This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/XW5LVb9LNrtO6jdEH26TXvkdFnw.roa File: XW5LVb9LNrtO6jdEH26TXvkdFnw.roa (raw, json) Hash identifier: tRXiDcN0Chk8qzzYc1rDT1NZ+Ap5GJUMsKOnNMIHQXI= Subject key identifier: 5D:6E:4B:55:BF:4B:36:BB:4E:EA:37:44:1F:6E:93:5E:F9:1D:16:7C Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d Certificate serial: 019B7F8426668183B4A948D3538B51F4BD2B Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/XW5LVb9LNrtO6jdEH26TXvkdFnw.roa Signing time: Fri 02 Jan 2026 16:22:05 +0000 ROA not before: Fri 02 Jan 2026 16:22:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206837 IP address blocks: 46.24.82.0/24 maxlen: 24 46.24.91.0/24 maxlen: 24 46.24.98.0/24 maxlen: 24 46.24.100.0/24 maxlen: 24 46.25.127.0/24 maxlen: 24 46.25.145.0/24 maxlen: 24 46.25.159.0/24 maxlen: 24 46.25.185.0/24 maxlen: 24 77.224.174.0/24 maxlen: 24 77.224.180.0/24 maxlen: 24 77.224.201.0/24 maxlen: 24 77.224.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:26:66:81:83:b4:a9:48:d3:53:8b:51:f4:bd:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d Validity Not Before: Jan 2 16:22:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d6e4b55bf4b36bb4eea37441f6e935ef91d167c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:26:f1:62:95:f0:92:ba:9f:d5:0f:dc:b9:e9: c4:ec:1e:9f:6f:76:7a:44:7b:e0:52:f2:2c:e4:8d: ef:9f:8a:5b:6d:2a:11:6f:e4:78:68:79:15:b8:55: 8a:15:ce:87:00:f7:c8:07:8d:7d:43:9d:be:31:a9: ae:c7:19:bf:a0:ef:50:47:0d:43:5f:60:86:e7:df: 4a:b8:cb:b1:45:5f:43:db:59:3c:e1:f9:b8:4b:c2: d0:31:75:c4:3f:ac:7e:68:ec:b1:67:a0:f6:4f:e6: 6c:2c:85:ae:3e:ee:86:8f:46:c9:a0:e0:9f:58:17: 32:ec:e5:63:1b:ff:23:d6:76:c2:44:a7:ae:66:36: fb:6b:5b:41:fc:86:a1:7f:37:77:3d:37:78:97:34: 23:24:3a:a9:55:32:88:93:f1:1f:f0:0f:81:44:3a: 73:7b:e5:4d:e2:75:3b:c3:57:49:18:54:9c:37:0a: de:f6:2f:97:1c:39:49:4d:dc:40:71:89:5a:16:5f: 7a:85:28:b5:16:81:0a:5e:83:6e:41:46:45:0a:78: f7:f2:f2:c1:06:23:d5:14:7d:b1:57:43:02:7c:48: 5b:d8:7b:9e:86:13:a3:70:cb:f8:84:eb:45:73:af: 3b:8e:88:04:6a:89:50:7b:a4:b1:12:15:79:b0:de: f5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:6E:4B:55:BF:4B:36:BB:4E:EA:37:44:1F:6E:93:5E:F9:1D:16:7C X509v3 Authority Key Identifier: keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/XW5LVb9LNrtO6jdEH26TXvkdFnw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.24.82.0/24 46.24.91.0/24 46.24.98.0/24 46.24.100.0/24 46.25.127.0/24 46.25.145.0/24 46.25.159.0/24 46.25.185.0/24 77.224.174.0/24 77.224.180.0/24 77.224.201.0/24 77.224.218.0/24 Signature Algorithm: sha256WithRSAEncryption bb:29:a9:4d:75:0d:65:49:fd:35:05:ee:d5:74:71:c5:f7:aa: 5c:a1:73:02:42:6b:47:9f:41:b2:43:af:93:3c:41:ac:b1:1d: ad:e4:8d:8f:17:a5:ce:82:2b:40:a0:9d:07:08:a0:e2:20:a6: 9a:d7:c1:07:5d:8d:83:b2:61:b5:35:3d:9c:97:c1:12:8e:37: 5c:87:04:9e:3c:75:21:e7:1a:d9:5f:d2:0a:de:0a:9d:c2:1a: 17:4f:83:c5:c6:4f:80:ee:02:ef:6f:e6:af:e6:27:59:66:38: a6:8b:4b:1d:a4:1e:2e:5d:7e:26:b4:87:7d:ca:e1:fc:b8:93: fa:47:6d:e5:6f:c8:c2:97:3f:de:57:ef:f9:47:ec:cb:29:70: 77:cc:72:38:f1:21:c3:14:59:92:e3:c6:00:b0:d3:3f:1b:ad: a6:a8:cf:db:12:8a:8d:03:64:56:d6:cd:ec:26:dc:41:71:59: 65:ba:1c:26:48:e3:0b:b5:5b:15:23:38:04:f6:e3:fa:14:ef: 5e:ed:2b:fd:be:cd:b2:4e:05:6e:54:9a:57:bd:60:c1:b3:8d: 95:58:4a:5e:ec:4d:65:97:c0:db:eb:44:b5:79:4f:f1:85:c8: 70:e7:a4:e1:7f:04:44:32:38:2a:61:f3:51:ad:b8:d4:c2:cd: b2:13:17:86 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZt/hCZmgYO0qUjTU4tR9L0rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MmFlMzNiMTFiMzZhMzE5YmE4MTM0N2Q4NTI0ODBkOGU3 NGM4N2QwHhcNMjYwMTAyMTYyMjA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDZlNGI1NWJmNGIzNmJiNGVlYTM3NDQxZjZlOTM1ZWY5MWQxNjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ibxYpXwkrqf1Q/cuenE7B6fb3Z6 RHvgUvIs5I3vn4pbbSoRb+R4aHkVuFWKFc6HAPfIB419Q52+Mamuxxm/oO9QRw1D X2CG599KuMuxRV9D21k84fm4S8LQMXXEP6x+aOyxZ6D2T+ZsLIWuPu6Gj0bJoOCf WBcy7OVjG/8j1nbCRKeuZjb7a1tB/Iahfzd3PTd4lzQjJDqpVTKIk/Ef8A+BRDpz e+VN4nU7w1dJGFScNwre9i+XHDlJTdxAcYlaFl96hSi1FoEKXoNuQUZFCnj38vLB BiPVFH2xV0MCfEhb2HuehhOjcMv4hOtFc687jogEaolQe6SxEhV5sN71XwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFF1uS1W/Sza7Tuo3RB9uk175HRZ8MB8GA1UdIwQY MBaAFDUq4zsRs2oxm6gTR9hSSA2OdMh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMt MjUwNTBjNTkzYWExLzEvWFc1TFZiOUxOcnRPNmpkRUgyNlRYdmtkRm53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMtMjUwNTBjNTkzYWEx LzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQALhhSAwQA LhhbAwQALhhiAwQALhhkAwQALhl/AwQALhmRAwQALhmfAwQALhm5AwQATeCuAwQA TeC0AwQATeDJAwQATeDaMA0GCSqGSIb3DQEBCwUAA4IBAQC7KalNdQ1lSf01Be7V dHHF96pcoXMCQmtHn0GyQ6+TPEGssR2t5I2PF6XOgitAoJ0HCKDiIKaa18EHXY2D smG1NT2cl8ESjjdchwSePHUh5xrZX9IK3gqdwhoXT4PFxk+A7gLvb+av5idZZjim i0sdpB4uXX4mtId9yuH8uJP6R23lb8jClz/eV+/5R+zLKXB3zHI48SHDFFmS48YA sNM/G62mqM/bEoqNA2RW1s3sJtxBcVlluhwmSOMLtVsVIzgE9uP6FO9e7Sv9vs2y TgVuVJpXvWDBs42VWEpe7E1ll8Db60S1eU/xhchw56ThfwREMjgqYfNRrbjUws2y ExeG -----END CERTIFICATE-----Generated at Mon Jan 26 06:03:23 2026 by rpki-client