This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/xtTXQql1ri4eq3pyhrsHPWXrPFE.roa File: xtTXQql1ri4eq3pyhrsHPWXrPFE.roa (raw, json) Hash identifier: I2eRn2bIWlsMAkd0lx59Iz7phgTUkGVbFQpEjrIOmtQ= Subject key identifier: C6:D4:D7:42:A9:75:AE:2E:1E:AB:7A:72:86:BB:07:3D:65:EB:3C:51 Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B97107D701384B84D46B78CEAD1C532A0 Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/xtTXQql1ri4eq3pyhrsHPWXrPFE.roa Signing time: Wed 07 Jan 2026 06:06:38 +0000 ROA not before: Wed 07 Jan 2026 06:06:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21859 IP address blocks: 212.168.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:97:10:7d:70:13:84:b8:4d:46:b7:8c:ea:d1:c5:32:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 7 06:06:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6d4d742a975ae2e1eab7a7286bb073d65eb3c51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:69:83:d3:41:5d:a5:5b:fb:22:aa:b1:8c:cf: 7f:21:95:11:36:11:02:69:4b:8b:21:8d:09:f0:e2: 41:02:62:61:11:96:9b:5f:fb:8c:6a:ea:95:0d:73: b4:43:4b:a5:b6:76:b0:0b:a6:9e:3b:b6:35:a8:29: 2a:07:fa:e5:ff:40:01:04:da:99:6f:99:ee:3e:29: 65:d0:6e:b0:ef:22:57:2e:75:ac:a3:e5:d8:d3:fa: bd:94:48:b7:b6:8d:f8:a2:34:19:84:0d:f8:62:c4: 3a:cb:7e:e3:f1:24:95:cb:fb:1e:d5:b5:7b:4e:34: 6f:cc:f4:a6:f6:5a:46:11:6d:95:09:d1:bb:5c:d9: 3c:e3:ed:e2:c7:cf:e4:f5:5c:40:09:ba:a1:a0:12: 2a:ec:a7:b0:30:e0:6a:6d:e7:e0:f3:b8:2a:db:1f: 06:47:98:05:79:2f:f8:b3:15:25:61:2e:f8:7a:10: 27:cf:13:2d:70:af:3b:fb:b6:14:f4:9a:bb:54:2a: 01:5c:c0:89:71:df:50:b4:96:1f:fc:52:8f:28:c7: de:c0:bf:64:6e:5d:24:27:6f:74:5d:9e:05:13:2f: 4d:1b:24:9c:0a:03:8e:f0:9b:c1:39:5f:d9:c4:9c: 6c:f0:4a:df:3e:26:73:4f:1d:56:5b:9c:70:69:1c: 8b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D4:D7:42:A9:75:AE:2E:1E:AB:7A:72:86:BB:07:3D:65:EB:3C:51 X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/xtTXQql1ri4eq3pyhrsHPWXrPFE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.168.4.0/22 Signature Algorithm: sha256WithRSAEncryption 02:c1:71:79:86:41:cb:49:28:7d:ab:b8:57:dd:a3:fb:2a:ed: 20:2a:a1:0b:dc:4d:3e:a0:5d:1a:e6:56:18:24:81:45:85:25: be:d7:c6:9a:60:ea:59:7c:6d:f3:9c:af:1f:0f:c4:66:fb:e8: 69:92:9c:13:d0:51:a3:53:8b:3d:fa:02:5f:8b:5d:38:b8:f0: df:9e:8a:90:b8:8d:8d:4d:48:5f:f1:b5:c5:18:bd:30:f6:e5: bd:ec:16:cb:50:52:54:3f:bd:6d:7e:9c:01:ff:1a:e0:11:e0: db:eb:af:63:42:25:7a:b4:19:32:36:a0:14:33:a9:9a:5f:8a: 4b:9a:3a:82:e8:24:33:0a:6c:e1:8e:c2:41:4d:20:e5:01:9d: 66:8b:c5:e1:be:48:68:e6:cc:ec:e5:78:ed:61:ad:2b:b3:97: df:d2:a4:f6:d1:e4:24:a7:64:80:a8:4f:48:f3:0d:05:77:77: 92:9c:ee:ec:84:b1:d4:64:79:58:1e:c1:5f:49:f3:51:9c:de: f7:b4:ed:44:5a:21:77:74:da:fb:22:1f:c8:81:5d:52:74:54: c0:28:ea:99:5f:65:45:40:64:9f:15:d2:17:50:79:ed:fc:3e: 33:94:3e:ad:26:c8:49:79:0a:cc:8e:81:34:4f:8d:c8:cb:b7: 07:8a:36:7f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuXEH1wE4S4TUa3jOrRxTKgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTA3MDYwNjM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmQ0ZDc0MmE5NzVhZTJlMWVhYjdhNzI4NmJiMDczZDY1ZWIzYzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WmD00FdpVv7IqqxjM9/IZURNhEC aUuLIY0J8OJBAmJhEZabX/uMauqVDXO0Q0ultnawC6aeO7Y1qCkqB/rl/0ABBNqZ b5nuPill0G6w7yJXLnWso+XY0/q9lEi3to34ojQZhA34YsQ6y37j8SSVy/se1bV7 TjRvzPSm9lpGEW2VCdG7XNk84+3ix8/k9VxACbqhoBIq7KewMOBqbefg87gq2x8G R5gFeS/4sxUlYS74ehAnzxMtcK87+7YU9Jq7VCoBXMCJcd9QtJYf/FKPKMfewL9k bl0kJ290XZ4FEy9NGyScCgOO8JvBOV/ZxJxs8ErfPiZzTx1WW5xwaRyL9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMbU10Kpda4uHqt6coa7Bz1l6zxRMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEveHRUWFFxbDFyaTRlcTNweWhyc0hQV1hyUEZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1KgEMA0G CSqGSIb3DQEBCwUAA4IBAQACwXF5hkHLSSh9q7hX3aP7Ku0gKqEL3E0+oF0a5lYY JIFFhSW+18aaYOpZfG3znK8fD8Rm++hpkpwT0FGjU4s9+gJfi104uPDfnoqQuI2N TUhf8bXFGL0w9uW97BbLUFJUP71tfpwB/xrgEeDb669jQiV6tBkyNqAUM6maX4pL mjqC6CQzCmzhjsJBTSDlAZ1mi8Xhvkho5szs5XjtYa0rs5ff0qT20eQkp2SAqE9I 8w0Fd3eSnO7shLHUZHlYHsFfSfNRnN73tO1EWiF3dNr7Ih/IgV1SdFTAKOqZX2VF QGSfFdIXUHnt/D4zlD6tJshJeQrMjoE0T43Iy7cHijZ/ -----END CERTIFICATE-----Generated at Sun Jan 25 12:02:18 2026 by rpki-client