This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/xkVE7KUdk3_Gxthu42EOBxgV05Q.roa File: xkVE7KUdk3_Gxthu42EOBxgV05Q.roa (raw, json) Hash identifier: OLCiaU+AVFxgMEa5gMdkqLSxOFCgu1RCocNrX9T3asM= Subject key identifier: C6:45:44:EC:A5:1D:93:7F:C6:C6:D8:6E:E3:61:0E:07:18:15:D3:94 Certificate issuer: /CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52 Certificate serial: 019BB8CDCEEDA3087E25DBE65BB66847C860 Authority key identifier: 3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/xkVE7KUdk3_Gxthu42EOBxgV05Q.roa Signing time: Tue 13 Jan 2026 19:20:54 +0000 ROA not before: Tue 13 Jan 2026 19:20:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8220 IP address blocks: 145.224.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 07:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b8:cd:ce:ed:a3:08:7e:25:db:e6:5b:b6:68:47:c8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52 Validity Not Before: Jan 13 19:20:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c64544eca51d937fc6c6d86ee3610e071815d394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e3:c8:62:45:0b:ba:a5:cb:f9:ad:e1:18:be: 93:e9:41:37:ef:b9:83:c9:77:e5:ce:48:9e:64:60: ae:8e:c7:e2:f4:a0:c3:81:44:88:3c:bc:7a:c8:ca: 44:fc:2b:3a:34:cd:50:f1:3f:48:ee:55:95:94:9d: b1:bf:d3:07:e8:d6:bf:0c:75:86:fd:65:c8:e6:dc: f1:36:0e:d1:3a:08:5f:00:de:df:8b:ee:0b:08:66: cd:ed:cf:34:4a:ed:00:e2:f7:15:4d:71:8e:39:7b: a8:f9:5c:a5:9b:0c:98:c9:18:d4:fd:a6:32:2f:25: fa:ee:55:23:90:58:63:56:18:9b:68:86:9a:97:9f: 8b:63:27:b4:13:e8:48:7b:5c:92:8a:3b:b0:08:d2: b9:de:f3:f3:51:9a:ad:8a:3c:ab:9a:fa:53:66:26: 1f:e0:ba:7d:9b:ce:25:8a:07:de:f3:a4:30:3a:af: a1:b4:1f:ba:a1:07:16:96:7c:23:ec:1a:2f:42:c8: 2d:e9:c6:0e:07:df:45:82:ba:24:d3:ed:81:c5:04: fc:9d:a7:20:78:a4:49:ac:20:81:dc:25:7a:b4:95: ea:77:2a:0a:d0:8c:4b:25:5c:99:cb:3e:6a:00:0f: d3:a1:0b:1d:ce:c7:36:3c:e3:e7:f6:4b:7c:92:22: 60:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:45:44:EC:A5:1D:93:7F:C6:C6:D8:6E:E3:61:0E:07:18:15:D3:94 X509v3 Authority Key Identifier: keyid:3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/xkVE7KUdk3_Gxthu42EOBxgV05Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.224.32.0/23 Signature Algorithm: sha256WithRSAEncryption 09:e5:77:2e:c6:6b:36:eb:b2:26:ae:4e:fc:e6:7c:2f:cd:bc: ea:0b:d1:36:65:92:fa:25:0a:eb:51:ba:75:b6:e6:0e:5c:6b: bd:26:12:b8:b7:72:01:56:51:51:7e:e8:52:3e:6e:09:d9:80: 37:3e:99:2d:47:08:85:ce:c6:8e:f0:bc:54:9d:83:8e:47:19: 62:4b:6d:4d:8d:01:45:19:dc:45:3e:84:e1:30:73:7c:3d:24: 8e:69:f7:47:0a:dc:88:ec:a7:74:4f:9d:74:eb:0d:08:35:49: 47:54:89:aa:59:5f:ed:2c:38:92:98:7b:c9:66:65:cb:38:32: 5a:8f:9d:a4:d1:66:14:56:0f:ff:60:49:fe:2d:ba:9f:ce:cd: 22:31:bb:38:5c:26:6b:b7:82:37:6f:85:c3:f0:ea:b8:d1:10: 20:3e:f8:8b:4c:a7:57:92:df:6e:37:4c:ab:f8:02:bd:09:d6: f4:27:ea:82:ae:7a:c7:c0:26:ea:32:9a:aa:e2:60:be:37:38: 80:f8:78:3a:ce:47:88:5a:74:ed:a5:8b:9f:d7:b5:fa:cb:97: bc:0e:8e:5f:d3:ea:c4:89:7c:50:09:cb:4f:bd:db:c7:f8:44: 7d:80:ba:83:2d:8f:d7:49:82:46:a5:d4:76:07:24:6c:66:3d: e1:99:48:5c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZu4zc7towh+JdvmW7ZoR8hgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNTQ0Y2EwZTJiZTE4ZTlmZDc0ZTI4MTMyNGEzMGIwZWEy ZDFkNTIwHhcNMjYwMTEzMTkyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjQ1NDRlY2E1MWQ5MzdmYzZjNmQ4NmVlMzYxMGUwNzE4MTVkMzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjePIYkULuqXL+a3hGL6T6UE377mD yXflzkieZGCujsfi9KDDgUSIPLx6yMpE/Cs6NM1Q8T9I7lWVlJ2xv9MH6Na/DHWG /WXI5tzxNg7ROghfAN7fi+4LCGbN7c80Su0A4vcVTXGOOXuo+VylmwyYyRjU/aYy LyX67lUjkFhjVhibaIaal5+LYye0E+hIe1ySijuwCNK53vPzUZqtijyrmvpTZiYf 4Lp9m84ligfe86QwOq+htB+6oQcWlnwj7BovQsgt6cYOB99Fgrok0+2BxQT8nacg eKRJrCCB3CV6tJXqdyoK0IxLJVyZyz5qAA/ToQsdzsc2POPn9kt8kiJgswIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMZFROylHZN/xsbYbuNhDgcYFdOUMB8GA1UdIwQY MBaAFDtUTKDivhjp/XTigTJKMLDqLR1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzFSTW9PSy1HT245ZE9LQk1rb3dzT290SFZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8zMDMwYmItNDJjMi00ZTNjLTg1OWEt ODc2YTlkNzYyOWY2LzEveGtWRTdLVWRrM19HeHRodTQyRU9CeGdWMDVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8zMDMwYmItNDJjMi00ZTNjLTg1OWEtODc2YTlkNzYyOWY2 LzEvTzFSTW9PSy1HT245ZE9LQk1rb3dzT290SFZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkeAgMA0G CSqGSIb3DQEBCwUAA4IBAQAJ5Xcuxms267Imrk785nwvzbzqC9E2ZZL6JQrrUbp1 tuYOXGu9JhK4t3IBVlFRfuhSPm4J2YA3PpktRwiFzsaO8LxUnYOORxliS21NjQFF GdxFPoThMHN8PSSOafdHCtyI7Kd0T5106w0INUlHVImqWV/tLDiSmHvJZmXLODJa j52k0WYUVg//YEn+Lbqfzs0iMbs4XCZrt4I3b4XD8Oq40RAgPviLTKdXkt9uN0yr +AK9Cdb0J+qCrnrHwCbqMpqq4mC+NziA+Hg6zkeIWnTtpYuf17X6y5e8Do5f0+rE iXxQCctPvdvH+ER9gLqDLY/XSYJGpdR2ByRsZj3hmUhc -----END CERTIFICATE-----Generated at Wed Jan 21 12:19:02 2026 by rpki-client