This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/xKH-si1DhOiUdanbclaUXyvQ8oI.roa File: xKH-si1DhOiUdanbclaUXyvQ8oI.roa (raw, json) Hash identifier: cqd69YqhAEhayTiTYZKqWDUypDcoPpQi51cHl699YCc= Subject key identifier: C4:A1:FE:B2:2D:43:84:E8:94:75:A9:DB:72:56:94:5F:2B:D0:F2:82 Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318 Certificate serial: 019B7C1362E39ACDDF8817E7EB00F3AF9E19 Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/xKH-si1DhOiUdanbclaUXyvQ8oI.roa Signing time: Fri 02 Jan 2026 00:20:03 +0000 ROA not before: Fri 02 Jan 2026 00:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 393894 IP address blocks: 45.15.196.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:62:e3:9a:cd:df:88:17:e7:eb:00:f3:af:9e:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318 Validity Not Before: Jan 2 00:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4a1feb22d4384e89475a9db7256945f2bd0f282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:16:72:3e:bc:e3:38:a7:71:0f:d0:a6:eb:7b: f8:dc:14:6f:4c:37:6d:ea:2b:93:08:02:68:15:ee: 67:d7:05:2e:5e:5c:e4:d5:06:e7:b9:06:98:8d:9f: 42:ce:73:ce:cc:08:e1:b3:8f:a9:5c:76:34:2e:cb: a1:e8:cd:52:43:a1:a8:8f:e1:5c:21:12:e9:e8:38: 79:8d:fc:f6:b0:51:4d:5e:48:4f:1b:50:58:15:f3: 25:81:d7:b1:47:8f:b0:06:2a:89:2b:07:58:37:bb: 81:67:60:04:ff:b8:a2:c0:77:c7:3b:d1:a9:ac:32: ad:73:11:7e:f1:be:60:a2:ec:eb:df:8d:16:65:2d: 55:fb:be:c3:63:18:65:29:85:ac:92:1f:f7:3a:48: ac:72:c7:e0:c0:0c:1a:ac:c4:d4:a9:ee:21:22:c6: 6e:46:fb:65:2d:cb:f2:20:0a:fc:3f:4d:f3:b0:ec: 15:83:59:3f:b9:0e:3a:57:59:6b:e3:b2:09:aa:81: 27:b2:8e:6d:31:9d:31:8e:f4:10:ca:90:c6:e4:cb: 5b:9e:0d:da:6a:1d:e1:dd:05:84:b6:c5:2a:d0:a8: 4b:ee:1d:4d:a5:df:10:b1:c8:9b:2a:39:e8:7f:c1: df:47:86:fe:8e:d4:a0:b7:e7:67:60:2e:95:26:46: 58:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A1:FE:B2:2D:43:84:E8:94:75:A9:DB:72:56:94:5F:2B:D0:F2:82 X509v3 Authority Key Identifier: keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/xKH-si1DhOiUdanbclaUXyvQ8oI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.196.0/22 Signature Algorithm: sha256WithRSAEncryption 49:e8:52:51:0e:7c:02:64:12:cf:35:cb:f2:00:b6:f0:b0:6e: 70:25:ae:7f:95:62:7f:0a:c4:d2:00:1b:76:f2:d4:d3:45:56: 22:3c:97:c8:ac:2c:ae:46:ab:64:39:9d:75:19:01:f9:7d:c2: 7c:d7:e7:2c:b1:e2:86:6e:63:db:5c:db:3c:f8:d0:34:79:c5: 52:94:49:8a:75:e2:e3:92:8c:71:54:fe:18:64:61:1d:ff:cb: 7d:dd:c0:11:fb:73:b3:e4:b8:a9:cf:ec:f3:61:62:e1:10:20: 53:69:ee:bb:73:02:b8:cb:17:ad:28:21:01:cd:90:cf:c4:bb: 45:7d:8b:4a:33:61:f2:a0:fa:3c:26:9f:0d:36:48:dc:83:8f: 60:1c:02:e1:38:df:30:87:2d:cc:41:13:f2:4f:26:45:32:2d: f9:1f:3b:89:01:eb:d6:c6:e3:67:63:52:89:80:05:72:02:76: 75:15:cc:15:99:1b:f6:c4:55:cf:c0:18:d5:e0:77:a3:75:a9: 9c:7b:9e:34:ad:5a:d9:58:64:1b:e0:aa:8c:38:38:df:48:d9: e5:42:79:b2:08:bf:e7:c1:d3:0a:76:50:6d:4d:bf:00:21:b8: 69:37:b8:89:f2:d8:7d:65:97:5f:9f:3e:17:dc:11:f5:1c:87: 0e:0b:af:c5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E2Ljms3fiBfn6wDzr54ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMWMxMTY1OGQyMDQxZWFmMjUwMmZlNTQwOGVkNDkzYmJk NGYzMTgwHhcNMjYwMTAyMDAyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNGExZmViMjJkNDM4NGU4OTQ3NWE5ZGI3MjU2OTQ1ZjJiZDBmMjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxZyPrzjOKdxD9Cm63v43BRvTDdt 6iuTCAJoFe5n1wUuXlzk1QbnuQaYjZ9CznPOzAjhs4+pXHY0Lsuh6M1SQ6Goj+Fc IRLp6Dh5jfz2sFFNXkhPG1BYFfMlgdexR4+wBiqJKwdYN7uBZ2AE/7iiwHfHO9Gp rDKtcxF+8b5gouzr340WZS1V+77DYxhlKYWskh/3OkiscsfgwAwarMTUqe4hIsZu RvtlLcvyIAr8P03zsOwVg1k/uQ46V1lr47IJqoEnso5tMZ0xjvQQypDG5Mtbng3a ah3h3QWEtsUq0KhL7h1Npd8QscibKjnof8HfR4b+jtSgt+dnYC6VJkZY0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMSh/rItQ4TolHWp23JWlF8r0PKCMB8GA1UdIwQY MBaAFI4cEWWNIEHq8lAv5UCO1JO71PMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjIt NjMzNDhjZGJmMDI0LzEveEtILXNpMURoT2lVZGFuYmNsYVVYeXZROG9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjItNjMzNDhjZGJmMDI0 LzEvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQ/EMA0G CSqGSIb3DQEBCwUAA4IBAQBJ6FJRDnwCZBLPNcvyALbwsG5wJa5/lWJ/CsTSABt2 8tTTRVYiPJfIrCyuRqtkOZ11GQH5fcJ81+csseKGbmPbXNs8+NA0ecVSlEmKdeLj koxxVP4YZGEd/8t93cAR+3Oz5Lipz+zzYWLhECBTae67cwK4yxetKCEBzZDPxLtF fYtKM2HyoPo8Jp8NNkjcg49gHALhON8why3MQRPyTyZFMi35HzuJAevWxuNnY1KJ gAVyAnZ1FcwVmRv2xFXPwBjV4Hejdamce540rVrZWGQb4KqMODjfSNnlQnmyCL/n wdMKdlBtTb8AIbhpN7iJ8th9ZZdfnz4X3BH1HIcOC6/F -----END CERTIFICATE-----Generated at Sun Jan 25 16:37:58 2026 by rpki-client