This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/rxVxvq80s018HousURd0ic36W10.roa File: rxVxvq80s018HousURd0ic36W10.roa (raw, json) Hash identifier: 4vWzh852MFR+K32Ov40708je2OYVViB9fVjK6c0oRMs= Subject key identifier: AF:15:71:BE:AF:34:B3:4D:7C:1E:8B:AC:51:17:74:89:CD:FA:5B:5D Certificate issuer: /CN=61c2b45a65c19b68abb0516c9ccaf4547a5cc312 Certificate serial: 019BE6C5A1F40AC032949D894DF40AB51F9D Authority key identifier: 61:C2:B4:5A:65:C1:9B:68:AB:B0:51:6C:9C:CA:F4:54:7A:5C:C3:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/rxVxvq80s018HousURd0ic36W10.roa Signing time: Thu 22 Jan 2026 17:34:30 +0000 ROA not before: Thu 22 Jan 2026 17:34:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7029 IP address blocks: 135.132.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e6:c5:a1:f4:0a:c0:32:94:9d:89:4d:f4:0a:b5:1f:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61c2b45a65c19b68abb0516c9ccaf4547a5cc312 Validity Not Before: Jan 22 17:34:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af1571beaf34b34d7c1e8bac51177489cdfa5b5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:74:51:13:3b:3d:c2:e7:8c:03:e5:36:26:ef: 83:36:7b:a4:45:42:f7:1d:b2:18:e3:20:96:43:07: e5:77:90:58:59:97:5c:64:61:46:42:b6:6a:93:b6: 8a:eb:41:70:90:98:8b:48:d8:1e:0a:08:49:ce:79: 19:c4:97:8e:73:9a:71:26:cd:e0:53:b8:32:ff:95: f8:bc:74:76:60:bd:b8:b7:4b:81:3e:39:1e:fb:61: f7:2b:19:2b:8e:2b:f6:cd:db:0e:48:19:c1:89:2e: e5:43:16:ca:f1:9a:36:3b:ae:78:32:11:72:a5:68: 7b:a5:c7:80:be:b0:96:9b:98:f3:b1:4e:f4:d1:f4: 7e:e9:21:9e:dc:d6:02:1a:6d:cf:83:57:f2:3f:b6: 90:fb:89:2a:a3:22:9f:08:c8:1c:3c:f6:b9:d9:35: b4:14:27:90:e9:01:a7:ed:03:de:03:78:6c:98:25: b0:7b:bf:7d:bd:25:83:d3:ba:55:bc:65:c7:6b:9a: 41:f7:a7:ee:7a:b9:5d:27:cb:93:a9:75:d1:0e:ef: d6:7f:5f:7a:cb:1b:f8:22:a7:57:64:fe:a4:5e:da: c3:01:19:2b:f5:73:a8:e3:30:03:4d:7d:76:c3:79: cc:d4:dc:92:12:82:a1:24:54:aa:73:ce:ae:ec:19: 2a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:15:71:BE:AF:34:B3:4D:7C:1E:8B:AC:51:17:74:89:CD:FA:5B:5D X509v3 Authority Key Identifier: keyid:61:C2:B4:5A:65:C1:9B:68:AB:B0:51:6C:9C:CA:F4:54:7A:5C:C3:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/rxVxvq80s018HousURd0ic36W10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 135.132.144.0/20 Signature Algorithm: sha256WithRSAEncryption 1f:7b:f1:1d:85:e2:fe:de:88:35:b5:d9:4b:4d:8e:2b:2c:b8: d4:70:05:95:3d:90:71:d9:d6:7b:9b:4d:6d:43:a2:87:70:58: d1:aa:7d:7a:fc:7b:9c:f6:de:65:91:f5:8b:da:a5:97:e6:5b: 5d:55:5b:c3:76:bb:aa:0a:e9:63:fa:48:25:6f:93:8f:10:18: e1:6f:99:82:4a:d3:1f:47:48:d4:2a:62:fd:5d:83:a9:0d:57: b0:fb:c8:1f:ed:33:2a:e0:7c:73:ce:e4:1f:c9:e4:68:71:70: 4c:a9:52:d8:50:af:1d:c8:3f:af:1d:5e:98:87:9a:1e:d8:50: 43:28:5f:ae:40:c7:9c:58:cf:44:29:d7:88:d5:75:2d:0c:67: cd:63:f5:6f:dc:01:93:d5:44:14:e6:ee:13:e1:04:5a:ec:f9: 22:e5:c2:96:3d:1a:41:ea:28:4b:d2:da:7d:49:ba:6a:9f:f8: a4:57:15:bc:22:b3:e4:4c:75:93:e9:98:a2:fd:0a:e8:7c:24: 4b:3a:2e:95:33:4b:30:2c:7b:75:b5:7f:0b:01:18:49:ea:1c: d2:22:3e:86:fe:e2:11:41:36:86:61:01:6f:2f:0b:6e:0c:ca: 5d:44:2a:7d:ce:73:4c:d7:14:6d:44:c2:2d:ef:35:2e:ac:20: 17:12:1b:36 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvmxaH0CsAylJ2JTfQKtR+dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxYzJiNDVhNjVjMTliNjhhYmIwNTE2YzljY2FmNDU0N2E1 Y2MzMTIwHhcNMjYwMTIyMTczNDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjE1NzFiZWFmMzRiMzRkN2MxZThiYWM1MTE3NzQ4OWNkZmE1YjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XRREzs9wueMA+U2Ju+DNnukRUL3 HbIY4yCWQwfld5BYWZdcZGFGQrZqk7aK60FwkJiLSNgeCghJznkZxJeOc5pxJs3g U7gy/5X4vHR2YL24t0uBPjke+2H3Kxkrjiv2zdsOSBnBiS7lQxbK8Zo2O654MhFy pWh7pceAvrCWm5jzsU700fR+6SGe3NYCGm3Pg1fyP7aQ+4kqoyKfCMgcPPa52TW0 FCeQ6QGn7QPeA3hsmCWwe799vSWD07pVvGXHa5pB96fuerldJ8uTqXXRDu/Wf196 yxv4IqdXZP6kXtrDARkr9XOo4zADTX12w3nM1NySEoKhJFSqc86u7BkqWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK8Vcb6vNLNNfB6LrFEXdInN+ltdMB8GA1UdIwQY MBaAFGHCtFplwZtoq7BRbJzK9FR6XMMSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWNLMFdtWEJtMmlyc0ZGc25NcjBWSHBjd3hJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8yODYyYWItMzdkZC00N2YyLThkZjIt MjJjMjdiOTkzYWUyLzEvcnhWeHZxODBzMDE4SG91c1VSZDBpYzM2VzEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8yODYyYWItMzdkZC00N2YyLThkZjItMjJjMjdiOTkzYWUy LzEvWWNLMFdtWEJtMmlyc0ZGc25NcjBWSHBjd3hJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEh4SQMA0G CSqGSIb3DQEBCwUAA4IBAQAfe/EdheL+3og1tdlLTY4rLLjUcAWVPZBx2dZ7m01t Q6KHcFjRqn16/Huc9t5lkfWL2qWX5ltdVVvDdruqCulj+kglb5OPEBjhb5mCStMf R0jUKmL9XYOpDVew+8gf7TMq4HxzzuQfyeRocXBMqVLYUK8dyD+vHV6Yh5oe2FBD KF+uQMecWM9EKdeI1XUtDGfNY/Vv3AGT1UQU5u4T4QRa7Pki5cKWPRpB6ihL0tp9 Sbpqn/ikVxW8IrPkTHWT6Zii/QrofCRLOi6VM0swLHt1tX8LARhJ6hzSIj6G/uIR QTaGYQFvLwtuDMpdRCp9znNM1xRtRMIt7zUurCAXEhs2 -----END CERTIFICATE-----Generated at Sun Jan 25 12:02:54 2026 by rpki-client