This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xo3E7B75wnW1W3d1HJPhSZevYZA.roa File: xo3E7B75wnW1W3d1HJPhSZevYZA.roa (raw, json) Hash identifier: PthsrXu6VgY7H1QeefirkpT9auw29AQ4kvdF+HY+Frc= Subject key identifier: C6:8D:C4:EC:1E:F9:C2:75:B5:5B:77:75:1C:93:E1:49:97:AF:61:90 Certificate issuer: /CN=c5a1fb5bbc2fa8571e3d5f8cae4196a8d7e96c35 Certificate serial: 019B7D5C5F81E79DDA5DAE565E2AF6F7DD4E Authority key identifier: C5:A1:FB:5B:BC:2F:A8:57:1E:3D:5F:8C:AE:41:96:A8:D7:E9:6C:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xo3E7B75wnW1W3d1HJPhSZevYZA.roa Signing time: Fri 02 Jan 2026 06:19:24 +0000 ROA not before: Fri 02 Jan 2026 06:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2200 IP address blocks: 141.115.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:5f:81:e7:9d:da:5d:ae:56:5e:2a:f6:f7:dd:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5a1fb5bbc2fa8571e3d5f8cae4196a8d7e96c35 Validity Not Before: Jan 2 06:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c68dc4ec1ef9c275b55b77751c93e14997af6190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:52:cd:df:e1:e0:00:58:d5:8a:0b:35:b1:3d: 29:de:cd:c4:83:1c:63:4a:99:11:98:27:eb:4f:22: ef:c7:73:c7:27:2b:9f:e2:cd:db:93:0d:60:71:e4: bd:4f:b7:a8:93:91:7a:85:52:29:65:01:3a:23:96: b2:f9:72:29:52:ec:1f:36:42:72:0e:f5:e8:65:dc: 17:ef:92:a3:64:cf:1c:61:83:1d:91:90:4d:28:63: 50:e8:e0:4b:df:40:57:e0:d6:2f:16:eb:8a:81:d2: 37:d7:4e:46:89:5f:db:0a:60:4e:93:f1:15:da:90: c4:81:45:b7:ce:fb:39:8e:91:08:b4:5e:85:10:a7: 66:dd:0c:c0:98:b3:eb:8d:f2:b5:3c:ec:55:ef:d7: 75:5b:47:7d:3c:3e:42:db:9f:89:0f:48:3f:49:66: 97:2d:c9:49:54:07:ec:6a:b3:a5:45:4c:d1:ad:1c: b5:57:f6:0a:4c:f1:7a:3b:97:bb:4a:0e:74:32:c3: 37:47:f9:84:32:33:0d:e4:82:78:16:27:ee:23:ef: 5c:3d:d1:5d:f4:d0:fa:71:c3:c3:5b:58:f6:8c:a9: e0:86:56:82:d8:a3:5f:f7:fe:99:f8:51:ac:a9:da: 52:70:33:3a:5f:4b:23:6d:d9:e7:d6:23:d6:1a:88: ee:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:8D:C4:EC:1E:F9:C2:75:B5:5B:77:75:1C:93:E1:49:97:AF:61:90 X509v3 Authority Key Identifier: keyid:C5:A1:FB:5B:BC:2F:A8:57:1E:3D:5F:8C:AE:41:96:A8:D7:E9:6C:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xo3E7B75wnW1W3d1HJPhSZevYZA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.115.0.0/16 Signature Algorithm: sha256WithRSAEncryption 79:c7:1a:d7:5a:47:c6:b0:46:0e:e3:ec:d8:fc:d0:5a:cc:fe: 76:f4:7b:0a:f8:6e:07:76:9d:28:45:cc:dd:8f:30:35:ba:6e: 4c:6c:51:43:06:87:ba:d1:dc:d5:3c:26:5c:39:47:aa:34:b2: 4d:b1:51:0b:49:31:9f:ea:7f:b9:44:79:df:5f:0e:05:66:42: 01:42:af:bb:35:a2:40:e2:6f:c1:3f:d0:c3:9a:8a:45:ac:e8: 90:a6:7a:86:c9:b3:f9:e8:91:d2:58:32:39:6b:7d:b5:91:67: af:24:3a:01:dd:0a:d8:5e:bb:0e:7d:44:57:5b:89:d5:83:cc: 07:7c:a4:dc:f9:90:25:5c:67:e5:a0:e6:82:fc:98:b8:de:37: 2b:7d:cf:18:7a:0c:f5:ad:8a:50:e1:b1:dd:99:93:16:cf:13: 89:9f:fd:d6:6b:2f:35:09:f3:80:67:c5:a1:6e:7e:29:eb:04: cd:94:ef:c3:85:dd:c7:2f:b9:79:db:54:e0:a1:80:e2:03:b1: f0:1f:53:a3:ee:f0:4c:aa:31:4c:d9:59:f7:dc:ae:67:eb:f9: a0:7c:5a:37:c1:8a:a5:5b:1f:ca:93:dc:28:44:7a:e2:d3:14: 55:47:f9:0f:22:ea:fc:ad:a5:ce:20:f4:3a:fb:c6:bd:31:5a: 47:62:2d:32 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt9XF+B553aXa5WXir2991OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1YTFmYjViYmMyZmE4NTcxZTNkNWY4Y2FlNDE5NmE4ZDdl OTZjMzUwHhcNMjYwMTAyMDYxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjhkYzRlYzFlZjljMjc1YjU1Yjc3NzUxYzkzZTE0OTk3YWY2MTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulLN3+HgAFjVigs1sT0p3s3Egxxj SpkRmCfrTyLvx3PHJyuf4s3bkw1gceS9T7eok5F6hVIpZQE6I5ay+XIpUuwfNkJy DvXoZdwX75KjZM8cYYMdkZBNKGNQ6OBL30BX4NYvFuuKgdI3105GiV/bCmBOk/EV 2pDEgUW3zvs5jpEItF6FEKdm3QzAmLPrjfK1POxV79d1W0d9PD5C25+JD0g/SWaX LclJVAfsarOlRUzRrRy1V/YKTPF6O5e7Sg50MsM3R/mEMjMN5IJ4FifuI+9cPdFd 9ND6ccPDW1j2jKnghlaC2KNf9/6Z+FGsqdpScDM6X0sjbdnn1iPWGojuAwIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFMaNxOwe+cJ1tVt3dRyT4UmXr2GQMB8GA1UdIwQY MBaAFMWh+1u8L6hXHj1fjK5BlqjX6Ww1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGFIN1c3d3ZxRmNlUFYtTXJrR1dxTmZwYkRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9kZWI3MGQtMWZmZC00ZGEwLWEwOTct ZDhhMGI0MWY0NmU4LzEveG8zRTdCNzV3blcxVzNkMUhKUGhTWmV2WVpBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9kZWI3MGQtMWZmZC00ZGEwLWEwOTctZDhhMGI0MWY0NmU4 LzEveGFIN1c3d3ZxRmNlUFYtTXJrR1dxTmZwYkRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjXMwDQYJ KoZIhvcNAQELBQADggEBAHnHGtdaR8awRg7j7Nj80FrM/nb0ewr4bgd2nShFzN2P MDW6bkxsUUMGh7rR3NU8Jlw5R6o0sk2xUQtJMZ/qf7lEed9fDgVmQgFCr7s1okDi b8E/0MOaikWs6JCmeobJs/nokdJYMjlrfbWRZ68kOgHdCtheuw59RFdbidWDzAd8 pNz5kCVcZ+Wg5oL8mLjeNyt9zxh6DPWtilDhsd2ZkxbPE4mf/dZrLzUJ84BnxaFu finrBM2U78OF3ccvuXnbVOChgOIDsfAfU6Pu8EyqMUzZWffcrmfr+aB8WjfBiqVb H8qT3ChEeuLTFFVH+Q8i6vytpc4g9Dr7xr0xWkdiLTI= -----END CERTIFICATE-----Generated at Mon Jan 26 04:38:49 2026 by rpki-client