This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/xmUAUtjjKo_df9Wg6bpHQhUKjGA.roa File: xmUAUtjjKo_df9Wg6bpHQhUKjGA.roa (raw, json) Hash identifier: xGARvg6pEgnNWLquSjw9VUYfG5YGdSpILp+G0uSRXfE= Subject key identifier: C6:65:00:52:D8:E3:2A:8F:DD:7F:D5:A0:E9:BA:47:42:15:0A:8C:60 Certificate issuer: /CN=b85b0c8a75893a4f8e1ef0d9a4d41478d8b33278 Certificate serial: 019B7CEDA6B9D943F9834D5CAE58DF31822E Authority key identifier: B8:5B:0C:8A:75:89:3A:4F:8E:1E:F0:D9:A4:D4:14:78:D8:B3:32:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFsMinWJOk-OHvDZpNQUeNizMng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/xmUAUtjjKo_df9Wg6bpHQhUKjGA.roa Signing time: Fri 02 Jan 2026 04:18:28 +0000 ROA not before: Fri 02 Jan 2026 04:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62033 IP address blocks: 45.132.34.0/24 maxlen: 24 185.127.129.0/24 maxlen: 24 2a10:5d80:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft rsync://rpki.ripe.net/repository/DEFAULT/uFsMinWJOk-OHvDZpNQUeNizMng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:a6:b9:d9:43:f9:83:4d:5c:ae:58:df:31:82:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b85b0c8a75893a4f8e1ef0d9a4d41478d8b33278 Validity Not Before: Jan 2 04:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6650052d8e32a8fdd7fd5a0e9ba4742150a8c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7c:43:3f:4d:77:90:04:69:1a:dc:05:f5:40: ed:ad:6e:ac:01:75:55:aa:d5:11:e5:b1:a6:d2:8e: 04:ac:f8:bd:92:1b:68:d0:e2:0d:e5:8b:32:df:b7: e0:94:c3:f1:bf:d0:77:05:86:5d:68:2b:d9:b6:f3: 48:c4:e4:b7:6a:f4:cf:28:2c:6e:07:7b:be:7c:98: b8:7f:b9:12:6b:eb:ee:ca:1f:df:28:af:80:48:06: 08:e6:6f:78:95:a3:ae:2e:d4:fb:e2:fc:64:7e:31: 89:71:d3:9b:12:02:f1:29:3e:4a:a8:45:17:c6:a3: 1d:a3:f3:63:27:e6:a2:fd:91:0c:07:05:0c:5c:82: 35:d0:8f:cb:9c:b4:b6:a2:ac:4c:36:82:62:d9:42: ba:f6:13:58:46:64:b0:4a:04:b6:01:83:de:89:48: 10:e9:b1:0a:5b:e0:be:5f:e2:60:cb:32:0b:03:34: 43:b7:4c:ef:57:10:35:4d:13:34:9d:90:af:39:3b: 1e:10:85:c7:91:bc:73:d6:16:f1:5a:bc:35:99:af: 56:7d:dd:1f:aa:8a:fa:d7:7e:64:a4:d4:dc:87:7a: 9c:31:59:1f:ee:76:1c:dd:1c:58:c2:a7:a6:67:29: 14:3f:ad:90:37:f9:6d:78:3c:24:1f:1b:b5:f5:b2: 44:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:65:00:52:D8:E3:2A:8F:DD:7F:D5:A0:E9:BA:47:42:15:0A:8C:60 X509v3 Authority Key Identifier: keyid:B8:5B:0C:8A:75:89:3A:4F:8E:1E:F0:D9:A4:D4:14:78:D8:B3:32:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFsMinWJOk-OHvDZpNQUeNizMng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/xmUAUtjjKo_df9Wg6bpHQhUKjGA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.132.34.0/24 185.127.129.0/24 IPv6: 2a10:5d80:1::/48 Signature Algorithm: sha256WithRSAEncryption 28:d5:05:db:7e:bf:75:79:95:6e:a2:bf:c5:9b:bc:3e:05:1b: 8f:ba:8c:88:26:bb:a0:c1:df:39:28:06:7d:d9:0e:2e:f8:ea: ba:de:2b:8e:7f:94:15:5b:df:19:f9:4e:60:4e:7d:9a:70:1a: fb:1f:b6:63:50:fa:95:18:d1:9d:a7:7e:db:48:ef:d6:d1:53: a9:24:a5:24:2d:29:cc:76:26:fb:4d:66:1b:b7:32:77:2e:cb: 5f:95:9d:17:5e:82:8d:d0:13:4b:50:40:85:c2:f5:64:d0:b2: bf:2d:b9:8c:91:94:cd:7f:da:71:75:f2:04:49:06:ed:f8:4b: 8c:41:23:f5:5a:ff:26:eb:48:7b:fe:c8:94:ee:66:ea:a7:85: 05:29:89:c9:f5:76:0a:c9:26:7a:16:ca:04:cf:dc:13:de:86: 83:be:04:5b:00:4c:48:38:ce:c5:39:09:41:43:43:bf:de:c9: 64:60:f7:b0:08:a1:6e:f5:f5:ce:cd:06:83:68:64:6b:a9:52: 11:b2:99:c2:42:61:45:de:cf:ec:8e:e7:be:ee:90:5d:b1:63: 79:74:bf:c9:0a:b7:54:49:22:5f:cf:2b:70:1a:84:69:35:8f: fd:b3:d9:97:d7:d9:17:1a:97:25:99:22:c0:8e:11:53:32:32: 6e:28:3e:0e -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt87aa52UP5g01crljfMYIuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NWIwYzhhNzU4OTNhNGY4ZTFlZjBkOWE0ZDQxNDc4ZDhi MzMyNzgwHhcNMjYwMTAyMDQxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjY1MDA1MmQ4ZTMyYThmZGQ3ZmQ1YTBlOWJhNDc0MjE1MGE4YzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHxDP013kARpGtwF9UDtrW6sAXVV qtUR5bGm0o4ErPi9khto0OIN5Ysy37fglMPxv9B3BYZdaCvZtvNIxOS3avTPKCxu B3u+fJi4f7kSa+vuyh/fKK+ASAYI5m94laOuLtT74vxkfjGJcdObEgLxKT5KqEUX xqMdo/NjJ+ai/ZEMBwUMXII10I/LnLS2oqxMNoJi2UK69hNYRmSwSgS2AYPeiUgQ 6bEKW+C+X+JgyzILAzRDt0zvVxA1TRM0nZCvOTseEIXHkbxz1hbxWrw1ma9Wfd0f qor6135kpNTch3qcMVkf7nYc3RxYwqemZykUP62QN/lteDwkHxu19bJEcQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFMZlAFLY4yqP3X/VoOm6R0IVCoxgMB8GA1UdIwQY MBaAFLhbDIp1iTpPjh7w2aTUFHjYszJ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUZzTWluV0pPay1PSHZEWnBOUVVlTml6TW5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC84ODE5ZTItYzRlMy00YmNlLWE2MWMt MzA1ZDQxZDUzYTY1LzEveG1VQVV0ampLb19kZjlXZzZicEhRaFVLakdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC84ODE5ZTItYzRlMy00YmNlLWE2MWMtMzA1ZDQxZDUzYTY1 LzEvdUZzTWluV0pPay1PSHZEWnBOUVVlTml6TW5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQALYQiAwQA uX+BMA8EAgACMAkDBwAqEF2AAAEwDQYJKoZIhvcNAQELBQADggEBACjVBdt+v3V5 lW6iv8WbvD4FG4+6jIgmu6DB3zkoBn3ZDi746rreK45/lBVb3xn5TmBOfZpwGvsf tmNQ+pUY0Z2nfttI79bRU6kkpSQtKcx2JvtNZhu3Mncuy1+VnRdego3QE0tQQIXC 9WTQsr8tuYyRlM1/2nF18gRJBu34S4xBI/Va/ybrSHv+yJTuZuqnhQUpicn1dgrJ JnoWygTP3BPehoO+BFsATEg4zsU5CUFDQ7/eyWRg97AIoW719c7NBoNoZGupUhGy mcJCYUXez+yO577ukF2xY3l0v8kKt1RJIl/PK3AahGk1j/2z2ZfX2RcalyWZIsCO EVMyMm4oPg4= -----END CERTIFICATE-----Generated at Tue Jan 27 20:48:44 2026 by rpki-client