This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/xTuc6UK9A4gZnxWW2S3npGWfiHs.roa File: xTuc6UK9A4gZnxWW2S3npGWfiHs.roa (raw, json) Hash identifier: gv+TgqVRuNuQuQ9MsAnfTnrMxqIjbm5uB+jO2MB/vu4= Subject key identifier: C5:3B:9C:E9:42:BD:03:88:19:9F:15:96:D9:2D:E7:A4:65:9F:88:7B Certificate issuer: /CN=9a6e147448289634b98688ee5a5af447d42cbb07 Certificate serial: 019B7A5B994D1A13A947E35EA74FF6A78A63 Authority key identifier: 9A:6E:14:74:48:28:96:34:B9:86:88:EE:5A:5A:F4:47:D4:2C:BB:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mm4UdEgoljS5hojuWlr0R9Qsuwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/xTuc6UK9A4gZnxWW2S3npGWfiHs.roa Signing time: Thu 01 Jan 2026 16:19:41 +0000 ROA not before: Thu 01 Jan 2026 16:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6643 IP address blocks: 45.12.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.mft rsync://rpki.ripe.net/repository/DEFAULT/mm4UdEgoljS5hojuWlr0R9Qsuwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:99:4d:1a:13:a9:47:e3:5e:a7:4f:f6:a7:8a:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a6e147448289634b98688ee5a5af447d42cbb07 Validity Not Before: Jan 1 16:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c53b9ce942bd0388199f1596d92de7a4659f887b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f5:bb:74:79:17:d3:ce:6c:7a:94:82:8e:94: e5:79:e2:45:48:c1:e7:40:7f:2f:82:05:66:a5:4d: 47:a1:b5:16:2c:d2:ac:45:2e:6e:5f:b7:b7:58:e7: c6:c9:6f:0c:37:e6:0e:62:db:7f:8f:bd:b3:05:e2: 46:84:73:42:0d:cf:e0:9c:5b:c5:7f:13:0c:70:00: 62:86:b5:61:d6:a1:66:c1:6e:a7:6a:a1:57:c7:99: 83:22:a6:63:a6:86:0d:1e:ca:03:15:dd:18:0a:fa: 8f:61:fc:c5:67:7e:8d:a9:03:8c:60:3c:d2:79:1d: 51:99:c5:d3:14:6a:9f:c5:85:e5:04:b6:9f:7a:ac: 10:c1:d9:3d:07:07:65:9e:c1:36:66:2f:de:1d:e4: b8:2e:76:73:8f:f2:cc:3e:09:0b:55:6a:60:03:18: 86:59:12:69:51:3e:52:e7:67:e2:78:2f:5e:66:94: c2:0e:40:ec:c3:37:4e:75:52:18:fb:c8:1b:4d:05: 5f:26:bf:cd:b1:e1:db:22:30:84:a3:45:2a:4c:92: 3f:a9:8b:a8:b1:b4:cd:ef:d9:e4:92:d3:97:72:fc: ee:4b:b2:48:c9:7c:cc:2c:9c:c4:d6:04:f1:fd:a4: 9e:a7:70:93:83:bc:f0:4a:3a:57:ba:80:92:fa:3a: 50:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:3B:9C:E9:42:BD:03:88:19:9F:15:96:D9:2D:E7:A4:65:9F:88:7B X509v3 Authority Key Identifier: keyid:9A:6E:14:74:48:28:96:34:B9:86:88:EE:5A:5A:F4:47:D4:2C:BB:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mm4UdEgoljS5hojuWlr0R9Qsuwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/xTuc6UK9A4gZnxWW2S3npGWfiHs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.12.196.0/24 Signature Algorithm: sha256WithRSAEncryption 98:d6:d3:7e:68:af:aa:db:9f:cb:30:fe:93:8e:72:87:58:49: f4:73:0a:2f:4f:63:13:f7:2d:61:9d:17:28:ae:36:4a:7c:d3: d7:d3:44:9e:25:a6:55:67:dd:61:31:3f:a3:03:63:d8:8f:d9: 90:68:44:a8:24:75:48:f5:82:64:83:f9:b2:7f:18:39:04:50: 13:e0:b8:a0:87:53:33:21:4d:25:7e:c0:5b:45:8b:60:a0:df: 8d:6a:23:f4:4e:f7:11:0c:84:54:62:1d:1f:82:25:d5:e7:c3: d3:0d:f8:28:8c:3e:ca:8a:dd:9a:58:f2:02:aa:5a:a9:cb:bb: 81:85:44:23:b7:32:09:56:6a:84:a2:24:99:e3:dc:ad:d4:3e: 6d:c8:3c:6b:ab:d5:06:36:d2:fd:b3:5c:9c:8b:b4:33:6b:6a: cb:77:b8:4c:96:07:bf:b2:b8:28:de:1e:d0:de:4a:69:67:d2: c5:ee:bf:81:7f:02:04:5c:9e:f8:80:06:37:3c:ba:9d:c5:54: f2:4c:00:ad:34:0c:82:3e:be:41:b0:9a:87:17:f9:2a:05:4a: 8f:12:c0:cb:6e:95:bf:f9:5d:4d:d8:62:23:d9:9a:41:33:95: a0:10:08:2a:c6:e8:2f:9d:b8:98:0a:e7:41:5c:fa:9f:99:96: 61:b2:ec:c4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W5lNGhOpR+Nep0/2p4pjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNmUxNDc0NDgyODk2MzRiOTg2ODhlZTVhNWFmNDQ3ZDQy Y2JiMDcwHhcNMjYwMTAxMTYxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTNiOWNlOTQyYmQwMzg4MTk5ZjE1OTZkOTJkZTdhNDY1OWY4ODdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/W7dHkX085sepSCjpTleeJFSMHn QH8vggVmpU1HobUWLNKsRS5uX7e3WOfGyW8MN+YOYtt/j72zBeJGhHNCDc/gnFvF fxMMcABihrVh1qFmwW6naqFXx5mDIqZjpoYNHsoDFd0YCvqPYfzFZ36NqQOMYDzS eR1RmcXTFGqfxYXlBLafeqwQwdk9BwdlnsE2Zi/eHeS4LnZzj/LMPgkLVWpgAxiG WRJpUT5S52fieC9eZpTCDkDswzdOdVIY+8gbTQVfJr/NseHbIjCEo0UqTJI/qYuo sbTN79nkktOXcvzuS7JIyXzMLJzE1gTx/aSep3CTg7zwSjpXuoCS+jpQ/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMU7nOlCvQOIGZ8Vltkt56Rln4h7MB8GA1UdIwQY MBaAFJpuFHRIKJY0uYaI7lpa9EfULLsHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW00VWRFZ29salM1aG9qdVdscjBSOVFzdXdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC82NjFkYWQtMDBjOS00ZjE3LTk0ZDgt MmJiZDAxZjllNTAwLzEveFR1YzZVSzlBNGdabnhXVzJTM25wR1dmaUhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC82NjFkYWQtMDBjOS00ZjE3LTk0ZDgtMmJiZDAxZjllNTAw LzEvbW00VWRFZ29salM1aG9qdVdscjBSOVFzdXdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQzEMA0G CSqGSIb3DQEBCwUAA4IBAQCY1tN+aK+q25/LMP6TjnKHWEn0cwovT2MT9y1hnRco rjZKfNPX00SeJaZVZ91hMT+jA2PYj9mQaESoJHVI9YJkg/myfxg5BFAT4Ligh1Mz IU0lfsBbRYtgoN+NaiP0TvcRDIRUYh0fgiXV58PTDfgojD7Kit2aWPICqlqpy7uB hUQjtzIJVmqEoiSZ49yt1D5tyDxrq9UGNtL9s1yci7Qza2rLd7hMlge/srgo3h7Q 3kppZ9LF7r+BfwIEXJ74gAY3PLqdxVTyTACtNAyCPr5BsJqHF/kqBUqPEsDLbpW/ +V1N2GIj2ZpBM5WgEAgqxugvnbiYCudBXPqfmZZhsuzE -----END CERTIFICATE-----Generated at Sun Jan 25 16:55:03 2026 by rpki-client