This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/xTbA2Nqn_OGftZ3ziVysvYIrYsc.roa File: xTbA2Nqn_OGftZ3ziVysvYIrYsc.roa (raw, json) Hash identifier: AKh2Xxbl7XMpoBpUm83TcjMuEMCZWE9rKYeV/5q4Gew= Subject key identifier: C5:36:C0:D8:DA:A7:FC:E1:9F:B5:9D:F3:89:5C:AC:BD:82:2B:62:C7 Certificate issuer: /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca Certificate serial: 019B783455752C41C0DE8F40F488555DC4A7 Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/xTbA2Nqn_OGftZ3ziVysvYIrYsc.roa Signing time: Thu 01 Jan 2026 06:17:34 +0000 ROA not before: Thu 01 Jan 2026 06:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51905 IP address blocks: 84.19.112.0/21 maxlen: 24 84.19.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:55:75:2c:41:c0:de:8f:40:f4:88:55:5d:c4:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca Validity Not Before: Jan 1 06:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c536c0d8daa7fce19fb59df3895cacbd822b62c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ef:78:30:9e:06:8e:86:2a:f7:b4:66:9f:cc: f1:c5:d4:e6:e8:ef:3a:6a:f6:a3:12:d7:50:9f:cf: 13:1e:31:be:0e:47:b9:db:af:50:76:30:35:0b:99: 4b:29:4c:87:d8:10:81:dc:ac:52:52:ef:6f:83:3c: 59:29:f7:f0:5d:ee:19:1a:f8:92:20:e9:ca:3b:93: b9:0c:54:2f:8e:99:ef:29:e6:0e:c0:19:00:75:2d: 8b:9e:82:6f:06:43:ab:b7:da:19:ce:1e:64:0d:35: b4:fe:10:be:77:a2:a5:f6:d1:5a:1c:c7:cc:b5:ab: 9b:35:2d:c9:21:72:8b:14:be:3b:4e:65:8c:b9:06: 1d:4b:91:fd:40:63:4a:43:e6:77:22:d2:c1:3c:45: 9d:3f:83:d2:e4:f6:06:62:51:ec:6d:b9:97:8d:a0: 66:c4:30:4c:51:10:d1:d6:b5:77:41:26:aa:45:7d: ce:30:eb:2c:95:53:ed:d4:68:67:6d:70:6e:91:ff: de:85:1d:b3:8e:e0:a4:b6:b1:72:ba:96:20:8c:3e: 9d:b0:dc:b7:8b:23:fb:ff:f6:c5:94:38:76:48:0c: 68:fe:c6:c9:c1:8f:34:a1:1f:f0:d5:ea:d0:85:44: 96:02:4e:d8:84:f7:cf:16:c1:90:df:a5:6d:51:bb: 79:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:36:C0:D8:DA:A7:FC:E1:9F:B5:9D:F3:89:5C:AC:BD:82:2B:62:C7 X509v3 Authority Key Identifier: keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/xTbA2Nqn_OGftZ3ziVysvYIrYsc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.19.112.0/21 Signature Algorithm: sha256WithRSAEncryption 64:47:26:54:50:73:15:81:5a:b2:5b:3c:8f:59:77:9c:5f:23: 3c:00:8f:ee:09:c4:73:9a:b4:5f:79:e7:a3:c1:2c:28:1f:f7: 17:a3:dd:ed:43:61:f4:c6:bb:47:86:73:52:df:fd:b2:5f:a5: 4e:28:59:48:a3:03:5f:13:24:d6:6e:65:ad:b8:0a:06:78:11: ba:cc:92:c2:2d:25:3c:30:37:67:3b:66:36:b8:21:a9:cb:7d: 3f:aa:e9:93:f3:bd:46:97:7a:90:66:d1:75:85:9b:0c:17:8b: cf:be:5e:15:48:f1:67:cd:85:c4:c3:28:dc:c5:58:7c:f5:a2: d8:94:42:a9:48:e9:85:64:d3:f3:ed:6d:ab:e8:c7:82:fc:66: d9:99:6b:9e:b6:53:e5:59:4a:7d:5a:e2:78:a0:0d:74:67:a7: 31:34:f1:ac:0d:dd:ac:d2:ff:be:9a:a5:96:2f:28:bc:74:e4: 28:b5:27:c3:1e:8a:4b:00:7f:46:7f:03:5b:8d:3d:1f:8d:db: a8:43:91:57:27:7b:29:ed:5a:e7:9b:cf:8b:44:0f:02:0f:01: 57:14:b5:5c:f7:c7:57:f7:36:df:3b:a4:91:4f:53:f9:f1:90: 18:fd:75:00:d9:2f:9b:3f:b0:9d:65:1c:02:e3:28:0f:75:8a: 7c:f0:e0:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NFV1LEHA3o9A9IhVXcSnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MzA3ZDI5ZjU1NDNmMjFlYTMwMDliOTUyM2ZlNzFiOGYx MzY5Y2EwHhcNMjYwMTAxMDYxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTM2YzBkOGRhYTdmY2UxOWZiNTlkZjM4OTVjYWNiZDgyMmI2MmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyO94MJ4GjoYq97Rmn8zxxdTm6O86 avajEtdQn88THjG+Dke5269QdjA1C5lLKUyH2BCB3KxSUu9vgzxZKffwXe4ZGviS IOnKO5O5DFQvjpnvKeYOwBkAdS2LnoJvBkOrt9oZzh5kDTW0/hC+d6Kl9tFaHMfM taubNS3JIXKLFL47TmWMuQYdS5H9QGNKQ+Z3ItLBPEWdP4PS5PYGYlHsbbmXjaBm xDBMURDR1rV3QSaqRX3OMOsslVPt1GhnbXBukf/ehR2zjuCktrFyupYgjD6dsNy3 iyP7//bFlDh2SAxo/sbJwY80oR/w1erQhUSWAk7YhPfPFsGQ36VtUbt5xwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMU2wNjap/zhn7Wd84lcrL2CK2LHMB8GA1UdIwQY MBaAFBYwfSn1VD8h6jAJuVI/5xuPE2nKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iZjVlNzAtNjY2NS00OWRlLWI5Y2Yt NGNmZTQwZjA3YTZiLzEveFRiQTJOcW5fT0dmdFozemlWeXN2WUlyWXNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9iZjVlNzAtNjY2NS00OWRlLWI5Y2YtNGNmZTQwZjA3YTZi LzEvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDVBNwMA0G CSqGSIb3DQEBCwUAA4IBAQBkRyZUUHMVgVqyWzyPWXecXyM8AI/uCcRzmrRfeeej wSwoH/cXo93tQ2H0xrtHhnNS3/2yX6VOKFlIowNfEyTWbmWtuAoGeBG6zJLCLSU8 MDdnO2Y2uCGpy30/qumT871Gl3qQZtF1hZsMF4vPvl4VSPFnzYXEwyjcxVh89aLY lEKpSOmFZNPz7W2r6MeC/GbZmWuetlPlWUp9WuJ4oA10Z6cxNPGsDd2s0v++mqWW Lyi8dOQotSfDHopLAH9GfwNbjT0fjduoQ5FXJ3sp7Vrnm8+LRA8CDwFXFLVc98dX 9zbfO6SRT1P58ZAY/XUA2S+bP7CdZRwC4ygPdYp88OAx -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:28 2026 by rpki-client