This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/xSo_S4mp4KylJ282tG2KBfx1kB4.roa File: xSo_S4mp4KylJ282tG2KBfx1kB4.roa (raw, json) Hash identifier: y6cL2LAD2UaFnNZj8A3tj8qtOaCatFdh20b64QN2mxw= Subject key identifier: C5:2A:3F:4B:89:A9:E0:AC:A5:27:6F:36:B4:6D:8A:05:FC:75:90:1E Certificate issuer: /CN=e7c07db9880133c5cdce005bca111b552cd14c53 Certificate serial: 019B7B369916036A9D9EA72A7B29CFDA339F Authority key identifier: E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/xSo_S4mp4KylJ282tG2KBfx1kB4.roa Signing time: Thu 01 Jan 2026 20:18:54 +0000 ROA not before: Thu 01 Jan 2026 20:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202539 IP address blocks: 45.12.200.0/24 maxlen: 24 2001:67c:1160::/48 maxlen: 48 2a0e:bf00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:99:16:03:6a:9d:9e:a7:2a:7b:29:cf:da:33:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7c07db9880133c5cdce005bca111b552cd14c53 Validity Not Before: Jan 1 20:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c52a3f4b89a9e0aca5276f36b46d8a05fc75901e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:93:17:a1:83:34:b4:7d:f3:d7:bd:47:84:ab: 0a:70:38:51:9a:38:32:02:c0:22:dc:29:0e:8d:7f: 32:f4:8a:92:cf:bf:26:e0:20:18:1f:02:83:be:f3: 46:1c:a5:0e:ef:d5:cb:e8:fa:c3:b0:50:c9:f0:1f: 30:d2:63:4e:9a:27:16:a0:eb:1e:db:f1:b0:0b:ec: 72:45:db:4d:79:d0:c0:d9:fd:01:3d:4c:82:34:c3: 68:38:dc:18:13:96:0d:23:30:f2:a0:44:fa:d3:3c: 19:72:01:96:a0:de:d2:36:7b:49:e6:5b:c4:2a:a6: 48:78:40:64:18:87:26:29:31:ee:03:64:98:86:1f: 1f:6b:a2:a0:6b:da:f0:4e:07:b9:54:f3:7c:32:08: 8f:6c:84:e5:54:36:bf:a0:a3:cc:cf:89:de:52:0e: 1d:38:5a:e6:fb:a4:53:fd:14:07:f3:d4:ea:dd:7f: 20:be:c6:e1:b4:69:94:6a:08:0c:09:83:ab:c4:38: 17:20:ed:b2:af:89:fd:45:03:e3:9f:f1:40:4c:35: c6:20:c3:36:82:fd:8e:24:68:bd:4f:1f:35:25:17: b4:de:23:bd:3f:90:d9:b7:eb:15:3a:9e:fa:1c:91: 11:50:45:64:52:84:f3:14:8b:9f:e4:d2:9f:91:f1: a6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:2A:3F:4B:89:A9:E0:AC:A5:27:6F:36:B4:6D:8A:05:FC:75:90:1E X509v3 Authority Key Identifier: keyid:E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/xSo_S4mp4KylJ282tG2KBfx1kB4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.12.200.0/24 IPv6: 2001:67c:1160::/48 2a0e:bf00::/32 Signature Algorithm: sha256WithRSAEncryption 52:30:f6:c0:90:52:17:74:e5:97:83:97:69:d7:a4:04:0e:78: 0d:58:19:44:dc:54:4a:d4:28:35:51:c2:23:ec:a4:d7:bc:c9: 6b:05:b4:13:bc:73:1e:fa:f9:91:26:90:a5:46:47:4e:0a:de: a2:0d:ef:c2:47:56:cc:6d:5c:e4:64:36:0f:46:8c:08:04:f5: 46:ba:79:33:95:e1:ed:19:3d:56:fe:f6:3c:b7:76:06:3b:e3: 6a:8c:fe:83:2b:72:a2:51:5b:06:f2:2b:83:f6:d6:20:a9:cc: 7b:1f:10:15:92:da:7a:16:54:34:f0:ab:8b:58:70:88:59:19: 96:6d:ba:9b:42:44:d7:72:69:86:b4:90:6b:12:54:09:06:0f: fd:e3:4b:c3:9e:82:6a:11:ac:42:91:5a:c6:40:02:fc:1e:03: 39:fe:3d:77:7d:b0:ba:fb:4a:eb:a4:ae:cf:6a:50:e7:fd:35: 4a:77:c8:d1:68:33:e7:94:6a:9e:ee:30:00:44:30:ce:75:7e: 1d:89:ef:29:01:1d:1f:05:09:4a:d9:83:1d:d4:1d:b1:68:21: 09:18:7b:aa:e5:88:72:18:b2:03:53:6e:55:3d:b5:f7:e1:d5: 5c:68:0f:0f:80:81:b6:cd:c0:15:be:91:6e:08:ff:8f:98:55: a7:c5:42:0b -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt7NpkWA2qdnqcqeynP2jOfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3YzA3ZGI5ODgwMTMzYzVjZGNlMDA1YmNhMTExYjU1MmNk MTRjNTMwHhcNMjYwMTAxMjAxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTJhM2Y0Yjg5YTllMGFjYTUyNzZmMzZiNDZkOGEwNWZjNzU5MDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ZMXoYM0tH3z171HhKsKcDhRmjgy AsAi3CkOjX8y9IqSz78m4CAYHwKDvvNGHKUO79XL6PrDsFDJ8B8w0mNOmicWoOse 2/GwC+xyRdtNedDA2f0BPUyCNMNoONwYE5YNIzDyoET60zwZcgGWoN7SNntJ5lvE KqZIeEBkGIcmKTHuA2SYhh8fa6Kga9rwTge5VPN8MgiPbITlVDa/oKPMz4neUg4d OFrm+6RT/RQH89Tq3X8gvsbhtGmUaggMCYOrxDgXIO2yr4n9RQPjn/FATDXGIMM2 gv2OJGi9Tx81JRe03iO9P5DZt+sVOp76HJERUEVkUoTzFIuf5NKfkfGmdQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFMUqP0uJqeCspSdvNrRtigX8dZAeMB8GA1UdIwQY MBaAFOfAfbmIATPFzc4AW8oRG1Us0UxTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNThCOXVZZ0JNOFhOemdCYnloRWJWU3pSVEZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi84Y2RkNDktYzA5NC00YzZhLTkxOGMt MGFhNDYzY2RmY2EwLzEveFNvX1M0bXA0S3lsSjI4MnRHMktCZngxa0I0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi84Y2RkNDktYzA5NC00YzZhLTkxOGMtMGFhNDYzY2RmY2Ew LzEvNThCOXVZZ0JNOFhOemdCYnloRWJWU3pSVEZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQALQzIMBYE AgACMBADBwAgAQZ8EWADBQAqDr8AMA0GCSqGSIb3DQEBCwUAA4IBAQBSMPbAkFIX dOWXg5dp16QEDngNWBlE3FRK1Cg1UcIj7KTXvMlrBbQTvHMe+vmRJpClRkdOCt6i De/CR1bMbVzkZDYPRowIBPVGunkzleHtGT1W/vY8t3YGO+NqjP6DK3KiUVsG8iuD 9tYgqcx7HxAVktp6FlQ08KuLWHCIWRmWbbqbQkTXcmmGtJBrElQJBg/940vDnoJq EaxCkVrGQAL8HgM5/j13fbC6+0rrpK7PalDn/TVKd8jRaDPnlGqe7jAARDDOdX4d ie8pAR0fBQlK2YMd1B2xaCEJGHuq5YhyGLIDU25VPbX34dVcaA8PgIG2zcAVvpFu CP+PmFWnxUIL -----END CERTIFICATE-----Generated at Mon Jan 26 02:22:36 2026 by rpki-client