This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/xCnRa7RuoNhvn-1cceuPWGzNGFE.roa File: xCnRa7RuoNhvn-1cceuPWGzNGFE.roa (raw, json) Hash identifier: Fkx7fvhINA1pZgf6k4rn2+TiTS3OXY+tm8r7eYATNIQ= Subject key identifier: C4:29:D1:6B:B4:6E:A0:D8:6F:9F:ED:5C:71:EB:8F:58:6C:CD:18:51 Certificate issuer: /CN=a72472c3f004b0b71f118e872b9838a4e0c721c7 Certificate serial: 019B79103EF6D67CB25753638AABFD9F2892 Authority key identifier: A7:24:72:C3:F0:04:B0:B7:1F:11:8E:87:2B:98:38:A4:E0:C7:21:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/xCnRa7RuoNhvn-1cceuPWGzNGFE.roa Signing time: Thu 01 Jan 2026 10:17:46 +0000 ROA not before: Thu 01 Jan 2026 10:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211093 IP address blocks: 158.120.254.0/24 maxlen: 24 2001:678:d48::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.crl rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:3e:f6:d6:7c:b2:57:53:63:8a:ab:fd:9f:28:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a72472c3f004b0b71f118e872b9838a4e0c721c7 Validity Not Before: Jan 1 10:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c429d16bb46ea0d86f9fed5c71eb8f586ccd1851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a8:42:eb:07:f5:39:e5:19:4c:a1:64:27:fa: e7:ba:7a:09:4d:42:6e:63:3a:36:52:29:05:ab:f5: 78:13:01:cb:bd:7c:10:32:20:f5:e2:8f:9b:d4:2e: 65:65:39:a0:6e:6b:74:44:2c:52:fa:ae:29:99:67: 91:ad:b5:9b:c4:e7:bd:ed:c1:98:a0:aa:84:71:ef: 2b:ce:bf:15:cf:46:fa:fb:59:90:3f:cb:dd:49:99: 68:65:89:f6:a9:c9:e4:1a:ad:16:30:d0:a3:5f:19: 2d:62:d3:ee:35:ca:4c:ef:7a:81:b6:91:f5:dc:06: 04:f0:0d:7d:2d:90:1d:fb:98:74:69:cf:08:30:79: 0d:1b:13:6d:7a:97:09:17:ea:16:98:9b:c0:a3:94: a6:3e:b6:24:76:d4:7c:20:3a:bc:ad:c4:39:9c:ce: 20:49:40:41:43:92:ba:1d:e2:7e:4d:86:9b:18:74: 89:79:19:15:10:7f:fd:99:ba:93:a6:2c:0e:32:b8: 65:06:4f:68:fc:c8:bb:4c:25:28:f6:0e:22:79:69: 24:af:9d:57:83:d2:78:af:ce:65:41:40:85:59:e6: f6:7a:05:65:c4:a4:b3:8f:45:30:b4:6b:83:08:1a: 38:11:9b:12:d9:d6:6f:1b:43:40:2b:66:42:d0:29: 90:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:29:D1:6B:B4:6E:A0:D8:6F:9F:ED:5C:71:EB:8F:58:6C:CD:18:51 X509v3 Authority Key Identifier: keyid:A7:24:72:C3:F0:04:B0:B7:1F:11:8E:87:2B:98:38:A4:E0:C7:21:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/xCnRa7RuoNhvn-1cceuPWGzNGFE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.120.254.0/24 IPv6: 2001:678:d48::/48 Signature Algorithm: sha256WithRSAEncryption 08:0b:35:ab:7a:7a:61:3e:eb:55:77:08:ff:85:94:4a:f4:1f: 83:7c:d7:c1:50:0b:27:7e:61:5d:66:dc:a4:5b:51:45:96:87: 08:6d:9b:c8:60:ca:35:b9:9c:e3:91:61:d4:c4:13:6c:c7:ae: 5c:3a:83:b5:45:ac:87:60:37:82:4a:c1:b4:ea:c5:f6:0a:18: b0:8b:54:52:ef:64:68:e9:f7:e2:e2:9c:06:a9:93:f6:04:c6: c1:6e:5a:b8:77:39:92:78:8f:cd:97:a3:b4:22:79:d0:5d:f3: e8:27:23:19:c6:a0:b0:38:39:9c:e7:e3:b8:5e:f1:f0:52:5b: 21:0e:ca:a3:f8:b5:f8:b4:19:a1:2f:b5:04:f5:57:a5:8f:5d: 1f:b3:39:aa:d8:0a:e9:0a:bf:2e:ee:64:3f:0c:c3:81:5b:f8: 67:63:4e:fc:80:7e:4b:16:b1:bd:bf:f1:09:b9:b3:69:f8:75: 31:c6:cc:91:55:2a:2f:83:90:2f:27:6b:92:f6:28:dd:1c:30: c9:7d:ca:d6:01:b6:fa:dc:e8:88:41:52:1c:ce:35:5f:b8:ae: 9f:ee:d9:ab:c4:8b:79:28:71:c9:17:26:07:9b:fa:67:4c:cf: 86:b7:51:6f:5a:ba:61:78:ba:ef:e4:34:50:82:fe:21:11:9c: 91:a3:34:9a -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5ED721nyyV1Njiqv9nyiSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3MjQ3MmMzZjAwNGIwYjcxZjExOGU4NzJiOTgzOGE0ZTBj NzIxYzcwHhcNMjYwMTAxMTAxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDI5ZDE2YmI0NmVhMGQ4NmY5ZmVkNWM3MWViOGY1ODZjY2QxODUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6hC6wf1OeUZTKFkJ/rnunoJTUJu Yzo2UikFq/V4EwHLvXwQMiD14o+b1C5lZTmgbmt0RCxS+q4pmWeRrbWbxOe97cGY oKqEce8rzr8Vz0b6+1mQP8vdSZloZYn2qcnkGq0WMNCjXxktYtPuNcpM73qBtpH1 3AYE8A19LZAd+5h0ac8IMHkNGxNtepcJF+oWmJvAo5SmPrYkdtR8IDq8rcQ5nM4g SUBBQ5K6HeJ+TYabGHSJeRkVEH/9mbqTpiwOMrhlBk9o/Mi7TCUo9g4ieWkkr51X g9J4r85lQUCFWeb2egVlxKSzj0UwtGuDCBo4EZsS2dZvG0NAK2ZC0CmQ9QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFMQp0Wu0bqDYb5/tXHHrj1hszRhRMB8GA1UdIwQY MBaAFKckcsPwBLC3HxGOhyuYOKTgxyHHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHlSeXdfQUVzTGNmRVk2SEs1ZzRwT0RISWNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS85OThhMWQtMzA5NS00NjQzLTg3M2Qt ZDhjOTUwY2FjYWI1LzEveENuUmE3UnVvTmh2bi0xY2NldVBXR3pOR0ZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS85OThhMWQtMzA5NS00NjQzLTg3M2QtZDhjOTUwY2FjYWI1 LzEvcHlSeXdfQUVzTGNmRVk2SEs1ZzRwT0RISWNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAnnj+MA8E AgACMAkDBwAgAQZ4DUgwDQYJKoZIhvcNAQELBQADggEBAAgLNat6emE+61V3CP+F lEr0H4N818FQCyd+YV1m3KRbUUWWhwhtm8hgyjW5nOORYdTEE2zHrlw6g7VFrIdg N4JKwbTqxfYKGLCLVFLvZGjp9+LinAapk/YExsFuWrh3OZJ4j82Xo7QiedBd8+gn IxnGoLA4OZzn47he8fBSWyEOyqP4tfi0GaEvtQT1V6WPXR+zOarYCukKvy7uZD8M w4Fb+GdjTvyAfksWsb2/8Qm5s2n4dTHGzJFVKi+DkC8na5L2KN0cMMl9ytYBtvrc 6IhBUhzONV+4rp/u2avEi3kocckXJgeb+mdMz4a3UW9aumF4uu/kNFCC/iERnJGj NJo= -----END CERTIFICATE-----Generated at Tue Feb 10 04:31:24 2026 by rpki-client