This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/xXkiOHP5GPVKZFmsEyZEMy5ArTU.roa File: xXkiOHP5GPVKZFmsEyZEMy5ArTU.roa (raw, json) Hash identifier: xeH/fFNJIFUXQ3IjYea8XVk8nJ8Z09onGn+NwK+Mb24= Subject key identifier: C5:79:22:38:73:F9:18:F5:4A:64:59:AC:13:26:44:33:2E:40:AD:35 Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b Certificate serial: 019B7CEE564DD566B0B161CBAAA0553307DE Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/xXkiOHP5GPVKZFmsEyZEMy5ArTU.roa Signing time: Fri 02 Jan 2026 04:19:13 +0000 ROA not before: Fri 02 Jan 2026 04:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209956 IP address blocks: 45.158.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:56:4d:d5:66:b0:b1:61:cb:aa:a0:55:33:07:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b Validity Not Before: Jan 2 04:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c579223873f918f54a6459ac132644332e40ad35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b6:65:5e:43:e9:a5:e6:d2:b3:29:32:95:0e: f0:bd:32:e5:d3:7b:6f:d3:07:12:64:67:03:77:0c: c2:25:d1:e3:1e:8f:52:e3:50:de:4a:7e:27:4a:63: af:b6:c9:7f:d3:20:8b:cf:26:dd:0a:55:c4:cf:51: 25:d9:45:db:d9:36:79:40:19:f8:a5:3f:51:ff:8a: 7d:03:36:07:40:6a:e6:2a:a2:e5:4b:0f:e1:fd:67: db:4a:c4:16:62:4d:19:75:db:18:f6:10:bc:17:86: bf:35:2c:ce:cd:37:cf:b6:bf:ba:b7:61:48:7b:ee: e3:86:f7:50:5c:ff:9a:67:e1:d0:a3:95:d0:12:6b: 82:95:0e:60:e0:cd:33:86:ab:dc:30:df:6a:b1:21: 5a:11:58:fd:8b:2c:e8:61:3f:14:e1:e4:bc:8f:88: c5:ac:61:91:e1:32:f1:4f:93:8e:3a:aa:f4:ea:74: 32:43:47:d4:f8:bd:a8:38:ff:53:a7:15:14:0f:b3: d1:5b:e9:ca:fb:16:20:83:bb:10:29:27:9c:ba:61: 26:cb:ca:e5:2b:6f:aa:55:e0:30:6d:62:ce:36:c0: 16:d1:0d:5c:60:ab:c9:4e:7d:a1:43:93:67:17:fd: 6f:0f:56:94:68:a6:12:1b:a3:4b:a3:43:a1:7d:90: 77:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:79:22:38:73:F9:18:F5:4A:64:59:AC:13:26:44:33:2E:40:AD:35 X509v3 Authority Key Identifier: keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/xXkiOHP5GPVKZFmsEyZEMy5ArTU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.158.15.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:28:1d:60:94:85:bd:5f:21:be:3c:50:cf:9f:f6:fc:94:fa: b0:48:83:bf:da:fb:53:23:7d:3e:c1:ed:4c:08:fd:d4:f5:00: c3:aa:b1:1a:da:2b:f6:c1:2e:1b:38:8c:cb:c2:5c:a4:d5:aa: 28:83:a2:37:9d:cf:2b:cb:cb:2b:81:fc:f9:28:ac:1d:23:d2: 7f:96:1a:a3:65:7e:f8:e1:33:39:27:80:3d:ac:27:02:7f:c3: 21:d8:50:49:7d:6d:b1:f2:71:0a:e1:75:ce:ea:66:5c:c5:19: d8:29:06:a2:df:98:37:57:c3:f8:b8:bc:66:2e:a4:ad:78:97: 77:47:27:a4:97:f6:86:c7:e1:79:72:82:ce:f1:e4:18:a0:83: 2c:02:19:3b:bb:83:98:ba:68:e8:68:5b:44:d9:4b:52:c8:e9: f8:2b:e2:69:ed:19:a7:77:e1:a9:07:42:e4:37:6a:c2:1c:2a: 07:34:82:e5:fe:0f:92:c2:04:1c:e8:ff:23:74:2c:f4:64:39: a0:39:48:9f:ed:86:d0:84:91:5a:a9:d1:1a:a9:ae:1b:23:0a: 9c:45:e7:76:7f:eb:6e:d5:b9:9b:cb:07:e1:76:47:a0:8f:da: 45:dd:98:e0:6f:26:cb:25:1c:7c:f6:90:dc:9b:63:0c:41:91: 20:7e:fe:c9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87lZN1WawsWHLqqBVMwfeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMGIwNWY0MGE2OTE2Mzk0NzgyMzAyZDFiNTY2MDczNzI1 N2E0OGIwHhcNMjYwMTAyMDQxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTc5MjIzODczZjkxOGY1NGE2NDU5YWMxMzI2NDQzMzJlNDBhZDM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbZlXkPppebSsykylQ7wvTLl03tv 0wcSZGcDdwzCJdHjHo9S41DeSn4nSmOvtsl/0yCLzybdClXEz1El2UXb2TZ5QBn4 pT9R/4p9AzYHQGrmKqLlSw/h/WfbSsQWYk0ZddsY9hC8F4a/NSzOzTfPtr+6t2FI e+7jhvdQXP+aZ+HQo5XQEmuClQ5g4M0zhqvcMN9qsSFaEVj9iyzoYT8U4eS8j4jF rGGR4TLxT5OOOqr06nQyQ0fU+L2oOP9TpxUUD7PRW+nK+xYgg7sQKSecumEmy8rl K2+qVeAwbWLONsAW0Q1cYKvJTn2hQ5NnF/1vD1aUaKYSG6NLo0OhfZB3uQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMV5Ijhz+Rj1SmRZrBMmRDMuQK01MB8GA1UdIwQY MBaAFDoLBfQKaRY5R4IwLRtWYHNyV6SLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGIt YjIwZTI4ZjUxODhmLzEveFhraU9IUDVHUFZLWkZtc0V5WkVNeTVBclRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGItYjIwZTI4ZjUxODhm LzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ4PMA0G CSqGSIb3DQEBCwUAA4IBAQAqKB1glIW9XyG+PFDPn/b8lPqwSIO/2vtTI30+we1M CP3U9QDDqrEa2iv2wS4bOIzLwlyk1aoog6I3nc8ry8srgfz5KKwdI9J/lhqjZX74 4TM5J4A9rCcCf8Mh2FBJfW2x8nEK4XXO6mZcxRnYKQai35g3V8P4uLxmLqSteJd3 Ryekl/aGx+F5coLO8eQYoIMsAhk7u4OYumjoaFtE2UtSyOn4K+Jp7Rmnd+GpB0Lk N2rCHCoHNILl/g+SwgQc6P8jdCz0ZDmgOUif7YbQhJFaqdEaqa4bIwqcRed2f+tu 1bmbywfhdkegj9pF3ZjgbybLJRx89pDcm2MMQZEgfv7J -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:55 2026 by rpki-client