This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/X1akE1dGAaUd2rRk-xwJWJmqFCs.roa File: X1akE1dGAaUd2rRk-xwJWJmqFCs.roa (raw, json) Hash identifier: cXfhtl3PZyEUlqylG719UEwLpADoB/zR7SblnDLZe4E= Subject key identifier: 5F:56:A4:13:57:46:01:A5:1D:DA:B4:64:FB:1C:09:58:99:AA:14:2B Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Certificate serial: 019B7BA55B6E178EF3A5C48CE26889B1842B Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/X1akE1dGAaUd2rRk-xwJWJmqFCs.roa Signing time: Thu 01 Jan 2026 22:19:53 +0000 ROA not before: Thu 01 Jan 2026 22:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205491 IP address blocks: 45.131.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:5b:6e:17:8e:f3:a5:c4:8c:e2:68:89:b1:84:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Validity Not Before: Jan 1 22:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f56a413574601a51ddab464fb1c095899aa142b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2e:6b:19:7c:e1:81:9f:50:a9:cd:ce:e4:03: 9b:a1:79:c1:ec:ec:55:d5:b6:e7:3b:6e:79:8f:a5: e4:8e:89:6e:ce:62:76:9d:1a:be:26:85:d4:4a:d4: 08:f9:e7:f1:26:4e:78:d8:87:32:a7:56:b5:8c:ba: 68:ed:0f:31:ea:76:d0:f7:9d:0d:8b:3a:04:ae:97: f9:a4:49:fc:f2:58:8c:95:2f:dd:86:ff:99:be:9d: 0c:c1:f9:a2:12:2f:23:52:ee:a6:e1:48:c1:d3:46: 42:7e:fc:35:3f:f5:bf:06:eb:ba:7c:16:83:9f:4f: 0e:1c:0c:73:17:68:8c:a3:6f:71:f0:77:b1:bd:20: 46:3c:d3:78:45:ec:b2:da:62:57:48:46:db:2c:31: fc:73:a2:62:a0:ca:76:f2:11:c4:40:1c:d1:55:e8: c4:1a:85:e9:3d:80:6b:5a:29:91:bc:31:a2:ad:e1: 23:98:3d:a6:ab:ec:9a:0a:4a:05:d6:20:55:4c:f5: 35:f4:b0:e1:e8:eb:c2:35:03:f0:2f:42:48:a9:45: a4:8c:2a:37:9a:e1:a8:aa:15:df:da:1e:7a:ab:f6: 65:02:1d:86:d1:34:bb:1b:16:f5:5b:12:5b:6a:ad: 65:90:a4:49:31:11:02:eb:d7:68:52:82:86:00:b4: f2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:56:A4:13:57:46:01:A5:1D:DA:B4:64:FB:1C:09:58:99:AA:14:2B X509v3 Authority Key Identifier: keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/X1akE1dGAaUd2rRk-xwJWJmqFCs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.131.61.0/24 Signature Algorithm: sha256WithRSAEncryption 55:d3:f1:2a:29:94:20:b8:38:cc:4e:70:33:80:2f:3f:5f:9a: 75:2f:44:9e:8c:81:1c:eb:e1:0e:21:e0:e6:e7:e7:7a:ad:a0: 76:b9:84:8e:5b:f1:4b:77:6c:f6:7e:b8:ae:8f:ab:a5:7a:6a: e1:a6:cc:cf:16:ec:a4:38:30:5e:c7:74:a8:c9:82:cb:52:66: 8b:bd:15:b4:86:0a:9d:86:5c:af:41:a9:39:d7:f2:b0:03:8d: aa:fa:89:a6:3a:e4:26:00:0b:2e:ba:b5:16:f2:79:88:74:2e: fb:42:7d:87:35:58:f8:12:5b:f9:34:53:cb:c4:21:e4:64:43: d0:12:46:99:92:2f:f8:7e:d9:89:71:20:54:2d:4d:ef:03:5b: 9f:bd:06:0e:a9:e9:52:d1:68:e4:43:06:9b:28:f8:3f:e5:e9: 68:2c:3f:25:44:6c:e8:71:45:75:1b:61:68:f7:29:c4:fd:a8: 71:1a:4f:f8:c3:cc:59:4c:da:1e:8f:72:25:e2:61:ed:8f:40: 9c:1c:57:ba:c4:de:e3:93:64:ca:77:b8:91:3a:19:c2:54:bb: 8c:70:83:19:0f:d5:59:54:8d:2e:d8:d6:7e:2f:44:27:c4:cc: 91:dd:36:6c:eb:06:9b:a7:66:5f:ef:16:f6:cf:97:04:b4:c5: 09:5c:b9:58 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pVtuF47zpcSM4miJsYQrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl MGI5MjYwHhcNMjYwMTAxMjIxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjU2YTQxMzU3NDYwMWE1MWRkYWI0NjRmYjFjMDk1ODk5YWExNDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqC5rGXzhgZ9Qqc3O5AOboXnB7OxV 1bbnO255j6XkjoluzmJ2nRq+JoXUStQI+efxJk542Icyp1a1jLpo7Q8x6nbQ950N izoErpf5pEn88liMlS/dhv+Zvp0MwfmiEi8jUu6m4UjB00ZCfvw1P/W/Buu6fBaD n08OHAxzF2iMo29x8HexvSBGPNN4Reyy2mJXSEbbLDH8c6JioMp28hHEQBzRVejE GoXpPYBrWimRvDGireEjmD2mq+yaCkoF1iBVTPU19LDh6OvCNQPwL0JIqUWkjCo3 muGoqhXf2h56q/ZlAh2G0TS7Gxb1WxJbaq1lkKRJMREC69doUoKGALTyuwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF9WpBNXRgGlHdq0ZPscCViZqhQrMB8GA1UdIwQY MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt NzM4NTZhZjQ5ZjNlLzEvWDFha0UxZEdBYVVkMnJSay14d0pXSm1xRkNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYM9MA0G CSqGSIb3DQEBCwUAA4IBAQBV0/EqKZQguDjMTnAzgC8/X5p1L0SejIEc6+EOIeDm 5+d6raB2uYSOW/FLd2z2friuj6ulemrhpszPFuykODBex3SoyYLLUmaLvRW0hgqd hlyvQak51/KwA42q+ommOuQmAAsuurUW8nmIdC77Qn2HNVj4Elv5NFPLxCHkZEPQ EkaZki/4ftmJcSBULU3vA1ufvQYOqelS0WjkQwabKPg/5eloLD8lRGzocUV1G2Fo 9ynE/ahxGk/4w8xZTNoej3Il4mHtj0CcHFe6xN7jk2TKd7iROhnCVLuMcIMZD9VZ VI0u2NZ+L0QnxMyR3TZs6wabp2Zf7xb2z5cEtMUJXLlY -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:14 2026 by rpki-client