This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/_XOkat_tVbZSyUJD4uuRenyP92k.roa File: _XOkat_tVbZSyUJD4uuRenyP92k.roa (raw, json) Hash identifier: MO61vUIPE4xYG1HoXyKAbuzO/+H56vWiFpAKuIhdAOU= Subject key identifier: FD:73:A4:6A:DF:ED:55:B6:52:C9:42:43:E2:EB:91:7A:7C:8F:F7:69 Certificate issuer: /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Certificate serial: 019B79ECB6EB1C2D7A3F3F74A38199BAEF16 Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/_XOkat_tVbZSyUJD4uuRenyP92k.roa Signing time: Thu 01 Jan 2026 14:18:34 +0000 ROA not before: Thu 01 Jan 2026 14:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43561 IP address blocks: 84.54.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:b6:eb:1c:2d:7a:3f:3f:74:a3:81:99:ba:ef:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Validity Not Before: Jan 1 14:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd73a46adfed55b652c94243e2eb917a7c8ff769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1c:94:3a:3d:38:a3:35:29:84:89:2e:c7:94: 71:f9:3e:36:4f:45:ba:63:47:dd:ef:ff:1f:e1:3b: 57:ea:5f:3f:2f:d9:c4:19:0a:eb:ca:24:25:ff:4e: e8:43:2a:e9:cd:9d:c0:b9:34:73:fa:2d:fe:82:d9: 2a:10:b8:f6:7d:3d:c7:94:47:7d:33:49:bf:c8:82: 63:ba:f5:80:4e:3f:d6:ba:37:c1:d0:7c:b8:4a:10: 4e:d8:be:cd:0a:97:97:68:47:db:91:fa:14:c8:05: 8f:bb:da:2a:8f:0f:49:09:02:e9:65:b5:d7:f3:55: f0:05:8a:b6:b7:e2:0e:c6:1a:ef:94:27:b7:4f:71: 7c:75:06:72:86:1e:cd:95:35:8c:d7:a1:e5:64:7e: f0:c6:b7:2d:fb:bf:d4:3b:95:3d:15:1e:c9:7d:b1: 16:1a:33:4d:a3:4d:a4:3a:63:ff:ed:40:6c:0f:07: 5d:30:0d:94:2e:0f:1e:bf:12:04:bb:38:07:24:9a: 2c:c4:76:be:7a:e6:35:a5:fb:99:24:d3:69:32:16: 7a:88:97:41:a7:1c:1b:4e:ce:2b:a6:93:4c:4e:b9: 6c:a6:0d:45:94:a9:91:2a:5d:95:fd:dc:f6:2f:35: a9:c4:68:aa:1d:47:46:c1:3a:bb:5e:94:a1:1a:e4: 1f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:73:A4:6A:DF:ED:55:B6:52:C9:42:43:E2:EB:91:7A:7C:8F:F7:69 X509v3 Authority Key Identifier: keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/_XOkat_tVbZSyUJD4uuRenyP92k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.54.140.0/24 Signature Algorithm: sha256WithRSAEncryption 55:6a:ef:da:58:c0:51:e0:21:ee:7f:35:f1:d8:1d:a9:77:75: 4a:87:4d:52:a1:21:c2:d6:25:ba:07:89:67:5c:9c:3a:f8:c9: ff:65:84:a0:46:a0:83:e4:e3:87:2a:0b:f3:66:0f:9f:95:65: 22:35:d9:1a:b2:e8:b1:ca:e5:6d:5b:fb:95:a1:45:fd:fd:c0: 89:20:1b:ba:2c:9b:24:d8:ad:ff:23:93:bc:79:14:83:50:99: 5f:48:4e:ce:ca:ae:7b:7a:f4:c2:3b:81:fa:ef:34:2f:5d:f1: f7:0f:0b:c0:bf:ec:7e:ad:28:fc:9f:ba:2d:02:d4:51:ef:ac: ee:f2:c5:d1:91:8c:16:b7:9b:7f:d9:ac:cd:cf:c5:d0:40:09: 56:ef:b6:6d:fd:7a:a9:28:e3:88:51:40:c9:11:8f:88:c1:e1: ce:b3:ed:75:43:bf:be:23:06:fc:6f:6d:0d:9b:e8:df:79:10: 20:df:0c:c1:fb:dc:ff:b3:1a:2a:11:5f:af:8e:dc:ce:79:b3: e5:36:91:19:80:26:ff:bd:dc:4f:0d:b7:a0:ff:1b:a6:b1:98: a6:a1:10:20:16:cc:d0:cf:af:5d:46:4a:d1:c9:7c:c4:15:2b: 9b:26:b8:1e:90:02:b9:a7:23:57:d9:40:bc:fc:f0:a5:32:df: ad:12:cf:55 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57LbrHC16Pz90o4GZuu8WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkODhlNGY3YTMwMjQxMmMzMTZhM2JiNTk5Y2RkMjA0MmI1 ZmY0ODUwHhcNMjYwMTAxMTQxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDczYTQ2YWRmZWQ1NWI2NTJjOTQyNDNlMmViOTE3YTdjOGZmNzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ByUOj04ozUphIkux5Rx+T42T0W6 Y0fd7/8f4TtX6l8/L9nEGQrryiQl/07oQyrpzZ3AuTRz+i3+gtkqELj2fT3HlEd9 M0m/yIJjuvWATj/WujfB0Hy4ShBO2L7NCpeXaEfbkfoUyAWPu9oqjw9JCQLpZbXX 81XwBYq2t+IOxhrvlCe3T3F8dQZyhh7NlTWM16HlZH7wxrct+7/UO5U9FR7JfbEW GjNNo02kOmP/7UBsDwddMA2ULg8evxIEuzgHJJosxHa+euY1pfuZJNNpMhZ6iJdB pxwbTs4rppNMTrlspg1FlKmRKl2V/dz2LzWpxGiqHUdGwTq7XpShGuQfLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP1zpGrf7VW2UslCQ+LrkXp8j/dpMB8GA1UdIwQY MBaAFF2I5PejAkEsMWo7tZnN0gQrX/SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGIt NTdlMWQ1YjcyYjJkLzEvX1hPa2F0X3RWYlpTeVVKRDR1dVJlbnlQOTJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGItNTdlMWQ1YjcyYjJk LzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVDaMMA0G CSqGSIb3DQEBCwUAA4IBAQBVau/aWMBR4CHufzXx2B2pd3VKh01SoSHC1iW6B4ln XJw6+Mn/ZYSgRqCD5OOHKgvzZg+flWUiNdkasuixyuVtW/uVoUX9/cCJIBu6LJsk 2K3/I5O8eRSDUJlfSE7Oyq57evTCO4H67zQvXfH3DwvAv+x+rSj8n7otAtRR76zu 8sXRkYwWt5t/2azNz8XQQAlW77Zt/XqpKOOIUUDJEY+IweHOs+11Q7++Iwb8b20N m+jfeRAg3wzB+9z/sxoqEV+vjtzOebPlNpEZgCb/vdxPDbeg/xumsZimoRAgFszQ z69dRkrRyXzEFSubJrgekAK5pyNX2UC8/PClMt+tEs9V -----END CERTIFICATE-----Generated at Mon Jan 26 10:23:22 2026 by rpki-client