This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/XLYP7p5RdRYcFYlzrcGWJvzM9yA.roa File: XLYP7p5RdRYcFYlzrcGWJvzM9yA.roa (raw, json) Hash identifier: tHVjpzIZv9hKwBcDf9rhYgJAorYOKfN7gsmTFS3LleQ= Subject key identifier: 5C:B6:0F:EE:9E:51:75:16:1C:15:89:73:AD:C1:96:26:FC:CC:F7:20 Certificate issuer: /CN=56376def1224839a6113d1d0cdd398104faaf2fb Certificate serial: 019B7E38246E692BFBFFB28CC5BE911906C0 Authority key identifier: 56:37:6D:EF:12:24:83:9A:61:13:D1:D0:CD:D3:98:10:4F:AA:F2:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/XLYP7p5RdRYcFYlzrcGWJvzM9yA.roa Signing time: Fri 02 Jan 2026 10:19:27 +0000 ROA not before: Fri 02 Jan 2026 10:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44299 IP address blocks: 46.232.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:24:6e:69:2b:fb:ff:b2:8c:c5:be:91:19:06:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56376def1224839a6113d1d0cdd398104faaf2fb Validity Not Before: Jan 2 10:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5cb60fee9e5175161c158973adc19626fcccf720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7b:91:e4:b1:c4:0b:7b:78:41:ca:a8:6c:7f: 1a:1d:d0:5a:70:2d:0f:6e:90:df:da:55:9d:ac:b4: 39:44:e2:2f:20:3e:36:16:b9:ca:8b:be:cf:a9:a7: 4d:74:48:54:38:b5:9d:53:bc:ec:e4:e4:39:93:6f: 73:d0:8a:51:02:32:6a:5d:2f:0d:03:fd:55:aa:1a: 88:88:c2:7c:7d:27:5d:a1:e7:58:28:33:ae:69:b0: 89:b7:11:e8:4d:1d:86:b5:dc:cc:9f:a3:3e:a1:18: 5d:27:18:44:1c:42:49:f5:7c:2d:79:49:ab:ff:67: bc:e0:a7:ac:4b:ec:2c:5f:e9:73:79:e8:c0:48:dd: 6e:7b:ee:da:fb:40:9e:2e:72:0d:18:f2:0a:f0:5e: 93:b3:d9:63:ca:88:6f:13:9b:75:33:1d:0e:6d:be: a9:10:e4:51:a7:a3:90:b0:9d:0d:57:4a:d7:20:3d: 71:63:5a:04:ae:e7:b7:0f:d6:a2:c8:dc:48:d0:79: 81:32:5e:73:73:b8:10:27:ee:43:a3:c9:77:6a:2f: 0a:5c:52:46:e0:04:57:98:df:7e:33:c4:37:12:05: 7c:6a:db:9a:3c:a1:d9:78:1c:4b:ed:19:e6:52:38: 2e:ea:c8:df:f3:bf:ed:81:15:76:e7:c1:68:e9:34: 15:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B6:0F:EE:9E:51:75:16:1C:15:89:73:AD:C1:96:26:FC:CC:F7:20 X509v3 Authority Key Identifier: keyid:56:37:6D:EF:12:24:83:9A:61:13:D1:D0:CD:D3:98:10:4F:AA:F2:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/XLYP7p5RdRYcFYlzrcGWJvzM9yA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.232.252.0/22 Signature Algorithm: sha256WithRSAEncryption aa:6b:c1:4d:1f:39:18:ab:6d:cd:df:ff:cb:02:48:97:e0:a3: 65:9f:85:cd:ea:0c:11:e5:9b:5c:63:51:e8:86:b3:6c:90:d8: 9a:b6:dc:b0:09:28:8f:0c:b5:44:71:8d:3d:e2:80:26:8a:71: 4a:c3:b6:3d:3a:fa:a7:9d:94:93:dd:7d:e6:c1:9d:7c:61:c2: 32:b8:87:bf:f2:22:fa:c7:5d:ae:71:21:af:75:9c:2f:bd:bd: 6b:dc:fb:99:19:12:17:67:f7:22:f0:bd:a4:66:1a:36:0d:3f: 3d:90:40:1e:99:34:93:b5:8f:d9:6a:0c:93:61:ee:ea:66:e7: 9c:ab:1b:b2:dc:da:58:b4:7c:80:c4:db:17:ef:d6:3e:12:04: 83:18:70:7a:e1:4d:4b:73:79:83:be:e0:d3:b7:16:c8:11:72: 9e:44:31:f9:57:ef:08:2c:d7:7d:b7:aa:92:76:0d:9a:0d:a3: e3:23:ac:27:7c:42:a5:a2:e9:79:4c:b1:8c:22:53:2e:91:74: f3:af:24:4f:27:08:c4:9b:3f:32:03:c6:f9:c6:21:cc:8e:4c: bd:df:13:38:0f:24:ea:f4:4c:72:1c:a9:5c:7f:81:e8:7a:85: 5c:58:63:6f:41:75:24:20:05:f0:32:f6:a8:73:2a:b3:4f:24: a8:f0:af:27 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OCRuaSv7/7KMxb6RGQbAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2Mzc2ZGVmMTIyNDgzOWE2MTEzZDFkMGNkZDM5ODEwNGZh YWYyZmIwHhcNMjYwMTAyMTAxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2I2MGZlZTllNTE3NTE2MWMxNTg5NzNhZGMxOTYyNmZjY2NmNzIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XuR5LHEC3t4QcqobH8aHdBacC0P bpDf2lWdrLQ5ROIvID42FrnKi77PqadNdEhUOLWdU7zs5OQ5k29z0IpRAjJqXS8N A/1VqhqIiMJ8fSddoedYKDOuabCJtxHoTR2GtdzMn6M+oRhdJxhEHEJJ9XwteUmr /2e84KesS+wsX+lzeejASN1ue+7a+0CeLnINGPIK8F6Ts9ljyohvE5t1Mx0Obb6p EORRp6OQsJ0NV0rXID1xY1oErue3D9aiyNxI0HmBMl5zc7gQJ+5Do8l3ai8KXFJG 4ARXmN9+M8Q3EgV8atuaPKHZeBxL7RnmUjgu6sjf87/tgRV258Fo6TQVAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFy2D+6eUXUWHBWJc63Blib8zPcgMB8GA1UdIwQY MBaAFFY3be8SJIOaYRPR0M3TmBBPqvL7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmpkdDd4SWtnNXBoRTlIUXpkT1lFRS1xOHZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS83MTRhOGQtOGNiYy00OGQwLTgxNTYt ZDgwODQ3MzNlOTgwLzEvWExZUDdwNVJkUlljRllsenJjR1dKdnpNOXlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS83MTRhOGQtOGNiYy00OGQwLTgxNTYtZDgwODQ3MzNlOTgw LzEvVmpkdDd4SWtnNXBoRTlIUXpkT1lFRS1xOHZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLuj8MA0G CSqGSIb3DQEBCwUAA4IBAQCqa8FNHzkYq23N3//LAkiX4KNln4XN6gwR5ZtcY1Ho hrNskNiattywCSiPDLVEcY094oAminFKw7Y9OvqnnZST3X3mwZ18YcIyuIe/8iL6 x12ucSGvdZwvvb1r3PuZGRIXZ/ci8L2kZho2DT89kEAemTSTtY/ZagyTYe7qZuec qxuy3NpYtHyAxNsX79Y+EgSDGHB64U1Lc3mDvuDTtxbIEXKeRDH5V+8ILNd9t6qS dg2aDaPjI6wnfEKloul5TLGMIlMukXTzryRPJwjEmz8yA8b5xiHMjky93xM4DyTq 9ExyHKlcf4HoeoVcWGNvQXUkIAXwMvaocyqzTySo8K8n -----END CERTIFICATE-----Generated at Tue Feb 10 09:04:20 2026 by rpki-client