This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/XUG3gRFIK0zLDvFUgJTUWVf7hZY.roa File: XUG3gRFIK0zLDvFUgJTUWVf7hZY.roa (raw, json) Hash identifier: Vo98Zl1NhOtmiCG2nhzLWKDUTIfziyqlxiwT69RALHA= Subject key identifier: 5D:41:B7:81:11:48:2B:4C:CB:0E:F1:54:80:94:D4:59:57:FB:85:96 Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019B851FE198F8FBCB5AA3F83B15FBBCF12F Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/XUG3gRFIK0zLDvFUgJTUWVf7hZY.roa Signing time: Sat 03 Jan 2026 18:30:17 +0000 ROA not before: Sat 03 Jan 2026 18:30:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207350 IP address blocks: 45.159.148.0/24 maxlen: 24 195.254.165.0/24 maxlen: 24 2a05:9080:1::/48 maxlen: 48 2a05:9080:15::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:85:1f:e1:98:f8:fb:cb:5a:a3:f8:3b:15:fb:bc:f1:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Jan 3 18:30:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d41b78111482b4ccb0ef1548094d45957fb8596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1d:78:cb:cb:9a:ac:44:f4:21:cf:25:e7:6e: 56:fa:36:9b:12:5a:23:2e:35:68:30:8f:53:a7:0f: 5e:c0:31:a5:cc:bb:8c:30:19:d2:a6:3e:11:f5:e0: d0:6d:ec:7e:64:3e:7e:96:34:84:ee:0b:a9:6d:d2: e4:df:fd:0d:03:47:bf:34:df:58:37:1f:a1:fe:b4: 78:f2:d4:9c:83:2b:f3:c4:a6:ea:0f:9c:fa:d0:b1: 41:b4:fe:13:44:d1:db:49:8f:50:e0:ae:5a:54:42: 44:78:e4:54:76:1b:a6:e8:07:8d:77:ff:76:6a:03: e3:7b:d2:57:9b:71:0b:02:07:09:e5:20:69:a5:5e: b9:dd:68:87:6b:7f:e7:e3:db:d9:28:b6:92:78:5d: cd:d7:0c:3c:bb:54:87:4f:e9:bb:b2:61:99:23:a5: 70:3f:92:0f:c5:27:30:75:bd:bb:2d:02:82:11:6f: e8:9b:6d:d0:9c:8a:be:b8:83:28:a7:3e:cf:e4:1c: 0c:b1:a0:05:7c:ce:dd:65:68:8b:2b:b8:90:72:34: b9:04:f8:04:a3:5d:55:7d:0a:3d:7a:93:68:6e:a9: d4:34:6d:9b:3f:f9:c8:90:13:70:0c:24:95:8a:6a: 6b:09:53:e5:8a:61:c8:30:03:1d:24:6c:e9:3c:51: a2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:41:B7:81:11:48:2B:4C:CB:0E:F1:54:80:94:D4:59:57:FB:85:96 X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/XUG3gRFIK0zLDvFUgJTUWVf7hZY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.159.148.0/24 195.254.165.0/24 IPv6: 2a05:9080:1::/48 2a05:9080:15::/48 Signature Algorithm: sha256WithRSAEncryption 57:87:d9:2a:1a:15:e1:45:15:5c:37:48:a2:9b:b3:31:e6:dd: f0:25:99:c0:6e:63:1a:bd:98:71:e5:85:12:ca:a6:aa:d7:ff: 88:0b:c6:a6:fe:f5:2c:64:00:0e:cf:82:8e:ee:41:13:41:1a: d0:3d:45:aa:9f:df:8d:99:2b:4e:35:79:df:4b:62:78:95:63: 53:09:6d:86:0f:fc:bc:e7:f0:9c:09:1a:05:87:d7:43:a9:ed: d4:4b:4b:4a:a8:12:2f:da:d0:2a:e4:81:1d:ac:c5:0b:c8:6d: 54:dd:42:69:65:a2:72:d0:32:34:99:6d:99:2f:5a:46:6a:3e: 13:b7:2e:9e:98:60:f0:10:c3:d1:5c:0e:e7:18:f3:86:4e:92: 63:18:5c:ad:c2:40:56:ca:72:a6:ac:7b:bd:a4:f6:4f:e0:55: f8:ae:73:cc:47:ca:53:39:63:c3:72:f2:a2:73:8a:e5:d6:86: d0:a0:02:51:bc:24:c7:a8:a4:fb:a6:11:38:eb:45:86:57:95: c2:17:3f:89:6a:e6:81:4e:a2:79:6b:9e:f8:ea:00:8b:c5:53: ee:79:79:08:4f:6f:10:fd:4f:ce:c2:85:c7:ba:15:44:13:2d: b0:c3:7a:a7:72:c0:a2:34:d3:6a:89:b5:26:be:23:93:0a:7c: 8f:94:4a:88 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZuFH+GY+PvLWqP4OxX7vPEvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjYwMTAzMTgzMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDQxYjc4MTExNDgyYjRjY2IwZWYxNTQ4MDk0ZDQ1OTU3ZmI4NTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqh14y8uarET0Ic8l525W+jabEloj LjVoMI9Tpw9ewDGlzLuMMBnSpj4R9eDQbex+ZD5+ljSE7gupbdLk3/0NA0e/NN9Y Nx+h/rR48tScgyvzxKbqD5z60LFBtP4TRNHbSY9Q4K5aVEJEeORUdhum6AeNd/92 agPje9JXm3ELAgcJ5SBppV653WiHa3/n49vZKLaSeF3N1ww8u1SHT+m7smGZI6Vw P5IPxScwdb27LQKCEW/om23QnIq+uIMopz7P5BwMsaAFfM7dZWiLK7iQcjS5BPgE o11VfQo9epNobqnUNG2bP/nIkBNwDCSVimprCVPlimHIMAMdJGzpPFGisQIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFF1Bt4ERSCtMyw7xVICU1FlX+4WWMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvWFVHM2dSRklLMHpMRHZGVWdKVFVXVmY3aFpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQALZ+UAwQA w/6lMBgEAgACMBIDBwAqBZCAAAEDBwAqBZCAABUwDQYJKoZIhvcNAQELBQADggEB AFeH2SoaFeFFFVw3SKKbszHm3fAlmcBuYxq9mHHlhRLKpqrX/4gLxqb+9SxkAA7P go7uQRNBGtA9Raqf342ZK041ed9LYniVY1MJbYYP/Lzn8JwJGgWH10Op7dRLS0qo Ei/a0CrkgR2sxQvIbVTdQmllonLQMjSZbZkvWkZqPhO3Lp6YYPAQw9FcDucY84ZO kmMYXK3CQFbKcqase72k9k/gVfiuc8xHylM5Y8Ny8qJziuXWhtCgAlG8JMeopPum ETjrRYZXlcIXP4lq5oFOonlrnvjqAIvFU+55eQhPbxD9T87Chce6FUQTLbDDeqdy wKI002qJtSa+I5MKfI+USog= -----END CERTIFICATE-----Generated at Tue Jan 6 20:55:25 2026 by rpki-client