This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/xFsHUXQAhTrcAhcEagihKj_bLB0.roa File: xFsHUXQAhTrcAhcEagihKj_bLB0.roa (raw, json) Hash identifier: fUcuoh5nCrUpLQdbdf9ANcbMiNKkrpJCJisA83ImkP4= Subject key identifier: C4:5B:07:51:74:00:85:3A:DC:02:17:04:6A:08:A1:2A:3F:DB:2C:1D Certificate issuer: /CN=2e19966c0ea5df3a987f8365524b5128cba7fc90 Certificate serial: 019B7AC89829913B8F61B92C8A25DEA53971 Authority key identifier: 2E:19:96:6C:0E:A5:DF:3A:98:7F:83:65:52:4B:51:28:CB:A7:FC:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/xFsHUXQAhTrcAhcEagihKj_bLB0.roa Signing time: Thu 01 Jan 2026 18:18:45 +0000 ROA not before: Thu 01 Jan 2026 18:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209000 IP address blocks: 45.136.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:98:29:91:3b:8f:61:b9:2c:8a:25:de:a5:39:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e19966c0ea5df3a987f8365524b5128cba7fc90 Validity Not Before: Jan 1 18:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c45b07517400853adc0217046a08a12a3fdb2c1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:11:37:91:a0:00:a2:55:4b:b3:71:0c:e9:53: 41:c9:7b:e1:05:6b:30:e1:57:ce:7d:40:38:4e:ae: b1:37:84:c0:b4:42:c2:c8:ef:7e:72:43:db:49:ca: 5b:12:5c:c5:9a:b8:f9:b9:40:32:3b:69:71:cb:12: bd:89:79:20:c7:8d:82:de:30:26:71:6f:1c:0b:a3: f3:a3:0a:45:29:7f:38:8d:73:62:97:d7:24:20:d5: f0:5e:5f:e0:c4:d1:65:6d:85:ff:fa:87:a5:ab:68: 72:b2:01:9e:7f:35:13:98:cf:fc:27:cd:8d:60:a0: 55:43:ca:14:e1:36:89:e1:10:85:ea:ae:c2:6b:23: 6d:09:07:00:53:7b:e0:2a:76:9d:1e:10:39:bd:64: 13:63:f6:61:32:f4:64:27:85:32:fe:b6:6c:20:12: dd:cf:1f:90:b2:25:5f:9c:66:36:a9:23:7d:f8:3b: ff:e0:eb:68:e5:14:0a:8a:1d:89:29:a6:b8:ae:19: 29:df:80:74:0f:3c:08:8e:6c:e3:02:34:57:96:7a: c3:86:e4:a7:63:34:6f:5b:d6:70:7c:84:62:ae:81: 06:0e:93:b7:f9:6e:86:7e:2a:a3:dc:dd:66:da:7e: 94:51:77:59:e9:24:45:be:ed:e9:6a:72:70:26:7a: 0c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:5B:07:51:74:00:85:3A:DC:02:17:04:6A:08:A1:2A:3F:DB:2C:1D X509v3 Authority Key Identifier: keyid:2E:19:96:6C:0E:A5:DF:3A:98:7F:83:65:52:4B:51:28:CB:A7:FC:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/xFsHUXQAhTrcAhcEagihKj_bLB0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.136.55.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:c7:9a:fa:12:2c:e6:34:4a:68:98:c8:64:d6:47:cf:cf:10: b7:38:c7:5f:0a:00:cd:ab:46:0a:0d:12:cc:35:05:39:0e:f4: d5:e8:1c:53:ba:3d:a0:a6:9a:94:e9:35:52:59:32:92:ab:25: 9d:01:12:6a:90:18:3e:78:e3:64:cc:9e:4a:b4:2a:52:69:45: 94:8f:68:4b:1a:50:e2:0a:ea:7a:83:83:46:11:d8:71:e9:ea: 8c:07:6a:e0:69:60:3b:4f:3f:f3:d8:17:9f:92:b2:b1:9b:82: 34:6e:e6:0e:e2:52:b9:eb:05:70:09:15:93:ff:99:76:3e:e5: f1:b2:93:40:5e:bd:39:09:08:b4:1d:6f:8e:75:b3:96:e4:7d: 94:1a:d7:35:db:f7:a5:40:04:e2:ed:6a:3c:8b:81:53:cb:e7: 8a:e3:cf:c1:3c:85:76:4e:77:2d:a4:e7:4b:36:10:98:e4:ed: 70:7a:5c:ef:2b:6a:21:1f:f8:e2:21:ff:e5:15:5c:62:2b:af: 75:48:bb:c0:1c:e8:0a:32:a8:b2:64:24:97:ab:02:26:60:81: 06:ac:44:97:18:ae:0b:41:ae:cc:38:8b:fe:98:f5:bd:64:52: 5c:e9:89:ae:7f:d6:db:1c:a6:74:42:84:e1:7a:c8:90:f6:2c: 2f:2c:64:77 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yJgpkTuPYbksiiXepTlxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMTk5NjZjMGVhNWRmM2E5ODdmODM2NTUyNGI1MTI4Y2Jh N2ZjOTAwHhcNMjYwMTAxMTgxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDViMDc1MTc0MDA4NTNhZGMwMjE3MDQ2YTA4YTEyYTNmZGIyYzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxE3kaAAolVLs3EM6VNByXvhBWsw 4VfOfUA4Tq6xN4TAtELCyO9+ckPbScpbElzFmrj5uUAyO2lxyxK9iXkgx42C3jAm cW8cC6PzowpFKX84jXNil9ckINXwXl/gxNFlbYX/+oelq2hysgGefzUTmM/8J82N YKBVQ8oU4TaJ4RCF6q7CayNtCQcAU3vgKnadHhA5vWQTY/ZhMvRkJ4Uy/rZsIBLd zx+QsiVfnGY2qSN9+Dv/4Oto5RQKih2JKaa4rhkp34B0DzwIjmzjAjRXlnrDhuSn YzRvW9ZwfIRiroEGDpO3+W6Gfiqj3N1m2n6UUXdZ6SRFvu3panJwJnoMbQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMRbB1F0AIU63AIXBGoIoSo/2ywdMB8GA1UdIwQY MBaAFC4ZlmwOpd86mH+DZVJLUSjLp/yQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGhtV2JBNmwzenFZZjRObFVrdFJLTXVuX0pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hNmI2MTMtNjZiZC00MzEyLThmMGMt MzZiNWRkYTlmYmU4LzEveEZzSFVYUUFoVHJjQWhjRWFnaWhLal9iTEIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9hNmI2MTMtNjZiZC00MzEyLThmMGMtMzZiNWRkYTlmYmU4 LzEvTGhtV2JBNmwzenFZZjRObFVrdFJLTXVuX0pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYg3MA0G CSqGSIb3DQEBCwUAA4IBAQBex5r6EizmNEpomMhk1kfPzxC3OMdfCgDNq0YKDRLM NQU5DvTV6BxTuj2gppqU6TVSWTKSqyWdARJqkBg+eONkzJ5KtCpSaUWUj2hLGlDi Cup6g4NGEdhx6eqMB2rgaWA7Tz/z2BefkrKxm4I0buYO4lK56wVwCRWT/5l2PuXx spNAXr05CQi0HW+OdbOW5H2UGtc12/elQATi7Wo8i4FTy+eK48/BPIV2TnctpOdL NhCY5O1welzvK2ohH/jiIf/lFVxiK691SLvAHOgKMqiyZCSXqwImYIEGrESXGK4L Qa7MOIv+mPW9ZFJc6Ymuf9bbHKZ0QoThesiQ9iwvLGR3 -----END CERTIFICATE-----Generated at Sun Jan 25 17:40:25 2026 by rpki-client