This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/XzS-ABIitAhoDjgaxod5k36Rzyk.roa File: XzS-ABIitAhoDjgaxod5k36Rzyk.roa (raw, json) Hash identifier: 8qFIpKhqUDM+Zl/pmjZajomHNYIv1lRs91XtmDgIewQ= Subject key identifier: 5F:34:BE:00:12:22:B4:08:68:0E:38:1A:C6:87:79:93:7E:91:CF:29 Certificate issuer: /CN=ad2464ecc946f292e404f2c351922ecf4c590fd8 Certificate serial: 019B7DCA057DB89F3D1A0289514BDF25D841 Authority key identifier: AD:24:64:EC:C9:46:F2:92:E4:04:F2:C3:51:92:2E:CF:4C:59:0F:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/XzS-ABIitAhoDjgaxod5k36Rzyk.roa Signing time: Fri 02 Jan 2026 08:19:10 +0000 ROA not before: Fri 02 Jan 2026 08:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60453 IP address blocks: 195.62.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:05:7d:b8:9f:3d:1a:02:89:51:4b:df:25:d8:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad2464ecc946f292e404f2c351922ecf4c590fd8 Validity Not Before: Jan 2 08:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f34be001222b408680e381ac68779937e91cf29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:14:65:d6:12:7c:31:25:bf:b3:9b:fb:e7:41: 0a:97:fc:fb:48:6c:8f:52:eb:2a:0d:b9:61:52:56: b0:56:44:33:a8:6b:5d:37:da:3c:20:08:85:b3:f2: 11:d9:ba:8c:22:69:11:b7:45:ce:7c:b8:7f:80:f9: ee:72:4e:3f:81:c8:98:44:09:a2:3e:5e:9d:39:a8: 8a:b0:7c:49:d2:f4:80:0b:c6:41:02:35:dc:e8:ac: c0:2d:39:e5:6b:fd:33:cf:7b:14:5b:c6:cd:b0:b5: 70:5d:19:10:7f:da:cd:ba:39:da:a0:7a:28:33:5c: 51:96:3b:65:5f:95:57:ef:de:bb:c8:c2:2a:fe:5c: 4c:30:a8:8a:05:26:bf:29:c4:92:b1:57:2d:62:64: 57:10:c5:01:ee:fb:3b:b0:34:c7:51:e2:ea:3b:48: f1:05:4a:e4:65:6f:be:09:f9:ad:79:97:a6:78:10: cf:fb:2f:47:51:b9:4b:68:f2:98:33:ca:ad:52:05: 1a:f4:ad:0e:24:c1:fa:7d:35:13:7b:c6:55:9c:03: a4:5c:05:e1:1f:0c:0b:15:81:28:aa:35:bd:ed:3f: be:c4:eb:d1:de:d9:9d:0a:c5:a4:d8:d4:aa:0a:68: 98:63:1b:50:df:c3:62:1c:ca:ac:84:9c:2f:86:56: 6d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:34:BE:00:12:22:B4:08:68:0E:38:1A:C6:87:79:93:7E:91:CF:29 X509v3 Authority Key Identifier: keyid:AD:24:64:EC:C9:46:F2:92:E4:04:F2:C3:51:92:2E:CF:4C:59:0F:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/XzS-ABIitAhoDjgaxod5k36Rzyk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.62.51.0/24 Signature Algorithm: sha256WithRSAEncryption 11:22:64:bc:77:91:0a:ca:42:f9:34:98:21:bc:35:95:91:ea: 54:d0:52:ca:7c:e8:d7:a0:62:f8:e8:75:04:39:db:2f:9a:b3: 7c:99:ed:21:6e:f1:fd:06:11:52:1e:cd:7f:36:ba:56:4b:d8: 60:e5:61:95:0c:06:ed:4f:fb:70:59:d3:01:bf:51:a5:99:e3: f0:8d:dc:b1:67:67:67:9d:95:f0:09:ca:2a:c4:ab:46:66:bb: cf:66:13:ab:43:ec:28:82:84:6b:89:bf:56:70:58:03:8a:00: 2b:84:c4:17:20:1b:a7:d3:1a:5f:d8:57:ea:60:f0:07:e2:73: fa:76:0a:a2:ef:f7:b9:73:55:0b:73:6b:6a:ae:6a:1c:a5:ef: df:de:31:0c:c2:07:5d:4b:84:c3:e2:a6:02:c7:5e:6e:36:45: 96:70:94:39:a4:6b:a3:53:66:a4:b4:ad:3b:47:d3:2d:41:ef: bf:e3:51:64:50:c8:14:83:85:ac:14:ab:09:4a:8c:7d:b3:a5: 88:e5:5c:8a:e4:88:a0:ce:e0:60:21:45:6b:26:8b:7e:33:1e: 0d:8d:65:09:69:52:32:c0:d1:ee:80:90:b8:b4:95:6d:b5:45: 2e:20:3c:eb:b5:e5:eb:e8:2b:1f:65:4f:17:29:3c:69:20:3e: 5e:78:88:9f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ygV9uJ89GgKJUUvfJdhBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMjQ2NGVjYzk0NmYyOTJlNDA0ZjJjMzUxOTIyZWNmNGM1 OTBmZDgwHhcNMjYwMTAyMDgxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjM0YmUwMDEyMjJiNDA4NjgwZTM4MWFjNjg3Nzk5MzdlOTFjZjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshRl1hJ8MSW/s5v750EKl/z7SGyP UusqDblhUlawVkQzqGtdN9o8IAiFs/IR2bqMImkRt0XOfLh/gPnuck4/gciYRAmi Pl6dOaiKsHxJ0vSAC8ZBAjXc6KzALTnla/0zz3sUW8bNsLVwXRkQf9rNujnaoHoo M1xRljtlX5VX7967yMIq/lxMMKiKBSa/KcSSsVctYmRXEMUB7vs7sDTHUeLqO0jx BUrkZW++CfmteZemeBDP+y9HUblLaPKYM8qtUgUa9K0OJMH6fTUTe8ZVnAOkXAXh HwwLFYEoqjW97T++xOvR3tmdCsWk2NSqCmiYYxtQ38NiHMqshJwvhlZtmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF80vgASIrQIaA44GsaHeZN+kc8pMB8GA1UdIwQY MBaAFK0kZOzJRvKS5ATyw1GSLs9MWQ/YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclNSazdNbEc4cExrQlBMRFVaSXV6MHhaRDlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9iMjY4NTktOWIxNC00NTBmLWJiODUt NTkyZWQ3Mzc2MWNhLzEvWHpTLUFCSWl0QWhvRGpnYXhvZDVrMzZSenlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9iMjY4NTktOWIxNC00NTBmLWJiODUtNTkyZWQ3Mzc2MWNh LzEvclNSazdNbEc4cExrQlBMRFVaSXV6MHhaRDlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwz4zMA0G CSqGSIb3DQEBCwUAA4IBAQARImS8d5EKykL5NJghvDWVkepU0FLKfOjXoGL46HUE OdsvmrN8me0hbvH9BhFSHs1/NrpWS9hg5WGVDAbtT/twWdMBv1GlmePwjdyxZ2dn nZXwCcoqxKtGZrvPZhOrQ+wogoRrib9WcFgDigArhMQXIBun0xpf2FfqYPAH4nP6 dgqi7/e5c1ULc2tqrmocpe/f3jEMwgddS4TD4qYCx15uNkWWcJQ5pGujU2aktK07 R9MtQe+/41FkUMgUg4WsFKsJSox9s6WI5VyK5IigzuBgIUVrJot+Mx4NjWUJaVIy wNHugJC4tJVttUUuIDzrteXr6CsfZU8XKTxpID5eeIif -----END CERTIFICATE-----Generated at Tue Jan 27 07:49:42 2026 by rpki-client