This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/XtlefgnEyB28EzwbORT-kKySOGs.roa File: XtlefgnEyB28EzwbORT-kKySOGs.roa (raw, json) Hash identifier: C39mVB8dOMLIIKGnICwAnb1Hvl5umoTrg4mBkxqkpmc= Subject key identifier: 5E:D9:5E:7E:09:C4:C8:1D:BC:13:3C:1B:39:14:FE:90:AC:92:38:6B Certificate issuer: /CN=c4fbe8422432727d3874b1564baeac8a80557b2d Certificate serial: 019B7E383D9E3BA235A61B0A36B68BDFAC0C Authority key identifier: C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/XtlefgnEyB28EzwbORT-kKySOGs.roa Signing time: Fri 02 Jan 2026 10:19:33 +0000 ROA not before: Fri 02 Jan 2026 10:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42201 IP address blocks: 45.130.84.0/24 maxlen: 24 45.130.85.0/24 maxlen: 24 45.130.86.0/24 maxlen: 24 45.130.87.0/24 maxlen: 24 45.148.5.0/24 maxlen: 24 45.148.7.0/24 maxlen: 24 91.240.64.0/24 maxlen: 24 91.240.65.0/24 maxlen: 24 2a10:a000::/48 maxlen: 48 2a10:a000:1::/48 maxlen: 48 2a10:a000:2::/48 maxlen: 48 2a10:a000:3::/48 maxlen: 48 2a10:a000:4::/48 maxlen: 48 2a10:a000:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:3d:9e:3b:a2:35:a6:1b:0a:36:b6:8b:df:ac:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4fbe8422432727d3874b1564baeac8a80557b2d Validity Not Before: Jan 2 10:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ed95e7e09c4c81dbc133c1b3914fe90ac92386b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:36:cd:e4:e3:93:05:f7:f7:6d:64:44:4e:ab: b4:04:82:2d:19:10:3b:68:2d:9d:10:ce:c2:59:14: 24:01:7a:06:f9:8e:af:09:b9:34:af:ff:02:d6:60: a6:0c:a0:1e:6b:ef:dc:ec:cf:6c:2e:6a:f5:3e:bc: 3e:6f:51:2b:a8:f6:30:4c:b9:0b:8e:87:30:1c:7e: d3:23:b2:3f:db:01:de:c4:63:04:cf:a1:6d:bd:e7: f2:a2:3d:ce:a8:e7:f9:30:e0:c4:91:7d:4d:d2:e4: 0f:b4:7f:e4:1a:1a:b3:1f:50:1a:b5:ee:df:31:1b: a3:b7:18:e1:65:57:c6:ef:d7:da:46:99:18:d4:12: 30:45:c5:cd:ac:9b:00:e9:8a:97:e1:25:8d:1e:3f: 77:d4:83:92:bd:f4:2b:01:9c:f6:0e:d8:53:d1:34: 51:a8:e2:48:d2:bb:78:6e:8f:04:0f:02:bc:ae:b3: 2b:c7:22:19:e4:af:78:03:d4:0a:c9:10:9e:ec:ea: 5b:e3:0f:d8:25:7f:35:36:f4:f2:a0:be:91:54:86: 0c:be:fb:4c:33:80:4c:75:57:0f:c5:08:3b:37:c4: 01:20:eb:ff:c3:86:cf:51:6a:9c:40:15:a6:49:bb: e9:86:a5:47:53:63:a7:ea:08:ff:84:a2:41:ee:c1: c4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:D9:5E:7E:09:C4:C8:1D:BC:13:3C:1B:39:14:FE:90:AC:92:38:6B X509v3 Authority Key Identifier: keyid:C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/XtlefgnEyB28EzwbORT-kKySOGs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.130.84.0/22 45.148.5.0/24 45.148.7.0/24 91.240.64.0/23 IPv6: 2a10:a000::-2a10:a000:5:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 38:90:50:d2:32:ab:91:5a:73:7c:64:0f:c0:d2:23:c8:b4:bb: c8:26:bf:4b:7f:5c:91:a2:02:56:49:80:94:86:30:bd:eb:df: 37:41:81:5b:45:f3:0d:d7:f0:70:92:7c:b5:56:22:31:77:ec: 11:55:d6:03:f4:6a:fb:2d:35:08:f3:16:c6:30:98:91:37:d9: 70:ca:6e:87:a8:10:c7:87:fe:28:fe:68:fe:b4:ec:c6:86:9c: 6b:e8:cf:10:04:4f:ee:f6:71:ec:30:a1:01:ab:e0:71:d6:f6: 96:0b:11:aa:d1:c9:90:61:6b:a7:db:32:19:68:54:91:7e:9f: 67:bc:e1:60:de:28:0c:6d:f9:64:4e:ea:19:db:69:49:71:56: 52:21:26:9d:19:e9:d3:31:d5:a1:34:ca:e7:77:19:4e:9f:e2: 00:ed:9d:e4:a0:f9:e5:bb:a4:5f:29:3f:60:b3:67:2a:e9:14: 3c:4a:0c:ef:d2:1b:6d:9d:16:2e:7b:e2:b9:63:7c:4a:17:82: 52:f6:de:f5:71:6b:d7:69:78:de:3e:37:0c:3b:46:d7:75:78: d9:53:6a:93:8e:d8:34:12:42:2e:dd:e2:3e:a7:ec:42:d2:0a: 17:cd:9c:db:3f:8f:8a:7b:86:9b:92:2b:51:09:22:16:75:9e: 68:c3:dc:78 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgISAZt+OD2eO6I1phsKNraL36wMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZmJlODQyMjQzMjcyN2QzODc0YjE1NjRiYWVhYzhhODA1 NTdiMmQwHhcNMjYwMTAyMTAxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZWQ5NWU3ZTA5YzRjODFkYmMxMzNjMWIzOTE0ZmU5MGFjOTIzODZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTbN5OOTBff3bWRETqu0BIItGRA7 aC2dEM7CWRQkAXoG+Y6vCbk0r/8C1mCmDKAea+/c7M9sLmr1Prw+b1ErqPYwTLkL jocwHH7TI7I/2wHexGMEz6Ftvefyoj3OqOf5MODEkX1N0uQPtH/kGhqzH1Aate7f MRujtxjhZVfG79faRpkY1BIwRcXNrJsA6YqX4SWNHj931IOSvfQrAZz2DthT0TRR qOJI0rt4bo8EDwK8rrMrxyIZ5K94A9QKyRCe7Opb4w/YJX81NvTyoL6RVIYMvvtM M4BMdVcPxQg7N8QBIOv/w4bPUWqcQBWmSbvphqVHU2On6gj/hKJB7sHEyQIDAQAB o4ICNDCCAjAwHQYDVR0OBBYEFF7ZXn4JxMgdvBM8GzkU/pCskjhrMB8GA1UdIwQY MBaAFMT76EIkMnJ9OHSxVkuurIqAVXstMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFB2b1FpUXljbjA0ZExGV1M2NnNpb0JWZXkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9iZjJkOGMtZTM4Yi00NjNhLWIyNmIt ZWNmMjIxN2Y5ODY3LzEvWHRsZWZnbkV5QjI4RXp3Yk9SVC1rS3lTT0dzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9iZjJkOGMtZTM4Yi00NjNhLWIyNmItZWNmMjIxN2Y5ODY3 LzEveFB2b1FpUXljbjA0ZExGV1M2NnNpb0JWZXkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTAeBAIAATAYAwQCLYJUAwQA LZQFAwQALZQHAwQBW/BAMBcEAgACMBEwDwMEBSoQoAMHASoQoAAABDANBgkqhkiG 9w0BAQsFAAOCAQEAOJBQ0jKrkVpzfGQPwNIjyLS7yCa/S39ckaICVkmAlIYwvevf N0GBW0XzDdfwcJJ8tVYiMXfsEVXWA/Rq+y01CPMWxjCYkTfZcMpuh6gQx4f+KP5o /rTsxoaca+jPEARP7vZx7DChAavgcdb2lgsRqtHJkGFrp9syGWhUkX6fZ7zhYN4o DG35ZE7qGdtpSXFWUiEmnRnp0zHVoTTK53cZTp/iAO2d5KD55bukXyk/YLNnKukU PEoM79IbbZ0WLnviuWN8SheCUvbe9XFr12l43j43DDtG13V42VNqk47YNBJCLt3i PqfsQtIKF82c2z+PinuGm5IrUQkiFnWeaMPceA== -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:47 2026 by rpki-client