This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/XRdK0Q38L08ZiH0X_7usVjWgOqU.roa File: XRdK0Q38L08ZiH0X_7usVjWgOqU.roa (raw, json) Hash identifier: NUYv2BvkNVVgRi3KArH9hMTA+2Ow1tmbVRQjMS4xPYw= Subject key identifier: 5D:17:4A:D1:0D:FC:2F:4F:19:88:7D:17:FF:BB:AC:56:35:A0:3A:A5 Certificate issuer: /CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1 Certificate serial: 019B7C8052C5925A7C102714197133840230 Authority key identifier: 16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/XRdK0Q38L08ZiH0X_7usVjWgOqU.roa Signing time: Fri 02 Jan 2026 02:19:03 +0000 ROA not before: Fri 02 Jan 2026 02:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8132 IP address blocks: 155.45.0.0/17 maxlen: 17 155.45.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:52:c5:92:5a:7c:10:27:14:19:71:33:84:02:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1 Validity Not Before: Jan 2 02:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d174ad10dfc2f4f19887d17ffbbac5635a03aa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:93:24:3b:47:cb:11:78:f7:9e:23:fa:90:c1: 32:ae:f1:d8:a3:ef:1f:56:22:08:5e:c8:3f:42:c7: b8:a0:2f:8b:dc:7d:32:45:01:3b:1c:e3:74:f6:63: cd:4a:58:45:d9:a5:2b:9d:ae:f4:f7:f1:3f:3d:9c: 89:4d:ac:ed:e4:b2:a3:8e:fd:bc:61:c9:5a:d7:ab: af:89:0a:88:6d:79:6d:2b:54:0c:a0:6f:ab:5f:58: 5e:38:73:a5:08:de:66:2d:25:7b:f1:e4:9a:66:08: 19:89:32:45:f2:5a:d0:51:82:3f:92:de:55:ce:43: 86:1c:f4:90:47:7f:7d:e1:78:42:34:14:aa:1b:c9: ae:da:36:b9:22:95:c4:15:68:06:b9:ed:b0:17:98: 3e:b0:c4:11:10:6a:8c:2c:cc:e7:82:cf:41:2b:48: 66:1b:b0:05:90:aa:8a:9f:85:1d:4c:dd:aa:0c:f5: bc:26:f9:31:38:78:fb:76:16:de:8b:b2:87:29:9a: bf:f4:1d:be:24:48:25:c7:fb:ba:f2:76:0a:bc:db: 76:8f:bd:22:40:e3:c8:1e:ea:2c:c0:60:c3:38:7b: 69:f5:e7:d4:d9:2c:27:9b:9d:df:ce:4d:31:49:a5: f4:e4:dc:35:a6:39:d1:54:e8:5d:bd:27:aa:bf:a3: 58:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:17:4A:D1:0D:FC:2F:4F:19:88:7D:17:FF:BB:AC:56:35:A0:3A:A5 X509v3 Authority Key Identifier: keyid:16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/XRdK0Q38L08ZiH0X_7usVjWgOqU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.45.0.0/17 155.45.249.0/24 Signature Algorithm: sha256WithRSAEncryption 11:f1:cd:b1:f2:f3:66:02:9b:9a:19:77:7a:27:8f:6e:88:f7: 4f:88:ec:df:50:c3:21:15:d6:87:1c:96:c1:74:8a:44:0e:ed: f3:27:3d:bb:b8:2b:96:8b:7b:dd:15:f8:a9:f0:e2:7c:30:d0: f3:14:18:8b:65:70:a6:92:0c:89:ee:60:cd:b4:06:e2:fc:01: db:5b:68:79:9e:42:71:ad:70:9e:7a:cc:95:21:ac:bf:2d:38: 71:06:e2:0a:10:6a:74:ec:ec:1e:1b:ed:68:61:24:f4:c4:41: 0c:c6:c6:95:1f:b8:69:93:7b:ca:ba:d4:8e:f4:48:bd:db:b4: 1d:20:16:fd:f0:31:a3:4d:c2:a9:d2:9c:34:2f:bf:6d:71:54: a0:1f:9e:a2:e0:ce:8d:25:d3:3a:16:8c:f4:cc:35:f4:33:55: a7:0b:52:b2:17:4e:b2:30:ca:ae:60:89:28:f0:42:54:9c:f2: c9:21:3a:e9:c7:65:39:68:0d:06:90:18:9a:b1:0f:e0:49:d3: f1:53:95:c7:7e:a7:da:ed:e5:51:f6:33:c1:58:c9:7e:b3:95: ab:2c:45:e9:4f:e9:4f:f1:99:ff:26:8c:1f:98:5f:00:c8:6e: 87:18:1f:90:af:df:2c:99:dc:33:b9:97:4e:33:0b:6f:5b:39: 2b:a1:ae:90 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gFLFklp8ECcUGXEzhAIwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2Y2RlMTM5YWUwNTczYjBhNGRkYTkzZTc3YjU3ZmYyN2Y5 YmViYTEwHhcNMjYwMTAyMDIxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDE3NGFkMTBkZmMyZjRmMTk4ODdkMTdmZmJiYWM1NjM1YTAzYWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6JMkO0fLEXj3niP6kMEyrvHYo+8f ViIIXsg/Qse4oC+L3H0yRQE7HON09mPNSlhF2aUrna709/E/PZyJTazt5LKjjv28 Ycla16uviQqIbXltK1QMoG+rX1heOHOlCN5mLSV78eSaZggZiTJF8lrQUYI/kt5V zkOGHPSQR3994XhCNBSqG8mu2ja5IpXEFWgGue2wF5g+sMQREGqMLMzngs9BK0hm G7AFkKqKn4UdTN2qDPW8JvkxOHj7dhbei7KHKZq/9B2+JEglx/u68nYKvNt2j70i QOPIHuoswGDDOHtp9efU2Swnm53fzk0xSaX05Nw1pjnRVOhdvSeqv6NYZwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFF0XStEN/C9PGYh9F/+7rFY1oDqlMB8GA1UdIwQY MBaAFBbN4TmuBXOwpN2pPne1f/J/m+uhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnMzaE9hNEZjN0NrM2FrLWQ3Vl84bi1iNjZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8zYzAyZjYtN2M0MS00OWJiLWI5ZGUt YjY5ZGNlNzU0N2ExLzEvWFJkSzBRMzhMMDhaaUgwWF83dXNWaldnT3FVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8zYzAyZjYtN2M0MS00OWJiLWI5ZGUtYjY5ZGNlNzU0N2Ex LzEvRnMzaE9hNEZjN0NrM2FrLWQ3Vl84bi1iNjZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQHmy0AAwQA my35MA0GCSqGSIb3DQEBCwUAA4IBAQAR8c2x8vNmApuaGXd6J49uiPdPiOzfUMMh FdaHHJbBdIpEDu3zJz27uCuWi3vdFfip8OJ8MNDzFBiLZXCmkgyJ7mDNtAbi/AHb W2h5nkJxrXCeesyVIay/LThxBuIKEGp07OweG+1oYST0xEEMxsaVH7hpk3vKutSO 9Ei927QdIBb98DGjTcKp0pw0L79tcVSgH56i4M6NJdM6Foz0zDX0M1WnC1KyF06y MMquYIko8EJUnPLJITrpx2U5aA0GkBiasQ/gSdPxU5XHfqfa7eVR9jPBWMl+s5Wr LEXpT+lP8Zn/JowfmF8AyG6HGB+Qr98smdwzuZdOMwtvWzkroa6Q -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:05 2026 by rpki-client