This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/XPTuMOSHPxC4TQkhQQhMLupKp7g.roa File: XPTuMOSHPxC4TQkhQQhMLupKp7g.roa (raw, json) Hash identifier: TDD3hEBL7CPqvnrfrg7l4hY6bRfLkH7/ULGfUjsBzoo= Subject key identifier: 5C:F4:EE:30:E4:87:3F:10:B8:4D:09:21:41:08:4C:2E:EA:4A:A7:B8 Certificate issuer: /CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6 Certificate serial: 019B7EA6917DA4EF407FF85BBC341FBE1F43 Authority key identifier: 9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/XPTuMOSHPxC4TQkhQQhMLupKp7g.roa Signing time: Fri 02 Jan 2026 12:20:04 +0000 ROA not before: Fri 02 Jan 2026 12:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29802 IP address blocks: 37.72.168.0/21 maxlen: 32 37.72.170.0/23 maxlen: 23 37.72.170.0/24 maxlen: 24 37.72.171.0/24 maxlen: 24 37.72.172.0/23 maxlen: 23 37.72.174.0/23 maxlen: 23 45.158.36.0/23 maxlen: 32 45.158.38.0/24 maxlen: 24 45.158.39.0/24 maxlen: 24 46.21.144.0/20 maxlen: 32 46.21.144.0/24 maxlen: 24 46.21.145.0/24 maxlen: 24 46.21.146.0/24 maxlen: 24 46.21.147.0/24 maxlen: 24 46.21.148.0/24 maxlen: 24 46.21.150.0/24 maxlen: 24 46.21.151.0/24 maxlen: 24 46.21.152.0/24 maxlen: 24 46.21.153.0/24 maxlen: 24 46.21.156.0/24 maxlen: 24 46.21.157.0/24 maxlen: 24 46.21.158.0/23 maxlen: 23 89.233.104.0/21 maxlen: 24 89.233.104.0/24 maxlen: 24 89.233.105.0/24 maxlen: 24 89.233.106.0/24 maxlen: 24 89.233.107.0/24 maxlen: 24 94.100.16.0/20 maxlen: 32 94.100.16.0/24 maxlen: 24 94.100.17.0/24 maxlen: 24 94.100.18.0/24 maxlen: 24 94.100.19.0/24 maxlen: 24 94.100.20.0/24 maxlen: 24 94.100.21.0/24 maxlen: 24 94.100.22.0/24 maxlen: 24 94.100.23.0/24 maxlen: 24 94.100.24.0/24 maxlen: 24 94.100.25.0/24 maxlen: 24 94.100.26.0/24 maxlen: 24 94.100.27.0/24 maxlen: 24 94.100.28.0/24 maxlen: 24 94.100.29.0/24 maxlen: 24 94.100.30.0/24 maxlen: 24 94.100.31.0/24 maxlen: 24 149.255.32.0/21 maxlen: 32 149.255.35.0/24 maxlen: 24 149.255.36.0/24 maxlen: 32 149.255.37.0/24 maxlen: 24 149.255.38.0/24 maxlen: 24 149.255.39.0/24 maxlen: 24 178.236.176.0/21 maxlen: 24 178.236.181.0/24 maxlen: 24 178.236.182.0/24 maxlen: 24 178.236.185.0/24 maxlen: 24 178.236.186.0/24 maxlen: 24 178.236.187.0/24 maxlen: 24 194.126.172.0/22 maxlen: 24 194.126.172.0/24 maxlen: 24 194.126.173.0/24 maxlen: 24 194.126.175.0/24 maxlen: 24 195.242.152.0/23 maxlen: 24 195.242.153.0/24 maxlen: 24 217.79.240.0/20 maxlen: 24 217.79.240.0/24 maxlen: 24 217.79.242.0/23 maxlen: 24 2a02:748::/32 maxlen: 48 2a02:748::/35 maxlen: 35 2a02:748:6000::/48 maxlen: 48 2a02:748:c000::/35 maxlen: 35 2a02:748:e000::/35 maxlen: 35 2a02:748:f000::/36 maxlen: 36 2a0f:5180::/29 maxlen: 48 2a0f:5180::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:91:7d:a4:ef:40:7f:f8:5b:bc:34:1f:be:1f:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6 Validity Not Before: Jan 2 12:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5cf4ee30e4873f10b84d092141084c2eea4aa7b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:83:f8:58:5c:60:e7:2d:ec:c3:a8:cb:82:3b: a5:69:2f:94:7a:16:d6:44:6f:2a:06:b3:ac:67:30: 6e:14:95:2f:86:7c:4e:e9:10:d9:fe:70:52:d2:8a: c9:bd:07:e2:33:aa:10:75:15:86:63:7a:6d:66:59: 6d:8e:56:80:10:d1:04:78:d2:7a:c5:c7:8d:4d:cd: db:f3:f1:cc:0f:dd:c3:f5:f4:64:9a:42:14:6b:b8: 2f:75:06:55:18:d4:02:82:d2:77:55:ad:7f:aa:ba: 62:a4:bf:69:2d:3f:9b:d0:82:e8:11:14:14:f0:b9: 32:bb:57:2d:d2:c8:c9:2d:4f:46:4c:d0:30:89:65: de:39:b6:86:d1:0e:82:e8:73:2e:5a:02:04:10:bf: 34:ec:7f:ea:a2:56:fa:76:1b:60:99:68:a1:f2:e8: e6:86:c4:2b:aa:d8:74:b7:6a:7e:ec:70:2b:c6:8c: e4:b4:42:39:be:81:cf:15:63:3d:7e:cf:30:57:b3: e4:fe:f0:d5:80:d2:13:98:b5:e0:bd:2b:94:a4:83: 36:bd:9e:d8:76:fc:4b:5c:ba:96:75:27:55:64:75: 78:da:2d:b8:aa:ed:63:64:f6:3f:1d:6a:18:45:4d: 4a:91:e0:65:2e:9c:cc:07:75:9a:dd:85:87:a0:e1: 6e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F4:EE:30:E4:87:3F:10:B8:4D:09:21:41:08:4C:2E:EA:4A:A7:B8 X509v3 Authority Key Identifier: keyid:9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/XPTuMOSHPxC4TQkhQQhMLupKp7g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.72.168.0/21 45.158.36.0/22 46.21.144.0/20 89.233.104.0/21 94.100.16.0/20 149.255.32.0/21 178.236.176.0/21 178.236.185.0-178.236.187.255 194.126.172.0/22 195.242.152.0/23 217.79.240.0/20 IPv6: 2a02:748::/32 2a0f:5180::/29 Signature Algorithm: sha256WithRSAEncryption 91:ac:c2:ce:1b:09:56:80:94:84:67:12:ce:91:af:16:ee:39: 10:8b:f5:2b:54:64:11:47:9b:cc:d2:62:1b:f7:39:29:e3:6a: 24:11:6d:6f:ed:7e:1f:2d:b8:96:57:b5:e9:e3:09:c8:1d:bf: 4b:19:63:7d:38:84:f4:cc:29:89:1a:20:0a:61:1c:bb:ab:d4: 23:85:b6:a8:2f:55:26:04:8e:9a:ed:7b:9d:1d:96:69:4c:3e: cb:d9:70:7e:03:c5:04:43:c0:77:9f:e4:d8:f0:82:b1:4e:8f: 1d:b8:1f:a1:f0:bc:53:88:fa:ed:07:90:7a:28:7c:46:ab:8c: e6:d8:22:fa:d4:8e:e8:96:56:8e:b9:2f:5a:62:f8:d8:01:49: 62:1b:42:01:45:65:82:1a:aa:3f:16:37:f3:12:be:4e:99:51: 98:b9:0a:4a:1c:74:7b:25:7c:60:cb:52:93:4f:a7:d6:2e:07: ed:42:cd:16:a0:ed:8d:24:55:46:12:39:f2:70:d3:dd:51:6f: 3a:eb:5f:07:34:78:b7:3d:83:24:c7:e2:99:d7:2d:ae:95:28: a4:32:3f:42:8d:05:9c:05:57:60:20:ee:5d:de:2a:55:a3:b7: 08:fe:10:57:6c:3d:21:8d:b9:7e:c4:00:32:6f:86:5a:a5:b9: c4:ec:d6:a0 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgISAZt+ppF9pO9Af/hbvDQfvh9DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMjNmNGNiNGJhYjVjMTA4MDFhNzcwNjU4ZGY4OTFjZmI4 YzY4YzYwHhcNMjYwMTAyMTIyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2Y0ZWUzMGU0ODczZjEwYjg0ZDA5MjE0MTA4NGMyZWVhNGFhN2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIP4WFxg5y3sw6jLgjulaS+UehbW RG8qBrOsZzBuFJUvhnxO6RDZ/nBS0orJvQfiM6oQdRWGY3ptZlltjlaAENEEeNJ6 xceNTc3b8/HMD93D9fRkmkIUa7gvdQZVGNQCgtJ3Va1/qrpipL9pLT+b0ILoERQU 8Lkyu1ct0sjJLU9GTNAwiWXeObaG0Q6C6HMuWgIEEL807H/qolb6dhtgmWih8ujm hsQrqth0t2p+7HArxozktEI5voHPFWM9fs8wV7Pk/vDVgNITmLXgvSuUpIM2vZ7Y dvxLXLqWdSdVZHV42i24qu1jZPY/HWoYRU1KkeBlLpzMB3Wa3YWHoOFuEQIDAQAB o4ICYzCCAl8wHQYDVR0OBBYEFFz07jDkhz8QuE0JIUEITC7qSqe4MB8GA1UdIwQY MBaAFJ0j9MtLq1wQgBp3BljfiRz7jGjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNQMHkwdXJYQkNBR25jR1dOLUpIUHVNYU1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80ZWNhNGQtM2EyZS00YTg0LWE3ODkt MDE1NzdhOTI3ZmE5LzEvWFBUdU1PU0hQeEM0VFFraFFRaE1MdXBLcDdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS80ZWNhNGQtM2EyZS00YTg0LWE3ODktMDE1NzdhOTI3ZmE5 LzEvblNQMHkwdXJYQkNBR25jR1dOLUpIUHVNYU1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHkGCCsGAQUFBwEHAQH/BGowaDBQBAIAATBKAwQDJUioAwQC LZ4kAwQELhWQAwQDWeloAwQEXmQQAwQDlf8gAwQDsuywMAwDBACy7LkDBAKy7LgD BALCfqwDBAHD8pgDBATZT/AwFAQCAAIwDgMFACoCB0gDBQMqD1GAMA0GCSqGSIb3 DQEBCwUAA4IBAQCRrMLOGwlWgJSEZxLOka8W7jkQi/UrVGQRR5vM0mIb9zkp42ok EW1v7X4fLbiWV7Xp4wnIHb9LGWN9OIT0zCmJGiAKYRy7q9QjhbaoL1UmBI6a7Xud HZZpTD7L2XB+A8UEQ8B3n+TY8IKxTo8duB+h8LxTiPrtB5B6KHxGq4zm2CL61I7o llaOuS9aYvjYAUliG0IBRWWCGqo/FjfzEr5OmVGYuQpKHHR7JXxgy1KTT6fWLgft Qs0WoO2NJFVGEjnycNPdUW86618HNHi3PYMkx+KZ1y2ulSikMj9CjQWcBVdgIO5d 3ipVo7cI/hBXbD0hjbl+xAAyb4ZapbnE7Nag -----END CERTIFICATE-----Generated at Sun Jan 25 10:06:37 2026 by rpki-client