This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/xLVQXdPk7Ia630Us7FrxzFiwGNY.roa File: xLVQXdPk7Ia630Us7FrxzFiwGNY.roa (raw, json) Hash identifier: /RpDRpvVxGqbyx6LsvIh/7YEjx0fR8/186/BQ9GsrcI= Subject key identifier: C4:B5:50:5D:D3:E4:EC:86:BA:DF:45:2C:EC:5A:F1:CC:58:B0:18:D6 Certificate issuer: /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce Certificate serial: 019B79106D376DC4805FB9684C2F10DF7868 Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/xLVQXdPk7Ia630Us7FrxzFiwGNY.roa Signing time: Thu 01 Jan 2026 10:17:58 +0000 ROA not before: Thu 01 Jan 2026 10:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25498 IP address blocks: 46.232.232.0/23 maxlen: 23 195.22.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:6d:37:6d:c4:80:5f:b9:68:4c:2f:10:df:78:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce Validity Not Before: Jan 1 10:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4b5505dd3e4ec86badf452cec5af1cc58b018d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b1:09:56:7d:f0:6f:24:74:ce:2c:e2:36:7f: 42:c4:4b:b2:94:10:ca:b8:3a:d2:d2:c3:8f:54:af: e7:e4:6e:f5:08:ee:4d:e9:23:79:27:f9:60:df:71: fc:9b:3d:2e:fa:17:49:af:f1:0f:4e:94:90:9d:f8: 43:7e:9d:7a:14:cb:94:14:ac:49:d9:ac:89:06:79: 7d:30:00:75:3b:e9:7c:7f:25:b6:08:ab:e5:d3:4c: 22:51:84:bb:1e:71:5f:9a:f9:1c:56:59:4a:d1:ae: 95:20:ed:ad:70:9c:5a:48:b0:b8:1b:0f:77:98:23: e0:b9:77:f8:ac:56:b3:ad:5e:79:26:e4:16:39:13: be:ad:f3:c9:f7:46:b3:47:e2:5f:d7:f8:e7:32:6c: 48:bf:96:3d:dc:41:8d:0d:bd:22:42:fd:e1:45:82: 9f:38:db:43:4c:07:cc:8f:e1:d0:97:f3:e4:ef:48: dd:a1:53:e6:34:11:1a:8a:1e:c3:a1:5e:3c:55:9d: e5:62:20:70:71:33:17:36:c5:18:ec:2a:a1:a5:91: dc:ca:fd:bd:dd:63:03:64:16:7c:8a:e6:21:88:aa: b9:f2:91:22:a8:b9:1f:eb:98:35:05:2d:cf:70:63: 9d:02:21:39:23:af:b8:30:8d:62:11:e0:28:ba:d5: 66:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B5:50:5D:D3:E4:EC:86:BA:DF:45:2C:EC:5A:F1:CC:58:B0:18:D6 X509v3 Authority Key Identifier: keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/xLVQXdPk7Ia630Us7FrxzFiwGNY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.232.232.0/23 195.22.130.0/23 Signature Algorithm: sha256WithRSAEncryption 87:66:4e:40:29:8c:1a:3e:c4:34:39:82:0c:a1:ee:6f:8a:b9: 12:9b:b8:3d:05:0e:ec:97:b2:ab:4b:df:06:02:e9:8f:d7:07: 8b:b8:82:ea:65:6f:84:46:fd:8b:fe:83:9f:6d:0b:f9:2e:ae: 97:e9:45:b1:9a:ac:ab:86:c9:2a:0d:aa:0c:ce:f6:27:ad:3a: 51:b8:cd:74:59:3d:85:7d:57:ab:57:4a:6e:26:7d:b3:2d:d3: 69:7c:12:9a:2f:ba:2f:38:f1:38:62:82:a2:0d:9d:ed:42:83: 25:75:c8:ed:12:55:c7:df:fb:ea:37:39:3b:d6:be:35:db:55: ab:f4:98:5c:ba:28:59:88:4d:ac:51:c8:64:42:dd:00:dd:c0: 36:07:44:d9:65:b2:c7:21:4e:92:ad:af:4c:d4:22:3b:5a:22: 99:62:6e:13:84:37:48:6f:0b:0a:4c:dc:13:9f:7e:79:70:19: 7c:63:cd:81:4a:4b:d9:ea:42:f3:e2:d5:4d:d2:81:02:1f:2c: 57:f3:05:ff:24:1d:22:70:a9:02:06:94:82:23:fa:94:be:f3: 04:2d:6d:56:ca:81:ee:af:de:63:d6:cb:e1:50:b7:cd:e2:3f: 69:1d:da:c8:be:e8:ad:20:1c:a5:95:55:27:e0:63:85:7a:9d: 64:1c:da:8e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EG03bcSAX7loTC8Q33hoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMDVhZGM1YzQyNjJkZmY2YjNmM2U2MDY4MzBjN2Y5NzFk NzY2Y2UwHhcNMjYwMTAxMTAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNGI1NTA1ZGQzZTRlYzg2YmFkZjQ1MmNlYzVhZjFjYzU4YjAxOGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbEJVn3wbyR0ziziNn9CxEuylBDK uDrS0sOPVK/n5G71CO5N6SN5J/lg33H8mz0u+hdJr/EPTpSQnfhDfp16FMuUFKxJ 2ayJBnl9MAB1O+l8fyW2CKvl00wiUYS7HnFfmvkcVllK0a6VIO2tcJxaSLC4Gw93 mCPguXf4rFazrV55JuQWORO+rfPJ90azR+Jf1/jnMmxIv5Y93EGNDb0iQv3hRYKf ONtDTAfMj+HQl/Pk70jdoVPmNBEaih7DoV48VZ3lYiBwcTMXNsUY7CqhpZHcyv29 3WMDZBZ8iuYhiKq58pEiqLkf65g1BS3PcGOdAiE5I6+4MI1iEeAoutVm1wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMS1UF3T5OyGut9FLOxa8cxYsBjWMB8GA1UdIwQY MBaAFMEFrcXEJi3/az8+YGgwx/lx12bOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1FXdHhjUW1MZjlyUHo1Z2FEREgtWEhYWnM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNDkxNzItZjhkYS00MTI4LTg2ODkt NTE1ODQ1ZTZjMzE3LzEveExWUVhkUGs3SWE2MzBVczdGcnh6Rml3R05ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9jNDkxNzItZjhkYS00MTI4LTg2ODktNTE1ODQ1ZTZjMzE3 LzEvd1FXdHhjUW1MZjlyUHo1Z2FEREgtWEhYWnM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLujoAwQB wxaCMA0GCSqGSIb3DQEBCwUAA4IBAQCHZk5AKYwaPsQ0OYIMoe5virkSm7g9BQ7s l7KrS98GAumP1weLuILqZW+ERv2L/oOfbQv5Lq6X6UWxmqyrhskqDaoMzvYnrTpR uM10WT2FfVerV0puJn2zLdNpfBKaL7ovOPE4YoKiDZ3tQoMldcjtElXH3/vqNzk7 1r4121Wr9JhcuihZiE2sUchkQt0A3cA2B0TZZbLHIU6Sra9M1CI7WiKZYm4ThDdI bwsKTNwTn355cBl8Y82BSkvZ6kLz4tVN0oECHyxX8wX/JB0icKkCBpSCI/qUvvME LW1WyoHur95j1svhULfN4j9pHdrIvuitIByllVUn4GOFep1kHNqO -----END CERTIFICATE-----Generated at Mon Jan 26 07:58:15 2026 by rpki-client