This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/11cbb5-3e2e-44d6-9d1b-aae1a0bda02c/1/XeOUR0-pjJaRQT7Tyhbi_WUTtlg.roa File: XeOUR0-pjJaRQT7Tyhbi_WUTtlg.roa (raw, json) Hash identifier: xjNJnRpeBMnuWS2RuvVGcAOVzSFDblEQbuBSUbq0Xoo= Subject key identifier: 5D:E3:94:47:4F:A9:8C:96:91:41:3E:D3:CA:16:E2:FD:65:13:B6:58 Certificate issuer: /CN=837a739fd50864ccc246843ed6801959ba1ba6a5 Certificate serial: 019B77595863A30725F83AD004FFFF48442E Authority key identifier: 83:7A:73:9F:D5:08:64:CC:C2:46:84:3E:D6:80:19:59:BA:1B:A6:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g3pzn9UIZMzCRoQ-1oAZWbobpqU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/11cbb5-3e2e-44d6-9d1b-aae1a0bda02c/1/XeOUR0-pjJaRQT7Tyhbi_WUTtlg.roa Signing time: Thu 01 Jan 2026 02:18:22 +0000 ROA not before: Thu 01 Jan 2026 02:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44318 IP address blocks: 46.173.96.0/19 maxlen: 24 91.201.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/11cbb5-3e2e-44d6-9d1b-aae1a0bda02c/1/g3pzn9UIZMzCRoQ-1oAZWbobpqU.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/11cbb5-3e2e-44d6-9d1b-aae1a0bda02c/1/g3pzn9UIZMzCRoQ-1oAZWbobpqU.mft rsync://rpki.ripe.net/repository/DEFAULT/g3pzn9UIZMzCRoQ-1oAZWbobpqU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:58:63:a3:07:25:f8:3a:d0:04:ff:ff:48:44:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=837a739fd50864ccc246843ed6801959ba1ba6a5 Validity Not Before: Jan 1 02:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5de394474fa98c9691413ed3ca16e2fd6513b658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3a:43:09:f1:a2:06:d6:8b:8d:12:cb:f4:8a: 5d:ff:57:86:4b:58:d2:70:0c:18:33:fc:36:29:2b: ca:b8:8a:d8:ad:ea:06:99:df:4d:41:4b:39:90:29: 40:01:d4:25:3f:3f:75:5f:7c:e4:69:ca:bf:2e:bf: 8b:cd:45:c8:4f:4c:32:13:6e:7e:37:f6:2a:2c:cd: 2e:89:2a:00:b5:47:56:92:2c:9e:fb:5c:52:e3:61: b0:5a:a2:66:2c:22:72:ea:0d:46:81:29:61:a9:f6: cc:b3:b7:6e:66:f3:12:80:bc:52:ee:44:08:c1:9b: 70:f6:3d:6d:55:87:0f:19:21:73:ed:2a:d7:99:3f: 60:17:c6:3c:5c:8b:46:44:2c:d9:79:47:7e:32:5c: 98:3c:70:0f:d6:26:d2:df:e4:3f:9c:b0:c8:89:26: bd:12:10:3e:cd:0f:78:a1:f3:ab:cc:24:17:5d:74: f3:cb:6d:dc:7f:da:7c:9a:4a:d9:d0:68:d2:46:53: 2e:cb:e7:54:e1:5c:39:d7:7e:cd:4f:a5:92:9c:89: 48:55:c4:04:27:7d:ba:56:53:55:77:c5:47:c4:95: 3b:8d:4b:91:79:5e:bf:9b:ff:e5:50:4d:22:0c:db: 00:20:2c:9a:f1:51:ae:6b:87:62:6e:6a:1f:73:ae: db:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:E3:94:47:4F:A9:8C:96:91:41:3E:D3:CA:16:E2:FD:65:13:B6:58 X509v3 Authority Key Identifier: keyid:83:7A:73:9F:D5:08:64:CC:C2:46:84:3E:D6:80:19:59:BA:1B:A6:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g3pzn9UIZMzCRoQ-1oAZWbobpqU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/11cbb5-3e2e-44d6-9d1b-aae1a0bda02c/1/XeOUR0-pjJaRQT7Tyhbi_WUTtlg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/11cbb5-3e2e-44d6-9d1b-aae1a0bda02c/1/g3pzn9UIZMzCRoQ-1oAZWbobpqU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.173.96.0/19 91.201.144.0/22 Signature Algorithm: sha256WithRSAEncryption 1d:08:38:a2:7d:c5:1e:5c:52:b7:1e:36:01:3b:bb:08:16:24: 47:6c:c3:bd:95:0d:cf:66:75:80:cf:36:63:64:c0:9c:91:c8: 9e:c4:8e:20:f5:6b:29:b1:fd:d7:97:38:7c:dc:54:59:c2:42: b3:3a:24:49:e4:0e:79:7c:2b:81:0e:17:61:af:b8:d1:2c:8e: 2f:ee:f0:ac:c6:13:54:00:2a:cd:db:02:e4:24:7c:1e:f6:60: 30:d6:e6:ac:d2:13:7e:74:c1:f1:1d:a0:64:ed:f0:fe:9c:70: 54:e4:51:29:10:59:63:e7:98:01:5f:5a:85:07:03:ab:db:b8: 9d:08:19:eb:ed:f9:ca:97:27:45:9c:f2:c8:67:0c:12:00:66: 46:1a:56:aa:79:b3:22:c9:b6:4c:83:21:ca:b1:d4:98:c4:32: cc:b1:50:eb:1f:3e:a0:ca:f3:1d:56:08:5c:5c:d1:18:3e:d9: 8e:41:a4:3a:94:90:e0:1d:0c:b9:22:d8:8c:7e:66:4d:db:b2: 0e:24:2c:c3:61:4c:9d:fb:fe:c9:29:47:fb:62:01:9a:7e:83: e7:4a:97:69:ab:e9:27:11:12:c1:8d:2e:d1:28:00:12:e4:58: d4:0b:c5:d8:63:fe:04:a3:95:b8:ea:89:be:5a:f7:a5:35:c7: b6:cc:cc:a7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3WVhjowcl+DrQBP//SEQuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzN2E3MzlmZDUwODY0Y2NjMjQ2ODQzZWQ2ODAxOTU5YmEx YmE2YTUwHhcNMjYwMTAxMDIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZGUzOTQ0NzRmYTk4Yzk2OTE0MTNlZDNjYTE2ZTJmZDY1MTNiNjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jpDCfGiBtaLjRLL9Ipd/1eGS1jS cAwYM/w2KSvKuIrYreoGmd9NQUs5kClAAdQlPz91X3zkacq/Lr+LzUXIT0wyE25+ N/YqLM0uiSoAtUdWkiye+1xS42GwWqJmLCJy6g1GgSlhqfbMs7duZvMSgLxS7kQI wZtw9j1tVYcPGSFz7SrXmT9gF8Y8XItGRCzZeUd+MlyYPHAP1ibS3+Q/nLDIiSa9 EhA+zQ94ofOrzCQXXXTzy23cf9p8mkrZ0GjSRlMuy+dU4Vw5137NT6WSnIlIVcQE J326VlNVd8VHxJU7jUuReV6/m//lUE0iDNsAICya8VGua4dibmofc67bewIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFF3jlEdPqYyWkUE+08oW4v1lE7ZYMB8GA1UdIwQY MBaAFIN6c5/VCGTMwkaEPtaAGVm6G6alMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzNwem45VUlaTXpDUm9RLTFvQVpXYm9icHFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8xMWNiYjUtM2UyZS00NGQ2LTlkMWIt YWFlMWEwYmRhMDJjLzEvWGVPVVIwLXBqSmFSUVQ3VHloYmlfV1VUdGxnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8xMWNiYjUtM2UyZS00NGQ2LTlkMWItYWFlMWEwYmRhMDJj LzEvZzNwem45VUlaTXpDUm9RLTFvQVpXYm9icHFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFLq1gAwQC W8mQMA0GCSqGSIb3DQEBCwUAA4IBAQAdCDiifcUeXFK3HjYBO7sIFiRHbMO9lQ3P ZnWAzzZjZMCckciexI4g9Wspsf3Xlzh83FRZwkKzOiRJ5A55fCuBDhdhr7jRLI4v 7vCsxhNUACrN2wLkJHwe9mAw1uas0hN+dMHxHaBk7fD+nHBU5FEpEFlj55gBX1qF BwOr27idCBnr7fnKlydFnPLIZwwSAGZGGlaqebMiybZMgyHKsdSYxDLMsVDrHz6g yvMdVghcXNEYPtmOQaQ6lJDgHQy5ItiMfmZN27IOJCzDYUyd+/7JKUf7YgGafoPn Spdpq+knERLBjS7RKAAS5FjUC8XYY/4Eo5W46om+WvelNce2zMyn -----END CERTIFICATE-----Generated at Mon Feb 9 18:37:54 2026 by rpki-client