This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/xIyRvynsJDfonhuzRYt1ty9sqMY.roa File: xIyRvynsJDfonhuzRYt1ty9sqMY.roa (raw, json) Hash identifier: EoXBFExcfd/L36PfBZw/K0nrCLVb7q9unxVkiCC6TIU= Subject key identifier: C4:8C:91:BF:29:EC:24:37:E8:9E:1B:B3:45:8B:75:B7:2F:6C:A8:C6 Certificate issuer: /CN=6851a3fee77e924146177123dd6753b06fde2452 Certificate serial: 019B7F8368876B75D44375C70C5CE65F1F36 Authority key identifier: 68:51:A3:FE:E7:7E:92:41:46:17:71:23:DD:67:53:B0:6F:DE:24:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/xIyRvynsJDfonhuzRYt1ty9sqMY.roa Signing time: Fri 02 Jan 2026 16:21:16 +0000 ROA not before: Fri 02 Jan 2026 16:21:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 559 IP address blocks: 130.223.0.0/16 maxlen: 16 192.42.180.0/22 maxlen: 22 192.42.184.0/21 maxlen: 21 192.42.192.0/21 maxlen: 21 192.42.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:68:87:6b:75:d4:43:75:c7:0c:5c:e6:5f:1f:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6851a3fee77e924146177123dd6753b06fde2452 Validity Not Before: Jan 2 16:21:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c48c91bf29ec2437e89e1bb3458b75b72f6ca8c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a7:96:d3:18:ef:a6:ea:41:47:2f:41:2e:42: 7b:55:2c:d8:8c:88:23:72:88:cc:5a:49:ae:26:d3: 87:ed:0a:f1:da:8f:db:be:a3:b5:e1:0a:9a:20:50: 38:7b:64:af:28:dc:96:ca:2c:13:5f:36:5a:25:b9: 8f:8a:a2:6f:12:3e:5f:32:93:3e:4e:d1:39:7e:15: bb:2c:2b:8c:3c:24:bb:79:08:80:8e:13:22:ee:ff: 9c:e4:36:f5:1a:c6:df:5c:aa:d8:fe:67:19:53:a5: 8b:2f:eb:5c:6f:92:d4:ca:b6:4a:40:f4:ae:e1:81: 39:ca:39:dd:43:15:a0:51:18:0f:26:aa:ad:c1:25: 0d:da:ec:b6:11:37:61:0d:e9:c8:a0:8f:20:79:b4: 22:61:27:1d:45:19:8a:17:7e:1c:55:81:1b:a5:c8: eb:d2:9f:cc:25:a4:49:ff:7f:a3:67:ac:8c:bf:9d: 75:91:38:da:a0:77:0b:81:a1:78:55:c6:e4:33:f4: b7:20:7c:24:3c:1f:ba:8d:86:e2:39:a6:8d:1c:16: 86:6f:55:f4:09:23:2c:88:06:f9:ce:f9:87:4e:82: 56:38:65:6e:21:b4:be:97:6c:1d:7c:c0:c8:cd:bc: 36:bc:69:62:ee:e5:bf:10:ed:ab:9c:42:28:d0:da: 2f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:8C:91:BF:29:EC:24:37:E8:9E:1B:B3:45:8B:75:B7:2F:6C:A8:C6 X509v3 Authority Key Identifier: keyid:68:51:A3:FE:E7:7E:92:41:46:17:71:23:DD:67:53:B0:6F:DE:24:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/xIyRvynsJDfonhuzRYt1ty9sqMY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.223.0.0/16 192.42.180.0-192.42.201.255 Signature Algorithm: sha256WithRSAEncryption 16:fb:6e:4a:f6:d4:77:13:0a:16:24:a7:93:00:dc:25:e1:7e: 0f:1f:81:e4:1d:5e:ea:a7:b0:13:89:c2:c0:5f:f7:3d:96:e2: 34:a5:61:02:eb:69:f4:55:84:5c:04:f0:44:20:71:41:40:e6: d3:ff:b6:cc:44:ab:f4:d2:ab:bf:a0:34:75:69:83:75:fc:76: bb:f0:ed:4d:d1:e9:20:77:cc:78:90:db:fb:87:a7:89:40:97: 34:23:08:29:58:b8:58:fd:26:b9:ca:eb:34:f7:ff:f6:ff:44: 41:f6:bd:8a:cb:0a:b9:17:5f:e7:4b:e1:ed:67:cf:71:0c:d6: 76:28:39:dc:34:0c:97:0f:d2:50:c0:16:04:e1:cc:06:11:49: 29:8f:fe:29:6c:56:40:59:49:6f:57:eb:9a:96:2e:92:98:d8: 32:be:1c:78:eb:b4:5e:78:ea:67:2a:20:44:39:2c:46:23:a8: 36:98:dc:9a:93:a3:d9:c2:d7:25:62:50:5f:9b:7e:df:08:f2: 8d:3f:e0:99:a3:52:46:d0:ac:d4:c8:f6:70:8c:8c:8b:fa:5f: 54:b7:1e:9c:c2:4b:0c:95:98:7f:0d:cc:32:d1:0c:85:c1:c8: c4:89:b8:5d:5e:0f:86:93:5b:bd:96:19:95:60:7b:ba:3f:02: 56:f6:19:da -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZt/g2iHa3XUQ3XHDFzmXx82MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4NTFhM2ZlZTc3ZTkyNDE0NjE3NzEyM2RkNjc1M2IwNmZk ZTI0NTIwHhcNMjYwMTAyMTYyMTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDhjOTFiZjI5ZWMyNDM3ZTg5ZTFiYjM0NThiNzViNzJmNmNhOGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaeW0xjvpupBRy9BLkJ7VSzYjIgj cojMWkmuJtOH7Qrx2o/bvqO14QqaIFA4e2SvKNyWyiwTXzZaJbmPiqJvEj5fMpM+ TtE5fhW7LCuMPCS7eQiAjhMi7v+c5Db1GsbfXKrY/mcZU6WLL+tcb5LUyrZKQPSu 4YE5yjndQxWgURgPJqqtwSUN2uy2ETdhDenIoI8gebQiYScdRRmKF34cVYEbpcjr 0p/MJaRJ/3+jZ6yMv511kTjaoHcLgaF4VcbkM/S3IHwkPB+6jYbiOaaNHBaGb1X0 CSMsiAb5zvmHToJWOGVuIbS+l2wdfMDIzbw2vGli7uW/EO2rnEIo0NovvQIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFMSMkb8p7CQ36J4bs0WLdbcvbKjGMB8GA1UdIwQY MBaAFGhRo/7nfpJBRhdxI91nU7Bv3iRSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUZHal91ZC1ra0ZHRjNFajNXZFRzR19lSkZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8wMDU5YjUtZjYzNy00MjY1LWEzZTQt YTNiNTg2MjgwNjBkLzEveEl5UnZ5bnNKRGZvbmh1elJZdDF0eTlzcU1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8wMDU5YjUtZjYzNy00MjY1LWEzZTQtYTNiNTg2MjgwNjBk LzEvYUZHal91ZC1ra0ZHRjNFajNXZFRzR19lSkZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATAwMAgt8wDAME AsAqtAMEAcAqyDANBgkqhkiG9w0BAQsFAAOCAQEAFvtuSvbUdxMKFiSnkwDcJeF+ Dx+B5B1e6qewE4nCwF/3PZbiNKVhAutp9FWEXATwRCBxQUDm0/+2zESr9NKrv6A0 dWmDdfx2u/DtTdHpIHfMeJDb+4eniUCXNCMIKVi4WP0mucrrNPf/9v9EQfa9issK uRdf50vh7WfPcQzWdig53DQMlw/SUMAWBOHMBhFJKY/+KWxWQFlJb1frmpYukpjY Mr4ceOu0XnjqZyogRDksRiOoNpjcmpOj2cLXJWJQX5t+3wjyjT/gmaNSRtCs1Mj2 cIyMi/pfVLcenMJLDJWYfw3MMtEMhcHIxIm4XV4PhpNbvZYZlWB7uj8CVvYZ2g== -----END CERTIFICATE-----Generated at Sun Jan 25 21:04:33 2026 by rpki-client