This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ed5020-1549-4013-b512-cf6fd06f48ef/1/x5SI8U1MJkFQoxzBTgXjQhBj4Yk.roa File: x5SI8U1MJkFQoxzBTgXjQhBj4Yk.roa (raw, json) Hash identifier: YIu8Yawfs6Cz0KZ2TibOmpkX1vMFWGb00dggitrp/LE= Subject key identifier: C7:94:88:F1:4D:4C:26:41:50:A3:1C:C1:4E:05:E3:42:10:63:E1:89 Certificate issuer: /CN=fb05a9c548d6e34e8d15fc06632aa3899272f4ec Certificate serial: 019B7C7FD88CB7052141E49F2BFAC8943B1C Authority key identifier: FB:05:A9:C5:48:D6:E3:4E:8D:15:FC:06:63:2A:A3:89:92:72:F4:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wWpxUjW406NFfwGYyqjiZJy9Ow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ed5020-1549-4013-b512-cf6fd06f48ef/1/x5SI8U1MJkFQoxzBTgXjQhBj4Yk.roa Signing time: Fri 02 Jan 2026 02:18:31 +0000 ROA not before: Fri 02 Jan 2026 02:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20555 IP address blocks: 213.135.44.0/22 maxlen: 22 213.135.48.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ed5020-1549-4013-b512-cf6fd06f48ef/1/1-wWpxUjW406NFfwGYyqjiZJy9Ow.crl rsync://rpki.ripe.net/repository/DEFAULT/18/ed5020-1549-4013-b512-cf6fd06f48ef/1/1-wWpxUjW406NFfwGYyqjiZJy9Ow.mft rsync://rpki.ripe.net/repository/DEFAULT/1-wWpxUjW406NFfwGYyqjiZJy9Ow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:d8:8c:b7:05:21:41:e4:9f:2b:fa:c8:94:3b:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb05a9c548d6e34e8d15fc06632aa3899272f4ec Validity Not Before: Jan 2 02:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c79488f14d4c264150a31cc14e05e3421063e189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:24:fe:7f:3c:2b:23:e4:87:86:b9:d3:8d:3e: c4:2c:3b:9e:3f:5b:64:0a:69:81:65:b6:0a:b9:dd: 1e:ff:b9:8c:ed:1d:ab:2d:97:68:ec:fe:2a:28:91: 93:01:14:4b:75:8a:ad:15:9c:21:e2:f6:9a:7c:ea: 6b:af:8b:ee:fc:b2:80:fe:72:48:86:18:f8:7f:06: 06:3c:aa:d5:11:70:98:18:a8:dd:e7:bc:4d:12:1b: b2:4b:2e:b6:1d:1e:bc:dc:82:cb:9b:ac:d5:5b:75: 87:47:58:ce:e3:be:97:18:ab:f3:a8:34:33:d1:6a: 68:87:81:51:62:ee:ae:de:f4:00:2d:ce:81:9a:1c: 50:16:23:2e:99:0f:e6:1d:9c:91:e7:f3:d2:05:b2: 6d:e0:af:2c:5f:53:53:f6:d1:53:07:71:76:0a:36: aa:1b:10:f1:95:af:10:7f:87:cc:17:7b:3d:43:e8: c6:8a:b0:85:b8:5c:70:a6:a1:2b:b5:fa:21:07:8a: 55:63:a1:9b:01:8c:b8:0a:bb:18:d7:e9:6a:54:ad: 14:3d:a0:af:4a:39:32:61:37:85:a1:7e:dc:7f:54: fb:a4:12:eb:9d:c5:d6:ac:64:10:a8:7e:00:59:1f: 22:f1:91:b6:50:3f:73:5e:15:70:0e:fc:70:eb:7e: f4:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:94:88:F1:4D:4C:26:41:50:A3:1C:C1:4E:05:E3:42:10:63:E1:89 X509v3 Authority Key Identifier: keyid:FB:05:A9:C5:48:D6:E3:4E:8D:15:FC:06:63:2A:A3:89:92:72:F4:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wWpxUjW406NFfwGYyqjiZJy9Ow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ed5020-1549-4013-b512-cf6fd06f48ef/1/x5SI8U1MJkFQoxzBTgXjQhBj4Yk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ed5020-1549-4013-b512-cf6fd06f48ef/1/1-wWpxUjW406NFfwGYyqjiZJy9Ow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.135.44.0-213.135.49.255 Signature Algorithm: sha256WithRSAEncryption 62:06:42:f8:ae:ea:4b:79:57:b8:6e:ad:ee:9e:e5:4e:28:b1: 59:63:1e:6b:89:91:a7:a1:fd:ad:d9:49:40:1b:c8:60:8b:ed: ba:2e:04:cc:26:80:66:f0:09:57:d3:80:c7:c5:42:5f:ae:1f: 14:be:a1:3f:35:4e:0b:97:e9:c5:ce:02:b0:aa:46:89:f3:92: 4f:a2:df:a3:b8:c3:e5:57:fb:fb:a5:a5:fc:31:5d:e7:eb:e3: 71:98:2f:a0:fc:df:7f:6f:4d:89:5d:c3:ce:af:85:bf:e5:ff: 5a:d4:1e:e6:4e:fd:7e:ef:aa:0f:a7:aa:c3:8a:57:b3:1a:bb: 6d:fe:69:3c:6d:65:50:6a:15:d2:7d:4b:e6:14:ae:99:60:5c: 2f:27:a5:7a:b6:83:6a:8f:91:39:b3:dc:8f:70:65:a7:fb:b7: 05:b1:b8:60:d5:df:6d:9b:91:e9:40:a2:56:c4:ea:f6:aa:2c: a6:18:d2:ce:32:da:cf:91:fd:29:99:56:6c:b0:9d:30:db:b2: 53:6f:55:82:0b:8d:3e:69:62:20:70:7a:d6:28:50:1a:a4:82: bf:9f:38:68:aa:77:6e:02:85:75:56:1e:02:4d:55:0f:fd:90: 3b:9f:de:e9:6b:f8:a4:fe:1a:a5:a3:ae:79:62:29:af:bf:ad: 36:fb:2e:b0 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgISAZt8f9iMtwUhQeSfK/rIlDscMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiMDVhOWM1NDhkNmUzNGU4ZDE1ZmMwNjYzMmFhMzg5OTI3 MmY0ZWMwHhcNMjYwMTAyMDIxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzk0ODhmMTRkNGMyNjQxNTBhMzFjYzE0ZTA1ZTM0MjEwNjNlMTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5iT+fzwrI+SHhrnTjT7ELDueP1tk CmmBZbYKud0e/7mM7R2rLZdo7P4qKJGTARRLdYqtFZwh4vaafOprr4vu/LKA/nJI hhj4fwYGPKrVEXCYGKjd57xNEhuySy62HR683ILLm6zVW3WHR1jO476XGKvzqDQz 0Wpoh4FRYu6u3vQALc6BmhxQFiMumQ/mHZyR5/PSBbJt4K8sX1NT9tFTB3F2Cjaq GxDxla8Qf4fMF3s9Q+jGirCFuFxwpqErtfohB4pVY6GbAYy4CrsY1+lqVK0UPaCv SjkyYTeFoX7cf1T7pBLrncXWrGQQqH4AWR8i8ZG2UD9zXhVwDvxw6370GwIDAQAB o4ICEzCCAg8wHQYDVR0OBBYEFMeUiPFNTCZBUKMcwU4F40IQY+GJMB8GA1UdIwQY MBaAFPsFqcVI1uNOjRX8BmMqo4mScvTsMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS13V3B4VWpXNDA2TkZmd0dZeXFqaVpKeTlPdy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgvZWQ1MDIwLTE1NDktNDAxMy1iNTEy LWNmNmZkMDZmNDhlZi8xL3g1U0k4VTFNSmtGUW94ekJUZ1hqUWhCajRZay5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMTgvZWQ1MDIwLTE1NDktNDAxMy1iNTEyLWNmNmZkMDZmNDhl Zi8xLzEtd1dweFVqVzQwNk5GZndHWXlxamlaSnk5T3cuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJwYIKwYBBQUHAQcBAf8EGDAWMBQEAgABMA4wDAMEAtWH LAMEAdWHMDANBgkqhkiG9w0BAQsFAAOCAQEAYgZC+K7qS3lXuG6t7p7lTiixWWMe a4mRp6H9rdlJQBvIYIvtui4EzCaAZvAJV9OAx8VCX64fFL6hPzVOC5fpxc4CsKpG ifOST6Lfo7jD5Vf7+6Wl/DFd5+vjcZgvoPzff29NiV3Dzq+Fv+X/WtQe5k79fu+q D6eqw4pXsxq7bf5pPG1lUGoV0n1L5hSumWBcLyeleraDao+RObPcj3Blp/u3BbG4 YNXfbZuR6UCiVsTq9qosphjSzjLaz5H9KZlWbLCdMNuyU29VgguNPmliIHB61ihQ GqSCv584aKp3bgKFdVYeAk1VD/2QO5/e6Wv4pP4apaOueWIpr7+tNvsusA== -----END CERTIFICATE-----Generated at Mon Jan 26 05:58:57 2026 by rpki-client