This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/XN3eQaYjP3jzK45CBf8CPlc7QHE.roa File: XN3eQaYjP3jzK45CBf8CPlc7QHE.roa (raw, json) Hash identifier: bnajZz/gVT8v32gidiUfy6lbf2cYrh/Ng05WJqT/AlE= Subject key identifier: 5C:DD:DE:41:A6:23:3F:78:F3:2B:8E:42:05:FF:02:3E:57:3B:40:71 Certificate issuer: /CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71 Certificate serial: 019B7CEE0FE6DAAB4308C7E56D7FA0A14ACE Authority key identifier: F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/XN3eQaYjP3jzK45CBf8CPlc7QHE.roa Signing time: Fri 02 Jan 2026 04:18:55 +0000 ROA not before: Fri 02 Jan 2026 04:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198605 IP address blocks: 5.45.56.0/21 maxlen: 24 31.14.72.0/24 maxlen: 24 31.14.73.0/24 maxlen: 24 31.14.74.0/24 maxlen: 24 37.156.184.0/22 maxlen: 24 69.94.64.0/20 maxlen: 24 77.234.40.0/21 maxlen: 24 77.234.40.0/24 maxlen: 24 91.213.143.0/24 maxlen: 24 185.51.228.0/22 maxlen: 24 185.167.64.0/24 maxlen: 24 185.189.92.0/22 maxlen: 24 185.189.94.0/24 maxlen: 24 195.74.76.0/24 maxlen: 24 2001:67c:284::/48 maxlen: 48 2a0b:e180::/29 maxlen: 48 2a0b:e181:604::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.crl rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:0f:e6:da:ab:43:08:c7:e5:6d:7f:a0:a1:4a:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71 Validity Not Before: Jan 2 04:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5cddde41a6233f78f32b8e4205ff023e573b4071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a6:c4:fa:cd:db:e7:35:0a:f4:35:60:49:15: c3:e5:6b:d8:49:a7:d8:b5:92:2e:df:c9:49:6c:48: d7:66:6d:08:0c:b0:94:e6:9a:8e:4e:d9:90:c1:18: 7f:73:e3:c7:9a:6b:15:31:1e:78:08:59:d3:63:c7: ad:9a:c4:69:c3:e3:89:de:9a:e8:f7:db:50:76:c5: 18:ca:60:fa:33:aa:20:1b:6f:de:e7:a6:a9:53:71: 50:00:bb:ff:9f:08:ef:8d:16:88:c8:d5:b2:35:dc: fa:ab:bc:1f:88:ff:00:81:e5:ca:f4:97:30:88:aa: d2:ff:09:3e:15:95:12:a3:40:32:4f:6b:38:1a:eb: 45:3c:ce:8e:bc:94:6f:ff:fc:81:b9:9b:67:74:84: 3f:3a:7b:eb:f7:e1:1e:8a:46:24:ab:95:66:8e:d2: ce:10:50:9c:c6:03:79:55:d4:9e:7c:59:a9:8e:43: df:0e:6c:9b:47:8c:15:db:f7:c8:d7:34:d3:92:e1: db:4d:83:9d:82:eb:f1:c4:b8:58:c7:b5:43:ea:fa: c5:40:e9:67:52:59:9d:99:1d:46:70:c9:59:2a:24: 2e:9d:6b:97:7c:f1:cd:b2:86:c5:c8:5e:b1:d6:34: 02:bb:a7:56:5d:69:c2:1a:3d:99:d3:c7:a2:d7:4f: bf:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:DD:DE:41:A6:23:3F:78:F3:2B:8E:42:05:FF:02:3E:57:3B:40:71 X509v3 Authority Key Identifier: keyid:F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/XN3eQaYjP3jzK45CBf8CPlc7QHE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.45.56.0/21 31.14.72.0-31.14.74.255 37.156.184.0/22 69.94.64.0/20 77.234.40.0/21 91.213.143.0/24 185.51.228.0/22 185.167.64.0/24 185.189.92.0/22 195.74.76.0/24 IPv6: 2001:67c:284::/48 2a0b:e180::/29 Signature Algorithm: sha256WithRSAEncryption 00:14:03:4b:22:c7:3c:3e:e5:8d:f8:01:f9:ca:fe:6e:47:03: df:5c:c2:df:3f:86:d3:83:c3:6d:ca:9f:1d:bd:be:22:51:e5: 92:14:f3:d1:45:fc:a5:a5:e0:a3:06:33:13:74:ee:1f:dd:76: 4d:da:ff:96:e1:db:57:a8:e4:9b:75:b1:91:0a:98:3c:91:56: 0a:8c:7a:93:1f:02:eb:df:57:6a:05:7c:9d:45:c5:3c:08:a9: 55:30:88:ee:d2:6b:41:f6:f0:db:70:56:c1:af:0d:d4:ea:d8: 7a:75:01:d1:5a:80:b4:58:58:2a:40:79:fb:bd:62:e8:53:10: b4:cb:8d:74:a9:6b:fc:50:bf:5d:e6:7a:b9:3a:56:48:87:01: ea:b7:49:cf:c1:da:cb:2c:4b:17:3b:35:e6:11:60:8c:05:e9: 59:35:e1:3d:50:cb:d2:c8:02:8d:48:c7:f2:4e:a9:ab:df:01: 65:bd:ce:06:d5:c0:ac:cb:68:91:be:fa:79:bd:ab:e0:2b:a6: 78:dd:1c:ed:8d:13:a4:29:11:22:8c:c0:ab:c4:48:11:fe:5f: 4a:9c:6d:8a:7e:6c:a0:02:b1:70:96:b9:d4:44:07:92:b3:7c: 3f:e1:c1:79:d8:e0:e8:53:df:d9:5f:83:20:e9:63:90:39:99: 00:47:12:9d -----BEGIN CERTIFICATE----- MIIFVTCCBD2gAwIBAgISAZt87g/m2qtDCMflbX+goUrOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZjczYzVjMGYzYTEwNmE4YmE3ZGZmM2UzNWM4MTZkMTA3 OGRjNzEwHhcNMjYwMTAyMDQxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2RkZGU0MWE2MjMzZjc4ZjMyYjhlNDIwNWZmMDIzZTU3M2I0MDcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqbE+s3b5zUK9DVgSRXD5WvYSafY tZIu38lJbEjXZm0IDLCU5pqOTtmQwRh/c+PHmmsVMR54CFnTY8etmsRpw+OJ3pro 99tQdsUYymD6M6ogG2/e56apU3FQALv/nwjvjRaIyNWyNdz6q7wfiP8AgeXK9Jcw iKrS/wk+FZUSo0AyT2s4GutFPM6OvJRv//yBuZtndIQ/Onvr9+EeikYkq5VmjtLO EFCcxgN5VdSefFmpjkPfDmybR4wV2/fI1zTTkuHbTYOdguvxxLhYx7VD6vrFQOln UlmdmR1GcMlZKiQunWuXfPHNsobFyF6x1jQCu6dWXWnCGj2Z08ei10+/7QIDAQAB o4ICYTCCAl0wHQYDVR0OBBYEFFzd3kGmIz948yuOQgX/Aj5XO0BxMB8GA1UdIwQY MBaAFPj3PFwPOhBqi6ff8+NcgW0QeNxxMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1QYzhYQTg2RUdxTHA5X3o0MXlCYlJCNDNIRS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYvMDNjY2UzLWU2MjAtNDQ4My1iMDhi LTZkOGZkMzMwZTlhYS8xL1hOM2VRYVlqUDNqeks0NUNCZjhDUGxjN1FIRS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMjYvMDNjY2UzLWU2MjAtNDQ4My1iMDhiLTZkOGZkMzMwZTlh YS8xLzEtUGM4WEE4NkVHcUxwOV96NDF5QmJSQjQzSEUuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwdQYIKwYBBQUHAQcBAf8EZjBkMEoEAgABMEQDBAMFLTgw DAMEAx8OSAMEAB8OSgMEAiWcuAMEBEVeQAMEA03qKAMEAFvVjwMEArkz5AMEALmn QAMEArm9XAMEAMNKTDAWBAIAAjAQAwcAIAEGfAKEAwUDKgvhgDANBgkqhkiG9w0B AQsFAAOCAQEAABQDSyLHPD7ljfgB+cr+bkcD31zC3z+G04PDbcqfHb2+IlHlkhTz 0UX8paXgowYzE3TuH912Tdr/luHbV6jkm3WxkQqYPJFWCox6kx8C699XagV8nUXF PAipVTCI7tJrQfbw23BWwa8N1OrYenUB0VqAtFhYKkB5+71i6FMQtMuNdKlr/FC/ XeZ6uTpWSIcB6rdJz8HayyxLFzs15hFgjAXpWTXhPVDL0sgCjUjH8k6pq98BZb3O BtXArMtokb76eb2r4CumeN0c7Y0TpCkRIozAq8RIEf5fSpxtin5soAKxcJa51EQH krN8P+HBedjg6FPf2V+DIOljkDmZAEcSnQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:49:29 2026 by rpki-client