This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/xqs5TJLITzfBv07-IoHQdLrqQcg.roa File: xqs5TJLITzfBv07-IoHQdLrqQcg.roa (raw, json) Hash identifier: jut+CFoJCXEYLUuwwpH1zOPE+0vbm6gNXxeU7ZDhKNY= Subject key identifier: C6:AB:39:4C:92:C8:4F:37:C1:BF:4E:FE:22:81:D0:74:BA:EA:41:C8 Certificate issuer: /CN=7e2cb3d0a641769c7801c481612015c2ccb3b655 Certificate serial: 019B9EBAB3CE1EA3586CA7C12E368578554C Authority key identifier: 7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/xqs5TJLITzfBv07-IoHQdLrqQcg.roa Signing time: Thu 08 Jan 2026 17:49:54 +0000 ROA not before: Thu 08 Jan 2026 17:49:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213565 IP address blocks: 46.255.78.0/24 maxlen: 24 2a00:a402::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.crl rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9e:ba:b3:ce:1e:a3:58:6c:a7:c1:2e:36:85:78:55:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e2cb3d0a641769c7801c481612015c2ccb3b655 Validity Not Before: Jan 8 17:49:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6ab394c92c84f37c1bf4efe2281d074baea41c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:da:88:98:b0:2b:ce:96:2b:52:c5:fb:aa:14: 57:f3:02:d2:df:52:a5:15:e4:5a:af:16:ab:c3:63: 21:bb:e9:18:f7:e7:c5:a2:52:e6:f3:b6:80:9d:68: b8:22:d8:59:f8:61:52:13:d8:e8:f8:53:6b:3d:7e: 97:f4:96:26:ce:05:c5:73:a5:b3:09:2f:e3:12:86: 89:e3:da:6b:3e:05:74:91:f5:0d:cb:50:47:aa:cb: 92:02:84:c6:9a:33:f4:2e:51:32:9a:a7:e3:4c:01: 45:f1:b5:e6:3b:fb:5f:f6:c7:94:71:10:ae:36:51: 9d:bd:42:b0:be:6b:1d:53:e7:16:54:36:9d:72:ee: 64:98:19:66:7b:8f:33:a3:83:27:99:c8:b9:a6:10: ee:27:da:d9:97:36:e2:1d:df:c1:38:2b:24:80:d3: ab:2f:af:77:7c:1c:00:5c:81:4c:55:86:40:20:e0: 9c:40:62:97:5a:ba:a4:c1:8c:1f:a8:fd:41:22:05: 99:5e:22:37:9b:07:7e:40:fc:f8:c4:dd:5c:f3:16: e9:18:ae:18:b2:a1:79:b0:23:70:89:a8:78:d3:73: 7c:1c:36:d6:43:16:77:56:1f:ac:11:60:eb:01:fc: 6c:7f:3e:aa:93:8d:8f:95:03:71:cc:d2:d6:dd:08: 53:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:AB:39:4C:92:C8:4F:37:C1:BF:4E:FE:22:81:D0:74:BA:EA:41:C8 X509v3 Authority Key Identifier: keyid:7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/xqs5TJLITzfBv07-IoHQdLrqQcg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.255.78.0/24 IPv6: 2a00:a402::/32 Signature Algorithm: sha256WithRSAEncryption bf:4c:97:ad:35:b9:50:b2:81:70:08:5e:f7:4c:3e:2f:da:5c: a5:c2:dc:e5:96:5b:64:fa:64:c9:b2:32:c9:ee:be:a2:01:2c: a9:57:3f:79:22:85:9f:be:6b:3a:44:5a:88:b1:e4:ce:1f:8f: de:3a:91:6c:6b:db:4b:64:9d:f1:d9:fd:3d:1d:38:9b:3f:dc: ff:57:10:82:bd:8d:71:84:e4:2e:21:d7:32:85:12:be:83:d4: 12:69:ac:52:8e:bb:46:c9:b3:50:64:94:fe:31:e1:51:dd:40: ad:e0:e2:05:82:0f:e7:1c:77:46:8f:3c:ca:51:6e:2e:d5:a8: 53:13:84:5a:0f:12:e5:ce:4f:c7:11:f0:5b:2d:ab:56:1a:30: f0:06:5e:33:61:fa:66:59:20:08:2c:f2:3d:52:6a:94:29:6d: 1d:74:dd:6d:18:25:1a:ad:d6:9b:ce:a7:d6:21:09:7e:20:a7: 79:e9:df:fa:b5:f9:6d:ff:32:cd:c4:df:7a:23:08:97:2a:56: 80:83:ea:ad:21:12:7a:2c:29:d4:dd:e6:1e:76:dc:04:a7:16: 8f:9f:e7:f9:9e:f9:45:ec:79:58:f6:4d:67:a4:1f:1b:09:c8: 2b:ef:0f:04:78:27:02:ab:83:36:89:19:2d:44:00:b4:4a:29: 60:23:07:be -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZueurPOHqNYbKfBLjaFeFVMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMmNiM2QwYTY0MTc2OWM3ODAxYzQ4MTYxMjAxNWMyY2Ni M2I2NTUwHhcNMjYwMTA4MTc0OTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmFiMzk0YzkyYzg0ZjM3YzFiZjRlZmUyMjgxZDA3NGJhZWE0MWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NqImLArzpYrUsX7qhRX8wLS31Kl FeRarxarw2Mhu+kY9+fFolLm87aAnWi4IthZ+GFSE9jo+FNrPX6X9JYmzgXFc6Wz CS/jEoaJ49prPgV0kfUNy1BHqsuSAoTGmjP0LlEymqfjTAFF8bXmO/tf9seUcRCu NlGdvUKwvmsdU+cWVDadcu5kmBlme48zo4Mnmci5phDuJ9rZlzbiHd/BOCskgNOr L693fBwAXIFMVYZAIOCcQGKXWrqkwYwfqP1BIgWZXiI3mwd+QPz4xN1c8xbpGK4Y sqF5sCNwiah403N8HDbWQxZ3Vh+sEWDrAfxsfz6qk42PlQNxzNLW3QhTCwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMarOUySyE83wb9O/iKB0HS66kHIMB8GA1UdIwQY MBaAFH4ss9CmQXaceAHEgWEgFcLMs7ZVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZml5ejBLWkJkcHg0QWNTQllTQVZ3c3l6dGxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80MzFkZjEtMDlmNC00NzVjLWEwNDUt ZjViYjI4NDNjODllLzEveHFzNVRKTElUemZCdjA3LUlvSFFkTHJxUWNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC80MzFkZjEtMDlmNC00NzVjLWEwNDUtZjViYjI4NDNjODll LzEvZml5ejBLWkJkcHg0QWNTQllTQVZ3c3l6dGxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALv9OMA0E AgACMAcDBQAqAKQCMA0GCSqGSIb3DQEBCwUAA4IBAQC/TJetNblQsoFwCF73TD4v 2lylwtzllltk+mTJsjLJ7r6iASypVz95IoWfvms6RFqIseTOH4/eOpFsa9tLZJ3x 2f09HTibP9z/VxCCvY1xhOQuIdcyhRK+g9QSaaxSjrtGybNQZJT+MeFR3UCt4OIF gg/nHHdGjzzKUW4u1ahTE4RaDxLlzk/HEfBbLatWGjDwBl4zYfpmWSAILPI9UmqU KW0ddN1tGCUardabzqfWIQl+IKd56d/6tflt/zLNxN96IwiXKlaAg+qtIRJ6LCnU 3eYedtwEpxaPn+f5nvlF7HlY9k1npB8bCcgr7w8EeCcCq4M2iRktRAC0SilgIwe+ -----END CERTIFICATE-----Generated at Sat Jan 10 14:12:47 2026 by rpki-client