This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/XDZqO5l67cOlxYB34-26eAcq9Lo.roa File: XDZqO5l67cOlxYB34-26eAcq9Lo.roa (raw, json) Hash identifier: NPJ9szPcU5wlBxkMkisSZd9F1ZUUilCXTSGQQPM4EGE= Subject key identifier: 5C:36:6A:3B:99:7A:ED:C3:A5:C5:80:77:E3:ED:BA:78:07:2A:F4:BA Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47 Certificate serial: 019B7CEE01F5C1813C96B5C514ED9CDAD68F Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/XDZqO5l67cOlxYB34-26eAcq9Lo.roa Signing time: Fri 02 Jan 2026 04:18:51 +0000 ROA not before: Fri 02 Jan 2026 04:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 26383 IP address blocks: 81.29.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:01:f5:c1:81:3c:96:b5:c5:14:ed:9c:da:d6:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47 Validity Not Before: Jan 2 04:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c366a3b997aedc3a5c58077e3edba78072af4ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:da:2e:55:5c:f9:81:c1:76:e0:76:bd:52:fa: ba:c3:6a:35:d5:f5:42:ac:01:d3:da:fc:5d:e4:9f: 6d:e0:e7:b0:5f:10:36:37:5a:fa:ec:f8:b3:ec:f6: c3:27:0f:0b:32:33:07:15:ed:d1:f9:c3:0f:15:50: 7c:d0:24:83:56:59:b8:5c:73:f3:23:9b:96:1e:9e: 4e:4d:43:97:e5:d9:b1:77:4c:9e:4f:fa:83:3b:d5: aa:a3:f8:78:ca:32:e0:ec:b8:97:dc:28:f5:3c:74: 99:81:7d:5d:c1:30:5f:87:ff:82:dd:78:74:9b:22: 92:e4:30:e1:ac:15:a0:3f:b4:62:59:e7:60:4b:cb: b6:86:83:f9:1f:5f:d5:31:09:90:96:56:7f:c7:2f: db:34:7a:12:18:43:4e:4f:92:62:46:0d:97:37:39: 8b:73:de:8c:92:73:76:c7:a3:9a:ed:aa:f0:9a:e5: 69:32:79:1e:b3:d3:17:19:21:51:20:76:d1:96:24: 5c:d0:ee:5b:59:74:63:f6:61:0c:cc:ce:36:2f:cd: a7:11:00:12:e4:9b:2e:be:7f:d2:04:06:57:62:69: d3:a0:d3:4a:10:e6:b5:82:99:b1:95:a1:12:a7:9a: e4:c1:20:d6:6b:02:b5:bb:0a:b5:1e:cd:3c:f4:e0: a2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:36:6A:3B:99:7A:ED:C3:A5:C5:80:77:E3:ED:BA:78:07:2A:F4:BA X509v3 Authority Key Identifier: keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/XDZqO5l67cOlxYB34-26eAcq9Lo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.29.149.0/24 Signature Algorithm: sha256WithRSAEncryption 05:85:12:74:55:d9:86:08:12:b5:45:e2:a5:ac:d1:3c:36:36: 7f:aa:8b:80:a3:46:32:51:7f:62:14:01:1f:bb:db:c8:1e:59: ad:59:e7:50:5f:8d:75:a0:d2:8a:5a:b2:60:75:0d:9e:86:10: 39:18:93:5d:e7:a1:14:df:10:61:bb:b4:50:f5:cb:3d:21:08: 9c:1f:9e:2d:f3:c4:04:d1:40:82:36:02:86:fa:f4:25:2f:a0: 4d:44:e1:e5:7b:7f:f2:46:16:59:c7:3b:77:bc:0c:4e:34:31: 04:2f:c1:7a:64:77:ee:97:23:35:e8:79:38:f9:1c:cf:0f:1e: 56:a4:47:75:59:df:73:ae:6c:82:f3:12:a6:69:fe:c2:57:4c: 0c:bd:f5:53:8f:87:30:43:62:99:cd:14:28:25:b1:b8:fd:0b: 04:be:c2:f4:0f:09:31:0d:3d:e1:e4:49:cd:24:9d:f8:26:aa: 1f:88:51:a7:89:7a:a2:35:58:e1:ba:0c:58:6a:3f:e9:a0:fc: 49:5b:08:09:af:a5:ff:e0:8f:a6:c9:fc:9a:dd:08:b1:38:b8: fd:b9:e3:68:7e:ea:e1:7b:47:fd:9b:6a:e8:e3:33:56:ac:81: 4c:82:98:92:8d:54:6b:b8:02:84:9d:e7:47:2e:d5:1b:2b:66: 6a:16:aa:ff -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87gH1wYE8lrXFFO2c2taPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx MDhlNDcwHhcNMjYwMTAyMDQxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzM2NmEzYjk5N2FlZGMzYTVjNTgwNzdlM2VkYmE3ODA3MmFmNGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndouVVz5gcF24Ha9Uvq6w2o11fVC rAHT2vxd5J9t4OewXxA2N1r67Piz7PbDJw8LMjMHFe3R+cMPFVB80CSDVlm4XHPz I5uWHp5OTUOX5dmxd0yeT/qDO9Wqo/h4yjLg7LiX3Cj1PHSZgX1dwTBfh/+C3Xh0 myKS5DDhrBWgP7RiWedgS8u2hoP5H1/VMQmQllZ/xy/bNHoSGENOT5JiRg2XNzmL c96MknN2x6Oa7arwmuVpMnkes9MXGSFRIHbRliRc0O5bWXRj9mEMzM42L82nEQAS 5Jsuvn/SBAZXYmnToNNKEOa1gpmxlaESp5rkwSDWawK1uwq1Hs089OCi7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFw2ajuZeu3DpcWAd+PtungHKvS6MB8GA1UdIwQY MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt MTkxODliM2M5YzdkLzEvWERacU81bDY3Y09seFlCMzQtMjZlQWNxOUxvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUR2VMA0G CSqGSIb3DQEBCwUAA4IBAQAFhRJ0VdmGCBK1ReKlrNE8NjZ/qouAo0YyUX9iFAEf u9vIHlmtWedQX411oNKKWrJgdQ2ehhA5GJNd56EU3xBhu7RQ9cs9IQicH54t88QE 0UCCNgKG+vQlL6BNROHle3/yRhZZxzt3vAxONDEEL8F6ZHfulyM16Hk4+RzPDx5W pEd1Wd9zrmyC8xKmaf7CV0wMvfVTj4cwQ2KZzRQoJbG4/QsEvsL0DwkxDT3h5EnN JJ34JqofiFGniXqiNVjhugxYaj/poPxJWwgJr6X/4I+myfya3QixOLj9ueNofurh e0f9m2ro4zNWrIFMgpiSjVRruAKEnedHLtUbK2ZqFqr/ -----END CERTIFICATE-----Generated at Fri Jan 9 08:22:20 2026 by rpki-client