This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/X5-PcFCXcBmeXFytRndx1GWZR6M.roa File: X5-PcFCXcBmeXFytRndx1GWZR6M.roa (raw, json) Hash identifier: CusHkyVTE5E1hf9Dcr6iJxa9rL7UUSerxewweRWup5Q= Subject key identifier: 5F:9F:8F:70:50:97:70:19:9E:5C:5C:AD:46:77:71:D4:65:99:47:A3 Certificate issuer: /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56 Certificate serial: 019B7DCA9C650061167AAAFDD551EFC6911F Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/X5-PcFCXcBmeXFytRndx1GWZR6M.roa Signing time: Fri 02 Jan 2026 08:19:48 +0000 ROA not before: Fri 02 Jan 2026 08:19:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 174 IP address blocks: 213.178.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:9c:65:00:61:16:7a:aa:fd:d5:51:ef:c6:91:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56 Validity Not Before: Jan 2 08:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f9f8f70509770199e5c5cad467771d4659947a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6c:c4:6a:d6:01:5b:f2:f7:41:ca:bc:09:5a: 32:f0:af:e0:59:8f:3f:ab:49:98:d8:09:fd:12:c4: 32:35:ba:f9:27:d1:ce:e9:89:3a:1a:ef:a9:a4:9a: 47:f2:d3:4f:da:51:37:87:db:16:ac:d2:82:4c:b2: 0b:d6:fc:46:10:51:19:c4:dd:db:ec:76:75:ed:e3: ee:c0:96:ca:f5:f5:14:0d:72:36:2d:84:64:24:5b: 7f:f5:2f:61:52:e6:6a:28:3f:5c:d5:06:3f:92:73: 6b:eb:86:77:5f:e8:65:f9:db:21:5f:47:64:ba:f1: ae:c7:71:b8:f8:d9:8d:ee:fb:f4:69:a9:3c:0d:8d: f7:4e:28:f5:c6:81:73:0e:9a:4c:65:62:7b:d9:c0: 1d:84:e3:a0:45:94:c4:be:43:96:a2:83:b7:45:f0: 34:b7:c9:2f:88:ba:1e:aa:df:51:93:a0:fb:23:af: 32:fb:ac:66:86:14:73:c7:d5:28:f9:80:b2:ac:05: 1a:ff:af:21:67:29:6b:da:c4:19:c3:c5:e1:2f:7b: c2:39:6f:81:e5:b0:99:d8:3c:94:b4:53:53:c5:ea: 95:56:6c:dd:9c:4c:2b:99:6f:38:62:9c:9a:71:4d: 0c:40:5e:bb:c6:4b:10:01:de:34:97:78:73:61:e2: ac:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:9F:8F:70:50:97:70:19:9E:5C:5C:AD:46:77:71:D4:65:99:47:A3 X509v3 Authority Key Identifier: keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/X5-PcFCXcBmeXFytRndx1GWZR6M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.178.143.0/24 Signature Algorithm: sha256WithRSAEncryption 25:8b:fe:b4:2d:6e:09:18:47:c2:1d:a6:ca:8d:5c:c3:90:7a: f4:ca:c2:32:c1:15:f4:07:5b:e9:41:60:39:91:63:d0:6d:f5: c7:f3:83:ca:1d:88:b0:ff:82:0d:bb:0e:d1:b0:3e:4a:1c:27: 4d:79:6e:22:f2:6d:a8:47:69:71:3b:e9:a2:c7:10:c0:34:05: 97:9d:23:55:00:73:a8:b4:d3:e1:83:2f:98:a6:de:98:3c:54: 34:83:2a:47:e3:da:7e:77:fb:25:9c:7a:84:08:84:76:ef:8a: 70:60:7d:64:aa:99:b4:30:d9:6b:1e:b6:d8:f0:97:11:6c:26: 1d:b8:cb:31:9d:0e:fe:f2:b7:dd:c2:50:fe:80:ea:63:94:0d: 57:a9:bc:97:98:4e:a4:a5:ec:55:89:50:5c:61:1d:6d:be:bd: 2f:f8:65:2e:ce:7c:61:90:6f:e0:cd:de:b4:f7:df:2c:e7:67: 1e:6b:79:e0:4d:18:e4:52:24:e7:49:58:99:11:78:7a:20:a7: 7e:30:f9:0d:cf:16:ec:25:4c:d1:cb:71:e0:3f:72:69:08:10: c2:b5:3b:f7:4e:89:0f:e2:bd:a3:5f:f3:77:fb:20:4c:77:c0: 7b:21:73:aa:d7:e5:a7:a4:2a:6d:bf:74:60:fb:aa:d5:55:0f: 3a:c1:94:ad -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ypxlAGEWeqr91VHvxpEfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NTRhYzRjN2Y0NTFjNWJiOTM4MmZiY2Q0NmQ3MGM0YzBm OWRlNTYwHhcNMjYwMTAyMDgxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjlmOGY3MDUwOTc3MDE5OWU1YzVjYWQ0Njc3NzFkNDY1OTk0N2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGzEatYBW/L3Qcq8CVoy8K/gWY8/ q0mY2An9EsQyNbr5J9HO6Yk6Gu+ppJpH8tNP2lE3h9sWrNKCTLIL1vxGEFEZxN3b 7HZ17ePuwJbK9fUUDXI2LYRkJFt/9S9hUuZqKD9c1QY/knNr64Z3X+hl+dshX0dk uvGux3G4+NmN7vv0aak8DY33Tij1xoFzDppMZWJ72cAdhOOgRZTEvkOWooO3RfA0 t8kviLoeqt9Rk6D7I68y+6xmhhRzx9Uo+YCyrAUa/68hZylr2sQZw8XhL3vCOW+B 5bCZ2DyUtFNTxeqVVmzdnEwrmW84YpyacU0MQF67xksQAd40l3hzYeKsNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF+fj3BQl3AZnlxcrUZ3cdRlmUejMB8GA1UdIwQY MBaAFHVUrEx/RRxbuTgvvNRtcMTA+d5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy84N2EwMGEtYjZmNi00NzIxLWE4Mjgt ZDkzMzdkYjM5ZDFmLzEvWDUtUGNGQ1hjQm1lWEZ5dFJuZHgxR1daUjZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy84N2EwMGEtYjZmNi00NzIxLWE4MjgtZDkzMzdkYjM5ZDFm LzEvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1bKPMA0G CSqGSIb3DQEBCwUAA4IBAQAli/60LW4JGEfCHabKjVzDkHr0ysIywRX0B1vpQWA5 kWPQbfXH84PKHYiw/4INuw7RsD5KHCdNeW4i8m2oR2lxO+mixxDANAWXnSNVAHOo tNPhgy+Ypt6YPFQ0gypH49p+d/slnHqECIR274pwYH1kqpm0MNlrHrbY8JcRbCYd uMsxnQ7+8rfdwlD+gOpjlA1XqbyXmE6kpexViVBcYR1tvr0v+GUuznxhkG/gzd60 998s52cea3ngTRjkUiTnSViZEXh6IKd+MPkNzxbsJUzRy3HgP3JpCBDCtTv3TokP 4r2jX/N3+yBMd8B7IXOq1+WnpCptv3Rg+6rVVQ86wZSt -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:47 2026 by rpki-client