This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/xsczLZy6vYyowOb8czcl6wqwt9w.roa File: xsczLZy6vYyowOb8czcl6wqwt9w.roa (raw, json) Hash identifier: Mvlo5cxvh4qQACxtbdlZhswtrG2sScu72g8Sl/rtq7M= Subject key identifier: C6:C7:33:2D:9C:BA:BD:8C:A8:C0:E6:FC:73:37:25:EB:0A:B0:B7:DC Certificate issuer: /CN=e119535fac3fa48779579bce8fc3b402def2cb44 Certificate serial: 019B7B35FD3C3C4078D239FDC740BEF84566 Authority key identifier: E1:19:53:5F:AC:3F:A4:87:79:57:9B:CE:8F:C3:B4:02:DE:F2:CB:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4RlTX6w_pId5V5vOj8O0At7yy0Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/xsczLZy6vYyowOb8czcl6wqwt9w.roa Signing time: Thu 01 Jan 2026 20:18:14 +0000 ROA not before: Thu 01 Jan 2026 20:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202558 IP address blocks: 185.46.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft rsync://rpki.ripe.net/repository/DEFAULT/4RlTX6w_pId5V5vOj8O0At7yy0Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:fd:3c:3c:40:78:d2:39:fd:c7:40:be:f8:45:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e119535fac3fa48779579bce8fc3b402def2cb44 Validity Not Before: Jan 1 20:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6c7332d9cbabd8ca8c0e6fc733725eb0ab0b7dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0d:6e:a8:d1:8c:44:fa:71:56:65:9d:ec:a6: 48:71:54:6b:ee:2b:64:49:83:37:da:c8:c6:a0:f4: 80:8b:87:e5:67:ef:d3:33:6c:9a:b7:92:75:4b:d5: d0:29:ba:a4:2d:c9:40:36:a5:b5:72:2b:bc:8a:3c: ea:ea:f3:9e:69:14:a3:0c:77:b0:54:f6:fb:0e:d3: e1:81:64:56:38:cb:ec:a4:2d:90:4b:13:d1:72:ad: 87:a5:ee:a1:58:dc:ca:1a:45:c5:2c:93:75:e4:b8: a7:ec:79:71:f4:bc:83:65:14:c8:27:dd:d0:ea:15: 66:e2:d7:42:b1:e6:0b:d4:d7:da:63:2c:a8:f9:9a: 6a:87:23:c0:6e:85:6d:78:d6:a5:97:40:cc:43:9e: b9:54:7c:1d:8d:05:ba:78:bb:73:9e:e3:ed:79:cc: 34:a5:00:0d:7b:93:21:27:b4:27:8a:de:33:22:69: be:2d:4f:92:1d:fc:b1:1e:80:cb:14:38:3f:80:46: e8:9c:9e:eb:23:dd:44:4a:2d:c9:06:c4:a7:90:57: 84:d2:ee:da:d7:c3:68:a7:87:c9:48:68:df:27:9f: e4:de:e1:98:5a:59:71:11:f1:df:b4:11:cc:1d:22: 92:ed:7b:2d:ba:06:3e:79:02:49:98:a8:a7:cc:11: 80:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C7:33:2D:9C:BA:BD:8C:A8:C0:E6:FC:73:37:25:EB:0A:B0:B7:DC X509v3 Authority Key Identifier: keyid:E1:19:53:5F:AC:3F:A4:87:79:57:9B:CE:8F:C3:B4:02:DE:F2:CB:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RlTX6w_pId5V5vOj8O0At7yy0Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/xsczLZy6vYyowOb8czcl6wqwt9w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.46.141.0/24 Signature Algorithm: sha256WithRSAEncryption 88:e2:59:3b:09:d4:ae:63:1b:17:3f:bd:b0:c1:7e:4d:3a:03: 76:c9:5e:95:f9:4d:6e:ba:ca:d2:bd:f2:ce:57:fa:4f:8f:14: ae:47:e2:31:24:c7:e0:79:ff:37:b3:72:94:47:a3:c5:77:92: 5e:79:2c:ec:32:68:a9:d7:b6:14:b0:2a:53:3e:67:c6:65:b7: 48:0b:5c:f5:18:d2:06:87:5b:b5:bf:88:a1:f5:98:24:71:81: 85:af:ef:cc:9c:a9:93:27:07:2d:96:30:9d:ff:f7:75:ae:bd: 99:e3:29:38:6f:a0:ec:7a:8d:95:b0:b8:3b:70:e3:25:4f:64: 5e:89:98:8a:2c:8d:29:ed:b7:29:5e:13:fd:36:fa:05:ab:09: 0c:d0:3f:6e:50:5e:48:81:de:6a:90:25:51:d5:f7:a5:2b:24: fb:40:be:1e:f8:89:39:71:cc:a6:95:81:b6:46:39:6d:0c:e9: 28:65:30:ff:ae:69:47:17:82:7e:69:55:25:cf:95:5a:26:93: fd:85:b4:8e:b9:4c:5e:4e:50:b6:69:19:f1:2e:10:e7:df:75: cd:e9:69:6c:a3:d8:38:4b:12:16:5a:e4:96:91:2b:36:78:fe: 40:ea:e8:37:84:b9:60:b9:a2:36:ce:db:12:52:f3:17:33:f3: 69:94:40:21 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nf08PEB40jn9x0C++EVmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMTk1MzVmYWMzZmE0ODc3OTU3OWJjZThmYzNiNDAyZGVm MmNiNDQwHhcNMjYwMTAxMjAxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmM3MzMyZDljYmFiZDhjYThjMGU2ZmM3MzM3MjVlYjBhYjBiN2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzw1uqNGMRPpxVmWd7KZIcVRr7itk SYM32sjGoPSAi4flZ+/TM2yat5J1S9XQKbqkLclANqW1ciu8ijzq6vOeaRSjDHew VPb7DtPhgWRWOMvspC2QSxPRcq2Hpe6hWNzKGkXFLJN15Lin7Hlx9LyDZRTIJ93Q 6hVm4tdCseYL1NfaYyyo+ZpqhyPAboVteNall0DMQ565VHwdjQW6eLtznuPtecw0 pQANe5MhJ7Qnit4zImm+LU+SHfyxHoDLFDg/gEbonJ7rI91ESi3JBsSnkFeE0u7a 18Nop4fJSGjfJ5/k3uGYWllxEfHftBHMHSKS7XstugY+eQJJmKinzBGAzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMbHMy2cur2MqMDm/HM3JesKsLfcMB8GA1UdIwQY MBaAFOEZU1+sP6SHeVebzo/DtALe8stEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFJsVFg2d19wSWQ1VjV2T2o4TzBBdDd5eTBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85Yjg3ZDQtZTBmOS00MjNkLWFmOWQt ZGU5ZTI3ZWJiMjVkLzEveHNjekxaeTZ2WXlvd09iOGN6Y2w2d3F3dDl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi85Yjg3ZDQtZTBmOS00MjNkLWFmOWQtZGU5ZTI3ZWJiMjVk LzEvNFJsVFg2d19wSWQ1VjV2T2o4TzBBdDd5eTBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuS6NMA0G CSqGSIb3DQEBCwUAA4IBAQCI4lk7CdSuYxsXP72wwX5NOgN2yV6V+U1uusrSvfLO V/pPjxSuR+IxJMfgef83s3KUR6PFd5JeeSzsMmip17YUsCpTPmfGZbdIC1z1GNIG h1u1v4ih9ZgkcYGFr+/MnKmTJwctljCd//d1rr2Z4yk4b6Dseo2VsLg7cOMlT2Re iZiKLI0p7bcpXhP9NvoFqwkM0D9uUF5Igd5qkCVR1felKyT7QL4e+Ik5ccymlYG2 RjltDOkoZTD/rmlHF4J+aVUlz5VaJpP9hbSOuUxeTlC2aRnxLhDn33XN6Wlso9g4 SxIWWuSWkSs2eP5A6ug3hLlguaI2ztsSUvMXM/NplEAh -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:45 2026 by rpki-client