This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/xewkVdgaX0V36_1yEpoUi8m7v6c.roa File: xewkVdgaX0V36_1yEpoUi8m7v6c.roa (raw, json) Hash identifier: kF/BrgELi4+Am7OL4A+u/VI4R7I6POdHlx4gpQyUi6M= Subject key identifier: C5:EC:24:55:D8:1A:5F:45:77:EB:FD:72:12:9A:14:8B:C9:BB:BF:A7 Certificate issuer: /CN=29be02dea0a086e9880f564c86872bbc597cc672 Certificate serial: 019B797EA6D8EC2DFDE10332FF20CC14E483 Authority key identifier: 29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/xewkVdgaX0V36_1yEpoUi8m7v6c.roa Signing time: Thu 01 Jan 2026 12:18:21 +0000 ROA not before: Thu 01 Jan 2026 12:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210203 IP address blocks: 139.45.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:a6:d8:ec:2d:fd:e1:03:32:ff:20:cc:14:e4:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29be02dea0a086e9880f564c86872bbc597cc672 Validity Not Before: Jan 1 12:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5ec2455d81a5f4577ebfd72129a148bc9bbbfa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7c:ff:b3:0c:8c:17:49:c1:be:6b:5e:7b:9c: e1:66:8f:5d:cf:cb:d8:c6:6b:1e:96:fb:9a:2b:c1: 46:ae:8a:37:19:bb:55:e4:13:f0:0e:84:c5:5c:7c: 74:c5:d8:c1:fc:2b:9a:cc:6a:10:00:e3:bb:c4:20: e8:1b:db:68:59:ce:b9:60:e1:3b:75:98:20:38:e6: 6f:f8:24:56:a8:75:82:48:c8:19:a2:49:61:0e:48: b6:18:80:a2:de:00:2c:1d:d6:f0:c8:62:d9:4b:2d: c9:88:34:12:84:0e:03:30:6b:23:49:b0:2e:12:cc: 95:44:bd:28:34:69:e8:a1:31:5c:d0:98:ea:72:31: e2:7c:c7:c4:67:c5:f9:55:0a:e8:4a:fa:3d:7b:2c: b8:2a:3f:27:43:9c:15:ff:38:64:0e:65:fd:87:43: a1:e7:22:4b:77:f8:c4:bd:f7:f1:1a:a2:24:80:35: 31:a5:11:47:8d:63:67:73:8d:b5:b7:70:62:22:6a: fb:e2:6c:74:c9:4e:a2:22:24:07:5e:e3:e8:2a:4d: 6a:e4:2d:6b:04:95:cb:77:bc:cd:fb:c8:35:79:ae: e4:b4:28:73:b8:17:08:8d:87:b5:4b:4d:ca:7a:28: 47:6e:39:42:48:08:c5:c9:01:82:05:66:8a:41:e7: 37:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:EC:24:55:D8:1A:5F:45:77:EB:FD:72:12:9A:14:8B:C9:BB:BF:A7 X509v3 Authority Key Identifier: keyid:29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/xewkVdgaX0V36_1yEpoUi8m7v6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.45.198.0/23 Signature Algorithm: sha256WithRSAEncryption 6d:ca:d9:da:6d:49:b5:a1:c3:e0:38:44:11:53:01:21:f7:40: 98:f9:3e:4a:fe:26:4c:1f:21:be:c5:01:9c:99:fd:b8:77:03: e1:4a:1b:d4:14:c0:e4:b3:9f:eb:f8:71:65:0c:53:1a:4c:4e: 37:45:dc:99:c8:e1:ad:8a:78:90:ff:db:42:cf:f7:c0:8b:a7: 75:90:75:ce:d7:f6:16:f0:bf:1d:c4:e6:ca:36:10:f9:50:7c: fe:0a:8a:c2:04:7f:6b:bd:54:c1:b4:6d:d7:ae:d7:7b:37:40: 93:aa:de:6f:95:75:8d:e5:64:03:ba:2d:b6:ac:29:e2:bd:80: ea:6f:82:d9:2f:cf:5f:fd:df:60:e7:9b:8d:8c:d3:84:9e:f6: 8e:3f:d2:86:d7:76:6d:45:fe:c2:24:cd:7b:a9:b5:a9:22:35: e5:0d:09:17:48:e6:83:76:3f:e0:79:7f:08:dc:2e:a6:66:2b: 0f:ef:98:86:7b:3f:b0:ec:98:ee:5a:3c:f7:b9:49:49:ea:91: c0:bc:dd:2a:79:79:e0:4d:31:1b:78:cd:0e:f1:5d:02:ae:da: 11:93:54:0a:3d:56:9c:20:0a:98:5b:8e:ea:8f:d5:ce:9a:8d: c0:ec:df:9d:d1:07:2c:52:77:42:a1:c0:b6:55:75:4b:fa:05: db:ec:62:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fqbY7C394QMy/yDMFOSDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YmUwMmRlYTBhMDg2ZTk4ODBmNTY0Yzg2ODcyYmJjNTk3 Y2M2NzIwHhcNMjYwMTAxMTIxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNWVjMjQ1NWQ4MWE1ZjQ1NzdlYmZkNzIxMjlhMTQ4YmM5YmJiZmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXz/swyMF0nBvmtee5zhZo9dz8vY xmselvuaK8FGroo3GbtV5BPwDoTFXHx0xdjB/CuazGoQAOO7xCDoG9toWc65YOE7 dZggOOZv+CRWqHWCSMgZoklhDki2GICi3gAsHdbwyGLZSy3JiDQShA4DMGsjSbAu EsyVRL0oNGnooTFc0JjqcjHifMfEZ8X5VQroSvo9eyy4Kj8nQ5wV/zhkDmX9h0Oh 5yJLd/jEvffxGqIkgDUxpRFHjWNnc421t3BiImr74mx0yU6iIiQHXuPoKk1q5C1r BJXLd7zN+8g1ea7ktChzuBcIjYe1S03KeihHbjlCSAjFyQGCBWaKQec3wQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMXsJFXYGl9Fd+v9chKaFIvJu7+nMB8GA1UdIwQY MBaAFCm+At6goIbpiA9WTIaHK7xZfMZyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9lYTFjZmYtYWU4Zi00NzE5LTg5YjMt MDAzYTE1NjhiZjNmLzEveGV3a1ZkZ2FYMFYzNl8xeUVwb1VpOG03djZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9lYTFjZmYtYWU4Zi00NzE5LTg5YjMtMDAzYTE1NjhiZjNm LzEvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiy3GMA0G CSqGSIb3DQEBCwUAA4IBAQBtytnabUm1ocPgOEQRUwEh90CY+T5K/iZMHyG+xQGc mf24dwPhShvUFMDks5/r+HFlDFMaTE43RdyZyOGtiniQ/9tCz/fAi6d1kHXO1/YW 8L8dxObKNhD5UHz+CorCBH9rvVTBtG3Xrtd7N0CTqt5vlXWN5WQDui22rCnivYDq b4LZL89f/d9g55uNjNOEnvaOP9KG13ZtRf7CJM17qbWpIjXlDQkXSOaDdj/geX8I 3C6mZisP75iGez+w7JjuWjz3uUlJ6pHAvN0qeXngTTEbeM0O8V0CrtoRk1QKPVac IAqYW47qj9XOmo3A7N+d0QcsUndCocC2VXVL+gXb7GJS -----END CERTIFICATE-----Generated at Sun Jan 25 20:29:49 2026 by rpki-client