This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/XPDlq-HeT_N_sHKNDPQmVFP0Ivw.roa File: XPDlq-HeT_N_sHKNDPQmVFP0Ivw.roa (raw, json) Hash identifier: kysYySEZmFj+8n7DlA09NetFDPPbrGWXcdcAS1Hu5j0= Subject key identifier: 5C:F0:E5:AB:E1:DE:4F:F3:7F:B0:72:8D:0C:F4:26:54:53:F4:22:FC Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Certificate serial: 019B7F15768DD94510B3770A013A836BE9C4 Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/XPDlq-HeT_N_sHKNDPQmVFP0Ivw.roa Signing time: Fri 02 Jan 2026 14:21:11 +0000 ROA not before: Fri 02 Jan 2026 14:21:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58061 IP address blocks: 103.102.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:76:8d:d9:45:10:b3:77:0a:01:3a:83:6b:e9:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Validity Not Before: Jan 2 14:21:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5cf0e5abe1de4ff37fb0728d0cf4265453f422fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:65:5d:8d:e7:8f:f2:a9:5f:f1:d5:d7:2c:64: c1:45:93:92:e2:05:e6:4d:2e:7f:3c:ed:e5:89:bd: a4:fa:d7:c3:a2:f1:39:17:ce:18:0f:fc:e4:db:0c: a4:4a:08:b5:a9:aa:fe:ec:ac:6b:23:b8:40:35:6e: 48:3d:f2:a1:e9:5c:19:e7:d4:a5:69:0b:c3:23:79: 98:2d:e8:68:d4:cc:7b:36:20:b2:3f:dd:4c:43:81: c2:7c:33:7c:9d:19:13:14:7a:0e:db:fd:10:b9:94: e3:f8:0c:b9:98:54:c3:32:1c:7d:bb:49:c8:40:75: 0d:66:db:e7:d9:76:3e:10:bb:ee:d0:80:2e:a1:02: 1f:30:26:0c:58:b4:92:1a:a2:11:d4:21:aa:eb:16: 9f:81:85:01:55:1a:d7:e3:82:df:12:29:66:46:76: 95:31:2a:7d:14:22:c7:6e:fd:b1:c5:a4:43:0f:dc: 6d:2c:d9:30:bb:c4:72:8d:93:fc:71:21:fa:0e:44: c0:7e:1d:36:c2:14:0e:7e:98:af:66:07:4e:0b:bf: 75:ce:be:8c:ab:78:9a:3d:23:f1:90:e5:38:7b:db: e8:83:52:a3:7b:e7:d8:d5:b6:a2:c2:e6:8b:ac:9a: 6c:dc:4e:a5:64:69:1f:2b:b0:33:87:a7:94:8e:fe: e0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F0:E5:AB:E1:DE:4F:F3:7F:B0:72:8D:0C:F4:26:54:53:F4:22:FC X509v3 Authority Key Identifier: keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/XPDlq-HeT_N_sHKNDPQmVFP0Ivw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.102.229.0/24 Signature Algorithm: sha256WithRSAEncryption 17:35:81:08:45:fb:18:1f:2e:fc:90:bf:9f:ba:9c:fe:f4:71: f8:60:b2:55:34:65:54:30:29:69:54:67:96:f6:1b:6e:09:55: bc:73:b3:a1:ac:95:12:e7:d7:98:19:3b:91:19:5a:9e:1a:7b: 74:d4:19:2a:0b:4b:d0:1e:5d:7c:82:9c:15:b1:2d:af:3e:51: 58:d5:cf:2b:99:75:fe:99:7c:85:14:42:45:dc:3a:05:c0:52: 9c:63:ca:82:44:90:34:ad:e4:08:7d:bf:3a:38:61:65:44:6e: 3e:e8:57:63:0f:ac:87:bc:00:e8:4d:0d:48:68:b0:36:43:4a: e1:2a:7a:67:25:16:b6:43:3c:6a:19:43:48:33:aa:a3:e6:14: 4d:5f:f7:91:5a:36:1d:17:2a:ef:09:49:eb:99:91:6f:e6:e4: c4:45:25:23:69:84:ab:de:95:54:27:8f:31:f6:be:e9:0a:41: d2:07:7d:ae:f8:f8:27:8c:6e:66:f7:c0:b8:6e:31:41:0d:d0: 43:c1:98:a8:f3:4c:af:4d:94:b6:54:8c:68:b8:86:6f:87:7e: 82:70:f6:df:21:97:15:98:29:31:81:66:88:a7:a2:39:06:0b: a5:c4:2a:48:ad:ae:28:58:89:f9:2f:d7:3a:0f:57:f7:a4:5c: 02:b6:f9:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FXaN2UUQs3cKATqDa+nEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjJhYjY3OTIyY2UwMjc1ZThjNjFhYmZhODJkMmE3NTRh ZjZkYzQwHhcNMjYwMTAyMTQyMTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2YwZTVhYmUxZGU0ZmYzN2ZiMDcyOGQwY2Y0MjY1NDUzZjQyMmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGVdjeeP8qlf8dXXLGTBRZOS4gXm TS5/PO3lib2k+tfDovE5F84YD/zk2wykSgi1qar+7KxrI7hANW5IPfKh6VwZ59Sl aQvDI3mYLeho1Mx7NiCyP91MQ4HCfDN8nRkTFHoO2/0QuZTj+Ay5mFTDMhx9u0nI QHUNZtvn2XY+ELvu0IAuoQIfMCYMWLSSGqIR1CGq6xafgYUBVRrX44LfEilmRnaV MSp9FCLHbv2xxaRDD9xtLNkwu8RyjZP8cSH6DkTAfh02whQOfpivZgdOC791zr6M q3iaPSPxkOU4e9vog1Kje+fY1baiwuaLrJps3E6lZGkfK7Azh6eUjv7g/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFzw5avh3k/zf7ByjQz0JlRT9CL8MB8GA1UdIwQY MBaAFJUiq2eSLOAnXoxhq/qC0qdUr23EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEt ZTUyNmE5NDA5ZmI4LzEvWFBEbHEtSGVUX05fc0hLTkRQUW1WRlAwSXZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEtZTUyNmE5NDA5ZmI4 LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2blMA0G CSqGSIb3DQEBCwUAA4IBAQAXNYEIRfsYHy78kL+fupz+9HH4YLJVNGVUMClpVGeW 9htuCVW8c7OhrJUS59eYGTuRGVqeGnt01BkqC0vQHl18gpwVsS2vPlFY1c8rmXX+ mXyFFEJF3DoFwFKcY8qCRJA0reQIfb86OGFlRG4+6FdjD6yHvADoTQ1IaLA2Q0rh KnpnJRa2QzxqGUNIM6qj5hRNX/eRWjYdFyrvCUnrmZFv5uTERSUjaYSr3pVUJ48x 9r7pCkHSB32u+PgnjG5m98C4bjFBDdBDwZio80yvTZS2VIxouIZvh36CcPbfIZcV mCkxgWaIp6I5BgulxCpIra4oWIn5L9c6D1f3pFwCtvlS -----END CERTIFICATE-----Generated at Thu Jan 22 21:35:10 2026 by rpki-client