This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/xe9JexTqWxeyzxE1j0Qz0XcC_Qo.roa File: xe9JexTqWxeyzxE1j0Qz0XcC_Qo.roa (raw, json) Hash identifier: xXSsGBvegc8qYSSStq7A7yikuTgP5mU9F9Gcd6J66RM= Subject key identifier: C5:EF:49:7B:14:EA:5B:17:B2:CF:11:35:8F:44:33:D1:77:02:FD:0A Certificate issuer: /CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370 Certificate serial: 019B7834F939EECD998420A5A49CC7B57B92 Authority key identifier: 80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/xe9JexTqWxeyzxE1j0Qz0XcC_Qo.roa Signing time: Thu 01 Jan 2026 06:18:16 +0000 ROA not before: Thu 01 Jan 2026 06:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202391 IP address blocks: 45.142.191.0/24 maxlen: 24 185.141.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:f9:39:ee:cd:99:84:20:a5:a4:9c:c7:b5:7b:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370 Validity Not Before: Jan 1 06:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5ef497b14ea5b17b2cf11358f4433d17702fd0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:77:50:ae:b4:1e:da:b5:3e:86:5d:3b:47:aa: 10:5b:38:6c:48:00:6f:ac:39:50:2d:df:3b:da:98: b1:61:36:a2:8c:b1:b5:3f:48:6a:11:4a:63:fe:3d: 2c:50:94:14:71:7c:3a:e7:37:15:94:dc:14:da:ee: f7:07:ab:32:0b:a6:9d:5f:cd:1c:53:3d:30:37:c7: e5:97:be:d6:20:57:07:16:a2:f2:82:c3:c0:7e:c1: 86:7f:54:74:e5:b0:06:51:62:c0:2a:34:1e:9b:a7: 8a:b3:9c:9b:d5:b5:91:cf:2c:f9:3c:1d:0b:cf:b0: 2f:43:4f:55:27:e9:80:62:ad:8e:ff:74:1f:44:f2: 68:47:f9:73:18:05:fd:f6:21:4a:ad:af:0f:4f:4b: 9d:2e:56:96:6e:7a:98:5d:59:39:e2:fc:24:84:d6: f9:c7:3a:0b:0d:e0:d6:54:88:a7:6b:1c:0d:1c:6c: cb:f1:6f:8a:13:ce:11:31:c0:8d:da:67:bb:a0:34: c7:88:c1:4f:27:ba:ee:f8:19:59:4b:5e:a6:dd:51: 6d:d9:2b:e7:36:47:c2:80:38:90:3b:35:12:9f:d8: 8a:c3:a8:85:81:4b:c6:6d:32:3f:e1:71:7e:85:d7: 8b:79:5f:b9:b4:6c:f1:d1:0b:75:68:a9:a4:93:0d: c2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:EF:49:7B:14:EA:5B:17:B2:CF:11:35:8F:44:33:D1:77:02:FD:0A X509v3 Authority Key Identifier: keyid:80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/xe9JexTqWxeyzxE1j0Qz0XcC_Qo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.142.191.0/24 185.141.36.0/22 Signature Algorithm: sha256WithRSAEncryption 5f:c4:92:4c:77:a1:b0:aa:75:48:94:2e:f8:2b:0f:ac:b2:35: 6c:7a:0b:55:8f:4c:05:65:5d:6e:9b:4c:a8:7c:98:e6:ce:ff: 8b:bd:88:3a:60:44:48:60:49:ce:d6:ed:21:94:69:3d:7e:0e: f7:55:3a:5e:97:d8:82:9c:04:cd:2d:c5:5a:d7:9d:63:11:0d: 20:b7:bd:d4:7c:c7:11:ab:64:6d:61:e4:a3:23:52:7c:22:6b: 09:bf:ae:44:c5:3f:fa:8c:4b:33:21:b8:01:80:75:67:14:0d: c1:85:6c:96:f1:17:8d:8e:e3:3f:0b:96:2b:85:1d:68:aa:38: 9d:d9:6e:fe:a3:30:75:1b:2c:64:d1:80:61:9d:1f:a5:9b:48: 8d:eb:da:c3:2e:42:20:63:76:40:9b:5a:19:a2:85:1d:e9:ae: 0b:45:e2:9d:fc:fa:c3:3e:c6:46:76:06:cf:97:1d:98:67:19: 6f:90:03:3e:f8:38:41:9d:12:7c:7b:a4:85:d3:08:45:2b:26: 60:48:6e:2c:25:e4:5b:88:3c:7b:bc:2f:df:df:2e:e3:32:2b: 68:b2:bd:60:9c:53:79:3e:c5:b0:a7:06:55:3d:7c:ea:b0:1a: df:36:77:55:b5:36:ea:85:e0:47:ea:02:5a:fc:db:31:bd:10: 52:fa:bd:c4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NPk57s2ZhCClpJzHtXuSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwYWQ4YzUyMGJiOTY3NzQ2MWRkYzRlYzA5Yjc2ZDczM2I3 ZDgzNzAwHhcNMjYwMTAxMDYxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNWVmNDk3YjE0ZWE1YjE3YjJjZjExMzU4ZjQ0MzNkMTc3MDJmZDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXdQrrQe2rU+hl07R6oQWzhsSABv rDlQLd872pixYTaijLG1P0hqEUpj/j0sUJQUcXw65zcVlNwU2u73B6syC6adX80c Uz0wN8fll77WIFcHFqLygsPAfsGGf1R05bAGUWLAKjQem6eKs5yb1bWRzyz5PB0L z7AvQ09VJ+mAYq2O/3QfRPJoR/lzGAX99iFKra8PT0udLlaWbnqYXVk54vwkhNb5 xzoLDeDWVIinaxwNHGzL8W+KE84RMcCN2me7oDTHiMFPJ7ru+BlZS16m3VFt2Svn NkfCgDiQOzUSn9iKw6iFgUvGbTI/4XF+hdeLeV+5tGzx0Qt1aKmkkw3C3QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMXvSXsU6lsXss8RNY9EM9F3Av0KMB8GA1UdIwQY MBaAFICtjFILuWd0Yd3E7Am3bXM7fYNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0syTVVndTVaM1JoM2NUc0NiZHRjenQ5ZzNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yMjVlYzMtMDM4Ny00YjVkLTg4YzEt YzYxNzUxYzZiMTk1LzEveGU5SmV4VHFXeGV5enhFMWowUXowWGNDX1FvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8yMjVlYzMtMDM4Ny00YjVkLTg4YzEtYzYxNzUxYzZiMTk1 LzEvZ0syTVVndTVaM1JoM2NUc0NiZHRjenQ5ZzNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALY6/AwQC uY0kMA0GCSqGSIb3DQEBCwUAA4IBAQBfxJJMd6GwqnVIlC74Kw+ssjVsegtVj0wF ZV1um0yofJjmzv+LvYg6YERIYEnO1u0hlGk9fg73VTpel9iCnATNLcVa151jEQ0g t73UfMcRq2RtYeSjI1J8ImsJv65ExT/6jEszIbgBgHVnFA3BhWyW8ReNjuM/C5Yr hR1oqjid2W7+ozB1Gyxk0YBhnR+lm0iN69rDLkIgY3ZAm1oZooUd6a4LReKd/PrD PsZGdgbPlx2YZxlvkAM++DhBnRJ8e6SF0whFKyZgSG4sJeRbiDx7vC/f3y7jMito sr1gnFN5PsWwpwZVPXzqsBrfNndVtTbqheBH6gJa/NsxvRBS+r3E -----END CERTIFICATE-----Generated at Sun Jan 25 22:53:25 2026 by rpki-client