This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/xzU_R1urm6OQwv7-i4Miu0Lg7FI.roa File: xzU_R1urm6OQwv7-i4Miu0Lg7FI.roa (raw, json) Hash identifier: 83vwjevGkm7TeLLNTTDiOn/v2zo45wBKwUV/hw2Ppgo= Subject key identifier: C7:35:3F:47:5B:AB:9B:A3:90:C2:FE:FE:8B:83:22:BB:42:E0:EC:52 Certificate issuer: /CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b Certificate serial: 019B7AC7ABFE0933BBAC319007F5C14B45F6 Authority key identifier: 4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/xzU_R1urm6OQwv7-i4Miu0Lg7FI.roa Signing time: Thu 01 Jan 2026 18:17:44 +0000 ROA not before: Thu 01 Jan 2026 18:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198462 IP address blocks: 45.82.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:ab:fe:09:33:bb:ac:31:90:07:f5:c1:4b:45:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b Validity Not Before: Jan 1 18:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7353f475bab9ba390c2fefe8b8322bb42e0ec52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:06:83:62:70:ec:c4:49:c6:3b:ef:e3:87:d0: 6e:3f:a2:26:ae:c4:70:f1:5b:9d:53:ca:08:23:7e: 33:48:47:72:fa:7b:48:4a:21:f3:ff:a0:1e:6e:a7: 6b:4a:5c:9d:ae:99:dc:cc:ef:75:fc:cb:bd:f6:32: 56:ce:f4:87:ca:b2:65:59:a0:26:f7:0c:04:7f:e6: 39:52:e2:4d:a7:86:d6:75:d2:ed:33:69:05:ce:24: 88:89:98:2e:5e:79:a3:96:74:8a:f0:a8:93:89:38: 25:fa:de:66:fc:63:d3:95:64:44:0b:64:48:5b:83: cc:ac:30:ff:5e:55:b4:9f:74:c3:72:db:41:f5:88: 2c:fe:65:8c:82:0f:b4:02:b1:61:ce:58:46:d2:19: 83:e6:cb:44:06:00:6f:27:89:59:7e:f4:fc:56:da: 7b:6a:90:72:77:3d:b5:e8:e4:00:e8:3b:21:48:d1: 79:c5:d5:5c:ea:0a:60:4b:3e:9b:27:b9:0d:8b:66: c4:3d:9f:ea:6c:ca:65:00:78:64:90:76:95:77:10: e3:2e:24:6b:01:a7:11:70:a2:62:82:bd:e2:43:92: 48:65:17:96:95:b7:2b:5c:09:d1:de:47:91:8c:0d: a7:d8:2f:17:5f:cc:6f:16:03:a5:fb:30:39:bf:e4: 3b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:35:3F:47:5B:AB:9B:A3:90:C2:FE:FE:8B:83:22:BB:42:E0:EC:52 X509v3 Authority Key Identifier: keyid:4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/xzU_R1urm6OQwv7-i4Miu0Lg7FI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.82.200.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:31:de:08:ea:94:dc:3f:72:1f:9c:b3:bd:84:fd:a4:ea:55: bd:2b:93:b9:4b:4e:0b:b2:87:a9:6a:59:40:f1:55:6e:26:04: 17:2d:a4:ef:90:dc:ed:29:cb:83:43:c8:a5:2f:75:01:f0:35: 5f:c6:b6:36:c0:31:c0:8c:fd:2c:9e:a1:75:3f:82:f4:d3:d8: fc:9b:53:ba:ad:8f:b3:d4:52:d9:f2:55:14:ed:e1:97:26:25: bb:3a:a2:e4:88:00:5a:55:d5:cd:64:35:00:fc:d6:4b:1e:5c: b5:be:8a:ad:79:84:27:b7:66:b4:bc:71:f5:7e:9a:f9:fe:78: 0c:cc:e3:b2:cd:6a:78:c3:a7:38:37:2b:b6:a0:bb:f1:d6:d4: de:4d:b1:f0:e4:51:21:22:dd:2d:82:5b:fa:28:ec:45:8b:57: b9:55:7e:ad:ce:e6:4a:0c:cc:9a:7c:74:98:db:1c:0d:d8:12: 78:5c:35:54:8f:99:21:88:b3:66:f2:15:3f:ce:14:75:1c:04: 5c:f9:69:ed:ab:83:60:3d:1f:e4:d1:97:f6:c0:f3:9c:08:ae: 35:ff:e3:9d:98:64:82:5e:c2:db:60:75:03:64:a2:5b:52:fb: 94:fa:62:84:0d:76:52:5c:18:78:70:bf:4f:64:ee:39:cf:a1: 1b:03:57:92 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x6v+CTO7rDGQB/XBS0X2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZWNjYzlkMWE3NmU5MTQ2OWNiNjNiMTJiZjcyNWQ3ZGVi YWZiMWIwHhcNMjYwMTAxMTgxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzM1M2Y0NzViYWI5YmEzOTBjMmZlZmU4YjgzMjJiYjQyZTBlYzUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQaDYnDsxEnGO+/jh9BuP6ImrsRw 8VudU8oII34zSEdy+ntISiHz/6AebqdrSlydrpnczO91/Mu99jJWzvSHyrJlWaAm 9wwEf+Y5UuJNp4bWddLtM2kFziSIiZguXnmjlnSK8KiTiTgl+t5m/GPTlWREC2RI W4PMrDD/XlW0n3TDcttB9Ygs/mWMgg+0ArFhzlhG0hmD5stEBgBvJ4lZfvT8Vtp7 apBydz216OQA6DshSNF5xdVc6gpgSz6bJ7kNi2bEPZ/qbMplAHhkkHaVdxDjLiRr AacRcKJigr3iQ5JIZReWlbcrXAnR3keRjA2n2C8XX8xvFgOl+zA5v+Q7oQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMc1P0dbq5ujkML+/ouDIrtC4OxSMB8GA1UdIwQY MBaAFEvszJ0adukUactjsSv3JdfeuvsbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUy16TW5ScDI2UlJweTJPeEtfY2wxOTY2LXhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83NjhmMTQtYTcyMS00NmYwLTkxOTkt NGY0Yjk5NGUwZWIyLzEveHpVX1IxdXJtNk9Rd3Y3LWk0TWl1MExnN0ZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS83NjhmMTQtYTcyMS00NmYwLTkxOTktNGY0Yjk5NGUwZWIy LzEvUy16TW5ScDI2UlJweTJPeEtfY2wxOTY2LXhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVLIMA0G CSqGSIb3DQEBCwUAA4IBAQBcMd4I6pTcP3IfnLO9hP2k6lW9K5O5S04LsoepallA 8VVuJgQXLaTvkNztKcuDQ8ilL3UB8DVfxrY2wDHAjP0snqF1P4L009j8m1O6rY+z 1FLZ8lUU7eGXJiW7OqLkiABaVdXNZDUA/NZLHly1voqteYQnt2a0vHH1fpr5/ngM zOOyzWp4w6c4Nyu2oLvx1tTeTbHw5FEhIt0tglv6KOxFi1e5VX6tzuZKDMyafHSY 2xwN2BJ4XDVUj5khiLNm8hU/zhR1HARc+Wntq4NgPR/k0Zf2wPOcCK41/+OdmGSC XsLbYHUDZKJbUvuU+mKEDXZSXBh4cL9PZO45z6EbA1eS -----END CERTIFICATE-----Generated at Mon Jan 26 04:56:18 2026 by rpki-client