This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/lxIA5T6ig6P82Z6FpI76sa5r9Hk.roa File: lxIA5T6ig6P82Z6FpI76sa5r9Hk.roa (raw, json) Hash identifier: 3LHUUi612Oq28/k9MVav0SeJK2Lmj7BOxrV2xdjlDis= Subject key identifier: 97:12:00:E5:3E:A2:83:A3:FC:D9:9E:85:A4:8E:FA:B1:AE:6B:F4:79 Certificate issuer: /CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba Certificate serial: 019B7B36AE67E78BB54B5C5906454B594F9E Authority key identifier: 5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/lxIA5T6ig6P82Z6FpI76sa5r9Hk.roa Signing time: Thu 01 Jan 2026 20:18:59 +0000 ROA not before: Thu 01 Jan 2026 20:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212609 IP address blocks: 45.134.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:ae:67:e7:8b:b5:4b:5c:59:06:45:4b:59:4f:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba Validity Not Before: Jan 1 20:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=971200e53ea283a3fcd99e85a48efab1ae6bf479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e0:1c:00:26:aa:30:e1:34:16:bf:ba:65:03: a0:cf:ce:25:55:4b:7a:dd:14:1b:56:8c:9e:0d:da: 82:1a:bb:48:98:0c:6a:74:b6:33:37:af:c7:77:39: 39:9f:f7:1d:bd:b1:06:48:b1:f5:67:c0:08:6e:0c: cc:d1:03:4e:9f:df:56:4b:65:8d:6d:05:26:87:d0: ee:7b:3f:ec:56:28:93:57:90:d2:61:29:56:17:b5: ae:c5:88:67:20:31:44:3b:1a:d2:44:b3:1f:47:84: 2c:a9:f9:16:53:75:d3:45:82:04:56:88:bc:72:2e: 2d:ff:4a:6f:cd:c2:04:d4:fc:a5:13:e0:ea:4d:c2: 3b:88:7d:f2:86:8f:27:67:6e:1f:2d:6f:b1:ab:06: a4:63:72:11:74:ee:a2:cb:08:a6:cc:52:57:9e:9d: c0:9b:82:7e:11:ec:af:69:52:5c:04:07:e1:54:9e: 35:f7:b2:54:42:01:7f:97:be:3c:4f:1a:5c:3e:61: e3:b2:55:3d:05:4e:c2:2d:c8:f9:6e:ef:b1:41:89: 00:d7:fb:12:76:30:9a:aa:a1:3c:3a:aa:41:f1:41: bd:bb:7f:d7:25:fd:a4:3b:30:ec:59:e2:b8:a8:6f: 43:3d:6e:00:84:08:27:c7:fb:6c:9b:9b:ea:4c:c5: 8a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:12:00:E5:3E:A2:83:A3:FC:D9:9E:85:A4:8E:FA:B1:AE:6B:F4:79 X509v3 Authority Key Identifier: keyid:5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/lxIA5T6ig6P82Z6FpI76sa5r9Hk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.134.74.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:51:75:6e:d5:2a:b8:56:9e:92:7b:ce:99:0b:7d:98:35:c8: e3:86:f0:bb:18:c5:79:3c:99:7f:31:7f:11:12:43:a2:cb:79: bb:0c:23:47:8e:5f:3f:44:68:3a:6f:72:20:8b:c3:0d:72:a2: 4f:cf:07:cf:7e:28:c2:79:a1:fa:2d:2b:da:e1:1f:3d:b4:5c: 7c:88:64:76:9f:33:58:bc:08:9f:ba:a9:09:c7:1d:7c:3e:d7: 5c:14:33:f6:1c:78:53:20:29:68:8c:1f:5c:97:3f:e9:04:cb: da:47:25:e0:c5:d3:e1:fd:40:6f:15:b1:3b:c4:f3:7c:aa:9b: 7c:6e:7d:ac:c0:42:37:6c:c5:da:07:67:17:37:37:4d:37:17: 17:e0:02:0a:ff:6e:7e:9c:1b:4d:8a:f7:54:87:01:1e:1b:95: 9b:28:f0:ad:eb:ac:1d:ce:e1:b0:7b:13:dc:46:88:1c:59:a7: 97:9a:57:39:89:52:74:fe:f3:ac:50:43:4b:1a:5d:39:0d:9c: b0:a3:f4:4e:28:93:09:ce:94:61:80:ba:df:5b:f8:94:92:80: 18:ec:6c:4c:69:dc:49:bd:60:33:64:22:03:b1:e4:1a:0b:a8: 65:80:85:45:a8:7c:21:00:2e:6e:7c:d7:49:ab:56:2d:70:c9: a6:25:8d:ed -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nq5n54u1S1xZBkVLWU+eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZjMxYWZjMzZjYjY5NTUwMDdmZTk3ZWQ0YTVlMzE4NWQy MjcxYmEwHhcNMjYwMTAxMjAxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzEyMDBlNTNlYTI4M2EzZmNkOTllODVhNDhlZmFiMWFlNmJmNDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOAcACaqMOE0Fr+6ZQOgz84lVUt6 3RQbVoyeDdqCGrtImAxqdLYzN6/Hdzk5n/cdvbEGSLH1Z8AIbgzM0QNOn99WS2WN bQUmh9Duez/sViiTV5DSYSlWF7WuxYhnIDFEOxrSRLMfR4QsqfkWU3XTRYIEVoi8 ci4t/0pvzcIE1PylE+DqTcI7iH3yho8nZ24fLW+xqwakY3IRdO6iywimzFJXnp3A m4J+EeyvaVJcBAfhVJ4197JUQgF/l748TxpcPmHjslU9BU7CLcj5bu+xQYkA1/sS djCaqqE8OqpB8UG9u3/XJf2kOzDsWeK4qG9DPW4AhAgnx/tsm5vqTMWKGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJcSAOU+ooOj/NmehaSO+rGua/R5MB8GA1UdIwQY MBaAFFzzGvw2y2lVAH/pftSl4xhdInG6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFBNYV9EYkxhVlVBZi1sLTFLWGpHRjBpY2JvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80NThlYzMtMDQ1MS00ZTQxLTlhMzQt NzM2ZDEyODg4Y2E4LzEvbHhJQTVUNmlnNlA4Mlo2RnBJNzZzYTVyOUhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy80NThlYzMtMDQ1MS00ZTQxLTlhMzQtNzM2ZDEyODg4Y2E4 LzEvWFBNYV9EYkxhVlVBZi1sLTFLWGpHRjBpY2JvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYZKMA0G CSqGSIb3DQEBCwUAA4IBAQB/UXVu1Sq4Vp6Se86ZC32YNcjjhvC7GMV5PJl/MX8R EkOiy3m7DCNHjl8/RGg6b3Igi8MNcqJPzwfPfijCeaH6LSva4R89tFx8iGR2nzNY vAifuqkJxx18PtdcFDP2HHhTIClojB9clz/pBMvaRyXgxdPh/UBvFbE7xPN8qpt8 bn2swEI3bMXaB2cXNzdNNxcX4AIK/25+nBtNivdUhwEeG5WbKPCt66wdzuGwexPc RogcWaeXmlc5iVJ0/vOsUENLGl05DZywo/ROKJMJzpRhgLrfW/iUkoAY7GxMadxJ vWAzZCIDseQaC6hlgIVFqHwhAC5ufNdJq1YtcMmmJY3t -----END CERTIFICATE-----Generated at Fri Jan 2 19:24:55 2026 by rpki-client