This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/xTW0DPaVYb9sRjbA1xPoIcJ45SI.roa File: xTW0DPaVYb9sRjbA1xPoIcJ45SI.roa (raw, json) Hash identifier: sYB2IEkgUGOL+h/ZFWDk7EQNgA4/WiCGNEohg5WxWc4= Subject key identifier: C5:35:B4:0C:F6:95:61:BF:6C:46:36:C0:D7:13:E8:21:C2:78:E5:22 Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808 Certificate serial: 019B7EA672988286141715AC0B6662C28DE8 Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/xTW0DPaVYb9sRjbA1xPoIcJ45SI.roa Signing time: Fri 02 Jan 2026 12:19:56 +0000 ROA not before: Fri 02 Jan 2026 12:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196797 IP address blocks: 81.30.48.0/20 maxlen: 32 91.222.28.0/22 maxlen: 32 94.125.88.0/21 maxlen: 32 109.233.168.0/22 maxlen: 32 164.138.32.0/21 maxlen: 32 176.115.88.0/21 maxlen: 32 193.151.24.0/22 maxlen: 32 195.69.168.0/22 maxlen: 32 195.69.236.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 21:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:72:98:82:86:14:17:15:ac:0b:66:62:c2:8d:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808 Validity Not Before: Jan 2 12:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c535b40cf69561bf6c4636c0d713e821c278e522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7d:ae:26:3d:2c:17:ce:25:d4:24:a4:67:69: e6:89:67:45:91:ac:3b:38:74:0f:b2:0c:27:50:09: dc:21:67:75:9a:c7:8e:22:39:b2:7e:59:6d:b3:0c: 43:22:2b:2d:68:48:f5:23:a6:5a:c6:b8:36:d2:db: 4a:5c:08:f9:2e:2b:3c:51:18:82:f6:aa:27:b6:70: 70:c5:f3:86:c0:7b:05:d8:b3:93:9b:ee:e1:b1:a9: 9b:14:9b:e7:be:0b:cc:90:98:0a:96:6e:0b:8e:e9: 6f:d4:2a:af:f9:a3:7d:ab:fd:25:3d:59:35:b9:c6: 1f:ae:61:3a:06:80:7f:8c:30:69:7a:f5:e8:52:43: d3:8b:54:eb:0a:36:38:65:f4:5f:69:a8:2f:44:d9: d7:42:e1:0a:3c:1b:bf:b0:2e:e0:fa:6e:14:d6:a0: 85:19:91:2f:02:03:81:6a:e5:23:4c:03:09:a4:9c: 6f:69:e2:55:b2:65:c8:e6:d1:81:d0:2d:d0:ad:84: 5a:5d:48:32:ba:c7:c7:b7:d8:04:34:1a:73:23:85: 91:73:44:f9:c3:3f:0e:29:4c:ef:78:a0:e4:dd:41: c0:1e:f1:e7:cc:af:bd:87:66:1c:d0:b0:d9:70:6f: 44:c4:a9:32:60:a1:e9:0a:a8:5c:6a:da:d6:ff:82: 12:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:35:B4:0C:F6:95:61:BF:6C:46:36:C0:D7:13:E8:21:C2:78:E5:22 X509v3 Authority Key Identifier: keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/xTW0DPaVYb9sRjbA1xPoIcJ45SI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.30.48.0/20 91.222.28.0/22 94.125.88.0/21 109.233.168.0/22 164.138.32.0/21 176.115.88.0/21 193.151.24.0/22 195.69.168.0/22 195.69.236.0/22 Signature Algorithm: sha256WithRSAEncryption b3:8e:1c:41:55:65:1c:f0:a9:a2:cb:19:d9:27:1e:8d:7e:1a: 76:ab:fb:64:fd:6c:74:49:a8:d5:dc:b8:bb:10:ee:a9:67:82: 46:a3:46:77:cd:12:fd:47:41:4c:df:fd:92:06:cd:16:a1:e7: bd:c6:c5:ea:9c:d0:93:f0:a1:88:c8:e4:7c:62:6f:47:f8:52: 12:cf:df:e9:1a:1f:51:86:b2:5f:92:db:5f:be:d1:b1:f2:0e: ca:90:40:c5:62:a1:2b:2b:b1:c0:e7:3f:11:0c:54:7f:62:82: 78:08:e6:88:79:c3:1b:87:78:29:b2:31:59:2d:47:01:f0:fa: 5e:57:a1:92:38:76:30:8a:8d:38:f3:46:95:7a:79:94:aa:e0: 8f:35:52:38:a5:a1:d4:47:9f:aa:0a:3c:cb:8b:e3:2a:7a:22: 73:82:c0:2c:c6:35:33:1e:59:ba:3e:6c:56:de:eb:52:71:d5: 62:40:da:a1:a4:2a:df:46:ec:95:e1:ac:19:61:7d:4a:e7:9b: 83:e9:7b:8b:9a:20:b3:a6:92:8b:45:c9:4c:4c:e6:03:0d:fe: e5:a0:61:02:db:c4:b5:b1:77:f4:f8:14:e1:70:a0:c2:50:41: dd:0c:a3:9c:02:d8:4a:e9:c4:56:9f:49:97:05:78:0e:fd:29: 2f:bb:62:df -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt+pnKYgoYUFxWsC2Ziwo3oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYWM4MzBjY2FhNzQ3ODNkZDk2MWZhYjI0MWEyMjhkN2Nj NmY4MDgwHhcNMjYwMTAyMTIxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTM1YjQwY2Y2OTU2MWJmNmM0NjM2YzBkNzEzZTgyMWMyNzhlNTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArH2uJj0sF84l1CSkZ2nmiWdFkaw7 OHQPsgwnUAncIWd1mseOIjmyflltswxDIistaEj1I6Zaxrg20ttKXAj5Lis8URiC 9qontnBwxfOGwHsF2LOTm+7hsambFJvnvgvMkJgKlm4Ljulv1Cqv+aN9q/0lPVk1 ucYfrmE6BoB/jDBpevXoUkPTi1TrCjY4ZfRfaagvRNnXQuEKPBu/sC7g+m4U1qCF GZEvAgOBauUjTAMJpJxvaeJVsmXI5tGB0C3QrYRaXUgyusfHt9gENBpzI4WRc0T5 wz8OKUzveKDk3UHAHvHnzK+9h2Yc0LDZcG9ExKkyYKHpCqhcatrW/4IS8QIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFMU1tAz2lWG/bEY2wNcT6CHCeOUiMB8GA1UdIwQY MBaAFK2sgwzKp0eD3ZYfqyQaIo18xvgIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgt OTI5ZjdkNjM1ZjRiLzEveFRXMERQYVZZYjlzUmpiQTF4UG9JY0o0NVNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgtOTI5ZjdkNjM1ZjRi LzEvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQEUR4wAwQC W94cAwQDXn1YAwQCbemoAwQDpIogAwQDsHNYAwQCwZcYAwQCw0WoAwQCw0XsMA0G CSqGSIb3DQEBCwUAA4IBAQCzjhxBVWUc8KmiyxnZJx6Nfhp2q/tk/Wx0SajV3Li7 EO6pZ4JGo0Z3zRL9R0FM3/2SBs0Woee9xsXqnNCT8KGIyOR8Ym9H+FISz9/pGh9R hrJfkttfvtGx8g7KkEDFYqErK7HA5z8RDFR/YoJ4COaIecMbh3gpsjFZLUcB8Ppe V6GSOHYwio0480aVenmUquCPNVI4paHUR5+qCjzLi+MqeiJzgsAsxjUzHlm6PmxW 3utScdViQNqhpCrfRuyV4awZYX1K55uD6XuLmiCzppKLRclMTOYDDf7loGEC28S1 sXf0+BThcKDCUEHdDKOcAthK6cRWn0mXBXgO/Skvu2Lf -----END CERTIFICATE-----Generated at Sat Jan 31 07:25:20 2026 by rpki-client