This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/2XEo4CV2Llsw1LO8UxL8ICFI_Ts.roa File: 2XEo4CV2Llsw1LO8UxL8ICFI_Ts.roa (raw, json) Hash identifier: Gkxl6cgCKu5SSnDSK3cxhOt4JBhAs9jevpskTltEVbU= Subject key identifier: D9:71:28:E0:25:76:2E:5B:30:D4:B3:BC:53:12:FC:20:21:48:FD:3B Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019B7A5B11C8F60AE7EF257E642705DA1492 Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/2XEo4CV2Llsw1LO8UxL8ICFI_Ts.roa Signing time: Thu 01 Jan 2026 16:19:07 +0000 ROA not before: Thu 01 Jan 2026 16:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213644 IP address blocks: 45.11.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:11:c8:f6:0a:e7:ef:25:7e:64:27:05:da:14:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Jan 1 16:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d97128e025762e5b30d4b3bc5312fc202148fd3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:90:eb:d8:b6:a4:13:a9:ab:9c:c3:19:42:89: 6d:0c:b7:cb:5f:57:d1:7e:8b:fe:ce:2f:7e:5f:83: 41:16:4d:b1:6c:b6:f3:89:f5:0f:b6:ce:d1:59:ac: ee:ea:1d:18:31:c4:be:47:7c:01:5a:7a:a3:51:6a: ae:88:c7:16:be:c0:76:67:e5:cd:46:6a:45:3b:32: aa:a9:74:39:eb:cc:bf:4c:08:c9:36:d3:13:04:eb: 56:f7:e8:8c:4a:c7:41:ff:fe:09:23:95:a1:bb:de: e4:f1:37:ee:3e:87:73:97:ec:97:f3:16:d0:45:9c: 4d:de:06:b1:98:b4:af:96:70:7c:db:6d:77:01:c2: 31:91:c0:28:12:6f:96:b0:78:0d:6e:ea:41:d8:f1: 37:e5:f3:c3:36:13:4a:a4:dd:95:1a:62:70:05:e0: 7e:88:00:20:ac:c3:91:fd:95:ef:b7:82:7e:8d:45: 1f:b6:50:f5:c6:b9:61:7d:e6:01:68:c2:7f:2c:4b: f9:ce:43:61:9a:a9:21:b2:3e:1c:52:32:66:c6:3e: 90:69:d1:92:79:a2:bb:f0:51:44:98:cf:b9:67:46: de:ed:30:b8:72:ce:6a:e0:fd:4c:a6:1d:42:44:cc: 1c:17:17:e4:da:dc:9c:42:6a:b6:bd:cc:de:21:35: b3:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:71:28:E0:25:76:2E:5B:30:D4:B3:BC:53:12:FC:20:21:48:FD:3B X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/2XEo4CV2Llsw1LO8UxL8ICFI_Ts.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.11.186.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:3c:63:d2:80:a9:e9:ae:60:ab:1a:c1:f2:84:de:f6:8c:e7: b4:ab:3f:4c:bc:35:bd:72:0b:bd:e4:d2:61:d9:e4:cd:80:5b: 29:a4:c2:7a:5a:aa:a5:d2:f5:9f:93:d6:30:d0:a7:81:ae:20: 77:2e:66:1c:d8:41:5f:4b:23:54:51:83:96:84:5a:61:50:97: f6:d6:5d:a0:ab:81:eb:e1:bc:ae:b1:7a:6e:14:59:3c:c2:f7: 7b:16:d0:91:b3:c1:51:ed:53:66:c8:dc:69:fb:13:4b:42:4e: 34:53:6b:30:c3:bf:44:31:9e:00:f3:6e:a3:3a:5c:73:99:2f: 0f:c0:d4:db:fd:48:13:f8:3a:6e:30:0c:87:c4:18:c7:83:25: 53:00:81:28:d5:16:c0:bf:a4:1a:4a:19:c7:d7:b8:b8:e7:ea: c6:2c:5c:05:05:0c:9e:c6:51:7c:73:fd:34:5b:77:79:06:c9: 62:78:1a:2c:5f:97:97:2d:fb:51:ff:67:eb:96:d4:4b:65:7c: b9:28:60:72:58:bd:07:87:3e:ca:12:25:5c:e6:05:89:a7:2a: f2:09:59:4b:7e:79:cc:e9:b7:da:13:ea:f1:ce:18:37:ce:05: a2:52:ae:15:ae:ce:ac:e5:05:80:92:48:74:c0:a9:36:da:4b: 42:1c:e8:53 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WxHI9grn7yV+ZCcF2hSSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjYwMTAxMTYxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTcxMjhlMDI1NzYyZTViMzBkNGIzYmM1MzEyZmMyMDIxNDhmZDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JDr2LakE6mrnMMZQoltDLfLX1fR fov+zi9+X4NBFk2xbLbzifUPts7RWazu6h0YMcS+R3wBWnqjUWquiMcWvsB2Z+XN RmpFOzKqqXQ568y/TAjJNtMTBOtW9+iMSsdB//4JI5Whu97k8TfuPodzl+yX8xbQ RZxN3gaxmLSvlnB82213AcIxkcAoEm+WsHgNbupB2PE35fPDNhNKpN2VGmJwBeB+ iAAgrMOR/ZXvt4J+jUUftlD1xrlhfeYBaMJ/LEv5zkNhmqkhsj4cUjJmxj6QadGS eaK78FFEmM+5Z0be7TC4cs5q4P1Mph1CRMwcFxfk2tycQmq2vczeITWzSQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNlxKOAldi5bMNSzvFMS/CAhSP07MB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvMlhFbzRDVjJMbHN3MUxPOFV4TDhJQ0ZJX1RzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQu6MA0G CSqGSIb3DQEBCwUAA4IBAQBPPGPSgKnprmCrGsHyhN72jOe0qz9MvDW9cgu95NJh 2eTNgFsppMJ6Wqql0vWfk9Yw0KeBriB3LmYc2EFfSyNUUYOWhFphUJf21l2gq4Hr 4byusXpuFFk8wvd7FtCRs8FR7VNmyNxp+xNLQk40U2sww79EMZ4A826jOlxzmS8P wNTb/UgT+DpuMAyHxBjHgyVTAIEo1RbAv6QaShnH17i45+rGLFwFBQyexlF8c/00 W3d5BslieBosX5eXLftR/2frltRLZXy5KGByWL0Hhz7KEiVc5gWJpyryCVlLfnnM 6bfaE+rxzhg3zgWiUq4Vrs6s5QWAkkh0wKk22ktCHOhT -----END CERTIFICATE-----Generated at Mon Jan 5 13:05:22 2026 by rpki-client