This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/xZ2nAeLyC0ezaqseLjJkV22U5mE.roa File: xZ2nAeLyC0ezaqseLjJkV22U5mE.roa (raw, json) Hash identifier: oxTigerjyhGYgfgpErnFxoqmId6FySfGh3aATIsx2pc= Subject key identifier: C5:9D:A7:01:E2:F2:0B:47:B3:6A:AB:1E:2E:32:64:57:6D:94:E6:61 Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Certificate serial: 019B7CEE30A68230DFE0456AE478896830DD Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/xZ2nAeLyC0ezaqseLjJkV22U5mE.roa Signing time: Fri 02 Jan 2026 04:19:03 +0000 ROA not before: Fri 02 Jan 2026 04:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1273 IP address blocks: 82.163.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:30:a6:82:30:df:e0:45:6a:e4:78:89:68:30:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Validity Not Before: Jan 2 04:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c59da701e2f20b47b36aab1e2e3264576d94e661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7d:9d:a2:74:d5:ca:3a:a3:20:72:db:9d:31: 38:e6:bb:81:c0:2a:0c:d9:33:cf:0c:3e:fb:6d:8f: ec:50:0b:38:1e:f2:e6:bf:da:8a:d1:fe:b6:1b:da: 88:bd:9e:12:26:fb:bd:02:57:fa:2c:45:85:f1:a3: 6c:c5:98:3d:4c:62:ff:52:2f:06:78:d9:57:8c:d7: e9:4b:c1:3e:7f:89:e4:5d:8b:cf:f2:82:a2:d4:55: 50:0b:8a:21:7f:70:ad:d7:15:4a:0e:e3:7b:b7:12: 0c:7d:0e:47:49:18:e6:93:47:08:aa:e2:57:74:53: 20:9f:e7:d0:c4:0a:ca:90:d7:ed:f5:b7:ce:1a:a5: 87:24:fa:bd:22:8c:27:de:3f:67:0a:e6:5e:12:72: 53:b5:25:e1:51:c3:32:7d:1e:f4:e6:35:e4:73:26: 1f:0f:c2:ee:72:13:0d:61:5f:04:43:87:d5:a8:3b: cb:af:88:fe:42:cc:eb:73:ae:d1:58:bc:c8:70:3b: ab:bf:d8:1c:4e:1d:2e:08:10:3d:87:22:b7:dd:ff: 74:2d:f0:79:25:0c:6e:a9:5b:ad:63:83:d1:c0:38: 53:83:17:8e:fa:19:60:52:d2:b4:b3:85:94:7c:e1: c9:d3:c8:ad:10:b7:4a:71:6c:bf:9b:20:c8:62:0e: fc:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:9D:A7:01:E2:F2:0B:47:B3:6A:AB:1E:2E:32:64:57:6D:94:E6:61 X509v3 Authority Key Identifier: keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/xZ2nAeLyC0ezaqseLjJkV22U5mE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.163.104.0/21 Signature Algorithm: sha256WithRSAEncryption 45:d7:93:b2:89:04:6c:ec:45:68:03:77:5b:3d:3a:23:86:da: 92:b3:c2:bd:75:82:3b:14:2d:4a:fb:f1:0b:cd:76:90:c2:21: d2:9d:0b:3c:14:0a:ab:8f:40:55:d9:3a:1a:3a:31:37:71:1f: 59:8c:11:b5:06:cb:23:04:f0:7d:00:21:48:23:bf:d9:d0:0a: 0f:1a:cd:a3:10:5b:90:d2:54:06:04:ef:f1:98:ac:d4:4f:d1: 09:90:16:97:98:9d:71:88:bd:3b:82:77:31:86:a9:50:5d:ec: f6:25:99:29:c0:42:7e:f9:f9:b1:23:d8:d4:7b:68:04:38:ad: 03:fd:22:a1:2a:33:bf:ca:71:15:d5:5c:ce:fe:44:5b:92:43: c9:be:41:d0:f1:43:4f:c6:ff:59:4c:5f:94:57:62:78:bb:9c: d9:e4:9d:8e:d8:4a:df:40:2a:37:e6:f4:e0:09:83:c3:3b:1e: 1e:8f:83:67:23:4f:b4:2f:f9:72:6e:32:b8:db:da:74:61:df: 3a:4b:c3:43:0b:1e:f4:32:42:69:cf:8d:27:4f:e4:20:d1:2d: 90:0c:53:73:7a:97:49:39:b6:d7:e2:94:92:41:ae:58:f3:4c: 02:bb:84:ae:f8:3b:d4:32:ba:9f:53:5d:40:87:08:66:99:de: 45:5d:6a:b0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87jCmgjDf4EVq5HiJaDDdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2 N2IxZTQwHhcNMjYwMTAyMDQxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTlkYTcwMWUyZjIwYjQ3YjM2YWFiMWUyZTMyNjQ1NzZkOTRlNjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvX2donTVyjqjIHLbnTE45ruBwCoM 2TPPDD77bY/sUAs4HvLmv9qK0f62G9qIvZ4SJvu9Alf6LEWF8aNsxZg9TGL/Ui8G eNlXjNfpS8E+f4nkXYvP8oKi1FVQC4ohf3Ct1xVKDuN7txIMfQ5HSRjmk0cIquJX dFMgn+fQxArKkNft9bfOGqWHJPq9Iown3j9nCuZeEnJTtSXhUcMyfR705jXkcyYf D8LuchMNYV8EQ4fVqDvLr4j+Qszrc67RWLzIcDurv9gcTh0uCBA9hyK33f90LfB5 JQxuqVutY4PRwDhTgxeO+hlgUtK0s4WUfOHJ08itELdKcWy/myDIYg789QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMWdpwHi8gtHs2qrHi4yZFdtlOZhMB8GA1UdIwQY MBaAFIbM4G5w35cNkKv+PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2Ut ODk3MTRhN2U4ZDU4LzEveFoybkFlTHlDMGV6YXFzZUxqSmtWMjJVNW1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4 LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDUqNoMA0G CSqGSIb3DQEBCwUAA4IBAQBF15OyiQRs7EVoA3dbPTojhtqSs8K9dYI7FC1K+/EL zXaQwiHSnQs8FAqrj0BV2ToaOjE3cR9ZjBG1BssjBPB9ACFII7/Z0AoPGs2jEFuQ 0lQGBO/xmKzUT9EJkBaXmJ1xiL07gncxhqlQXez2JZkpwEJ++fmxI9jUe2gEOK0D /SKhKjO/ynEV1VzO/kRbkkPJvkHQ8UNPxv9ZTF+UV2J4u5zZ5J2O2ErfQCo35vTg CYPDOx4ej4NnI0+0L/lybjK429p0Yd86S8NDCx70MkJpz40nT+Qg0S2QDFNzepdJ ObbX4pSSQa5Y80wCu4Su+DvUMrqfU11Ahwhmmd5FXWqw -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:55 2026 by rpki-client