This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/xc5xrWodv2gFZRKSAH7N3QLmArg.roa File: xc5xrWodv2gFZRKSAH7N3QLmArg.roa (raw, json) Hash identifier: d0lBtchfHuWBGmCrcDkn15hRm8o0/JbHM7LE2mVw2TM= Subject key identifier: C5:CE:71:AD:6A:1D:BF:68:05:65:12:92:00:7E:CD:DD:02:E6:02:B8 Certificate issuer: /CN=e4cd6e61c14e8391005a817b2722f7c4a81eb993 Certificate serial: 019B7B36ED5F09EC2F94BFD9A0CC2FD1897A Authority key identifier: E4:CD:6E:61:C1:4E:83:91:00:5A:81:7B:27:22:F7:C4:A8:1E:B9:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5M1uYcFOg5EAWoF7JyL3xKgeuZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/xc5xrWodv2gFZRKSAH7N3QLmArg.roa Signing time: Thu 01 Jan 2026 20:19:15 +0000 ROA not before: Thu 01 Jan 2026 20:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202468 IP address blocks: 128.0.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.crl rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.mft rsync://rpki.ripe.net/repository/DEFAULT/5M1uYcFOg5EAWoF7JyL3xKgeuZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:ed:5f:09:ec:2f:94:bf:d9:a0:cc:2f:d1:89:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4cd6e61c14e8391005a817b2722f7c4a81eb993 Validity Not Before: Jan 1 20:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5ce71ad6a1dbf6805651292007ecddd02e602b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:3d:e5:e3:68:4f:5c:d7:4c:6b:ff:54:4a:83: 75:f2:f7:cd:1e:1c:c9:4e:8e:df:b0:11:91:3c:83: 79:1e:ea:a9:2f:7d:d9:cc:5e:ec:76:ac:ae:24:09: 8f:5e:8a:54:fd:e9:55:8a:49:57:03:ad:66:e7:d2: b6:3e:ea:9f:a9:54:b7:10:34:5e:f9:db:d9:0c:93: fe:31:66:66:32:f3:73:d1:ab:76:ef:f9:11:7d:7a: 63:cd:65:ec:0f:79:10:11:92:34:09:de:9d:a4:f7: 67:ee:c5:14:34:d0:ad:f1:98:96:71:ae:31:a1:c6: d7:2c:5e:43:e7:41:fb:c8:07:99:3b:1c:a7:ba:14: 4a:a8:4b:b8:60:1d:6b:25:da:e7:83:9f:9c:8a:c2: 3d:70:52:4e:75:22:4d:90:b7:c1:06:5b:56:7e:fd: d9:11:54:66:54:f4:3e:43:5a:93:93:aa:37:47:23: 56:97:20:bd:cf:68:bc:9a:f2:a6:11:00:1f:36:a4: be:4f:23:63:14:d3:a8:5a:f6:15:10:21:9a:7b:f8: 08:f8:1b:bd:8a:66:dc:40:c0:fc:37:03:db:28:6e: 95:63:47:e7:ba:0e:e3:89:4d:5b:04:6f:87:d6:52: 22:d0:34:42:e4:95:af:55:c4:fe:18:2b:7c:81:38: 56:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:CE:71:AD:6A:1D:BF:68:05:65:12:92:00:7E:CD:DD:02:E6:02:B8 X509v3 Authority Key Identifier: keyid:E4:CD:6E:61:C1:4E:83:91:00:5A:81:7B:27:22:F7:C4:A8:1E:B9:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5M1uYcFOg5EAWoF7JyL3xKgeuZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/xc5xrWodv2gFZRKSAH7N3QLmArg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.0.105.0/24 Signature Algorithm: sha256WithRSAEncryption 52:f1:08:28:d5:73:4e:2e:a1:78:02:0d:b1:51:06:00:24:85: 8a:63:5d:93:5c:7a:34:3a:81:d1:00:09:2a:1a:0c:18:92:89: 64:3b:0e:a4:3f:fd:c1:19:aa:d7:5c:6e:c1:00:50:45:f6:22: 1b:0a:69:79:17:dc:7d:25:2c:7c:23:b4:e1:1f:4b:b5:2f:58: 60:3a:56:2b:4f:b1:e2:c7:ff:85:9b:73:dd:0c:d9:e1:89:5d: a3:d1:15:80:ed:27:d5:26:84:0e:ab:71:41:46:00:e6:01:5a: a0:26:be:96:68:4a:81:ea:75:2d:2d:ee:80:c3:8f:ad:1f:96: 68:ac:69:10:0b:01:8f:80:9b:db:eb:9e:a0:b4:1e:60:81:5f: 8e:10:bd:47:8b:8a:bd:c0:8d:e1:5c:64:94:ce:70:1b:eb:ec: d2:f5:dd:e3:f7:9b:6b:92:ff:b0:4b:29:9d:b3:48:6c:98:32: 9a:7b:9a:a1:cb:13:06:85:32:e8:53:d8:78:87:2a:b2:ad:a4: d0:ae:3b:4f:69:c4:fd:b4:a6:f5:9d:f3:e3:98:60:5b:4c:77: 93:a9:a2:8c:d7:60:b9:01:14:c1:c7:aa:8a:1f:11:a7:82:3a: 85:04:21:d2:31:58:0a:81:40:7a:96:8a:34:c7:97:e6:56:3e: 86:01:d8:8b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nu1fCewvlL/ZoMwv0Yl6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0Y2Q2ZTYxYzE0ZTgzOTEwMDVhODE3YjI3MjJmN2M0YTgx ZWI5OTMwHhcNMjYwMTAxMjAxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNWNlNzFhZDZhMWRiZjY4MDU2NTEyOTIwMDdlY2RkZDAyZTYwMmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+z3l42hPXNdMa/9USoN18vfNHhzJ To7fsBGRPIN5HuqpL33ZzF7sdqyuJAmPXopU/elViklXA61m59K2PuqfqVS3EDRe +dvZDJP+MWZmMvNz0at27/kRfXpjzWXsD3kQEZI0Cd6dpPdn7sUUNNCt8ZiWca4x ocbXLF5D50H7yAeZOxynuhRKqEu4YB1rJdrng5+cisI9cFJOdSJNkLfBBltWfv3Z EVRmVPQ+Q1qTk6o3RyNWlyC9z2i8mvKmEQAfNqS+TyNjFNOoWvYVECGae/gI+Bu9 imbcQMD8NwPbKG6VY0fnug7jiU1bBG+H1lIi0DRC5JWvVcT+GCt8gThW8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMXOca1qHb9oBWUSkgB+zd0C5gK4MB8GA1UdIwQY MBaAFOTNbmHBToORAFqBeyci98SoHrmTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNU0xdVljRk9nNUVBV29GN0p5TDN4S2dldVpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kYTQwY2YtOTgzNi00ODJiLWI3YTYt YzVhZDE2YTU1YzVmLzEveGM1eHJXb2R2MmdGWlJLU0FIN04zUUxtQXJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9kYTQwY2YtOTgzNi00ODJiLWI3YTYtYzVhZDE2YTU1YzVm LzEvNU0xdVljRk9nNUVBV29GN0p5TDN4S2dldVpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgABpMA0G CSqGSIb3DQEBCwUAA4IBAQBS8Qgo1XNOLqF4Ag2xUQYAJIWKY12TXHo0OoHRAAkq GgwYkolkOw6kP/3BGarXXG7BAFBF9iIbCml5F9x9JSx8I7ThH0u1L1hgOlYrT7Hi x/+Fm3PdDNnhiV2j0RWA7SfVJoQOq3FBRgDmAVqgJr6WaEqB6nUtLe6Aw4+tH5Zo rGkQCwGPgJvb656gtB5ggV+OEL1Hi4q9wI3hXGSUznAb6+zS9d3j95trkv+wSymd s0hsmDKae5qhyxMGhTLoU9h4hyqyraTQrjtPacT9tKb1nfPjmGBbTHeTqaKM12C5 ARTBx6qKHxGngjqFBCHSMVgKgUB6loo0x5fmVj6GAdiL -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:36 2026 by rpki-client