This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xzVQ9anEUlcxJQu6lg_eI-EK6QQ.roa File: xzVQ9anEUlcxJQu6lg_eI-EK6QQ.roa (raw, json) Hash identifier: 86Kt24lcILhRy/GfUx34Xk5McTjh1tptJAhmbF8EPxE= Subject key identifier: C7:35:50:F5:A9:C4:52:57:31:25:0B:BA:96:0F:DE:23:E1:0A:E9:04 Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184 Certificate serial: 019B79EC46C10685D15AF0982A4067C253AF Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xzVQ9anEUlcxJQu6lg_eI-EK6QQ.roa Signing time: Thu 01 Jan 2026 14:18:06 +0000 ROA not before: Thu 01 Jan 2026 14:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12722 IP address blocks: 46.150.248.0/24 maxlen: 24 46.150.249.0/24 maxlen: 24 85.235.81.0/24 maxlen: 24 91.241.180.0/24 maxlen: 24 91.241.181.0/24 maxlen: 24 176.103.82.0/24 maxlen: 24 192.109.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:46:c1:06:85:d1:5a:f0:98:2a:40:67:c2:53:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184 Validity Not Before: Jan 1 14:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c73550f5a9c4525731250bba960fde23e10ae904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4d:d1:8c:e2:f0:72:0d:e2:d3:6c:a1:45:98: 78:fd:58:09:af:63:bf:83:d5:a7:01:d1:af:19:41: 01:d9:79:04:80:42:f1:cd:3a:09:7c:9b:97:b5:f7: 7e:e5:51:3c:fd:92:c1:1e:f8:d6:e2:73:4c:44:4f: b1:28:1a:c1:8b:a8:f0:93:08:ad:48:5d:71:b5:3a: 5a:c5:41:71:aa:45:79:c4:15:e5:72:f7:2f:6b:a2: af:d3:26:ca:f2:56:91:84:9a:12:38:41:19:e5:71: 7e:ae:df:c9:8f:23:74:86:2c:f8:f3:d0:d2:70:f3: 7a:33:f8:85:5e:9c:91:1d:2b:8c:ea:16:d1:2c:2c: 8b:45:62:e8:d7:8b:d3:04:bb:89:00:76:02:e5:bb: 57:7d:c8:ec:ad:b7:7d:cc:75:55:a4:94:3f:16:5b: 15:1b:cb:46:ee:f9:01:32:51:d4:ae:ff:73:8d:4d: 5c:0a:0a:f8:10:47:ed:52:c9:b3:1f:73:21:c9:b2: 95:54:c8:f6:35:e5:eb:e8:64:30:3b:7e:0e:88:e1: c8:c4:99:de:a5:9e:3b:bd:e4:62:d4:1e:f6:29:ec: a0:7b:2b:d5:a6:8a:89:35:54:1b:2b:4d:ad:59:e0: d6:a6:c8:5f:4b:67:38:e0:d7:c6:11:25:ca:7f:a4: 17:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:35:50:F5:A9:C4:52:57:31:25:0B:BA:96:0F:DE:23:E1:0A:E9:04 X509v3 Authority Key Identifier: keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xzVQ9anEUlcxJQu6lg_eI-EK6QQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.150.248.0/23 85.235.81.0/24 91.241.180.0/23 176.103.82.0/24 192.109.97.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:1c:68:85:00:77:33:ae:5d:cb:75:b0:b4:e8:bd:c3:bc:27: 00:ed:52:e0:45:25:7b:ab:87:78:b5:61:63:dc:9c:f2:ce:22: 81:37:a0:28:81:1c:9d:c7:bb:a7:f3:95:45:ad:e2:3d:f5:77: bf:19:b0:55:eb:4c:ac:7c:0b:11:42:93:3d:96:c4:d5:06:86: db:a4:ef:5e:ad:c9:5c:c6:17:c9:4f:3d:41:ea:d9:3f:52:bb: e4:2f:d9:4a:21:b0:79:ab:56:cc:07:53:27:16:f0:b0:94:27: d0:11:93:40:7d:75:2e:7b:f3:c7:49:a9:e1:e9:c6:9c:f1:57: ad:58:28:4c:28:ab:9c:62:1f:1b:ce:51:be:00:0a:95:70:18: 13:75:87:bc:dd:6c:89:40:8a:05:0e:5f:d7:51:b3:97:a3:28: 91:b4:84:6c:bf:03:d9:70:7c:48:96:e6:18:66:f8:70:7d:c6: 71:0d:5b:be:ac:96:d5:00:8f:67:66:d4:ef:ec:33:24:b5:ed: 8b:51:c3:24:1e:a1:85:df:e0:5b:c1:a7:dc:52:64:ff:75:4b: be:8c:f1:0b:a1:d7:01:6b:49:96:5c:e6:bd:ce:cd:a7:97:10: 65:0f:3d:09:ca:35:c5:48:de:70:55:46:cb:39:91:97:e0:6b: 44:74:b3:75 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt57EbBBoXRWvCYKkBnwlOvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NWExZGExY2IxYzkyMGFlMmY5Yjc0ODI3MGZkZWQ4NzM3 YTkxODQwHhcNMjYwMTAxMTQxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzM1NTBmNWE5YzQ1MjU3MzEyNTBiYmE5NjBmZGUyM2UxMGFlOTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA003RjOLwcg3i02yhRZh4/VgJr2O/ g9WnAdGvGUEB2XkEgELxzToJfJuXtfd+5VE8/ZLBHvjW4nNMRE+xKBrBi6jwkwit SF1xtTpaxUFxqkV5xBXlcvcva6Kv0ybK8laRhJoSOEEZ5XF+rt/JjyN0hiz489DS cPN6M/iFXpyRHSuM6hbRLCyLRWLo14vTBLuJAHYC5btXfcjsrbd9zHVVpJQ/FlsV G8tG7vkBMlHUrv9zjU1cCgr4EEftUsmzH3MhybKVVMj2NeXr6GQwO34OiOHIxJne pZ47veRi1B72KeygeyvVpoqJNVQbK02tWeDWpshfS2c44NfGESXKf6QXUwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFMc1UPWpxFJXMSULupYP3iPhCukEMB8GA1UdIwQY MBaAFMZaHaHLHJIK4vm3SCcP3thzepGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAt MzZiYWM4ZDkxZTJlLzEveHpWUTlhbkVVbGN4SlF1NmxnX2VJLUVLNlFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAtMzZiYWM4ZDkxZTJl LzEveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBLpb4AwQA VetRAwQBW/G0AwQAsGdSAwQAwG1hMA0GCSqGSIb3DQEBCwUAA4IBAQAfHGiFAHcz rl3LdbC06L3DvCcA7VLgRSV7q4d4tWFj3JzyziKBN6AogRydx7un85VFreI99Xe/ GbBV60ysfAsRQpM9lsTVBobbpO9erclcxhfJTz1B6tk/UrvkL9lKIbB5q1bMB1Mn FvCwlCfQEZNAfXUue/PHSanh6cac8VetWChMKKucYh8bzlG+AAqVcBgTdYe83WyJ QIoFDl/XUbOXoyiRtIRsvwPZcHxIluYYZvhwfcZxDVu+rJbVAI9nZtTv7DMkte2L UcMkHqGF3+BbwafcUmT/dUu+jPELodcBa0mWXOa9zs2nlxBlDz0JyjXFSN5wVUbL OZGX4GtEdLN1 -----END CERTIFICATE-----Generated at Sun Jan 25 14:38:03 2026 by rpki-client