This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/xnSiVa_Qi8Hl5xGaTydyCAcB4Q4.roa File: xnSiVa_Qi8Hl5xGaTydyCAcB4Q4.roa (raw, json) Hash identifier: SWwZIzY753Ls9csZNqAI1seyxm1jJEeEibvAi3lb+6E= Subject key identifier: C6:74:A2:55:AF:D0:8B:C1:E5:E7:11:9A:4F:27:72:08:07:01:E1:0E Certificate issuer: /CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba Certificate serial: 019B7B36AF6544C6500F5022C152E05A05E6 Authority key identifier: 5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/xnSiVa_Qi8Hl5xGaTydyCAcB4Q4.roa Signing time: Thu 01 Jan 2026 20:18:59 +0000 ROA not before: Thu 01 Jan 2026 20:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212669 IP address blocks: 45.134.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:af:65:44:c6:50:0f:50:22:c1:52:e0:5a:05:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba Validity Not Before: Jan 1 20:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c674a255afd08bc1e5e7119a4f2772080701e10e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:79:ff:75:2f:16:43:4a:47:97:14:65:b8:8c: 68:7b:5f:ed:21:87:5e:b4:9c:4d:1b:bd:cd:ba:74: 0c:47:c0:44:15:6b:9b:e3:f3:56:79:f4:fe:dc:24: d0:d6:c7:ce:49:cc:fc:c5:1f:57:d7:0c:68:20:30: 7f:2f:b8:76:cf:82:de:6c:40:04:33:cc:d6:a3:41: 93:61:88:ee:be:97:d5:c0:7c:71:ee:ff:5b:a9:93: f0:4a:8a:18:9b:f2:60:8e:1c:3d:3e:0e:11:86:70: 83:07:46:7d:6d:1e:99:ca:87:1b:a9:6e:8c:f1:34: 06:d7:5f:d2:02:84:96:36:bc:04:d9:33:ba:b5:12: 90:5f:09:e5:26:00:61:56:b6:c2:0a:ef:d2:96:87: 9c:09:dc:d6:82:7c:d4:0d:79:7e:74:1e:b6:c0:58: 50:3b:ee:e3:11:ab:e2:38:f3:59:c7:9a:d7:ac:96: 80:d7:ce:84:fd:fd:32:73:35:99:01:a5:50:d8:ad: 1e:36:bf:22:b0:31:ad:aa:2f:d3:a6:be:23:86:0e: 0e:46:14:08:51:65:11:43:50:01:20:85:9f:1e:8f: a1:13:72:52:7a:1b:d2:c3:91:b4:63:f1:e9:b8:98: 02:a5:98:66:65:29:d6:46:16:45:de:b0:80:4f:57: 11:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:74:A2:55:AF:D0:8B:C1:E5:E7:11:9A:4F:27:72:08:07:01:E1:0E X509v3 Authority Key Identifier: keyid:5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/xnSiVa_Qi8Hl5xGaTydyCAcB4Q4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.134.72.0/24 Signature Algorithm: sha256WithRSAEncryption 90:b4:a1:a9:8d:d1:0e:d0:a8:bf:a9:7b:9e:91:b4:41:19:11: 1e:9e:91:92:a0:88:bf:77:26:c4:ce:33:83:66:c5:d3:ac:9d: a5:df:9c:22:d5:43:33:09:e2:24:aa:1c:ca:46:0a:b3:92:8c: d3:f4:76:8b:fa:e4:1b:38:90:46:92:33:ac:2f:0a:ac:fe:6f: 22:ed:e9:c8:d2:a6:ee:5c:64:ff:6e:97:ff:b3:5d:04:9e:a4: 08:79:ef:d5:61:63:bd:46:c6:61:40:7f:7c:a9:82:69:ae:8e: a8:9e:71:33:2f:be:ef:01:1e:34:ca:e0:4a:40:e8:f7:c5:e6: da:df:81:10:89:9d:79:2d:cf:46:a4:b3:1b:f2:77:9e:ff:a8: cf:02:f8:b8:76:39:9f:f4:e5:c6:64:9d:36:c7:9b:fa:f6:c9: 0b:f3:ef:ba:80:3a:d6:b8:5e:cd:6d:e0:51:2a:f4:69:fa:ca: c9:d2:0d:0c:63:b2:91:5f:f9:c5:aa:c8:1a:27:51:51:86:55: 1d:bb:1e:ad:c5:cb:66:dd:fc:0f:fd:f7:0e:d9:ee:b2:e7:eb: 19:6a:ec:5c:97:d2:88:c2:fc:f7:0b:7b:0d:ad:c8:86:6c:60: 50:f8:ad:38:01:bc:12:0a:d1:53:c8:bd:58:ea:d6:d3:8d:de: 27:45:91:ce -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nq9lRMZQD1AiwVLgWgXmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZjMxYWZjMzZjYjY5NTUwMDdmZTk3ZWQ0YTVlMzE4NWQy MjcxYmEwHhcNMjYwMTAxMjAxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjc0YTI1NWFmZDA4YmMxZTVlNzExOWE0ZjI3NzIwODA3MDFlMTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnn/dS8WQ0pHlxRluIxoe1/tIYde tJxNG73NunQMR8BEFWub4/NWefT+3CTQ1sfOScz8xR9X1wxoIDB/L7h2z4LebEAE M8zWo0GTYYjuvpfVwHxx7v9bqZPwSooYm/Jgjhw9Pg4RhnCDB0Z9bR6ZyocbqW6M 8TQG11/SAoSWNrwE2TO6tRKQXwnlJgBhVrbCCu/SloecCdzWgnzUDXl+dB62wFhQ O+7jEaviOPNZx5rXrJaA186E/f0yczWZAaVQ2K0eNr8isDGtqi/Tpr4jhg4ORhQI UWURQ1ABIIWfHo+hE3JSehvSw5G0Y/HpuJgCpZhmZSnWRhZF3rCAT1cRxwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMZ0olWv0IvB5ecRmk8ncggHAeEOMB8GA1UdIwQY MBaAFFzzGvw2y2lVAH/pftSl4xhdInG6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFBNYV9EYkxhVlVBZi1sLTFLWGpHRjBpY2JvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80NThlYzMtMDQ1MS00ZTQxLTlhMzQt NzM2ZDEyODg4Y2E4LzEveG5TaVZhX1FpOEhsNXhHYVR5ZHlDQWNCNFE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy80NThlYzMtMDQ1MS00ZTQxLTlhMzQtNzM2ZDEyODg4Y2E4 LzEvWFBNYV9EYkxhVlVBZi1sLTFLWGpHRjBpY2JvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYZIMA0G CSqGSIb3DQEBCwUAA4IBAQCQtKGpjdEO0Ki/qXuekbRBGREenpGSoIi/dybEzjOD ZsXTrJ2l35wi1UMzCeIkqhzKRgqzkozT9HaL+uQbOJBGkjOsLwqs/m8i7enI0qbu XGT/bpf/s10EnqQIee/VYWO9RsZhQH98qYJpro6onnEzL77vAR40yuBKQOj3xeba 34EQiZ15Lc9GpLMb8nee/6jPAvi4djmf9OXGZJ02x5v69skL8++6gDrWuF7NbeBR KvRp+srJ0g0MY7KRX/nFqsgaJ1FRhlUdux6txctm3fwP/fcO2e6y5+sZauxcl9KI wvz3C3sNrciGbGBQ+K04AbwSCtFTyL1Y6tbTjd4nRZHO -----END CERTIFICATE-----Generated at Fri Jan 2 19:25:21 2026 by rpki-client