This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/xbIyTDCpsnXfmiMR3BR_GrwBr-o.roa File: xbIyTDCpsnXfmiMR3BR_GrwBr-o.roa (raw, json) Hash identifier: Z4NKqsIvOyqlHYqkZodAOXY8gr36mAXiXG8WLSal1pw= Subject key identifier: C5:B2:32:4C:30:A9:B2:75:DF:9A:23:11:DC:14:7F:1A:BC:01:AF:EA Certificate issuer: /CN=1662cfd26eccf289757399cc99c17d1cb4357535 Certificate serial: 019B7AC7DA0E688DC56B5CCDAE1A830E3B07 Authority key identifier: 16:62:CF:D2:6E:CC:F2:89:75:73:99:CC:99:C1:7D:1C:B4:35:75:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/xbIyTDCpsnXfmiMR3BR_GrwBr-o.roa Signing time: Thu 01 Jan 2026 18:17:56 +0000 ROA not before: Thu 01 Jan 2026 18:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21473 IP address blocks: 45.148.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.crl rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:da:0e:68:8d:c5:6b:5c:cd:ae:1a:83:0e:3b:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1662cfd26eccf289757399cc99c17d1cb4357535 Validity Not Before: Jan 1 18:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5b2324c30a9b275df9a2311dc147f1abc01afea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:15:97:c2:9c:b2:7e:ee:6d:24:7f:1b:c2:f5: a5:c2:a4:51:9d:ac:8a:7f:8c:d9:18:a9:00:b0:bc: 0f:9e:8c:54:9e:c1:74:f6:34:c0:0b:c4:02:3f:9f: 08:9a:b6:37:72:25:b3:5f:ed:cc:17:57:53:92:c6: d4:6c:31:dd:71:64:63:b9:3a:51:91:74:d2:a2:e6: aa:cb:aa:f8:8b:2c:82:68:d0:02:81:28:35:42:64: d5:5c:3e:f4:64:a6:23:fb:41:cc:d5:30:f1:a1:cc: 10:45:77:bb:c8:2d:c6:f9:f7:ef:44:69:92:87:9e: 68:25:ab:54:7f:72:20:6a:76:c4:a7:b3:ec:18:6d: ba:b4:f9:f3:99:6d:c7:ca:7a:e6:b1:2d:2a:8a:a5: 2b:09:bf:6a:81:b7:a6:91:1c:a6:99:49:9b:0d:d4: e9:ca:a4:b4:5e:0f:9e:3b:30:3f:f1:a7:11:b3:0a: d1:e4:e7:0d:9b:d3:eb:ef:69:3f:70:53:64:f3:ca: 05:5d:a8:81:ee:f1:68:b2:b3:eb:bf:fe:3c:f7:c7: 9a:93:7c:02:96:fc:e1:1f:e6:8e:c5:ce:02:d5:52: 89:d5:f3:a2:4b:4c:1c:0f:4d:3b:96:1b:ae:3d:26: 1f:5b:1e:fb:07:1f:31:c6:ed:a2:43:8d:cd:d5:3d: 66:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:B2:32:4C:30:A9:B2:75:DF:9A:23:11:DC:14:7F:1A:BC:01:AF:EA X509v3 Authority Key Identifier: keyid:16:62:CF:D2:6E:CC:F2:89:75:73:99:CC:99:C1:7D:1C:B4:35:75:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/xbIyTDCpsnXfmiMR3BR_GrwBr-o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.148.216.0/23 Signature Algorithm: sha256WithRSAEncryption 0e:26:00:c2:d5:3a:2c:07:50:db:22:61:0e:62:70:40:a2:d4: 7c:e5:2e:ac:a5:e9:e4:20:15:19:aa:79:5b:68:46:d9:45:c9: b2:d0:db:66:ac:b5:fe:d9:83:0d:90:30:a9:9e:6d:db:13:d7: b7:bc:d8:93:31:09:a0:a6:9e:6a:a9:f6:92:17:67:2b:6c:1b: a4:bb:2b:09:1d:47:fa:66:ee:a0:37:50:ff:99:9f:1d:c6:fe: 8c:67:76:da:0e:ef:5a:c9:70:f9:8c:97:0f:a4:e4:9f:85:cb: 13:5a:1a:1c:13:cb:95:34:de:d5:3b:b7:e2:39:e9:3d:c6:ba: 1e:95:1e:81:cf:2a:49:32:89:d7:b8:59:8d:83:b8:b7:55:84: 92:0f:3d:98:54:3d:55:83:47:63:80:c9:11:c9:18:b8:d5:a3: aa:83:f5:56:bf:bd:65:95:d4:b7:8a:e2:c7:76:33:5d:38:a0: a6:48:8d:a7:fc:76:de:0f:c6:7f:2d:2b:35:6a:de:bf:53:80: 58:15:82:d6:08:79:ae:ea:7f:1c:da:09:19:2e:02:d9:bf:19: c0:c1:fa:25:05:77:0d:78:b8:8d:b7:b8:37:6f:65:12:08:e8: 8b:01:06:bd:70:94:a5:d4:eb:43:36:b2:b4:b4:6e:96:72:4c: a2:8e:97:c9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x9oOaI3Fa1zNrhqDDjsHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NjJjZmQyNmVjY2YyODk3NTczOTljYzk5YzE3ZDFjYjQz NTc1MzUwHhcNMjYwMTAxMTgxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNWIyMzI0YzMwYTliMjc1ZGY5YTIzMTFkYzE0N2YxYWJjMDFhZmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hWXwpyyfu5tJH8bwvWlwqRRnayK f4zZGKkAsLwPnoxUnsF09jTAC8QCP58ImrY3ciWzX+3MF1dTksbUbDHdcWRjuTpR kXTSouaqy6r4iyyCaNACgSg1QmTVXD70ZKYj+0HM1TDxocwQRXe7yC3G+ffvRGmS h55oJatUf3IganbEp7PsGG26tPnzmW3HynrmsS0qiqUrCb9qgbemkRymmUmbDdTp yqS0Xg+eOzA/8acRswrR5OcNm9Pr72k/cFNk88oFXaiB7vFosrPrv/4898eak3wC lvzhH+aOxc4C1VKJ1fOiS0wcD007lhuuPSYfWx77Bx8xxu2iQ43N1T1mwQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMWyMkwwqbJ135ojEdwUfxq8Aa/qMB8GA1UdIwQY MBaAFBZiz9JuzPKJdXOZzJnBfRy0NXU1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm1MUDBtN004b2wxYzVuTW1jRjlITFExZFRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My81Yjk4NzgtMjA4MC00MzU0LTk1OTIt YjcyMzE5NDFmYzNhLzEveGJJeVREQ3BzblhmbWlNUjNCUl9HcndCci1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My81Yjk4NzgtMjA4MC00MzU0LTk1OTItYjcyMzE5NDFmYzNh LzEvRm1MUDBtN004b2wxYzVuTW1jRjlITFExZFRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZTYMA0G CSqGSIb3DQEBCwUAA4IBAQAOJgDC1TosB1DbImEOYnBAotR85S6spenkIBUZqnlb aEbZRcmy0NtmrLX+2YMNkDCpnm3bE9e3vNiTMQmgpp5qqfaSF2crbBukuysJHUf6 Zu6gN1D/mZ8dxv6MZ3baDu9ayXD5jJcPpOSfhcsTWhocE8uVNN7VO7fiOek9xroe lR6BzypJMonXuFmNg7i3VYSSDz2YVD1Vg0djgMkRyRi41aOqg/VWv71lldS3iuLH djNdOKCmSI2n/HbeD8Z/LSs1at6/U4BYFYLWCHmu6n8c2gkZLgLZvxnAwfolBXcN eLiNt7g3b2USCOiLAQa9cJSl1OtDNrK0tG6WckyijpfJ -----END CERTIFICATE-----Generated at Mon Jan 26 02:31:59 2026 by rpki-client