This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/XhX0UundDHqwP-biDxoUcbhg-3w.roa File: XhX0UundDHqwP-biDxoUcbhg-3w.roa (raw, json) Hash identifier: ZRre5kL6m65JPnFZp4L0MN+uwGP2oK49spRLXnnit7g= Subject key identifier: 5E:15:F4:52:E9:DD:0C:7A:B0:3F:E6:E2:0F:1A:14:71:B8:60:FB:7C Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Certificate serial: 019B7AC8CFACCC9231FFBB774575B13736C1 Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/XhX0UundDHqwP-biDxoUcbhg-3w.roa Signing time: Thu 01 Jan 2026 18:18:59 +0000 ROA not before: Thu 01 Jan 2026 18:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213267 IP address blocks: 87.246.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:cf:ac:cc:92:31:ff:bb:77:45:75:b1:37:36:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Validity Not Before: Jan 1 18:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e15f452e9dd0c7ab03fe6e20f1a1471b860fb7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:69:a9:cd:14:b1:7e:3a:88:a9:6f:f0:fc:f6: 4b:7c:5a:99:46:42:c8:08:0b:18:ff:2f:f9:bc:92: 71:be:ae:70:19:16:bb:23:4d:de:bd:13:d4:9a:83: 59:be:99:fa:b6:28:01:44:b8:a0:60:55:c1:2e:dd: 62:e5:4e:59:2e:9f:f5:79:31:1f:12:3a:b5:a9:d5: 2d:50:3b:e2:d5:cc:1e:6f:68:a8:6b:0b:d4:08:1a: 2f:32:7d:c3:3b:b3:4f:f9:b4:ee:31:75:52:5d:97: b4:3e:3e:87:c0:64:4f:b3:32:ff:10:75:16:a0:ee: 1f:8e:a6:ae:14:21:18:1b:97:9c:43:f9:3e:c3:ea: e3:0b:3c:d2:b9:50:7b:2b:29:0a:8f:fe:48:21:b0: 39:68:b9:1d:5f:a5:ed:0e:7b:78:a5:df:5a:0f:a6: f1:fc:e0:00:82:db:df:7b:4e:32:00:65:02:31:2d: bf:0e:8e:90:1f:33:b8:41:d8:d9:0b:84:be:5a:28: f0:1f:3e:70:1c:01:a6:0f:f2:55:83:29:fe:8a:ef: b9:00:5f:1e:4f:4c:60:9c:31:5c:ab:78:ef:79:d3: 37:e0:5b:95:b8:95:f9:b4:43:9f:f5:44:e8:4e:c7: 4e:1b:a9:69:d2:97:ce:38:74:84:4b:54:92:63:fe: 58:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:15:F4:52:E9:DD:0C:7A:B0:3F:E6:E2:0F:1A:14:71:B8:60:FB:7C X509v3 Authority Key Identifier: keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/XhX0UundDHqwP-biDxoUcbhg-3w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.246.160.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:49:4d:88:56:86:81:05:11:9a:93:40:cf:01:53:39:96:5c: 4a:62:47:87:35:b3:2e:58:8e:79:30:57:32:ae:0a:71:26:fa: 83:5d:ea:15:6b:d1:28:6b:fa:f1:43:dc:d4:a2:25:b8:3f:f8: 68:c3:70:40:69:45:34:ca:4b:60:84:28:3f:15:3c:3c:07:2e: 39:33:97:04:4d:bc:02:43:24:63:7d:24:f9:e1:e7:da:60:43: 4b:b9:c0:80:b5:53:57:18:c0:e6:7b:64:c5:58:fa:da:46:6d: 5b:9b:09:97:b1:80:a7:5f:c4:e5:d6:eb:c3:53:3c:0a:45:43: ad:8c:19:d3:a2:e5:13:64:90:fe:9e:28:7d:d9:ee:ce:4d:24: 2c:40:3a:ba:e8:c2:78:9c:66:da:3b:d3:0c:5e:ea:f5:44:93: e3:58:d3:b7:74:9e:ce:fa:f4:5b:d2:d4:2e:50:7c:4f:63:26: 23:d2:3a:ba:74:d2:3f:8f:8b:78:55:61:b4:d0:05:76:01:ac: 5e:cc:09:d1:7c:58:47:12:ed:4e:1d:ee:24:c6:ad:0f:d3:99: 19:75:8b:3f:9b:b5:33:aa:c5:cc:73:a8:ad:12:0b:07:23:0b: 77:7e:53:ea:93:42:98:b2:67:40:70:99:ab:4f:b7:9b:67:2f: 32:4c:24:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yM+szJIx/7t3RXWxNzbBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl NjE0OTEwHhcNMjYwMTAxMTgxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTE1ZjQ1MmU5ZGQwYzdhYjAzZmU2ZTIwZjFhMTQ3MWI4NjBmYjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GmpzRSxfjqIqW/w/PZLfFqZRkLI CAsY/y/5vJJxvq5wGRa7I03evRPUmoNZvpn6tigBRLigYFXBLt1i5U5ZLp/1eTEf Ejq1qdUtUDvi1cweb2ioawvUCBovMn3DO7NP+bTuMXVSXZe0Pj6HwGRPszL/EHUW oO4fjqauFCEYG5ecQ/k+w+rjCzzSuVB7KykKj/5IIbA5aLkdX6XtDnt4pd9aD6bx /OAAgtvfe04yAGUCMS2/Do6QHzO4QdjZC4S+WijwHz5wHAGmD/JVgyn+iu+5AF8e T0xgnDFcq3jvedM34FuVuJX5tEOf9UToTsdOG6lp0pfOOHSES1SSY/5YcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF4V9FLp3Qx6sD/m4g8aFHG4YPt8MB8GA1UdIwQY MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt ZDRlZTFkMzg5ZTBkLzEvWGhYMFV1bmRESHF3UC1iaUR4b1VjYmhnLTN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMtZDRlZTFkMzg5ZTBk LzEvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/agMA0G CSqGSIb3DQEBCwUAA4IBAQA/SU2IVoaBBRGak0DPAVM5llxKYkeHNbMuWI55MFcy rgpxJvqDXeoVa9Eoa/rxQ9zUoiW4P/how3BAaUU0yktghCg/FTw8By45M5cETbwC QyRjfST54efaYENLucCAtVNXGMDme2TFWPraRm1bmwmXsYCnX8Tl1uvDUzwKRUOt jBnTouUTZJD+nih92e7OTSQsQDq66MJ4nGbaO9MMXur1RJPjWNO3dJ7O+vRb0tQu UHxPYyYj0jq6dNI/j4t4VWG00AV2AaxezAnRfFhHEu1OHe4kxq0P05kZdYs/m7Uz qsXMc6itEgsHIwt3flPqk0KYsmdAcJmrT7ebZy8yTCTX -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:04 2026 by rpki-client