This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/X8tdXJvU9JJe77PtcT-JDwBOQi8.roa File: X8tdXJvU9JJe77PtcT-JDwBOQi8.roa (raw, json) Hash identifier: tVoeTVft5vKlrmkaWfTVngTflVy/IwyLYYQaNJOX868= Subject key identifier: 5F:CB:5D:5C:9B:D4:F4:92:5E:EF:B3:ED:71:3F:89:0F:00:4E:42:2F Certificate issuer: /CN=b312db95dfc3b31395e0ecb5ff26212d798de834 Certificate serial: 019B7A5AD094E1F2D5A7DA9090F0AE0DFC31 Authority key identifier: B3:12:DB:95:DF:C3:B3:13:95:E0:EC:B5:FF:26:21:2D:79:8D:E8:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/X8tdXJvU9JJe77PtcT-JDwBOQi8.roa Signing time: Thu 01 Jan 2026 16:18:50 +0000 ROA not before: Thu 01 Jan 2026 16:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42910 IP address blocks: 185.51.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:d0:94:e1:f2:d5:a7:da:90:90:f0:ae:0d:fc:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b312db95dfc3b31395e0ecb5ff26212d798de834 Validity Not Before: Jan 1 16:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5fcb5d5c9bd4f4925eefb3ed713f890f004e422f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:47:56:a5:93:92:56:05:c7:3a:9b:8b:66:d4: de:15:5e:3a:0b:11:82:b6:9b:ff:fb:52:de:63:52: 92:d2:5a:a0:9a:2a:69:fc:6c:15:3c:f7:9f:69:f0: a3:94:fd:1f:86:21:46:5c:f0:7f:f3:51:f3:13:4c: 36:2e:77:7c:46:c5:3e:8b:55:dc:e3:c2:25:e4:ba: 98:98:28:f7:de:84:7d:bb:7e:43:9f:30:10:56:b8: 38:4f:10:7c:ca:21:1e:48:2d:62:47:18:b3:22:92: 3c:bf:c5:01:58:24:e4:4c:79:8e:23:79:2c:a6:9c: ca:94:04:b0:92:34:ad:3a:01:fb:d2:e8:15:a8:20: d6:93:27:42:d5:f8:6c:84:43:b6:a0:8d:b9:7b:ad: aa:14:0f:8d:55:6e:ec:2a:bb:db:33:5a:51:03:4b: ab:2f:19:bb:5c:de:d9:ed:26:56:31:ec:b8:5e:2c: 60:a4:9d:51:c3:42:d4:08:a4:d8:75:53:cf:29:97: 22:ee:74:b3:92:0c:f3:5c:6c:5a:88:b1:85:dc:cb: e1:4f:73:d4:f6:b6:d9:6b:7e:20:ef:51:1b:96:e6: fe:12:fe:7a:0f:13:1f:89:1e:d1:ff:f4:8c:6a:97: ed:84:54:a0:e4:7e:8d:ca:f8:48:7d:03:a0:e8:02: e2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:CB:5D:5C:9B:D4:F4:92:5E:EF:B3:ED:71:3F:89:0F:00:4E:42:2F X509v3 Authority Key Identifier: keyid:B3:12:DB:95:DF:C3:B3:13:95:E0:EC:B5:FF:26:21:2D:79:8D:E8:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/X8tdXJvU9JJe77PtcT-JDwBOQi8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.51.20.0/24 Signature Algorithm: sha256WithRSAEncryption 76:6a:29:e5:4a:ab:c7:48:fd:e8:08:4c:b1:13:f8:1a:cb:b2: e5:ac:87:25:0a:25:1f:ca:a4:de:b2:ec:58:3d:8b:ff:70:5a: 72:30:15:bd:05:6e:ba:a5:6c:93:cc:b9:23:ee:73:06:b9:94: 62:f5:df:54:21:c5:77:5a:70:14:ac:4d:8d:5d:3c:f6:02:09: b5:31:cd:7e:df:e1:55:0e:45:0d:11:07:1b:7d:d5:a3:ac:30: f2:29:75:e8:e4:96:c2:21:ee:1d:8d:02:fb:e8:ed:1a:01:5e: 3c:98:35:41:ef:ab:0e:91:20:15:0b:10:ba:e4:7b:40:2a:c8: d1:2a:ca:c7:c3:70:00:5f:3a:21:ae:0d:74:4b:20:d3:68:6c: 1e:b1:13:c2:c2:46:7e:3c:2d:5a:82:83:f0:18:7e:2f:99:d9: 89:5b:ec:c8:4c:65:8d:6f:42:10:9f:46:e8:8e:5a:1d:ed:f1: 1a:e2:22:a2:a3:fa:17:4a:a5:ef:78:9a:e8:cb:d9:94:67:a6: 54:07:c1:49:d3:0e:34:28:be:0d:54:28:00:a8:68:90:11:db: 4d:d7:84:41:ef:d1:8f:53:c8:72:12:37:b9:76:08:93:cc:fa: 41:dd:2a:9b:45:39:28:7e:42:69:2d:53:db:57:e0:fc:64:19: 10:4b:06:a1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WtCU4fLVp9qQkPCuDfwxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMTJkYjk1ZGZjM2IzMTM5NWUwZWNiNWZmMjYyMTJkNzk4 ZGU4MzQwHhcNMjYwMTAxMTYxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmNiNWQ1YzliZDRmNDkyNWVlZmIzZWQ3MTNmODkwZjAwNGU0MjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4UdWpZOSVgXHOpuLZtTeFV46CxGC tpv/+1LeY1KS0lqgmipp/GwVPPefafCjlP0fhiFGXPB/81HzE0w2Lnd8RsU+i1Xc 48Il5LqYmCj33oR9u35DnzAQVrg4TxB8yiEeSC1iRxizIpI8v8UBWCTkTHmOI3ks ppzKlASwkjStOgH70ugVqCDWkydC1fhshEO2oI25e62qFA+NVW7sKrvbM1pRA0ur Lxm7XN7Z7SZWMey4XixgpJ1Rw0LUCKTYdVPPKZci7nSzkgzzXGxaiLGF3MvhT3PU 9rbZa34g71Eblub+Ev56DxMfiR7R//SMapfthFSg5H6NyvhIfQOg6ALihwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF/LXVyb1PSSXu+z7XE/iQ8ATkIvMB8GA1UdIwQY MBaAFLMS25Xfw7MTleDstf8mIS15jeg0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3hMYmxkX0RzeE9WNE95MV95WWhMWG1ONkRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9jYmM1MGUtZmFlZi00M2VjLWJkYmEt ZmRhNDcwYzYxZTA5LzEvWDh0ZFhKdlU5SkplNzdQdGNULUpEd0JPUWk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9jYmM1MGUtZmFlZi00M2VjLWJkYmEtZmRhNDcwYzYxZTA5 LzEvc3hMYmxkX0RzeE9WNE95MV95WWhMWG1ONkRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTMUMA0G CSqGSIb3DQEBCwUAA4IBAQB2ainlSqvHSP3oCEyxE/gay7LlrIclCiUfyqTesuxY PYv/cFpyMBW9BW66pWyTzLkj7nMGuZRi9d9UIcV3WnAUrE2NXTz2Agm1Mc1+3+FV DkUNEQcbfdWjrDDyKXXo5JbCIe4djQL76O0aAV48mDVB76sOkSAVCxC65HtAKsjR KsrHw3AAXzohrg10SyDTaGwesRPCwkZ+PC1agoPwGH4vmdmJW+zITGWNb0IQn0bo jlod7fEa4iKio/oXSqXveJroy9mUZ6ZUB8FJ0w40KL4NVCgAqGiQEdtN14RB79GP U8hyEje5dgiTzPpB3SqbRTkofkJpLVPbV+D8ZBkQSwah -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:07 2026 by rpki-client