This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/xg0VuiXqoXiww-GJ9D2_ljEA2vs.roa File: xg0VuiXqoXiww-GJ9D2_ljEA2vs.roa (raw, json) Hash identifier: uA7hO9E7hUzauisNryngMo6HASraVHp6A2BgzZx4YIE= Subject key identifier: C6:0D:15:BA:25:EA:A1:78:B0:C3:E1:89:F4:3D:BF:96:31:00:DA:FB Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Certificate serial: 019B7AC7CA911C5FF399C26AD32EB5AD8C14 Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/xg0VuiXqoXiww-GJ9D2_ljEA2vs.roa Signing time: Thu 01 Jan 2026 18:17:52 +0000 ROA not before: Thu 01 Jan 2026 18:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55933 IP address blocks: 45.153.128.0/22 maxlen: 24 193.42.24.0/22 maxlen: 24 193.42.26.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:ca:91:1c:5f:f3:99:c2:6a:d3:2e:b5:ad:8c:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Validity Not Before: Jan 1 18:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c60d15ba25eaa178b0c3e189f43dbf963100dafb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f1:ec:b3:bd:a3:7c:38:41:02:92:d9:b5:d3: 0b:a7:19:ab:a6:f5:96:0b:8a:28:40:b8:07:26:bd: ec:1c:f4:91:9f:91:e0:0d:23:d0:87:88:83:d1:c8: c7:db:a8:b4:01:29:47:09:80:8a:03:ee:ef:6b:74: a2:96:a0:3a:c0:eb:74:69:1d:a4:c6:e9:0a:ed:f0: ff:91:bb:33:62:16:07:24:f6:d1:74:96:d2:df:40: 66:1e:df:4f:b3:6d:51:dc:62:8d:ff:1a:33:f7:a0: af:bd:a7:d5:68:2d:ce:09:ba:cc:03:aa:0a:ac:11: c6:99:ef:7c:8e:33:8d:99:8c:09:6c:07:e3:be:5d: 13:da:3d:e6:85:e6:a8:3d:53:92:50:c1:68:df:a5: 0a:7b:97:ed:fe:0d:95:b4:d4:52:ae:42:47:00:5a: 31:f8:b9:76:63:a3:a0:a2:48:b8:98:dc:d9:32:c3: b1:8a:13:83:13:fc:78:26:47:36:24:f0:ef:f7:71: 31:29:2c:0a:3c:1b:50:23:c7:68:7f:91:99:c6:bf: 4b:20:a2:02:5d:69:dd:21:7d:91:1d:75:e7:d1:c7: 32:ac:ed:61:34:8e:47:d9:13:bb:a1:77:dc:50:a6: c7:97:d8:cf:86:a8:ec:f0:b0:5d:44:91:ba:58:01: 5e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:0D:15:BA:25:EA:A1:78:B0:C3:E1:89:F4:3D:BF:96:31:00:DA:FB X509v3 Authority Key Identifier: keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/xg0VuiXqoXiww-GJ9D2_ljEA2vs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.153.128.0/22 193.42.24.0/22 Signature Algorithm: sha256WithRSAEncryption 32:88:b3:1f:dc:52:0f:74:07:48:2a:3f:f8:dd:40:1b:19:77: 15:b1:b7:17:f2:28:9d:18:97:1f:d8:6d:69:a3:f7:76:f2:98: ff:a7:8a:1a:80:64:25:74:12:44:af:e9:d9:07:a9:b5:88:13: 36:3a:ce:fd:3a:13:6e:46:ba:55:ee:b3:fe:76:b6:21:9d:a6: f3:92:0e:83:59:65:e6:10:61:a6:91:d4:9f:e0:9f:0c:37:90: bc:8d:cb:50:bf:b1:5f:6f:46:62:b9:f0:4f:48:e2:18:02:bf: a7:16:59:aa:f3:6b:eb:bb:3e:2a:2c:18:d1:bf:77:9f:81:f3: 18:57:a3:c8:f2:38:d8:4a:7d:14:4d:ed:86:3e:fa:76:16:cd: 90:b4:c3:f9:24:5a:90:13:a6:5e:dc:9f:11:4d:51:89:d1:d3: 52:d5:02:fa:c8:50:e5:d5:91:60:ee:a6:43:28:9d:59:aa:75: 24:0d:ae:58:e5:54:de:97:f4:35:c3:45:5c:00:1c:d1:5d:77: 37:a0:e9:e6:14:61:fc:7a:13:e8:fe:02:32:32:d1:71:b3:48: e8:6c:2c:f9:2e:88:09:36:9f:1c:bf:01:9a:12:85:c0:7e:64: 36:d4:cb:0b:ca:e0:1b:51:9b:47:a5:ec:3a:39:07:a0:1c:59: 99:db:cc:91 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6x8qRHF/zmcJq0y61rYwUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMzcxODMzNDFhMmFiNmRmM2M1OWVjODI3ZWQ3MTIwMGI1 YTYyNDQwHhcNMjYwMTAxMTgxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjBkMTViYTI1ZWFhMTc4YjBjM2UxODlmNDNkYmY5NjMxMDBkYWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfHss72jfDhBApLZtdMLpxmrpvWW C4ooQLgHJr3sHPSRn5HgDSPQh4iD0cjH26i0ASlHCYCKA+7va3SilqA6wOt0aR2k xukK7fD/kbszYhYHJPbRdJbS30BmHt9Ps21R3GKN/xoz96CvvafVaC3OCbrMA6oK rBHGme98jjONmYwJbAfjvl0T2j3mheaoPVOSUMFo36UKe5ft/g2VtNRSrkJHAFox +Ll2Y6Ogoki4mNzZMsOxihODE/x4Jkc2JPDv93ExKSwKPBtQI8dof5GZxr9LIKIC XWndIX2RHXXn0ccyrO1hNI5H2RO7oXfcUKbHl9jPhqjs8LBdRJG6WAFeGwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMYNFbol6qF4sMPhifQ9v5YxANr7MB8GA1UdIwQY MBaAFIs3GDNBoqtt88WeyCftcSALWmJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUt MDg1MmNiMzUzMjkzLzEveGcwVnVpWHFvWGl3dy1HSjlEMl9sakVBMnZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUtMDg1MmNiMzUzMjkz LzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLZmAAwQC wSoYMA0GCSqGSIb3DQEBCwUAA4IBAQAyiLMf3FIPdAdIKj/43UAbGXcVsbcX8iid GJcf2G1po/d28pj/p4oagGQldBJEr+nZB6m1iBM2Os79OhNuRrpV7rP+drYhnabz kg6DWWXmEGGmkdSf4J8MN5C8jctQv7Ffb0ZiufBPSOIYAr+nFlmq82vruz4qLBjR v3efgfMYV6PI8jjYSn0UTe2GPvp2Fs2QtMP5JFqQE6Ze3J8RTVGJ0dNS1QL6yFDl 1ZFg7qZDKJ1ZqnUkDa5Y5VTel/Q1w0VcABzRXXc3oOnmFGH8ehPo/gIyMtFxs0jo bCz5LogJNp8cvwGaEoXAfmQ21MsLyuAbUZtHpew6OQegHFmZ28yR -----END CERTIFICATE-----Generated at Sun Jan 18 04:09:26 2026 by rpki-client