This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/xxkJjaXiLZhZdLuIQDbG-GjjnJY.roa File: xxkJjaXiLZhZdLuIQDbG-GjjnJY.roa (raw, json) Hash identifier: dV+cuNYU30yrvmj4ycpN50aoCq7HwspbxdgclU0j90M= Subject key identifier: C7:19:09:8D:A5:E2:2D:98:59:74:BB:88:40:36:C6:F8:68:E3:9C:96 Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Certificate serial: 019B797E373262891B60DB35F51D7E94E8EE Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/xxkJjaXiLZhZdLuIQDbG-GjjnJY.roa Signing time: Thu 01 Jan 2026 12:17:53 +0000 ROA not before: Thu 01 Jan 2026 12:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 149485 IP address blocks: 45.138.210.0/24 maxlen: 32 45.138.211.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:37:32:62:89:1b:60:db:35:f5:1d:7e:94:e8:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Validity Not Before: Jan 1 12:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c719098da5e22d985974bb884036c6f868e39c96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:c3:e2:52:ec:26:92:96:6e:eb:e3:b5:13:33: 3e:1b:1d:57:b7:79:77:c9:4f:14:a1:14:3e:e8:55: 9b:59:60:7d:a3:b0:fb:ec:af:56:50:ec:f9:a0:ef: 96:64:7f:fb:de:a0:81:9e:a6:8a:30:d8:34:b6:bf: 04:57:fd:da:66:ae:12:46:14:ee:6e:70:91:51:7f: 0c:3d:39:e0:41:48:1c:36:e4:fa:ae:07:55:f5:5b: 87:7a:d7:e9:97:2a:2d:45:99:f5:dd:4e:c7:c7:cc: 12:d4:13:2c:ec:b3:dd:ed:67:6b:be:50:06:4c:be: 33:51:e4:c1:bb:cb:59:64:85:ca:2d:49:03:ea:9f: f9:8d:06:91:2b:ab:26:fc:ba:f3:73:cb:b4:71:d3: 40:91:df:ca:86:c4:46:78:3d:41:9d:1f:63:b9:a3: df:fb:89:82:83:48:be:ff:4e:58:dd:5a:94:77:62: 0a:f3:8a:f5:df:9e:e1:f5:01:31:9a:19:f0:80:18: 0d:1f:44:e8:50:ec:a6:7d:ff:13:dd:64:07:e5:1f: 30:2d:46:36:a4:0b:c8:5b:4c:60:84:75:bf:fe:4a: b5:0a:19:19:33:17:dc:22:0b:d7:56:f4:3c:c0:7a: 8d:a7:93:62:92:01:c5:1c:29:a4:0a:7d:06:f6:83: 38:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:19:09:8D:A5:E2:2D:98:59:74:BB:88:40:36:C6:F8:68:E3:9C:96 X509v3 Authority Key Identifier: keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/xxkJjaXiLZhZdLuIQDbG-GjjnJY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.138.210.0/23 Signature Algorithm: sha256WithRSAEncryption bb:85:5e:42:2f:60:6f:57:7c:63:2b:9d:42:e1:6b:b8:7a:21: 5d:56:7c:bb:01:4f:f7:fe:c5:38:dc:3a:43:38:0b:65:04:fa: 86:57:f7:7f:ab:82:50:72:39:50:d5:03:e8:ea:1a:de:44:d0: 54:79:32:4e:fc:e7:90:4f:2b:d9:2d:51:76:b7:0c:f2:1d:51: a2:41:95:dc:b5:c2:28:98:d2:42:ce:09:03:f8:7d:ab:11:bf: ce:85:f7:d9:b8:26:64:ba:d6:f9:d8:66:13:9e:39:7e:80:48: 46:44:f1:f6:c6:be:f5:dd:ce:cc:c5:b0:c4:89:0a:61:f2:ba: f4:f6:3d:3e:7b:c9:22:2e:9d:e6:23:dc:0f:d6:47:9c:7d:d4: ed:77:39:83:01:33:cd:6b:e0:2e:35:1b:cc:a4:89:b0:d4:ee: 3c:47:cb:21:a5:d5:7a:66:cc:e0:d2:3b:5f:ae:89:f0:3e:09: 52:e7:03:b8:55:2c:12:ae:89:c0:85:9c:f5:fb:e2:de:74:d0: d5:0e:0e:f5:4d:13:e4:a6:c1:7d:f2:a3:ee:56:ac:63:81:1b: e8:98:62:66:5a:f3:b8:3d:49:37:d0:94:74:41:66:df:32:bd: 40:80:cb:c9:84:b1:b0:8b:f8:4b:2d:b8:34:b0:1b:47:9a:59: fe:f2:3e:8f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fjcyYokbYNs19R1+lOjuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi YTU3NDUwHhcNMjYwMTAxMTIxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzE5MDk4ZGE1ZTIyZDk4NTk3NGJiODg0MDM2YzZmODY4ZTM5Yzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58PiUuwmkpZu6+O1EzM+Gx1Xt3l3 yU8UoRQ+6FWbWWB9o7D77K9WUOz5oO+WZH/73qCBnqaKMNg0tr8EV/3aZq4SRhTu bnCRUX8MPTngQUgcNuT6rgdV9VuHetfplyotRZn13U7Hx8wS1BMs7LPd7WdrvlAG TL4zUeTBu8tZZIXKLUkD6p/5jQaRK6sm/Lrzc8u0cdNAkd/KhsRGeD1BnR9juaPf +4mCg0i+/05Y3VqUd2IK84r1357h9QExmhnwgBgNH0ToUOymff8T3WQH5R8wLUY2 pAvIW0xghHW//kq1ChkZMxfcIgvXVvQ8wHqNp5NikgHFHCmkCn0G9oM4VQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMcZCY2l4i2YWXS7iEA2xvho45yWMB8GA1UdIwQY MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt ZmVhYzI2ZWFlY2MyLzEveHhrSmphWGlMWmhaZEx1SVFEYkctR2pqbkpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLYrSMA0G CSqGSIb3DQEBCwUAA4IBAQC7hV5CL2BvV3xjK51C4Wu4eiFdVny7AU/3/sU43DpD OAtlBPqGV/d/q4JQcjlQ1QPo6hreRNBUeTJO/OeQTyvZLVF2twzyHVGiQZXctcIo mNJCzgkD+H2rEb/OhffZuCZkutb52GYTnjl+gEhGRPH2xr713c7MxbDEiQph8rr0 9j0+e8kiLp3mI9wP1kecfdTtdzmDATPNa+AuNRvMpImw1O48R8shpdV6Zszg0jtf ronwPglS5wO4VSwSronAhZz1++LedNDVDg71TRPkpsF98qPuVqxjgRvomGJmWvO4 PUk30JR0QWbfMr1AgMvJhLGwi/hLLbg0sBtHmln+8j6P -----END CERTIFICATE-----Generated at Mon Jan 19 20:27:37 2026 by rpki-client