This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/xd3jG3HbjtG0MuzuTRaYxtTyNcw.roa File: xd3jG3HbjtG0MuzuTRaYxtTyNcw.roa (raw, json) Hash identifier: zkFlgvRz6cw1Fnc2wE2R8kAE+e+wpIfkz9Qvftstx7g= Subject key identifier: C5:DD:E3:1B:71:DB:8E:D1:B4:32:EC:EE:4D:16:98:C6:D4:F2:35:CC Certificate issuer: /CN=1609c24dae3eeffcbefa37a688664ac93300ef58 Certificate serial: 019B7910405F2A4E33C7A88DE7397C4BBB42 Authority key identifier: 16:09:C2:4D:AE:3E:EF:FC:BE:FA:37:A6:88:66:4A:C9:33:00:EF:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/xd3jG3HbjtG0MuzuTRaYxtTyNcw.roa Signing time: Thu 01 Jan 2026 10:17:46 +0000 ROA not before: Thu 01 Jan 2026 10:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207233 IP address blocks: 45.84.124.0/22 maxlen: 24 185.162.60.0/22 maxlen: 24 2a0a:4000::/29 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:40:5f:2a:4e:33:c7:a8:8d:e7:39:7c:4b:bb:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1609c24dae3eeffcbefa37a688664ac93300ef58 Validity Not Before: Jan 1 10:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5dde31b71db8ed1b432ecee4d1698c6d4f235cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d5:65:bc:24:35:7a:9a:03:26:20:ec:85:49: 7c:83:ab:84:82:44:5b:f7:3a:e9:cb:b9:27:c4:4b: 15:95:80:54:10:6e:6b:aa:c2:c8:23:3e:5f:47:77: 4e:06:19:7b:3c:3e:fd:c1:44:79:26:e2:aa:46:e3: 54:3f:6f:5f:38:4b:17:3c:19:a3:73:71:2f:09:6e: 74:a6:99:c2:10:c0:30:ff:dd:44:68:77:36:37:36: 7e:68:49:69:38:38:d6:fe:34:96:6a:fe:17:58:93: 1c:e3:b3:80:e5:87:99:23:20:d2:6a:07:72:d7:d8: 20:33:ea:71:88:1c:09:a1:63:ad:92:87:23:3c:e6: c9:74:a7:36:d1:b5:25:48:14:ea:a4:eb:8b:01:9d: c0:b1:b9:4a:3b:f5:7b:63:d5:de:3b:58:d0:00:d4: af:f9:b5:63:19:6b:08:6b:70:4d:91:0f:8f:ca:38: 31:4a:68:fb:ba:af:ee:bb:aa:86:bd:ca:07:55:c0: 96:7a:25:63:29:41:64:ed:06:be:77:5b:02:d8:29: 14:28:4b:79:84:f2:17:29:5b:4e:4d:cd:d7:bb:03: 64:4f:94:0c:bd:d4:f9:74:5c:eb:80:aa:25:30:01: f6:50:dd:67:44:19:60:72:24:ef:6b:f6:e7:d6:03: eb:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:DD:E3:1B:71:DB:8E:D1:B4:32:EC:EE:4D:16:98:C6:D4:F2:35:CC X509v3 Authority Key Identifier: keyid:16:09:C2:4D:AE:3E:EF:FC:BE:FA:37:A6:88:66:4A:C9:33:00:EF:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/xd3jG3HbjtG0MuzuTRaYxtTyNcw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.84.124.0/22 185.162.60.0/22 IPv6: 2a0a:4000::/29 Signature Algorithm: sha256WithRSAEncryption 6e:2a:50:c7:79:ef:4f:db:17:2a:15:78:1d:e8:e0:0d:6b:71: 5b:53:91:5d:04:bf:8d:0a:34:11:82:1e:6c:6f:7d:bb:2a:75: 2a:07:63:38:ba:e9:b6:74:a2:56:b9:da:cf:39:e6:fa:bd:36: c1:c2:50:ce:e2:a0:e0:2c:87:f9:f7:ce:f5:68:55:e9:4f:86: 0c:77:3c:2e:ba:93:33:c4:71:7f:c7:31:65:1b:be:9c:f7:dd: ee:fa:c3:6c:04:ef:15:e1:3c:2d:1c:a0:c9:4e:77:31:84:0a: c5:05:54:97:4c:98:d2:0f:26:aa:71:93:e0:5d:f0:e1:f9:fc: 39:9d:c4:c8:c3:74:37:64:9f:26:0f:7e:1d:e5:fc:ed:f4:ea: 68:71:b3:01:56:8d:42:2a:6b:cb:c0:45:1e:01:ad:87:c3:1b: cf:34:ea:1e:47:d6:2d:ff:61:8c:c0:46:14:9f:97:16:0f:d9: d7:c3:43:56:ba:35:86:8e:bf:c3:de:ef:fb:22:2d:55:b5:be: 7a:64:ae:8f:af:f6:15:2f:b3:88:a2:98:d9:b7:05:e5:bb:35: 9b:81:86:44:b0:38:98:43:69:06:92:0d:30:3b:2b:b2:fa:0e: e6:f4:36:ff:20:11:1f:e4:dc:ba:74:36:78:13:00:1b:7c:03: a9:3a:1b:65 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5EEBfKk4zx6iN5zl8S7tCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MDljMjRkYWUzZWVmZmNiZWZhMzdhNjg4NjY0YWM5MzMw MGVmNTgwHhcNMjYwMTAxMTAxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNWRkZTMxYjcxZGI4ZWQxYjQzMmVjZWU0ZDE2OThjNmQ0ZjIzNWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudVlvCQ1epoDJiDshUl8g6uEgkRb 9zrpy7knxEsVlYBUEG5rqsLIIz5fR3dOBhl7PD79wUR5JuKqRuNUP29fOEsXPBmj c3EvCW50ppnCEMAw/91EaHc2NzZ+aElpODjW/jSWav4XWJMc47OA5YeZIyDSagdy 19ggM+pxiBwJoWOtkocjPObJdKc20bUlSBTqpOuLAZ3AsblKO/V7Y9XeO1jQANSv +bVjGWsIa3BNkQ+PyjgxSmj7uq/uu6qGvcoHVcCWeiVjKUFk7Qa+d1sC2CkUKEt5 hPIXKVtOTc3XuwNkT5QMvdT5dFzrgKolMAH2UN1nRBlgciTva/bn1gPrtQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFMXd4xtx247RtDLs7k0WmMbU8jXMMB8GA1UdIwQY MBaAFBYJwk2uPu/8vvo3pohmSskzAO9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmduQ1RhNC03X3ktLWplbWlHWkt5VE1BNzFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNWYyYTQtYWRjYS00ZmM0LTg3YjIt YmY0Yjc1ZTIwMGE3LzEveGQzakczSGJqdEcwTXV6dVRSYVl4dFR5TmN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9jNWYyYTQtYWRjYS00ZmM0LTg3YjItYmY0Yjc1ZTIwMGE3 LzEvRmduQ1RhNC03X3ktLWplbWlHWkt5VE1BNzFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLVR8AwQC uaI8MA0EAgACMAcDBQMqCkAAMA0GCSqGSIb3DQEBCwUAA4IBAQBuKlDHee9P2xcq FXgd6OANa3FbU5FdBL+NCjQRgh5sb327KnUqB2M4uum2dKJWudrPOeb6vTbBwlDO 4qDgLIf59871aFXpT4YMdzwuupMzxHF/xzFlG76c993u+sNsBO8V4TwtHKDJTncx hArFBVSXTJjSDyaqcZPgXfDh+fw5ncTIw3Q3ZJ8mD34d5fzt9OpocbMBVo1CKmvL wEUeAa2HwxvPNOoeR9Yt/2GMwEYUn5cWD9nXw0NWujWGjr/D3u/7Ii1Vtb56ZK6P r/YVL7OIopjZtwXluzWbgYZEsDiYQ2kGkg0wOyuy+g7m9Db/IBEf5Ny6dDZ4EwAb fAOpOhtl -----END CERTIFICATE-----Generated at Mon Feb 9 23:45:09 2026 by rpki-client