This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/xxEAYZPjZGUFGslrurHMaeLtIsA.roa File: xxEAYZPjZGUFGslrurHMaeLtIsA.roa (raw, json) Hash identifier: r31Amyvct5exQwmbmgPrj5bGx7+Kws5esYO/01oko3M= Subject key identifier: C7:11:00:61:93:E3:64:65:05:1A:C9:6B:BA:B1:CC:69:E2:ED:22:C0 Certificate issuer: /CN=1f65ccef140ff30e4d7da9bf70516a03f3cc0801 Certificate serial: 019B7E3881E4E89A0AA4EF3C83DD29FBEC3F Authority key identifier: 1F:65:CC:EF:14:0F:F3:0E:4D:7D:A9:BF:70:51:6A:03:F3:CC:08:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2XM7xQP8w5Nfam_cFFqA_PMCAE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/xxEAYZPjZGUFGslrurHMaeLtIsA.roa Signing time: Fri 02 Jan 2026 10:19:50 +0000 ROA not before: Fri 02 Jan 2026 10:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209047 IP address blocks: 45.9.32.0/22 maxlen: 22 45.9.32.0/24 maxlen: 24 45.9.33.0/24 maxlen: 24 45.9.34.0/24 maxlen: 24 45.9.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft rsync://rpki.ripe.net/repository/DEFAULT/H2XM7xQP8w5Nfam_cFFqA_PMCAE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:81:e4:e8:9a:0a:a4:ef:3c:83:dd:29:fb:ec:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f65ccef140ff30e4d7da9bf70516a03f3cc0801 Validity Not Before: Jan 2 10:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c711006193e36465051ac96bbab1cc69e2ed22c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d7:e4:d1:d9:05:d1:b8:85:eb:9d:ce:81:34: b4:f9:96:ba:77:58:44:4b:6f:8c:3a:3e:2a:63:01: d1:22:3a:a0:cc:29:03:68:3d:c5:39:ba:cc:4f:a9: bc:f0:ba:cd:be:5b:c3:27:ee:5c:64:b3:98:41:ce: 9b:3b:04:30:0d:fa:3d:7b:0b:37:a7:45:f2:0f:23: 1c:2a:57:ae:66:6d:8e:0f:d5:11:41:5d:fc:6e:ee: 8e:20:d0:25:a7:d4:d2:a6:2f:9d:26:77:9e:4c:38: 21:22:75:f4:03:58:ea:61:b8:7b:3d:f0:8d:ed:97: 7b:85:e8:9e:dc:1d:39:32:07:31:cd:be:6c:28:07: b4:30:5f:ac:96:c9:d5:dd:bc:4b:f0:1d:d5:e5:15: 18:be:15:7f:64:d3:c2:9d:84:f7:5d:70:ec:2f:13: 45:f9:17:4f:3f:63:a5:93:22:11:76:59:18:d4:6d: 77:d8:4a:ad:33:3f:f6:40:14:65:06:bc:09:3d:60: ab:6c:44:e4:db:e4:8e:10:ee:51:c8:28:0c:16:b8: c0:f5:a4:07:ef:80:b9:cf:80:97:8b:12:af:09:98: 8f:c7:f7:62:ee:82:5f:3c:67:9d:0e:fa:93:25:0e: 95:a6:c2:12:32:49:f9:37:52:57:4e:8a:b5:43:a8: 61:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:11:00:61:93:E3:64:65:05:1A:C9:6B:BA:B1:CC:69:E2:ED:22:C0 X509v3 Authority Key Identifier: keyid:1F:65:CC:EF:14:0F:F3:0E:4D:7D:A9:BF:70:51:6A:03:F3:CC:08:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2XM7xQP8w5Nfam_cFFqA_PMCAE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/xxEAYZPjZGUFGslrurHMaeLtIsA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.9.32.0/22 Signature Algorithm: sha256WithRSAEncryption b8:5e:43:c9:e9:c0:34:c7:59:2f:6e:d3:e4:fb:51:f3:39:a8: 66:c4:b1:9a:8f:01:36:de:a1:e5:9c:da:34:ab:4a:67:24:a2: cb:b9:2e:55:8a:eb:7c:31:0e:ed:2f:cc:4f:5e:a9:76:57:6b: 51:7e:99:12:9b:96:7f:1d:4e:5a:ce:fb:3b:94:61:53:8b:63: 4e:59:ed:dd:8f:44:0f:cc:c6:63:e7:f9:36:ce:5d:b2:e0:08: db:27:21:01:fe:76:ee:be:33:c2:fe:97:f8:e9:3c:73:81:43: 85:f5:aa:c0:0b:4c:cb:f5:cd:e8:10:a7:19:7d:27:96:ad:46: f6:d5:ed:d5:71:b9:0c:b1:d5:56:bd:18:5c:63:e7:d0:ed:c9: 18:14:70:16:b5:e9:6f:9b:9f:ac:05:72:d7:12:c6:6f:3a:41: 0b:f1:80:b0:db:1c:e5:b0:11:6a:7f:17:4e:d2:a1:a9:79:23: 66:75:83:41:ab:80:eb:c2:95:34:74:f1:db:79:dd:be:0c:55: a4:b3:f1:77:76:6b:07:96:6b:10:38:dc:53:3f:72:30:19:fc: cb:77:f9:8e:40:71:ea:c8:ed:e8:3b:3f:bd:99:95:5c:89:62: 14:31:a3:90:f6:cb:4f:7c:eb:28:df:31:83:b5:33:6e:db:4a: 56:4b:19:20 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OIHk6JoKpO88g90p++w/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNjVjY2VmMTQwZmYzMGU0ZDdkYTliZjcwNTE2YTAzZjNj YzA4MDEwHhcNMjYwMTAyMTAxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzExMDA2MTkzZTM2NDY1MDUxYWM5NmJiYWIxY2M2OWUyZWQyMmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9fk0dkF0biF653OgTS0+Za6d1hE S2+MOj4qYwHRIjqgzCkDaD3FObrMT6m88LrNvlvDJ+5cZLOYQc6bOwQwDfo9ews3 p0XyDyMcKleuZm2OD9URQV38bu6OINAlp9TSpi+dJneeTDghInX0A1jqYbh7PfCN 7Zd7heie3B05Mgcxzb5sKAe0MF+slsnV3bxL8B3V5RUYvhV/ZNPCnYT3XXDsLxNF +RdPP2OlkyIRdlkY1G132EqtMz/2QBRlBrwJPWCrbETk2+SOEO5RyCgMFrjA9aQH 74C5z4CXixKvCZiPx/di7oJfPGedDvqTJQ6VpsISMkn5N1JXToq1Q6hhjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMcRAGGT42RlBRrJa7qxzGni7SLAMB8GA1UdIwQY MBaAFB9lzO8UD/MOTX2pv3BRagPzzAgBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDJYTTd4UVA4dzVOZmFtX2NGRnFBX1BNQ0FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9kNmM1OTItN2Q3ZS00OWFlLWIxZDQt NDBkMDFhNzZlMjVlLzEveHhFQVlaUGpaR1VGR3NscnVySE1hZUx0SXNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9kNmM1OTItN2Q3ZS00OWFlLWIxZDQtNDBkMDFhNzZlMjVl LzEvSDJYTTd4UVA4dzVOZmFtX2NGRnFBX1BNQ0FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQkgMA0G CSqGSIb3DQEBCwUAA4IBAQC4XkPJ6cA0x1kvbtPk+1HzOahmxLGajwE23qHlnNo0 q0pnJKLLuS5Viut8MQ7tL8xPXql2V2tRfpkSm5Z/HU5azvs7lGFTi2NOWe3dj0QP zMZj5/k2zl2y4AjbJyEB/nbuvjPC/pf46TxzgUOF9arAC0zL9c3oEKcZfSeWrUb2 1e3VcbkMsdVWvRhcY+fQ7ckYFHAWtelvm5+sBXLXEsZvOkEL8YCw2xzlsBFqfxdO 0qGpeSNmdYNBq4DrwpU0dPHbed2+DFWks/F3dmsHlmsQONxTP3IwGfzLd/mOQHHq yO3oOz+9mZVciWIUMaOQ9stPfOso3zGDtTNu20pWSxkg -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:14 2026 by rpki-client