This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/XmoT-0S7B1PdNnH-GM6pkWmzIMU.roa File: XmoT-0S7B1PdNnH-GM6pkWmzIMU.roa (raw, json) Hash identifier: xfLy7U1rl5Ju1h3SR42qbnhT8s0dYmuOimhhOkq8E7M= Subject key identifier: 5E:6A:13:FB:44:BB:07:53:DD:36:71:FE:18:CE:A9:91:69:B3:20:C5 Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4 Certificate serial: 019B77C699A24258623B7DCF144395A8BA74 Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/XmoT-0S7B1PdNnH-GM6pkWmzIMU.roa Signing time: Thu 01 Jan 2026 04:17:42 +0000 ROA not before: Thu 01 Jan 2026 04:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41202 IP address blocks: 46.8.72.0/23 maxlen: 23 46.8.74.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:99:a2:42:58:62:3b:7d:cf:14:43:95:a8:ba:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4 Validity Not Before: Jan 1 04:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e6a13fb44bb0753dd3671fe18cea99169b320c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:3b:bb:f4:f3:c5:d9:f2:ed:01:8c:00:ec:8f: 1e:4a:32:ff:d6:5b:2c:0e:6e:a2:9b:5f:21:a8:b4: 8b:0c:90:f7:ae:54:42:a0:41:7a:41:5a:3d:a3:d5: 2b:ad:87:d1:aa:f6:b9:6d:61:59:17:2e:97:8c:0a: 8f:98:a4:c9:79:14:6e:31:bd:26:2b:40:f3:bc:89: 77:21:11:3d:b1:c9:d3:58:c4:83:16:74:57:66:7b: 08:c0:2c:ac:dc:1d:a7:e5:33:fc:8d:43:80:b5:fd: 0e:37:ea:a6:6a:9a:fc:35:55:41:ac:5a:ab:ab:07: a5:b1:6d:98:b6:55:2f:e8:c6:bb:26:dc:d7:c0:39: f4:52:40:2b:6a:7e:9e:f2:e7:eb:5e:08:cf:aa:c7: 67:e9:1f:62:2f:42:5e:ab:62:d8:8b:16:4a:57:4e: 65:3a:ab:48:b9:48:f7:e8:66:17:4f:08:bc:6c:d8: af:4e:15:0d:b2:53:ff:b6:ea:7c:01:1c:4d:31:47: ce:cd:21:05:76:ec:6a:2e:1b:0c:6a:3f:e0:c8:6c: f1:d6:3e:d6:c4:4c:24:f6:36:6d:81:8e:36:18:f4: ad:d3:08:33:44:30:ed:f5:2f:d0:bc:ff:9f:84:ef: 17:61:11:5c:74:77:9e:8e:2c:ac:1f:64:59:b9:d6: c1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:6A:13:FB:44:BB:07:53:DD:36:71:FE:18:CE:A9:91:69:B3:20:C5 X509v3 Authority Key Identifier: keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/XmoT-0S7B1PdNnH-GM6pkWmzIMU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.8.72.0/22 Signature Algorithm: sha256WithRSAEncryption 85:5c:ff:dd:1f:d2:ca:dc:dd:f3:03:66:95:d6:5a:33:49:0c: f2:bb:cf:1c:18:db:d1:d3:01:a1:0a:ad:11:b5:13:99:f4:9e: 8b:cb:9f:f0:8c:ff:fa:ae:bf:35:55:4c:9a:e3:15:9f:5b:e7: 98:05:98:33:9b:b6:ff:7e:e9:bc:08:cc:7b:c0:a9:fc:94:19: a5:51:3e:1d:08:b4:cc:54:37:a5:6c:0c:ff:fe:2b:0c:95:0c: 3e:5e:45:a6:b9:ae:ea:6e:09:1a:fa:23:35:95:c3:8d:8d:c4: 6c:17:af:f4:ce:40:11:07:d9:a2:27:a8:e1:ed:5e:4c:4e:2d: 19:55:ec:ef:c3:5d:ad:4d:8a:1b:ef:33:54:47:b8:6f:89:ce: f9:f5:18:e5:87:87:e0:5d:b1:2e:33:66:ef:19:e7:0c:fc:9c: 2b:fb:f7:f6:a2:17:ff:28:52:42:1f:c0:75:df:f1:aa:44:62: 49:eb:7e:4c:12:64:5f:45:96:eb:d5:f5:c4:2e:8d:9a:6d:ff: 40:0d:89:d2:74:ad:ba:c4:6f:d2:5e:60:88:a6:96:42:5d:70: 1a:af:11:c7:cf:ed:19:20:40:53:4a:8b:20:33:4d:95:93:42: 8e:04:93:09:a3:87:c8:28:5c:18:8a:18:af:62:ee:9f:60:95: 73:3a:38:7c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xpmiQlhiO33PFEOVqLp0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0 MjAzYjQwHhcNMjYwMTAxMDQxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTZhMTNmYjQ0YmIwNzUzZGQzNjcxZmUxOGNlYTk5MTY5YjMyMGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Tu79PPF2fLtAYwA7I8eSjL/1lss Dm6im18hqLSLDJD3rlRCoEF6QVo9o9UrrYfRqva5bWFZFy6XjAqPmKTJeRRuMb0m K0DzvIl3IRE9scnTWMSDFnRXZnsIwCys3B2n5TP8jUOAtf0ON+qmapr8NVVBrFqr qwelsW2YtlUv6Ma7JtzXwDn0UkAran6e8ufrXgjPqsdn6R9iL0Jeq2LYixZKV05l OqtIuUj36GYXTwi8bNivThUNslP/tup8ARxNMUfOzSEFduxqLhsMaj/gyGzx1j7W xEwk9jZtgY42GPSt0wgzRDDt9S/QvP+fhO8XYRFcdHeejiysH2RZudbB8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF5qE/tEuwdT3TZx/hjOqZFpsyDFMB8GA1UdIwQY MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt MTY2OTljOTZkZDVlLzEvWG1vVC0wUzdCMVBkTm5ILUdNNnBrV216SU1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLghIMA0G CSqGSIb3DQEBCwUAA4IBAQCFXP/dH9LK3N3zA2aV1lozSQzyu88cGNvR0wGhCq0R tROZ9J6Ly5/wjP/6rr81VUya4xWfW+eYBZgzm7b/fum8CMx7wKn8lBmlUT4dCLTM VDelbAz//isMlQw+XkWmua7qbgka+iM1lcONjcRsF6/0zkARB9miJ6jh7V5MTi0Z Vezvw12tTYob7zNUR7hvic759Rjlh4fgXbEuM2bvGecM/Jwr+/f2ohf/KFJCH8B1 3/GqRGJJ635MEmRfRZbr1fXELo2abf9ADYnSdK26xG/SXmCIppZCXXAarxHHz+0Z IEBTSosgM02Vk0KOBJMJo4fIKFwYihivYu6fYJVzOjh8 -----END CERTIFICATE-----Generated at Sun Jan 25 20:58:37 2026 by rpki-client