This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/1XQzvX9FkdWLSvNvPLNASjdlfjg.roa File: 1XQzvX9FkdWLSvNvPLNASjdlfjg.roa (raw, json) Hash identifier: il0n2ulST0YZKjCXYb73GOdLPMRPlfJKioCfJqB2JSY= Subject key identifier: D5:74:33:BD:7F:45:91:D5:8B:4A:F3:6F:3C:B3:40:4A:37:65:7E:38 Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D4B2BAF56A7ED51D01CA2C5CB92A6 Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/1XQzvX9FkdWLSvNvPLNASjdlfjg.roa Signing time: Fri 02 Jan 2026 06:20:24 +0000 ROA not before: Fri 02 Jan 2026 06:20:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 142299 IP address blocks: 45.141.26.0/23 maxlen: 24 89.38.101.0/24 maxlen: 24 185.241.210.0/24 maxlen: 24 188.212.158.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:4b:2b:af:56:a7:ed:51:d0:1c:a2:c5:cb:92:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d57433bd7f4591d58b4af36f3cb3404a37657e38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:93:4d:25:66:17:b9:a9:f6:65:de:b7:af:55: 55:94:be:7e:e2:bc:f5:df:c2:8a:9f:8d:6c:a6:54: 0e:5d:1d:c4:44:00:e0:ee:58:69:d8:28:93:91:0a: 70:7b:15:af:3b:c8:d0:36:b1:bd:14:2e:52:82:cb: 9b:6b:c2:c4:be:f6:d2:88:5f:d0:48:9f:09:99:91: ee:4d:f3:a5:b0:ef:a2:2c:b1:ae:d7:a8:40:af:03: d4:6b:ee:73:9d:34:4e:4b:1a:64:75:6d:8f:16:48: c7:66:15:cb:27:8e:08:9e:60:bb:12:fe:4d:57:a8: 3f:d7:fc:95:56:95:dd:94:08:ad:6f:db:68:d8:44: f5:fd:ef:c7:3c:b7:38:88:11:df:b4:a7:c7:0f:ea: 07:db:f6:dc:72:d2:d6:f6:85:0c:44:2a:9c:07:55: 52:b1:cf:02:c6:36:9a:da:46:fd:a1:75:3c:c8:df: 94:75:0f:9b:00:ed:d6:2e:4f:0a:fe:06:ad:bb:c3: 58:8b:25:14:69:09:93:cc:8b:48:47:aa:45:65:28: b7:c7:05:70:a1:a5:8f:e5:84:35:9c:c2:64:29:88: 5f:3d:74:c1:00:73:86:41:98:5b:50:f4:cb:28:c8: ea:2d:48:6e:92:8b:4f:af:de:51:e6:38:5b:d2:c7: c1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:74:33:BD:7F:45:91:D5:8B:4A:F3:6F:3C:B3:40:4A:37:65:7E:38 X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/1XQzvX9FkdWLSvNvPLNASjdlfjg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.141.26.0/23 89.38.101.0/24 185.241.210.0/24 188.212.158.0/23 Signature Algorithm: sha256WithRSAEncryption 00:42:ef:65:2a:f7:8f:58:d7:24:79:38:66:72:84:e8:f4:70: c0:77:f0:e1:15:c7:09:53:13:c6:b9:7c:9b:e6:df:66:c8:ff: 23:b9:e2:63:3a:f8:d4:27:a3:60:72:40:e7:d1:1b:52:e0:79: 8b:5f:bf:b3:ff:bc:3f:99:ea:14:36:e9:c0:6d:5d:8b:2f:47: 52:a3:7e:53:27:db:e6:65:3d:8b:c9:0b:34:b1:10:d4:a2:be: 0e:4d:82:1b:de:1f:25:ff:36:3d:a9:db:71:c8:aa:94:2f:d6: bf:d2:53:f7:8c:16:cf:be:71:48:00:13:41:e9:e3:af:2b:e7: 94:26:96:49:db:c6:fb:d5:91:ca:52:0d:77:74:97:a9:c4:f0: 96:16:f2:b1:02:be:84:36:87:b1:ce:51:61:66:ab:40:83:81: 6f:4c:0b:66:ee:8e:3f:2a:3b:44:ab:bd:0e:53:a4:ac:b7:6b: 68:39:b1:14:c2:33:44:e6:82:c6:ce:9d:43:b0:98:db:4d:da: 8e:59:6a:ac:b2:ae:a2:07:a4:67:9b:55:29:6e:d3:89:9c:23: 0b:ef:50:ca:8e:5f:9e:f1:e4:bf:6a:f7:ad:51:67:f0:27:93: 01:89:d5:a3:8d:87:51:c2:d6:de:24:d1:72:aa:c2:77:a9:ef: 47:6d:a3:a9 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt9XUsrr1an7VHQHKLFy5KmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTc0MzNiZDdmNDU5MWQ1OGI0YWYzNmYzY2IzNDA0YTM3NjU3ZTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pNNJWYXuan2Zd63r1VVlL5+4rz1 38KKn41splQOXR3ERADg7lhp2CiTkQpwexWvO8jQNrG9FC5Sgsuba8LEvvbSiF/Q SJ8JmZHuTfOlsO+iLLGu16hArwPUa+5znTROSxpkdW2PFkjHZhXLJ44InmC7Ev5N V6g/1/yVVpXdlAitb9to2ET1/e/HPLc4iBHftKfHD+oH2/bcctLW9oUMRCqcB1VS sc8Cxjaa2kb9oXU8yN+UdQ+bAO3WLk8K/gatu8NYiyUUaQmTzItIR6pFZSi3xwVw oaWP5YQ1nMJkKYhfPXTBAHOGQZhbUPTLKMjqLUhukotPr95R5jhb0sfBeQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFNV0M71/RZHVi0rzbzyzQEo3ZX44MB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvMVhRenZYOUZrZFdMU3ZOdlBMTkFTamRsZmpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBLY0aAwQA WSZlAwQAufHSAwQBvNSeMA0GCSqGSIb3DQEBCwUAA4IBAQAAQu9lKvePWNckeThm coTo9HDAd/DhFccJUxPGuXyb5t9myP8jueJjOvjUJ6NgckDn0RtS4HmLX7+z/7w/ meoUNunAbV2LL0dSo35TJ9vmZT2LyQs0sRDUor4OTYIb3h8l/zY9qdtxyKqUL9a/ 0lP3jBbPvnFIABNB6eOvK+eUJpZJ28b71ZHKUg13dJepxPCWFvKxAr6ENoexzlFh ZqtAg4FvTAtm7o4/KjtEq70OU6Sst2toObEUwjNE5oLGzp1DsJjbTdqOWWqssq6i B6Rnm1UpbtOJnCML71DKjl+e8eS/avetUWfwJ5MBidWjjYdRwtbeJNFyqsJ3qe9H baOp -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:20 2026 by rpki-client