This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/xXiMv43g5gZyliPARvzZ7xyyW2k.roa File: xXiMv43g5gZyliPARvzZ7xyyW2k.roa (raw, json) Hash identifier: lpdFA5yCXN5/FwIwDvBqyIeXJAPjPFSrUa0qNDgv7fQ= Subject key identifier: C5:78:8C:BF:8D:E0:E6:06:72:96:23:C0:46:FC:D9:EF:1C:B2:5B:69 Certificate issuer: /CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370 Certificate serial: 019B7834F81AD27F8169A722D9275FF85816 Authority key identifier: 80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/xXiMv43g5gZyliPARvzZ7xyyW2k.roa Signing time: Thu 01 Jan 2026 06:18:15 +0000 ROA not before: Thu 01 Jan 2026 06:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44090 IP address blocks: 45.142.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:f8:1a:d2:7f:81:69:a7:22:d9:27:5f:f8:58:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370 Validity Not Before: Jan 1 06:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5788cbf8de0e606729623c046fcd9ef1cb25b69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fd:da:5e:d4:f6:bd:1a:1a:92:c8:a9:dd:da: 84:25:fe:ea:41:fb:0e:11:b1:0a:d3:22:af:74:e9: 91:23:47:e5:5e:a5:41:df:bf:05:e2:d8:44:f1:e9: 34:44:3d:5a:c4:7e:66:ec:be:09:c2:6d:81:72:a2: 8e:91:df:c2:97:db:ca:11:ec:75:c8:24:9e:cd:c9: 3a:35:3e:38:3f:96:f6:13:99:8d:94:df:0e:13:d4: ba:92:b3:07:eb:fd:13:51:87:2c:93:39:b2:34:84: 7e:3b:54:5b:37:65:31:d0:d8:da:a9:d4:16:02:36: 34:bb:b7:4e:ec:2a:da:0b:79:2b:fb:dc:3a:a0:63: be:e7:78:65:13:28:6f:1c:50:03:4c:eb:92:32:ad: 58:44:31:7b:f3:b2:e5:93:8b:7f:32:43:de:06:6f: 08:a5:91:97:4d:d9:5e:80:c9:1a:ad:e2:8f:f8:10: d2:b9:62:64:8d:af:32:d5:50:93:ab:25:68:97:36: 72:54:61:53:39:9a:01:29:b7:de:54:3e:eb:26:a1: d5:53:57:8f:20:e0:b0:8e:b9:3b:f2:9c:92:5a:e8: e8:ec:ae:f7:22:15:26:b9:7d:81:da:ab:46:42:b7: 63:21:77:28:07:fb:19:c9:fd:c6:41:d2:4f:70:d3: d2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:78:8C:BF:8D:E0:E6:06:72:96:23:C0:46:FC:D9:EF:1C:B2:5B:69 X509v3 Authority Key Identifier: keyid:80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/xXiMv43g5gZyliPARvzZ7xyyW2k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.142.189.0/24 Signature Algorithm: sha256WithRSAEncryption 59:73:7d:73:8c:ef:af:64:37:b9:b7:63:f7:8f:2a:ed:ab:c3: c3:49:c7:36:54:e8:e8:32:64:8b:aa:87:d6:da:4a:9a:68:02: 90:ba:17:ec:c4:a5:c3:2a:93:51:fb:1f:a5:f4:ef:06:7c:bb: 8e:08:4c:4d:9a:06:ae:83:aa:9c:ef:6f:59:bf:b1:e6:7a:d5: e8:a8:a1:72:e3:4e:3f:32:32:68:fb:75:05:47:75:66:c6:8e: 4c:73:4e:2f:fe:8b:57:4b:b2:84:2c:f7:d2:6c:e3:fb:49:b2: 30:e2:99:9a:17:24:11:10:f6:e8:b7:92:8d:54:d9:2f:fd:a5: 56:a2:6c:08:f4:97:29:65:da:2b:8c:14:e3:e8:ea:9e:b5:02: 93:f2:6a:71:3c:d6:56:1c:54:ce:af:fa:1e:9e:cf:51:eb:14: 1d:02:1b:bb:2b:a9:69:9e:51:a4:4c:15:9c:ba:f2:a4:f1:ea: 23:b5:99:aa:7e:b4:12:46:b5:a8:9b:c9:63:8d:55:c2:db:07: 7d:62:61:46:bf:68:39:8c:0d:1e:a9:78:69:d8:95:ed:27:de: 3b:9f:65:5d:b1:78:d8:e6:80:42:0b:45:a5:01:da:13:b0:36: e4:82:69:8e:0b:ff:c6:12:fb:cd:fa:c1:d9:d7:f6:cb:d8:4f: f4:51:9d:4f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NPga0n+Baaci2Sdf+FgWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwYWQ4YzUyMGJiOTY3NzQ2MWRkYzRlYzA5Yjc2ZDczM2I3 ZDgzNzAwHhcNMjYwMTAxMDYxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTc4OGNiZjhkZTBlNjA2NzI5NjIzYzA0NmZjZDllZjFjYjI1YjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxP3aXtT2vRoaksip3dqEJf7qQfsO EbEK0yKvdOmRI0flXqVB378F4thE8ek0RD1axH5m7L4Jwm2BcqKOkd/Cl9vKEex1 yCSezck6NT44P5b2E5mNlN8OE9S6krMH6/0TUYcskzmyNIR+O1RbN2Ux0NjaqdQW AjY0u7dO7CraC3kr+9w6oGO+53hlEyhvHFADTOuSMq1YRDF787Llk4t/MkPeBm8I pZGXTdlegMkareKP+BDSuWJkja8y1VCTqyVolzZyVGFTOZoBKbfeVD7rJqHVU1eP IOCwjrk78pySWujo7K73IhUmuX2B2qtGQrdjIXcoB/sZyf3GQdJPcNPSnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMV4jL+N4OYGcpYjwEb82e8csltpMB8GA1UdIwQY MBaAFICtjFILuWd0Yd3E7Am3bXM7fYNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0syTVVndTVaM1JoM2NUc0NiZHRjenQ5ZzNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yMjVlYzMtMDM4Ny00YjVkLTg4YzEt YzYxNzUxYzZiMTk1LzEveFhpTXY0M2c1Z1p5bGlQQVJ2elo3eHl5VzJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8yMjVlYzMtMDM4Ny00YjVkLTg4YzEtYzYxNzUxYzZiMTk1 LzEvZ0syTVVndTVaM1JoM2NUc0NiZHRjenQ5ZzNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY69MA0G CSqGSIb3DQEBCwUAA4IBAQBZc31zjO+vZDe5t2P3jyrtq8PDScc2VOjoMmSLqofW 2kqaaAKQuhfsxKXDKpNR+x+l9O8GfLuOCExNmgaug6qc729Zv7HmetXoqKFy404/ MjJo+3UFR3Vmxo5Mc04v/otXS7KELPfSbOP7SbIw4pmaFyQREPbot5KNVNkv/aVW omwI9JcpZdorjBTj6OqetQKT8mpxPNZWHFTOr/oens9R6xQdAhu7K6lpnlGkTBWc uvKk8eojtZmqfrQSRrWom8ljjVXC2wd9YmFGv2g5jA0eqXhp2JXtJ947n2VdsXjY 5oBCC0WlAdoTsDbkgmmOC//GEvvN+sHZ1/bL2E/0UZ1P -----END CERTIFICATE-----Generated at Sun Jan 25 19:39:59 2026 by rpki-client