This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/XgZUWF_JY2HTJzbvU6Cnd5y6OTQ.roa File: XgZUWF_JY2HTJzbvU6Cnd5y6OTQ.roa (raw, json) Hash identifier: xDb3dtwGlNAHcmXCM8UYUqhwZfzy/vemU3ULkTqFlkw= Subject key identifier: 5E:06:54:58:5F:C9:63:61:D3:27:36:EF:53:A0:A7:77:9C:BA:39:34 Certificate issuer: /CN=2378a4a9c52325a85920809ba1a4d89e21c02f17 Certificate serial: 019B775889606CECBF3483E454652E852F4F Authority key identifier: 23:78:A4:A9:C5:23:25:A8:59:20:80:9B:A1:A4:D8:9E:21:C0:2F:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/XgZUWF_JY2HTJzbvU6Cnd5y6OTQ.roa Signing time: Thu 01 Jan 2026 02:17:29 +0000 ROA not before: Thu 01 Jan 2026 02:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203477 IP address blocks: 212.1.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.mft rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:89:60:6c:ec:bf:34:83:e4:54:65:2e:85:2f:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2378a4a9c52325a85920809ba1a4d89e21c02f17 Validity Not Before: Jan 1 02:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e0654585fc96361d32736ef53a0a7779cba3934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:98:5a:03:af:26:de:d1:88:c3:ca:ad:32:86: ef:d7:ed:20:9b:ee:07:3d:81:a6:0d:e3:1c:36:57: cd:d6:21:9a:91:da:b2:a2:94:2c:9a:ca:e4:58:fa: a9:df:2a:e0:c3:cd:3f:bf:6b:9e:0e:c2:a0:e5:6a: 91:50:08:6c:97:a2:f7:a1:ca:32:3e:77:99:16:dd: 2b:33:6e:38:dc:d9:74:4d:e6:76:fe:be:1d:49:03: 40:92:65:5a:83:94:ea:7c:9c:3a:99:a0:f0:9f:d3: d0:73:8d:d2:0b:25:f6:b6:91:10:bd:54:19:23:7a: 25:46:c0:cc:ee:a5:44:c8:7d:9e:06:76:b2:73:c0: ae:6e:4d:11:d9:bc:1a:8e:05:95:c6:ad:f6:d7:22: 07:3d:56:25:59:25:46:a6:4e:10:fd:15:7a:c4:e9: 60:cf:36:bb:bc:65:44:be:f5:98:32:54:83:7a:78: 21:0f:9b:2b:80:bf:ad:11:3e:7e:10:96:ec:9e:e6: e1:28:22:42:14:f9:83:54:6f:2e:ca:ad:ba:77:07: bd:d7:11:fe:59:c2:60:8c:d4:d0:58:cc:30:44:24: ad:1c:ba:f6:ad:5d:25:09:88:2d:f0:c2:20:04:d4: a5:8b:4d:26:be:7a:17:fd:d2:aa:4e:95:b2:fd:fb: 93:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:06:54:58:5F:C9:63:61:D3:27:36:EF:53:A0:A7:77:9C:BA:39:34 X509v3 Authority Key Identifier: keyid:23:78:A4:A9:C5:23:25:A8:59:20:80:9B:A1:A4:D8:9E:21:C0:2F:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/XgZUWF_JY2HTJzbvU6Cnd5y6OTQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.1.65.0/24 Signature Algorithm: sha256WithRSAEncryption 13:f8:bc:51:99:0a:7e:c3:d8:0e:f8:47:f2:5c:79:e7:f3:29: 3a:17:19:e2:6a:d6:71:0d:e3:4a:1d:72:78:73:ed:53:99:1a: 0a:72:cd:39:41:6f:f7:6d:e5:2b:26:e3:34:4e:43:0d:bd:3a: 4c:32:f6:f2:00:2c:63:2f:eb:a5:32:38:84:c9:19:69:0b:5f: 43:3d:dc:b1:f2:d1:c1:8e:56:85:51:ea:4e:f8:47:78:03:1a: 0b:2b:0a:40:4d:49:d8:5c:79:68:c3:d9:f1:14:fc:40:39:9c: 16:bc:5d:59:40:9f:18:65:33:99:e9:aa:56:5c:fc:3c:83:a3: 54:a2:37:ff:d0:14:8e:23:c0:20:5e:3f:4c:b7:5a:36:64:76: fe:fb:25:15:76:b7:3c:c3:8e:44:90:d1:e6:f4:ae:0d:44:0e: d4:aa:c7:67:5e:81:64:b2:22:ac:b3:d7:0e:6b:36:77:e8:0f: c0:50:90:2f:60:ce:40:46:94:cd:9c:6a:3d:8d:37:2f:06:fb: 1e:0d:2b:48:54:53:ab:19:1f:7f:02:f1:3e:4c:88:43:35:1d: 3d:fc:bf:aa:28:f8:44:79:46:90:3d:c3:47:72:9c:fc:d0:1a: 80:e9:05:6d:87:32:2a:98:ca:49:28:71:1d:5e:c2:ec:25:ae: d9:c0:dc:7e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WIlgbOy/NIPkVGUuhS9PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNzhhNGE5YzUyMzI1YTg1OTIwODA5YmExYTRkODllMjFj MDJmMTcwHhcNMjYwMTAxMDIxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTA2NTQ1ODVmYzk2MzYxZDMyNzM2ZWY1M2EwYTc3NzljYmEzOTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5haA68m3tGIw8qtMobv1+0gm+4H PYGmDeMcNlfN1iGakdqyopQsmsrkWPqp3yrgw80/v2ueDsKg5WqRUAhsl6L3ocoy PneZFt0rM2443Nl0TeZ2/r4dSQNAkmVag5TqfJw6maDwn9PQc43SCyX2tpEQvVQZ I3olRsDM7qVEyH2eBnayc8Cubk0R2bwajgWVxq321yIHPVYlWSVGpk4Q/RV6xOlg zza7vGVEvvWYMlSDenghD5srgL+tET5+EJbsnubhKCJCFPmDVG8uyq26dwe91xH+ WcJgjNTQWMwwRCStHLr2rV0lCYgt8MIgBNSli00mvnoX/dKqTpWy/fuTWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF4GVFhfyWNh0yc271Ogp3ecujk0MB8GA1UdIwQY MBaAFCN4pKnFIyWoWSCAm6Gk2J4hwC8XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTNpa3FjVWpKYWhaSUlDYm9hVFluaUhBTHhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9kNjU0YmUtMTc0ZS00MWY3LTljZmIt OTM3ZTI3ZWUxYjViLzEvWGdaVVdGX0pZMkhUSnpidlU2Q25kNXk2T1RRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9kNjU0YmUtMTc0ZS00MWY3LTljZmItOTM3ZTI3ZWUxYjVi LzEvSTNpa3FjVWpKYWhaSUlDYm9hVFluaUhBTHhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1AFBMA0G CSqGSIb3DQEBCwUAA4IBAQAT+LxRmQp+w9gO+EfyXHnn8yk6FxniatZxDeNKHXJ4 c+1TmRoKcs05QW/3beUrJuM0TkMNvTpMMvbyACxjL+ulMjiEyRlpC19DPdyx8tHB jlaFUepO+Ed4AxoLKwpATUnYXHlow9nxFPxAOZwWvF1ZQJ8YZTOZ6apWXPw8g6NU ojf/0BSOI8AgXj9Mt1o2ZHb++yUVdrc8w45EkNHm9K4NRA7UqsdnXoFksiKss9cO azZ36A/AUJAvYM5ARpTNnGo9jTcvBvseDStIVFOrGR9/AvE+TIhDNR09/L+qKPhE eUaQPcNHcpz80BqA6QVthzIqmMpJKHEdXsLsJa7ZwNx+ -----END CERTIFICATE-----Generated at Mon Jan 26 18:19:26 2026 by rpki-client