:95: 25:dc:23:7d:3f:05:dc:2a:0c:d6:9c:c0:f2:b7:4f:93:a9:97: 68:ed:ff:2d:4a:7b:46:26:17:d0:2f:9b:b0:a4:5e:f1:92:59: 5e:98:5b:3c:f6:b6:f3:5f:7e:87:2e:b0:60:94:43:2c:ca:3d: a8:02:4c:a1:54:e1:c6:a2:fb:c9:d8:5e:8b:11:d1:f0:42:c4: e5:2f:f8:9c:e3:58:b8:c6:92:57:c1:80:af:f9:8d:77:a9:f3: 6c:fd:96:50:cc:8b:e2:a9:8f:80:cf:ed:8d:96:97:c5:f0:35: 62:bb:1c:9d:fe:be:6c:46:e6:c7:74:7e:92:2e:94:15:1c:f6: 83:8b:09:82:24:c4:ae:6b:1d:ed:73:52:eb:fc:4d:a4:35:d2: b0:b4:32:d0:d3:91:5d:ab:f4:80:f4:dd:58:0e:34:7a:49:68: ad:81:30:78:0c:2a:65:06:10:9b:6b:13:8a:e3:ff:bb:0b:bf: 79:e4:57:38 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3WMeBDmqrosHWLfxjl6tOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkYmQ1MTU3NmI0YTkzNDYwYTQ2NWFmMzVlNmJmNTUwZjU1 NDg4OTQwHhcNMjYwMTAxMDIxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDk4OGFmNGZjYTE2ODBhOWNjNTgwN2MwMjJjM2IxNmZmZDM5OWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshJeyvfMFULlU9TY7wm3wjA6u/v1 VucoFyP/XIsTAMg07nzToDGoqTxkw7Y0q2Mr8NDUMWgCKCDBQ9Y1Wxmcnb/Zp070 Th7YCA/XeVMaNvI9/p4pkJwePh3/wVVZSyJhgfM2bmhBvtihQjX3jq7nTPBRFfRx 2ygRpX7qPJGioMi8E6b5VQ5zJ1b2d8JUEtmp2NwqxjbBb1jfMBkqwb+0uBch82sg BTLO6mgmo6x6PFmYHs1PTtxhDb9DBp+AwpqPCMv3We4QDmGXv5X8btJVBH7CPX45 FBzPQ/YZ4amL5J21oJ9Fh5B4PvlugxYIPdce7GiV3vQOTT5iclCD+mAVZQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMSYivT8oWgKnMWAfAIsOxb/05mmMB8GA1UdIwQY MBaAFG29UVdrSpNGCkZa815r9VD1VIiUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmIxUlYydEtrMFlLUmxyelhtdjFVUFZVaUpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84ZmY1MzctNzFlMC00MDNiLTk3OWUt MWVmN2VmMTdmYTQzLzEveEppSzlQeWhhQXFjeFlCOEFpdzdGdl9UbWFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS84ZmY1MzctNzFlMC00MDNiLTk3OWUtMWVmN2VmMTdmYTQz LzEvYmIxUlYydEtrMFlLUmxyelhtdjFVUFZVaUpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDHxkYAwQC LQnUAwQFbcZgMA0GCSqGSIb3DQEBCwUAA4IBAQClLFrJ9TL8hTKLA21g7iqoDHNP 5OBOs98D7lQ10A6hi2Ie6NddSlmJCf3rJWqMFqDrR8KeUGZMm69XWvo2ZIIMxUuO pgjdk5Ul3CN9PwXcKgzWnMDyt0+TqZdo7f8tSntGJhfQL5uwpF7xkllemFs89rbz X36HLrBglEMsyj2oAkyhVOHGovvJ2F6LEdHwQsTlL/ic41i4xpJXwYCv+Y13qfNs /ZZQzIviqY+Az+2NlpfF8DViuxyd/r5sRubHdH6SLpQVHPaDiwmCJMSuax3tc1Lr /E2kNdKwtDLQ05Fdq/SA9N1YDjR6SWitgTB4DCplBhCbaxOK4/+7C7955Fc4 -----END CERTIFICATE-----Generated at Mon Jan 19 08:58:43 2026 by rpki-client