This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/XgKbk-VfS5Fk-dDKQjpQqRf0_lY.roa File: XgKbk-VfS5Fk-dDKQjpQqRf0_lY.roa (raw, json) Hash identifier: iWT0RhDme3TLlIGDD9yrT4WHfNUoRqswY0iSVi2J+04= Subject key identifier: 5E:02:9B:93:E5:5F:4B:91:64:F9:D0:CA:42:3A:50:A9:17:F4:FE:56 Certificate issuer: /CN=f4b762950eb7916668bbfa8d1b870560b1ca7739 Certificate serial: 019B7C12B827638E56F8CDA25DFDC6CCEADC Authority key identifier: F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/XgKbk-VfS5Fk-dDKQjpQqRf0_lY.roa Signing time: Fri 02 Jan 2026 00:19:19 +0000 ROA not before: Fri 02 Jan 2026 00:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51321 IP address blocks: 84.17.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:b8:27:63:8e:56:f8:cd:a2:5d:fd:c6:cc:ea:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4b762950eb7916668bbfa8d1b870560b1ca7739 Validity Not Before: Jan 2 00:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e029b93e55f4b9164f9d0ca423a50a917f4fe56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e5:59:a5:b0:a8:57:56:2b:2a:f6:e7:1a:a0: 6a:77:58:4f:d0:f6:7b:8f:03:ec:26:44:a9:7e:bd: 49:4c:61:85:9d:92:4d:b7:03:0c:b1:b0:6a:7b:a0: a8:9d:e9:56:e5:ea:0c:b4:66:c9:6e:ce:9f:10:77: 4d:69:24:8b:af:c6:e8:b6:de:dc:96:92:e9:89:50: 25:e7:48:df:98:23:9d:ff:aa:19:81:6b:3a:56:63: 05:c3:e8:1a:3e:d1:48:6f:c3:25:8d:e7:e6:05:f7: 28:10:87:7f:bd:3f:92:67:1e:34:7b:f1:38:29:5c: 22:5b:2d:70:80:13:50:9f:eb:e5:88:c2:83:7c:05: 90:bb:0c:41:4c:78:2b:d9:80:52:1e:f0:9d:36:14: 46:39:a8:69:ab:68:4d:13:17:4e:c0:ec:b1:b4:79: 5e:4b:98:b0:8c:f4:21:8f:20:6f:eb:71:fe:21:98: e6:6f:58:02:2f:9c:46:e4:47:0f:bb:47:12:0c:ed: 83:9f:5e:5b:f4:f7:ea:40:9a:04:d5:17:2c:13:de: 45:63:14:83:a9:86:d3:b0:e5:79:42:4b:71:83:fb: 0a:81:b7:1a:e9:4d:d4:20:ee:39:21:c0:bb:9d:66: ba:a4:43:31:f3:93:0e:00:fb:60:83:93:16:cc:0d: 9a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:02:9B:93:E5:5F:4B:91:64:F9:D0:CA:42:3A:50:A9:17:F4:FE:56 X509v3 Authority Key Identifier: keyid:F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/XgKbk-VfS5Fk-dDKQjpQqRf0_lY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.17.87.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:ec:e6:50:8c:46:31:8a:7e:f7:be:cb:f6:7c:0c:ec:90:82: 91:78:b1:41:4f:10:a2:31:3a:8d:2f:2d:d3:f3:45:d7:0e:dc: 3a:78:43:4f:ec:57:3d:83:e6:05:fd:58:34:8b:09:6b:23:3e: 03:84:1a:04:2e:1c:7c:af:b9:58:b4:c1:b5:2a:d2:c8:76:8c: 7f:66:e7:9e:4c:01:f3:e7:e2:f5:21:ad:0a:f3:b5:40:3f:10: 72:4c:1d:da:75:c9:65:4d:3d:fc:76:1b:06:33:ce:23:fd:78: 07:f0:88:cd:24:25:7c:33:78:5e:76:ad:18:46:72:9c:16:c1: 3d:a0:32:7f:6c:4d:2c:4c:2a:a4:16:ee:32:a4:69:d2:1b:a2: 48:36:b1:c2:0f:e7:cc:23:f4:df:a1:bb:c6:bd:17:7f:1d:62: c7:8e:ad:07:00:29:e5:de:8a:5e:88:b4:ee:a5:71:ea:22:9c: f9:cb:4a:d1:df:97:ca:3b:45:a5:97:1f:51:08:0e:66:39:ac: 9a:45:06:a8:e3:e9:15:7f:c5:47:ba:c5:c2:f5:95:c3:6c:91: 1b:4b:96:95:ac:64:0a:34:be:d6:9c:a0:d5:9c:1e:64:a1:2c: 6c:56:5e:fd:24:31:db:04:fe:e5:ca:ad:e0:91:2d:e6:c5:14: f0:8a:d2:df -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8ErgnY45W+M2iXf3GzOrcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0Yjc2Mjk1MGViNzkxNjY2OGJiZmE4ZDFiODcwNTYwYjFj YTc3MzkwHhcNMjYwMTAyMDAxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTAyOWI5M2U1NWY0YjkxNjRmOWQwY2E0MjNhNTBhOTE3ZjRmZTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeVZpbCoV1YrKvbnGqBqd1hP0PZ7 jwPsJkSpfr1JTGGFnZJNtwMMsbBqe6ConelW5eoMtGbJbs6fEHdNaSSLr8bott7c lpLpiVAl50jfmCOd/6oZgWs6VmMFw+gaPtFIb8MljefmBfcoEId/vT+SZx40e/E4 KVwiWy1wgBNQn+vliMKDfAWQuwxBTHgr2YBSHvCdNhRGOahpq2hNExdOwOyxtHle S5iwjPQhjyBv63H+IZjmb1gCL5xG5EcPu0cSDO2Dn15b9PfqQJoE1RcsE95FYxSD qYbTsOV5Qktxg/sKgbca6U3UIO45IcC7nWa6pEMx85MOAPtgg5MWzA2aCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF4Cm5PlX0uRZPnQykI6UKkX9P5WMB8GA1UdIwQY MBaAFPS3YpUOt5FmaLv6jRuHBWCxync5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wYjIzYzUtMjFiNS00YWIzLTk3YTAt MmY4ZGYxODdmOThiLzEvWGdLYmstVmZTNUZrLWRES1FqcFFxUmYwX2xZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8wYjIzYzUtMjFiNS00YWIzLTk3YTAtMmY4ZGYxODdmOThi LzEvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVBFXMA0G CSqGSIb3DQEBCwUAA4IBAQAK7OZQjEYxin73vsv2fAzskIKReLFBTxCiMTqNLy3T 80XXDtw6eENP7Fc9g+YF/Vg0iwlrIz4DhBoELhx8r7lYtMG1KtLIdox/ZueeTAHz 5+L1Ia0K87VAPxByTB3adcllTT38dhsGM84j/XgH8IjNJCV8M3hedq0YRnKcFsE9 oDJ/bE0sTCqkFu4ypGnSG6JINrHCD+fMI/TfobvGvRd/HWLHjq0HACnl3opeiLTu pXHqIpz5y0rR35fKO0Wllx9RCA5mOayaRQao4+kVf8VHusXC9ZXDbJEbS5aVrGQK NL7WnKDVnB5koSxsVl79JDHbBP7lyq3gkS3mxRTwitLf -----END CERTIFICATE-----Generated at Mon Jan 26 08:38:29 2026 by rpki-client