This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/xnoPl6LQZPcELnx-ZiKubXNFFTE.roa File: xnoPl6LQZPcELnx-ZiKubXNFFTE.roa (raw, json) Hash identifier: QNFBJICf7w3eylBYCkT48ffxHKIaSTqkgClX6oZsBqA= Subject key identifier: C6:7A:0F:97:A2:D0:64:F7:04:2E:7C:7E:66:22:AE:6D:73:45:15:31 Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47 Certificate serial: 019B7CEE06A60B36FC46E886F53C0D9D8CA4 Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/xnoPl6LQZPcELnx-ZiKubXNFFTE.roa Signing time: Fri 02 Jan 2026 04:18:52 +0000 ROA not before: Fri 02 Jan 2026 04:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210734 IP address blocks: 80.71.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:06:a6:0b:36:fc:46:e8:86:f5:3c:0d:9d:8c:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47 Validity Not Before: Jan 2 04:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c67a0f97a2d064f7042e7c7e6622ae6d73451531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:dd:05:56:6e:56:80:8f:db:c6:48:df:91:f1: 74:cc:f8:21:07:52:43:f0:e4:ae:63:0b:3a:b7:3d: 27:26:87:ed:c2:00:e3:91:72:36:0f:bc:52:a3:1e: 27:92:4f:90:43:00:e1:a7:d4:ba:e9:e5:9d:7b:61: 24:ee:ea:6d:a4:3b:0e:20:08:05:01:ce:89:ef:cf: 4d:39:80:49:17:64:75:30:0b:19:07:28:f1:30:24: 80:86:8d:ff:69:97:89:d7:68:b9:fb:ae:01:2d:01: dc:8e:bd:80:40:2d:bf:4b:e8:21:57:d5:bb:ce:58: eb:5a:1e:9b:db:4b:58:f3:84:3b:2f:b7:5d:af:49: cf:4c:1d:bc:be:cd:38:62:8a:f8:6c:16:15:a5:0b: 9e:cf:65:e0:e3:02:a7:ad:ac:f3:25:4b:c0:3e:2c: ef:0c:22:e7:67:c8:82:1f:6b:a8:02:df:91:ce:1b: 5b:c7:e2:ef:96:5b:fe:92:78:58:5a:75:ef:67:2c: 79:2c:a2:f4:bb:98:a8:27:59:b2:f7:26:33:de:3c: 99:a2:a6:14:9d:cd:93:47:d2:62:32:c1:16:d5:be: 9c:6b:83:37:12:ef:47:2d:cd:fd:23:f4:a2:c9:79: ca:a0:d1:7f:b6:43:8d:ac:a2:5d:ce:46:d9:5e:ad: 89:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:7A:0F:97:A2:D0:64:F7:04:2E:7C:7E:66:22:AE:6D:73:45:15:31 X509v3 Authority Key Identifier: keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/xnoPl6LQZPcELnx-ZiKubXNFFTE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.71.229.0/24 Signature Algorithm: sha256WithRSAEncryption 51:7d:99:2c:6f:c2:45:8e:e9:60:b8:f7:bc:16:1f:35:25:63: cb:95:52:84:7e:e3:77:46:81:94:ee:0e:f7:7d:6a:92:10:f8: 93:ba:00:c7:8f:ca:71:a6:98:b4:aa:ea:d5:b2:3e:ec:6a:89: fc:fe:ab:5c:a3:b7:ab:98:19:d3:f4:ea:27:8f:28:07:6a:29: 18:7f:bf:61:ba:06:ff:f7:e9:ce:02:22:b0:c3:a7:c3:e8:32: b5:da:f6:e6:fd:e2:7e:13:ee:b8:24:6d:85:c9:32:d4:4a:b8: f4:36:07:55:a4:96:73:b8:a3:93:47:ce:fb:08:23:f6:ea:8a: c9:51:57:9e:de:89:3d:5f:c2:ec:ed:15:57:9b:88:0c:3a:25: d5:54:5e:7d:87:70:32:82:6d:d6:c2:f3:f1:9c:4b:01:c5:d8: fb:b7:22:7b:04:a6:52:4b:82:5a:68:63:30:83:3c:22:46:97: 04:ec:6b:43:ab:ac:b5:27:c8:c3:0b:cb:86:8b:4d:ad:05:18: 8d:65:40:19:6c:22:57:c1:c1:91:36:2c:06:89:59:f0:3f:8c: a8:62:26:26:46:48:9d:09:27:a8:8f:3e:29:08:0d:8f:cb:cd: 0f:8d:0f:e4:0d:0d:57:5f:98:f9:d9:1c:48:31:52:0a:63:f5: 6e:0b:7f:18 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87gamCzb8RuiG9TwNnYykMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx MDhlNDcwHhcNMjYwMTAyMDQxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjdhMGY5N2EyZDA2NGY3MDQyZTdjN2U2NjIyYWU2ZDczNDUxNTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd0FVm5WgI/bxkjfkfF0zPghB1JD 8OSuYws6tz0nJoftwgDjkXI2D7xSox4nkk+QQwDhp9S66eWde2Ek7uptpDsOIAgF Ac6J789NOYBJF2R1MAsZByjxMCSAho3/aZeJ12i5+64BLQHcjr2AQC2/S+ghV9W7 zljrWh6b20tY84Q7L7ddr0nPTB28vs04Yor4bBYVpQuez2Xg4wKnrazzJUvAPizv DCLnZ8iCH2uoAt+Rzhtbx+Lvllv+knhYWnXvZyx5LKL0u5ioJ1my9yYz3jyZoqYU nc2TR9JiMsEW1b6ca4M3Eu9HLc39I/SiyXnKoNF/tkONrKJdzkbZXq2JQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMZ6D5ei0GT3BC58fmYirm1zRRUxMB8GA1UdIwQY MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt MTkxODliM2M5YzdkLzEveG5vUGw2TFFaUGNFTG54LVppS3ViWE5GRlRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUEflMA0G CSqGSIb3DQEBCwUAA4IBAQBRfZksb8JFjulguPe8Fh81JWPLlVKEfuN3RoGU7g73 fWqSEPiTugDHj8pxppi0qurVsj7saon8/qtco7ermBnT9OonjygHaikYf79hugb/ 9+nOAiKww6fD6DK12vbm/eJ+E+64JG2FyTLUSrj0NgdVpJZzuKOTR877CCP26orJ UVee3ok9X8Ls7RVXm4gMOiXVVF59h3Aygm3WwvPxnEsBxdj7tyJ7BKZSS4JaaGMw gzwiRpcE7GtDq6y1J8jDC8uGi02tBRiNZUAZbCJXwcGRNiwGiVnwP4yoYiYmRkid CSeojz4pCA2Py80PjQ/kDQ1XX5j52RxIMVIKY/VuC38Y -----END CERTIFICATE-----Generated at Sun Jan 25 15:36:33 2026 by rpki-client