This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/XQkD52Zfvhq6_d5AVqXE2OW5p9Y.roa File: XQkD52Zfvhq6_d5AVqXE2OW5p9Y.roa (raw, json) Hash identifier: k4WdO5x2Sfpuse0c3hZ/JKknqBEpkpoTIJHNab36a90= Subject key identifier: 5D:09:03:E7:66:5F:BE:1A:BA:FD:DE:40:56:A5:C4:D8:E5:B9:A7:D6 Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Certificate serial: 019B77C76C7018DFE69E7D7DB4EFB820441C Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/XQkD52Zfvhq6_d5AVqXE2OW5p9Y.roa Signing time: Thu 01 Jan 2026 04:18:36 +0000 ROA not before: Thu 01 Jan 2026 04:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50040 IP address blocks: 109.73.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:6c:70:18:df:e6:9e:7d:7d:b4:ef:b8:20:44:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Validity Not Before: Jan 1 04:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d0903e7665fbe1abafdde4056a5c4d8e5b9a7d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:88:32:34:6c:cc:6f:dd:31:c2:a9:5b:74:37: 89:1c:bd:ca:1b:68:41:dd:56:19:cc:63:4c:f2:8a: c1:9a:15:78:fe:d8:eb:d9:e3:ac:bc:79:df:dc:a5: eb:69:f2:c7:0e:20:5a:69:a8:cc:91:9f:ab:70:82: a6:ec:4f:18:4a:74:1f:6f:d4:33:6a:1f:ac:d1:ac: 46:14:7b:6d:82:36:7e:cf:dd:1b:45:34:f3:f8:6a: c0:72:37:13:c9:8c:81:d5:0e:e7:7f:5e:d4:81:d3: 1d:88:8b:0b:df:f7:51:74:97:77:ec:c2:c6:0c:0c: 29:ef:92:e2:c0:2f:48:30:90:db:59:2d:eb:ee:29: e9:aa:9c:54:e0:28:39:db:25:8f:19:09:53:e5:c9: 5e:76:06:f8:8e:7b:65:ad:80:e7:d8:36:90:56:43: 25:6c:35:31:f2:a8:a3:ac:31:ca:1b:ad:11:79:b5: c8:33:90:d9:68:ee:4f:d1:17:2c:34:cd:86:4c:20: b2:de:72:3e:8f:50:bb:f3:79:0c:33:d6:78:a4:75: bd:29:15:ac:cd:d4:48:10:e2:86:b9:18:04:48:14: 9d:fe:09:48:4e:79:6b:da:fd:b3:2f:91:6c:3b:d9: 57:0b:29:f9:7b:f6:34:08:22:cc:c7:35:c2:89:c9: a1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:09:03:E7:66:5F:BE:1A:BA:FD:DE:40:56:A5:C4:D8:E5:B9:A7:D6 X509v3 Authority Key Identifier: keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/XQkD52Zfvhq6_d5AVqXE2OW5p9Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.73.15.0/24 Signature Algorithm: sha256WithRSAEncryption 86:85:7b:b9:ce:fd:f3:f9:4a:57:ec:03:27:c4:0b:7d:30:50: 56:fb:86:2b:82:de:bb:7c:61:a6:2f:56:ac:8e:8b:e3:46:b5: 61:a2:6d:61:b9:39:0e:36:8d:fa:de:e7:44:09:78:ee:94:19: af:6a:90:44:2f:13:da:8f:a4:44:71:97:a0:d0:10:1e:9b:c5: a9:1b:8f:99:14:d8:24:e7:ca:3c:98:9f:8b:ea:75:d9:97:94: 4c:17:a1:1c:e5:64:1d:6a:28:45:e0:bb:86:cd:0a:5a:ee:ff: e0:13:15:b1:df:ed:40:a3:30:74:f1:19:24:bd:cc:3b:03:40: 5e:de:74:b0:d9:cf:ff:37:a9:9a:31:36:e9:44:da:3c:db:fd: de:a5:82:e5:cc:2e:5c:68:78:65:14:b1:2a:51:87:26:18:cb: 44:20:aa:e8:5e:2d:4b:71:4b:88:af:69:b9:d7:4f:fc:ce:8d: 9e:2a:62:8f:14:99:ae:1e:b0:48:90:25:f4:64:7f:59:b5:85: d3:69:ed:ae:10:5a:a7:73:9c:9b:e7:43:42:2d:fb:e5:6d:41: a4:89:3a:b1:cd:43:fe:70:1b:73:0e:0c:b9:26:fd:15:06:22: 0d:4a:f6:79:cd:b9:a8:62:66:b2:23:3c:76:ad:98:70:ab:8d: e5:74:a4:8a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x2xwGN/mnn19tO+4IEQcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx Nzg1YzAwHhcNMjYwMTAxMDQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDA5MDNlNzY2NWZiZTFhYmFmZGRlNDA1NmE1YzRkOGU1YjlhN2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4gyNGzMb90xwqlbdDeJHL3KG2hB 3VYZzGNM8orBmhV4/tjr2eOsvHnf3KXrafLHDiBaaajMkZ+rcIKm7E8YSnQfb9Qz ah+s0axGFHttgjZ+z90bRTTz+GrAcjcTyYyB1Q7nf17UgdMdiIsL3/dRdJd37MLG DAwp75LiwC9IMJDbWS3r7inpqpxU4Cg52yWPGQlT5cledgb4jntlrYDn2DaQVkMl bDUx8qijrDHKG60RebXIM5DZaO5P0RcsNM2GTCCy3nI+j1C783kMM9Z4pHW9KRWs zdRIEOKGuRgESBSd/glITnlr2v2zL5FsO9lXCyn5e/Y0CCLMxzXCicmhHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF0JA+dmX74auv3eQFalxNjluafWMB8GA1UdIwQY MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct ODllNTZjODBkMWQwLzEvWFFrRDUyWmZ2aHE2X2Q1QVZxWEUyT1c1cDlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbUkPMA0G CSqGSIb3DQEBCwUAA4IBAQCGhXu5zv3z+UpX7AMnxAt9MFBW+4Yrgt67fGGmL1as jovjRrVhom1huTkONo363udECXjulBmvapBELxPaj6REcZeg0BAem8WpG4+ZFNgk 58o8mJ+L6nXZl5RMF6Ec5WQdaihF4LuGzQpa7v/gExWx3+1AozB08Rkkvcw7A0Be 3nSw2c//N6maMTbpRNo82/3epYLlzC5caHhlFLEqUYcmGMtEIKroXi1LcUuIr2m5 10/8zo2eKmKPFJmuHrBIkCX0ZH9ZtYXTae2uEFqnc5yb50NCLfvlbUGkiTqxzUP+ cBtzDgy5Jv0VBiINSvZ5zbmoYmayIzx2rZhwq43ldKSK -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:01 2026 by rpki-client