This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Xae6RCFW0T7DRzcz3NYvjlcBIgA.roa File: Xae6RCFW0T7DRzcz3NYvjlcBIgA.roa (raw, json) Hash identifier: Juta9eohkjRoNv6z9QPBVhd2R79W4j+IrRDwEP6+HIk= Subject key identifier: 5D:A7:BA:44:21:56:D1:3E:C3:47:37:33:DC:D6:2F:8E:57:01:22:00 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AB2238DC4CE003CF912F910233579 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Xae6RCFW0T7DRzcz3NYvjlcBIgA.roa Signing time: Thu 01 Jan 2026 16:18:42 +0000 ROA not before: Thu 01 Jan 2026 16:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 141968 IP address blocks: 82.153.226.0/24 maxlen: 24 109.176.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:b2:23:8d:c4:ce:00:3c:f9:12:f9:10:23:35:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5da7ba442156d13ec3473733dcd62f8e57012200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:3c:6c:42:c7:17:b9:d1:5f:11:ec:86:d3:61: 98:cf:b5:0c:38:e9:a6:bd:4a:b4:21:51:0b:18:05: f7:f7:44:65:a8:53:be:31:e8:16:ca:38:95:c7:d0: 4b:7f:11:c6:96:07:4c:51:c7:54:7b:ae:b3:09:47: b4:ea:00:10:a2:af:a1:fd:b2:6a:d6:5e:6a:0c:90: 9a:36:b6:8c:a5:1d:8c:58:48:76:93:8c:91:e2:a1: a3:fd:33:37:a6:cb:0a:2f:cd:5f:a6:ba:76:d4:c2: be:71:6b:f6:2d:5b:8e:e0:71:fb:3f:dc:e9:34:d6: c3:0f:1f:bf:9a:61:6b:43:b6:92:51:48:dd:5e:91: 48:14:e2:d9:99:75:4a:b6:bd:ac:d4:f4:c2:5e:65: 42:5f:8b:db:41:e8:3c:a6:4c:39:27:85:dc:fc:57: ec:39:9a:ce:37:cc:74:04:dc:77:fc:38:a3:9a:89: 91:31:e1:31:08:91:ee:09:6e:6b:e8:f8:65:1f:28: 08:f6:f9:58:bd:b8:41:3f:8d:7e:c7:82:b2:5a:d6: 31:00:1a:56:9c:51:18:c2:17:37:63:77:f1:4c:45: 4d:09:27:49:79:45:f8:0f:a9:3e:f6:88:90:4a:e9: 7a:b2:aa:bc:e5:20:1d:31:a2:45:fc:e3:73:2e:6d: e3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A7:BA:44:21:56:D1:3E:C3:47:37:33:DC:D6:2F:8E:57:01:22:00 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Xae6RCFW0T7DRzcz3NYvjlcBIgA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.153.226.0/24 109.176.17.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:dc:ad:28:a1:45:6c:b9:67:82:e9:17:c8:97:06:a2:be:c2: 36:58:63:4c:86:32:dc:ce:bc:b6:59:0a:2d:1a:0e:91:33:a9: 79:b3:96:92:04:a8:aa:e4:96:cd:b5:21:79:3f:56:38:9f:83: a7:1e:15:5b:8c:f6:29:26:ee:2d:96:b7:9a:a0:60:7c:bd:b1: ba:a3:e8:46:0f:ef:02:30:14:36:cc:9b:7a:44:44:29:02:21: 78:48:b9:bb:2f:15:1c:80:8a:0d:73:4a:3a:0d:76:86:a5:be: e7:5a:0f:d6:00:e8:a4:26:82:c7:d8:26:2a:38:9a:65:c9:f5: ad:44:64:c3:0d:33:7a:9e:7f:9c:59:e8:8e:22:69:f5:42:3e: 60:33:3c:72:f6:57:9d:5d:2c:d7:ab:cc:26:3b:75:17:8a:28: a0:7c:c6:fd:c9:41:d8:b0:42:f5:52:87:e9:1c:ee:c0:29:ed: 17:44:52:d5:34:d1:e7:b3:b2:5b:57:ad:53:b9:f4:bd:5c:c2: 11:98:a7:b9:cb:cb:80:92:83:ec:e1:d4:7e:ee:6f:a3:ab:b3: 8c:75:d1:5a:f8:6a:33:78:c3:cb:3d:e4:a8:af:06:c4:45:87: 11:01:90:0e:5c:c2:80:c9:9b:8a:43:f1:15:0b:a1:12:d0:7e: 7b:f7:f4:f8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6WrIjjcTOADz5EvkQIzV5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZGE3YmE0NDIxNTZkMTNlYzM0NzM3MzNkY2Q2MmY4ZTU3MDEyMjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7zxsQscXudFfEeyG02GYz7UMOOmm vUq0IVELGAX390RlqFO+MegWyjiVx9BLfxHGlgdMUcdUe66zCUe06gAQoq+h/bJq 1l5qDJCaNraMpR2MWEh2k4yR4qGj/TM3pssKL81fprp21MK+cWv2LVuO4HH7P9zp NNbDDx+/mmFrQ7aSUUjdXpFIFOLZmXVKtr2s1PTCXmVCX4vbQeg8pkw5J4Xc/Ffs OZrON8x0BNx3/DijmomRMeExCJHuCW5r6PhlHygI9vlYvbhBP41+x4KyWtYxABpW nFEYwhc3Y3fxTEVNCSdJeUX4D6k+9oiQSul6sqq85SAdMaJF/ONzLm3jnQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFF2nukQhVtE+w0c3M9zWL45XASIAMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvWGFlNlJDRlcwVDdEUnpjejNOWXZqbGNCSWdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUpniAwQA bbARMA0GCSqGSIb3DQEBCwUAA4IBAQCO3K0ooUVsuWeC6RfIlwaivsI2WGNMhjLc zry2WQotGg6RM6l5s5aSBKiq5JbNtSF5P1Y4n4OnHhVbjPYpJu4tlreaoGB8vbG6 o+hGD+8CMBQ2zJt6REQpAiF4SLm7LxUcgIoNc0o6DXaGpb7nWg/WAOikJoLH2CYq OJplyfWtRGTDDTN6nn+cWeiOImn1Qj5gMzxy9ledXSzXq8wmO3UXiiigfMb9yUHY sEL1UofpHO7AKe0XRFLVNNHns7JbV61TufS9XMIRmKe5y8uAkoPs4dR+7m+jq7OM ddFa+GozeMPLPeSorwbERYcRAZAOXMKAyZuKQ/EVC6ES0H579/T4 -----END CERTIFICATE-----Generated at Tue Jan 20 06:03:59 2026 by rpki-client