This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/xVcSmhyk0_Qo40ofl5u_PEEu3HE.roa File: xVcSmhyk0_Qo40ofl5u_PEEu3HE.roa (raw, json) Hash identifier: kK0Uj2bJIlMSuPP8uzF2AWDHl7oEe3LauznrigXJBTY= Subject key identifier: C5:57:12:9A:1C:A4:D3:F4:28:E3:4A:1F:97:9B:BF:3C:41:2E:DC:71 Certificate issuer: /CN=0b0a940cfd2eefe82f570fafc4fdc5bd07941a06 Certificate serial: 019B7CECCF1941E6F4FAAE2E6402204C727F Authority key identifier: 0B:0A:94:0C:FD:2E:EF:E8:2F:57:0F:AF:C4:FD:C5:BD:07:94:1A:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CwqUDP0u7-gvVw-vxP3FvQeUGgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/xVcSmhyk0_Qo40ofl5u_PEEu3HE.roa Signing time: Fri 02 Jan 2026 04:17:32 +0000 ROA not before: Fri 02 Jan 2026 04:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 17158 IP address blocks: 139.28.145.0/24 maxlen: 24 139.28.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft rsync://rpki.ripe.net/repository/DEFAULT/CwqUDP0u7-gvVw-vxP3FvQeUGgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:cf:19:41:e6:f4:fa:ae:2e:64:02:20:4c:72:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b0a940cfd2eefe82f570fafc4fdc5bd07941a06 Validity Not Before: Jan 2 04:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c557129a1ca4d3f428e34a1f979bbf3c412edc71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:62:da:e5:6f:51:9a:d1:8c:45:5e:12:c8:de: a5:7a:4b:b0:b7:c5:cc:fa:09:b4:48:2d:a9:fc:d4: 89:ad:64:95:39:09:ad:cb:02:cd:0c:6b:cd:78:6b: f5:f0:ba:1d:58:92:cf:a4:45:8f:c0:4f:37:a8:8e: 95:4e:be:06:c5:7a:8a:b2:d9:fb:5b:f6:3a:0a:08: 22:25:c7:56:fa:57:8c:36:05:e7:0c:5f:ea:58:e7: 1e:a7:8a:d8:07:48:8b:0d:21:e8:2d:fc:e5:be:9b: 71:a5:81:5c:ca:6c:24:b4:48:e6:4c:c3:93:af:3c: ac:ef:f9:91:b9:c4:d4:15:54:3a:db:e9:fc:ce:e8: 6c:bc:41:c1:b8:9e:84:69:23:d8:ea:09:b6:82:86: 8c:fb:8c:b7:67:6f:b8:56:d5:b4:c8:f3:ee:65:c0: 68:60:d5:5f:f1:cc:8a:a8:9a:10:4d:49:0b:c0:36: 14:8f:c9:c4:05:5d:27:14:29:f3:40:3c:d9:ec:27: 41:26:6a:15:ae:23:94:1e:7c:7c:e2:10:77:ba:38: 56:d6:4c:23:0a:22:bd:d1:3b:a1:7e:6e:b7:ef:10: 25:97:a7:89:5f:c4:2b:2a:e6:00:36:e9:b5:81:da: 67:70:7c:41:cf:a2:01:00:dd:c1:9b:6f:67:08:1e: e6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:57:12:9A:1C:A4:D3:F4:28:E3:4A:1F:97:9B:BF:3C:41:2E:DC:71 X509v3 Authority Key Identifier: keyid:0B:0A:94:0C:FD:2E:EF:E8:2F:57:0F:AF:C4:FD:C5:BD:07:94:1A:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CwqUDP0u7-gvVw-vxP3FvQeUGgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/xVcSmhyk0_Qo40ofl5u_PEEu3HE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.28.145.0-139.28.146.255 Signature Algorithm: sha256WithRSAEncryption 75:f5:ba:1a:db:f1:c2:df:ed:ee:cd:06:ab:a1:92:a4:7f:9e: eb:5f:be:90:09:7d:fd:e7:63:9f:c3:c5:69:70:23:44:ac:6c: 3b:12:18:4c:d6:b2:b5:9f:81:84:a3:9d:3a:80:ae:97:18:c0: 1f:7c:99:38:f9:71:ce:d5:df:fb:ea:93:4e:7a:eb:bb:88:1f: 52:e6:c2:b6:f2:cd:5d:61:38:39:0a:26:82:96:14:4c:86:15: d7:ab:bb:be:36:cb:4f:da:ab:57:62:f2:a6:27:8e:57:32:09: 9d:35:65:b7:91:65:73:84:00:d2:0a:7d:12:99:c2:de:cd:1a: 0a:23:b3:d7:54:51:65:42:9e:da:71:20:8a:62:98:ae:3b:a6: 83:f0:ec:bb:32:f7:f9:33:3c:03:05:a9:7a:91:9c:f3:d8:38: 5a:48:3a:05:e9:47:af:ec:25:78:27:ec:1d:0e:92:d4:a2:18: e6:8f:3d:75:26:f3:3d:98:bf:e2:8f:90:43:07:e4:e1:a8:71: d7:1b:e4:38:18:ed:cf:a2:c6:a7:4a:33:0f:d0:14:30:5b:63: d7:3e:41:82:8a:fa:1b:59:3d:74:9b:ef:25:99:1b:67:9a:d8: b9:31:a8:82:7b:7f:f5:1a:b4:26:6d:a9:ba:d6:10:af:96:e3: 0e:91:7b:5b -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt87M8ZQeb0+q4uZAIgTHJ/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMGE5NDBjZmQyZWVmZTgyZjU3MGZhZmM0ZmRjNWJkMDc5 NDFhMDYwHhcNMjYwMTAyMDQxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTU3MTI5YTFjYTRkM2Y0MjhlMzRhMWY5NzliYmYzYzQxMmVkYzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2La5W9RmtGMRV4SyN6lekuwt8XM +gm0SC2p/NSJrWSVOQmtywLNDGvNeGv18LodWJLPpEWPwE83qI6VTr4GxXqKstn7 W/Y6CggiJcdW+leMNgXnDF/qWOcep4rYB0iLDSHoLfzlvptxpYFcymwktEjmTMOT rzys7/mRucTUFVQ62+n8zuhsvEHBuJ6EaSPY6gm2goaM+4y3Z2+4VtW0yPPuZcBo YNVf8cyKqJoQTUkLwDYUj8nEBV0nFCnzQDzZ7CdBJmoVriOUHnx84hB3ujhW1kwj CiK90Tuhfm637xAll6eJX8QrKuYANum1gdpncHxBz6IBAN3Bm29nCB7m/QIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFMVXEpocpNP0KONKH5ebvzxBLtxxMB8GA1UdIwQY MBaAFAsKlAz9Lu/oL1cPr8T9xb0HlBoGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3dxVURQMHU3LWd2VnctdnhQM0Z2UWVVR2dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMDU0NzUtYjIyNC00ZWE4LTkxYWUt NmU0Y2Q4MzZjN2NiLzEveFZjU21oeWswX1FvNDBvZmw1dV9QRUV1M0hFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8zMDU0NzUtYjIyNC00ZWE4LTkxYWUtNmU0Y2Q4MzZjN2Ni LzEvQ3dxVURQMHU3LWd2VnctdnhQM0Z2UWVVR2dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACLHJED BACLHJIwDQYJKoZIhvcNAQELBQADggEBAHX1uhrb8cLf7e7NBquhkqR/nutfvpAJ ff3nY5/DxWlwI0SsbDsSGEzWsrWfgYSjnTqArpcYwB98mTj5cc7V3/vqk05667uI H1LmwrbyzV1hODkKJoKWFEyGFderu742y0/aq1di8qYnjlcyCZ01ZbeRZXOEANIK fRKZwt7NGgojs9dUUWVCntpxIIpimK47poPw7Lsy9/kzPAMFqXqRnPPYOFpIOgXp R6/sJXgn7B0OktSiGOaPPXUm8z2Yv+KPkEMH5OGocdcb5DgY7c+ixqdKMw/QFDBb Y9c+QYKK+htZPXSb7yWZG2ea2LkxqIJ7f/UatCZtqbrWEK+W4w6Re1s= -----END CERTIFICATE-----Generated at Sun Jan 25 22:32:02 2026 by rpki-client