This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/xPJTQ1B0b58IM-swEMoKUaok-jY.roa File: xPJTQ1B0b58IM-swEMoKUaok-jY.roa (raw, json) Hash identifier: 8WLFOKN87EOL1HNV9YM46I3DeHkcz7BwooQlJCjXH2s= Subject key identifier: C4:F2:53:43:50:74:6F:9F:08:33:EB:30:10:CA:0A:51:AA:24:FA:36 Certificate issuer: /CN=4ab7dc03789f58621b25e8dd0d925dc91b4a5aa2 Certificate serial: 019B77595C01E9416FD968217017AF84DA8C Authority key identifier: 4A:B7:DC:03:78:9F:58:62:1B:25:E8:DD:0D:92:5D:C9:1B:4A:5A:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/xPJTQ1B0b58IM-swEMoKUaok-jY.roa Signing time: Thu 01 Jan 2026 02:18:23 +0000 ROA not before: Thu 01 Jan 2026 02:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49409 IP address blocks: 95.141.80.0/20 maxlen: 24 185.134.124.0/22 maxlen: 24 2a02:f58::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.crl rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:5c:01:e9:41:6f:d9:68:21:70:17:af:84:da:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7dc03789f58621b25e8dd0d925dc91b4a5aa2 Validity Not Before: Jan 1 02:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4f2534350746f9f0833eb3010ca0a51aa24fa36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7d:7b:a0:ff:0d:89:49:b5:e5:2e:df:31:74: de:91:b8:e4:47:a4:fb:0e:a3:60:df:5c:4e:b9:07: 7c:de:c9:e1:5e:c8:0a:72:3f:07:ed:ca:5d:b7:bd: 58:e2:b2:68:a0:db:d4:f9:7c:bf:0e:d5:cb:ae:28: fb:0b:04:ce:75:8c:d6:0b:86:d3:b9:52:d1:3c:40: ed:6e:5d:11:5a:5d:dd:f2:d2:4c:b4:c3:c1:5e:a2: f6:7f:84:cf:fb:e3:dc:e7:39:e9:2d:fb:01:fd:00: 82:a3:1a:44:fa:97:a7:85:54:43:44:84:2d:14:9e: 0f:17:97:62:06:fc:43:93:48:86:40:a4:42:d8:07: a1:40:10:4b:21:c5:97:0b:5d:36:7c:50:10:97:16: cd:16:a5:d7:72:43:56:10:01:30:a2:df:32:27:ef: 48:c6:5c:d2:3d:26:7e:d9:4d:f9:dd:de:c6:17:06: 21:ea:f7:31:af:6d:f4:e2:09:a0:43:49:26:34:1a: c4:4d:58:fd:4c:bb:fd:18:ab:76:1a:78:87:c2:4d: f8:05:48:61:82:82:5d:ff:08:b0:6d:e7:82:33:14: b5:5e:a0:81:c0:8d:ea:eb:53:04:98:85:9f:1f:90: 4f:50:86:46:58:16:f5:89:78:03:3d:c6:52:a4:6d: 75:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:F2:53:43:50:74:6F:9F:08:33:EB:30:10:CA:0A:51:AA:24:FA:36 X509v3 Authority Key Identifier: keyid:4A:B7:DC:03:78:9F:58:62:1B:25:E8:DD:0D:92:5D:C9:1B:4A:5A:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/xPJTQ1B0b58IM-swEMoKUaok-jY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.141.80.0/20 185.134.124.0/22 IPv6: 2a02:f58::/29 Signature Algorithm: sha256WithRSAEncryption 34:41:ae:87:cc:5d:6f:ee:22:4e:42:ac:37:90:76:f1:6b:54: d5:ac:de:ce:0d:0b:8e:1e:4d:4d:85:a8:06:86:5c:b2:91:88: f3:5e:3f:6b:1e:9e:8d:f6:cf:d2:be:01:7d:4e:99:ab:94:19: 3e:07:e2:0d:3d:4c:3c:05:59:e3:40:26:8f:54:a8:96:51:82: e7:56:42:6d:03:2a:4c:eb:eb:36:c6:4b:7d:07:bb:60:d1:c5: 4d:37:1d:cc:ca:47:3c:6e:2d:b9:80:e7:41:eb:31:04:1b:d5: 64:cc:ee:4d:e8:db:1a:f0:41:2b:d3:e9:3e:f7:2a:a7:8e:c2: d9:fc:e8:79:92:84:bc:1e:76:7b:92:c5:a5:24:83:f8:0d:64: d4:61:27:b8:dd:ab:98:7d:06:2b:d7:9f:b3:f5:e1:d4:6b:1a: 7b:70:80:10:8a:8b:71:0e:7a:57:9d:f8:b0:8e:c5:13:cc:ea: 63:85:8f:b3:53:7c:0f:44:d1:88:dc:cf:cf:31:10:8c:b4:06: aa:03:d1:06:49:4a:88:ba:17:68:a5:0c:1b:da:8c:77:b4:82: 58:2c:f4:43:a9:bf:c3:16:2a:5f:6d:07:ed:5c:b6:ba:86:94: e6:e6:45:2d:5c:c9:f1:fe:a5:d2:d8:60:77:df:03:42:b9:c1: e5:fa:6a:99 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt3WVwB6UFv2WghcBevhNqMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhYjdkYzAzNzg5ZjU4NjIxYjI1ZThkZDBkOTI1ZGM5MWI0 YTVhYTIwHhcNMjYwMTAxMDIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNGYyNTM0MzUwNzQ2ZjlmMDgzM2ViMzAxMGNhMGE1MWFhMjRmYTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtX17oP8NiUm15S7fMXTekbjkR6T7 DqNg31xOuQd83snhXsgKcj8H7cpdt71Y4rJooNvU+Xy/DtXLrij7CwTOdYzWC4bT uVLRPEDtbl0RWl3d8tJMtMPBXqL2f4TP++Pc5znpLfsB/QCCoxpE+penhVRDRIQt FJ4PF5diBvxDk0iGQKRC2AehQBBLIcWXC102fFAQlxbNFqXXckNWEAEwot8yJ+9I xlzSPSZ+2U353d7GFwYh6vcxr2304gmgQ0kmNBrETVj9TLv9GKt2GniHwk34BUhh goJd/wiwbeeCMxS1XqCBwI3q61MEmIWfH5BPUIZGWBb1iXgDPcZSpG11LQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFMTyU0NQdG+fCDPrMBDKClGqJPo2MB8GA1UdIwQY MBaAFEq33AN4n1hiGyXo3Q2SXckbSlqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3JmY0EzaWZXR0liSmVqZERaSmR5UnRLV3FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC84YTU5ZGItNWFkOC00ZjNmLTk3YzIt ZjM4YmNiZDkzMzkwLzEveFBKVFExQjBiNThJTS1zd0VNb0tVYW9rLWpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC84YTU5ZGItNWFkOC00ZjNmLTk3YzItZjM4YmNiZDkzMzkw LzEvU3JmY0EzaWZXR0liSmVqZERaSmR5UnRLV3FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEX41QAwQC uYZ8MA0EAgACMAcDBQMqAg9YMA0GCSqGSIb3DQEBCwUAA4IBAQA0Qa6HzF1v7iJO Qqw3kHbxa1TVrN7ODQuOHk1NhagGhlyykYjzXj9rHp6N9s/SvgF9TpmrlBk+B+IN PUw8BVnjQCaPVKiWUYLnVkJtAypM6+s2xkt9B7tg0cVNNx3Mykc8bi25gOdB6zEE G9VkzO5N6Nsa8EEr0+k+9yqnjsLZ/Oh5koS8HnZ7ksWlJIP4DWTUYSe43auYfQYr 15+z9eHUaxp7cIAQiotxDnpXnfiwjsUTzOpjhY+zU3wPRNGI3M/PMRCMtAaqA9EG SUqIuhdopQwb2ox3tIJYLPRDqb/DFipfbQftXLa6hpTm5kUtXMnx/qXS2GB33wNC ucHl+mqZ -----END CERTIFICATE-----Generated at Mon Jan 26 13:11:06 2026 by rpki-client