This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/XtShvNgMwZA_rgTfZdTsjFYrJj4.roa File: XtShvNgMwZA_rgTfZdTsjFYrJj4.roa (raw, json) Hash identifier: QVsItKxf/ARRX3hlHmJ5FKurvG5F+zyGh9CaElCqQS8= Subject key identifier: 5E:D4:A1:BC:D8:0C:C1:90:3F:AE:04:DF:65:D4:EC:8C:56:2B:26:3E Certificate issuer: /CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c Certificate serial: 019B76EB0FC80ECD392F8CC2278AB177258B Authority key identifier: 24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/XtShvNgMwZA_rgTfZdTsjFYrJj4.roa Signing time: Thu 01 Jan 2026 00:17:55 +0000 ROA not before: Thu 01 Jan 2026 00:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8309 IP address blocks: 37.19.128.0/18 maxlen: 18 62.129.0.0/19 maxlen: 19 217.180.128.0/18 maxlen: 18 2a06:19c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.mft rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:0f:c8:0e:cd:39:2f:8c:c2:27:8a:b1:77:25:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c Validity Not Before: Jan 1 00:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ed4a1bcd80cc1903fae04df65d4ec8c562b263e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f3:ca:52:82:77:d1:48:d0:de:e5:3c:5a:b7: a6:70:ec:ab:bd:d3:a6:71:f4:9a:c3:4e:50:c1:c7: 69:d5:8c:e6:18:e0:a7:7f:3b:02:50:4b:96:c1:64: 73:6a:a2:94:f9:b1:9e:a7:a0:81:90:cc:1d:09:cd: 26:1a:6b:e0:ee:68:5c:70:4a:62:a8:33:ab:4b:59: f0:cf:32:2d:8d:28:9a:bc:aa:d3:f6:1c:71:c5:8e: 72:85:7c:b9:67:39:02:63:79:c9:ee:2c:53:d2:55: 24:ff:f6:e0:79:ea:ec:75:8d:ba:30:5c:f2:26:76: f6:3c:f5:b1:4b:2a:e3:88:76:0a:0f:df:4e:f1:db: ee:31:98:69:10:30:40:08:03:79:a0:30:cb:df:30: 4f:e3:60:0f:7b:78:f3:50:4f:6c:02:8d:34:09:3b: a4:16:6f:9a:fe:03:05:25:fc:44:57:27:c6:4a:16: 94:21:d0:87:24:5f:81:4a:f2:7d:86:8a:00:1f:91: ed:db:2a:d8:eb:5a:46:ab:3a:00:92:b1:4d:b5:0d: fd:43:9f:d8:d0:9e:88:2b:a5:da:63:d7:55:1f:14: 5a:34:54:64:a9:16:78:77:43:0d:1a:84:d2:2f:cf: d2:8e:e5:3e:2a:1c:93:6e:fa:2d:01:fe:e6:3d:24: 74:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:D4:A1:BC:D8:0C:C1:90:3F:AE:04:DF:65:D4:EC:8C:56:2B:26:3E X509v3 Authority Key Identifier: keyid:24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/XtShvNgMwZA_rgTfZdTsjFYrJj4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.19.128.0/18 62.129.0.0/19 217.180.128.0/18 IPv6: 2a06:19c0::/29 Signature Algorithm: sha256WithRSAEncryption 12:59:f2:34:ea:1a:9a:93:87:40:8b:90:5d:20:8a:0a:5a:61: 2d:25:4a:a2:80:df:79:05:e7:9c:a1:29:45:28:c8:fa:38:10: c1:20:21:62:30:43:b8:ed:5c:8c:7c:5e:8b:67:d2:ea:af:02: 25:cf:15:ee:6e:0f:00:57:80:50:69:38:9f:db:72:6a:52:0a: 2c:44:1e:cc:71:9d:4f:dc:13:89:c2:87:3e:cb:5c:36:da:de: 64:45:53:63:01:5d:8c:a8:de:a9:f9:d6:cb:22:1c:41:08:18: fd:5e:65:a2:4c:a7:9f:bc:e4:ae:ce:7c:cb:15:a6:18:0c:ea: 1d:7c:37:21:73:ed:8e:9f:b2:d9:1a:70:6f:a7:c3:bb:7f:b5: d4:bd:0f:7c:db:42:b0:f1:ef:92:0a:63:6d:8d:93:40:fe:9c: 6d:67:e4:9e:9c:be:e7:d8:d4:23:5f:e3:be:59:44:f4:1b:42: 92:27:89:38:34:1e:68:af:d8:cd:26:41:db:d0:5e:09:ff:3d: bf:b2:79:34:6a:6a:ec:85:ee:95:a3:7e:45:24:fc:3a:ea:f5: f7:51:d2:59:6a:fb:f2:dd:24:a8:38:8e:66:3f:0d:92:8b:a4: c8:0b:55:63:30:b5:08:1e:ad:a4:76:14:bd:53:a9:76:b2:51: 0d:d3:d5:90 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt26w/IDs05L4zCJ4qxdyWLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0MTViZjljNjFjODVkYjdjOTlhYzRjZGY3OTI1N2U3OTk3 YWI3N2MwHhcNMjYwMTAxMDAxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZWQ0YTFiY2Q4MGNjMTkwM2ZhZTA0ZGY2NWQ0ZWM4YzU2MmIyNjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PPKUoJ30UjQ3uU8WremcOyrvdOm cfSaw05Qwcdp1YzmGOCnfzsCUEuWwWRzaqKU+bGep6CBkMwdCc0mGmvg7mhccEpi qDOrS1nwzzItjSiavKrT9hxxxY5yhXy5ZzkCY3nJ7ixT0lUk//bgeersdY26MFzy Jnb2PPWxSyrjiHYKD99O8dvuMZhpEDBACAN5oDDL3zBP42APe3jzUE9sAo00CTuk Fm+a/gMFJfxEVyfGShaUIdCHJF+BSvJ9hooAH5Ht2yrY61pGqzoAkrFNtQ39Q5/Y 0J6IK6XaY9dVHxRaNFRkqRZ4d0MNGoTSL8/SjuU+KhyTbvotAf7mPSR0NQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFF7UobzYDMGQP64E32XU7IxWKyY+MB8GA1UdIwQY MBaAFCQVv5xhyF23yZrEzfeSV+eZerd8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkJXX25HSElYYmZKbXNUTjk1Slg1NWw2dDN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8zMzg5ZWItMTg1Ny00OWQyLTg0MWMt NmExOGRjODgxNmRiLzEvWHRTaHZOZ013WkFfcmdUZlpkVHNqRllySmo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC8zMzg5ZWItMTg1Ny00OWQyLTg0MWMtNmExOGRjODgxNmRi LzEvSkJXX25HSElYYmZKbXNUTjk1Slg1NWw2dDN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQGJROAAwQF PoEAAwQG2bSAMA0EAgACMAcDBQMqBhnAMA0GCSqGSIb3DQEBCwUAA4IBAQASWfI0 6hqak4dAi5BdIIoKWmEtJUqigN95BeecoSlFKMj6OBDBICFiMEO47VyMfF6LZ9Lq rwIlzxXubg8AV4BQaTif23JqUgosRB7McZ1P3BOJwoc+y1w22t5kRVNjAV2MqN6p +dbLIhxBCBj9XmWiTKefvOSuznzLFaYYDOodfDchc+2On7LZGnBvp8O7f7XUvQ98 20Kw8e+SCmNtjZNA/pxtZ+SenL7n2NQjX+O+WUT0G0KSJ4k4NB5or9jNJkHb0F4J /z2/snk0amrshe6Vo35FJPw66vX3UdJZavvy3SSoOI5mPw2Si6TIC1VjMLUIHq2k dhS9U6l2slEN09WQ -----END CERTIFICATE-----Generated at Sun Jan 25 14:40:09 2026 by rpki-client