This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/xjJ15D14LS-olVuJZ7jEwkrPC0k.roa File: xjJ15D14LS-olVuJZ7jEwkrPC0k.roa (raw, json) Hash identifier: x/bc5dXq+6Lyq8Lw/fVl1pcZIUuQ/Nrr00RhE1xkTLM= Subject key identifier: C6:32:75:E4:3D:78:2D:2F:A8:95:5B:89:67:B8:C4:C2:4A:CF:0B:49 Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d Certificate serial: 019B7C7FDF340B4A40260763C3720FD53B6F Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/xjJ15D14LS-olVuJZ7jEwkrPC0k.roa Signing time: Fri 02 Jan 2026 02:18:33 +0000 ROA not before: Fri 02 Jan 2026 02:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214766 IP address blocks: 141.98.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 12:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:df:34:0b:4a:40:26:07:63:c3:72:0f:d5:3b:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d Validity Not Before: Jan 2 02:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c63275e43d782d2fa8955b8967b8c4c24acf0b49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:99:ce:54:5f:17:e2:e1:5c:ea:92:f8:28:81: b0:c6:ec:ba:eb:12:db:36:7d:21:da:c2:ed:e9:09: c4:6c:8f:89:fe:b9:94:bd:32:6f:a2:90:6b:60:9c: 34:91:26:75:ba:e6:eb:a6:39:e8:43:9d:ef:f2:70: 80:fc:a1:85:b0:ca:3b:ca:80:48:1a:4d:0d:f8:f9: fa:24:04:c8:ec:bc:f2:1a:87:26:64:22:cd:53:ee: 0c:20:1f:8f:5f:7e:0d:8d:94:7d:31:e8:ca:f9:a5: ea:bb:28:cf:da:17:f0:c8:32:b4:a8:f2:37:ab:ed: 87:12:37:5e:38:d7:6d:08:b4:29:66:86:7f:ab:1b: 62:f9:50:d7:9a:24:a1:17:60:d2:29:98:a6:e5:2f: 90:cb:74:52:a0:df:e1:42:8e:f9:eb:41:c3:84:56: 54:68:53:83:ad:1f:29:a9:6e:08:d3:24:58:3c:4f: 61:8b:69:db:74:58:ca:40:3f:f1:8b:63:fd:f7:60: 20:f5:4b:dd:20:0a:c4:6f:cf:a0:61:1b:ae:37:1e: 4a:49:b7:be:47:cc:0c:bf:67:37:7e:5c:f7:d3:5b: 05:e0:34:d7:ca:24:ce:85:e6:79:a4:3a:ab:f4:4c: 03:06:39:95:0b:17:a2:60:84:1c:7c:cd:4d:20:c8: c1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:32:75:E4:3D:78:2D:2F:A8:95:5B:89:67:B8:C4:C2:4A:CF:0B:49 X509v3 Authority Key Identifier: keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/xjJ15D14LS-olVuJZ7jEwkrPC0k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.98.137.0/24 Signature Algorithm: sha256WithRSAEncryption 93:43:41:e0:4c:84:9c:71:a4:39:a2:10:6f:71:39:f3:25:f2: 1c:f6:84:61:0d:36:42:6b:27:58:ce:e7:3b:be:7e:bc:8d:dc: 9a:5f:3a:e8:1d:6f:41:d7:ca:13:c8:53:df:7e:73:ec:5e:16: e7:f6:73:f2:5d:27:89:59:10:f2:1a:78:e6:8c:7f:4a:b6:3e: aa:ff:27:bd:3f:cc:27:45:30:4f:9f:1a:29:ed:c8:bc:b1:ca: 63:82:4f:34:cd:d6:9c:92:d1:8a:3e:83:9b:55:38:8a:77:08: e6:65:90:8a:63:16:e6:0b:9f:47:eb:93:64:55:d8:f0:f3:df: 2c:5e:5a:b7:b1:71:aa:d8:a3:d3:5f:42:87:65:7b:c3:b5:1e: 8c:31:c5:d5:d9:be:f3:0b:69:24:d5:46:95:44:4a:b0:81:13: 84:2b:c8:b6:1d:f0:be:29:17:5f:43:15:2f:72:03:94:14:31: 6d:e5:ff:09:c8:25:73:fa:2c:ed:18:35:56:f8:00:a1:ca:0d: f6:55:60:d7:c4:f7:2d:90:87:45:11:0b:1b:6c:32:bb:06:63: 58:e7:95:7e:c0:37:22:04:4d:60:b4:d1:0c:17:bf:81:15:16: d3:57:a4:92:1c:4a:ec:ec:f7:f9:b2:10:84:c5:1e:f9:2a:cb: 2c:06:cb:50 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f980C0pAJgdjw3IP1TtvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGViMjA0ZjM1ODAwNDc4ODIyNGUyZmIxOGU0ZDVlNzRi ZWJmOGQwHhcNMjYwMTAyMDIxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjMyNzVlNDNkNzgyZDJmYTg5NTViODk2N2I4YzRjMjRhY2YwYjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5nOVF8X4uFc6pL4KIGwxuy66xLb Nn0h2sLt6QnEbI+J/rmUvTJvopBrYJw0kSZ1uubrpjnoQ53v8nCA/KGFsMo7yoBI Gk0N+Pn6JATI7LzyGocmZCLNU+4MIB+PX34NjZR9MejK+aXquyjP2hfwyDK0qPI3 q+2HEjdeONdtCLQpZoZ/qxti+VDXmiShF2DSKZim5S+Qy3RSoN/hQo7560HDhFZU aFODrR8pqW4I0yRYPE9hi2nbdFjKQD/xi2P992Ag9UvdIArEb8+gYRuuNx5KSbe+ R8wMv2c3flz301sF4DTXyiTOheZ5pDqr9EwDBjmVCxeiYIQcfM1NIMjBlQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMYydeQ9eC0vqJVbiWe4xMJKzwtJMB8GA1UdIwQY MBaAFPBOsgTzWABHiCJOL7GOTV50vr+NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85YWI0MmEtZGY5Mi00ZTQyLTllMzMt NWM1ODkyYWZhNDg3LzEveGpKMTVEMTRMUy1vbFZ1Slo3akV3a3JQQzBrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS85YWI0MmEtZGY5Mi00ZTQyLTllMzMtNWM1ODkyYWZhNDg3 LzEvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjWKJMA0G CSqGSIb3DQEBCwUAA4IBAQCTQ0HgTISccaQ5ohBvcTnzJfIc9oRhDTZCaydYzuc7 vn68jdyaXzroHW9B18oTyFPffnPsXhbn9nPyXSeJWRDyGnjmjH9Ktj6q/ye9P8wn RTBPnxop7ci8scpjgk80zdacktGKPoObVTiKdwjmZZCKYxbmC59H65NkVdjw898s Xlq3sXGq2KPTX0KHZXvDtR6MMcXV2b7zC2kk1UaVREqwgROEK8i2HfC+KRdfQxUv cgOUFDFt5f8JyCVz+iztGDVW+AChyg32VWDXxPctkIdFEQsbbDK7BmNY55V+wDci BE1gtNEMF7+BFRbTV6SSHErs7Pf5shCExR75KsssBstQ -----END CERTIFICATE-----Generated at Thu Jan 22 21:02:09 2026 by rpki-client