This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/Xpg7_54CQOeG7QycRDw4ah5iMNs.roa File: Xpg7_54CQOeG7QycRDw4ah5iMNs.roa (raw, json) Hash identifier: dqDW8tmSmWAQ4qkHZYDnkpUDNy/teMQGCc2EetkL07I= Subject key identifier: 5E:98:3B:FF:9E:02:40:E7:86:ED:0C:9C:44:3C:38:6A:1E:62:30:DB Certificate issuer: /CN=d9a988916d51406f9a269f30a02d0086b57f4d5a Certificate serial: 019B7DCB519B30EBF0B1AD4565B3B620EDE4 Authority key identifier: D9:A9:88:91:6D:51:40:6F:9A:26:9F:30:A0:2D:00:86:B5:7F:4D:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/Xpg7_54CQOeG7QycRDw4ah5iMNs.roa Signing time: Fri 02 Jan 2026 08:20:35 +0000 ROA not before: Fri 02 Jan 2026 08:20:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205133 IP address blocks: 46.227.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:51:9b:30:eb:f0:b1:ad:45:65:b3:b6:20:ed:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9a988916d51406f9a269f30a02d0086b57f4d5a Validity Not Before: Jan 2 08:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e983bff9e0240e786ed0c9c443c386a1e6230db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4d:ce:c8:27:31:91:93:36:c0:4c:a4:b5:ab: 4b:c3:b2:94:bf:ad:26:68:17:9d:51:ec:21:10:c0: f0:5e:9f:92:48:87:6c:c7:bd:8b:d6:4e:e7:f3:42: 06:a2:89:1a:a9:3e:d6:bd:05:a6:64:72:cf:60:e3: 1c:f0:d7:35:bb:6c:17:9b:17:6e:cb:f9:37:8a:1c: b5:0d:5c:6c:88:69:b9:04:c0:f4:8d:e8:94:72:8a: 4d:ef:4f:22:85:8a:32:a4:4e:6a:7d:09:91:8a:3c: 81:3c:d6:f4:b4:fa:bd:54:84:2d:db:00:40:e4:36: b8:b3:e6:c8:55:48:e0:e2:e6:00:89:88:e9:53:c5: 2b:38:0e:49:25:d9:58:e0:88:a3:74:05:fe:0e:65: 72:09:ce:84:e6:33:37:3a:d5:a6:7d:ca:ec:dd:61: f2:94:ae:f7:e0:d1:0d:d4:35:08:7d:a8:26:3f:0c: 60:4d:65:5f:11:9f:bf:7b:87:5c:2d:fc:d7:c5:cd: c8:27:c6:21:33:3c:9b:e1:b9:ca:71:11:06:13:53: d3:b6:47:49:43:fd:7f:de:8d:50:9c:34:c6:d1:49: 2c:90:b0:8a:1f:ae:7b:f9:6a:44:6c:d7:a3:64:3f: 74:2b:8c:f2:c4:16:55:f6:13:f6:b6:04:d6:47:67: 37:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:98:3B:FF:9E:02:40:E7:86:ED:0C:9C:44:3C:38:6A:1E:62:30:DB X509v3 Authority Key Identifier: keyid:D9:A9:88:91:6D:51:40:6F:9A:26:9F:30:A0:2D:00:86:B5:7F:4D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/Xpg7_54CQOeG7QycRDw4ah5iMNs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.227.35.0/24 Signature Algorithm: sha256WithRSAEncryption 66:48:d3:91:d0:b9:62:6f:ab:e7:74:11:21:1f:b4:be:93:27: e1:62:f8:19:f9:fd:b2:ad:f9:c2:d3:61:7f:a8:43:bd:69:8b: d5:90:b2:cc:10:58:78:24:00:35:a1:36:0e:58:ca:03:c2:c5: dd:28:25:5e:8e:16:e1:64:ea:10:98:ae:68:f8:3e:6c:99:4f: fa:43:7a:c0:26:97:b7:eb:a8:15:e3:87:ee:07:dd:5e:35:fa: 24:d7:a2:60:1c:22:16:cc:3d:48:c8:eb:f2:40:0d:04:b1:f1: d0:b1:f4:e4:fe:51:ad:fc:32:8c:76:a6:b1:dc:48:66:20:a2: f9:29:45:1c:c2:1c:e6:d0:d2:51:37:93:19:18:dd:1a:6c:5d: 32:c1:55:e5:2f:11:0c:de:5b:ba:2d:9c:cc:5e:fb:c7:31:e4: f1:20:73:6f:16:d1:fc:85:42:74:2e:db:ed:21:56:ce:60:f0: 03:fe:18:6f:e4:e3:2e:95:f9:5f:be:1b:5e:ae:30:81:74:02: 0a:b7:5d:1a:25:85:47:2e:ed:de:9f:18:ca:28:91:86:73:f5: d1:98:cf:89:d8:4b:e0:16:20:a1:f6:fd:12:85:17:14:a8:25: 7c:07:33:ca:41:6c:60:d3:43:93:68:33:8e:90:bd:3d:39:a3: ad:62:a3:9e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y1GbMOvwsa1FZbO2IO3kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5YTk4ODkxNmQ1MTQwNmY5YTI2OWYzMGEwMmQwMDg2YjU3 ZjRkNWEwHhcNMjYwMTAyMDgyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTk4M2JmZjllMDI0MGU3ODZlZDBjOWM0NDNjMzg2YTFlNjIzMGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArE3OyCcxkZM2wEyktatLw7KUv60m aBedUewhEMDwXp+SSIdsx72L1k7n80IGookaqT7WvQWmZHLPYOMc8Nc1u2wXmxdu y/k3ihy1DVxsiGm5BMD0jeiUcopN708ihYoypE5qfQmRijyBPNb0tPq9VIQt2wBA 5Da4s+bIVUjg4uYAiYjpU8UrOA5JJdlY4IijdAX+DmVyCc6E5jM3OtWmfcrs3WHy lK734NEN1DUIfagmPwxgTWVfEZ+/e4dcLfzXxc3IJ8YhMzyb4bnKcREGE1PTtkdJ Q/1/3o1QnDTG0UkskLCKH657+WpEbNejZD90K4zyxBZV9hP2tgTWR2c3ZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF6YO/+eAkDnhu0MnEQ8OGoeYjDbMB8GA1UdIwQY MBaAFNmpiJFtUUBvmiafMKAtAIa1f01aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmFtSWtXMVJRRy1hSnA4d29DMEFoclZfVFZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy85NjJiM2YtZmMyNi00NTQ5LWFlMDIt NGQwNDlhMWVhZjJmLzEvWHBnN181NENRT2VHN1F5Y1JEdzRhaDVpTU5zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy85NjJiM2YtZmMyNi00NTQ5LWFlMDItNGQwNDlhMWVhZjJm LzEvMmFtSWtXMVJRRy1hSnA4d29DMEFoclZfVFZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALuMjMA0G CSqGSIb3DQEBCwUAA4IBAQBmSNOR0Llib6vndBEhH7S+kyfhYvgZ+f2yrfnC02F/ qEO9aYvVkLLMEFh4JAA1oTYOWMoDwsXdKCVejhbhZOoQmK5o+D5smU/6Q3rAJpe3 66gV44fuB91eNfok16JgHCIWzD1IyOvyQA0EsfHQsfTk/lGt/DKMdqax3EhmIKL5 KUUcwhzm0NJRN5MZGN0abF0ywVXlLxEM3lu6LZzMXvvHMeTxIHNvFtH8hUJ0Ltvt IVbOYPAD/hhv5OMulflfvhterjCBdAIKt10aJYVHLu3enxjKKJGGc/XRmM+J2Evg FiCh9v0ShRcUqCV8BzPKQWxg00OTaDOOkL09OaOtYqOe -----END CERTIFICATE-----Generated at Mon Jan 26 22:02:55 2026 by rpki-client