This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/x5Qwhv7R0VHh2__9bUe3MfdsZS8.roa File: x5Qwhv7R0VHh2__9bUe3MfdsZS8.roa (raw, json) Hash identifier: DGtjPXc9IfmH8Lv2uA77Pdq/vDMpd2Jc/ZwXsO4TcZ0= Subject key identifier: C7:94:30:86:FE:D1:D1:51:E1:DB:FF:FD:6D:47:B7:31:F7:6C:65:2F Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03 Certificate serial: 019B7D5C45C52576E1CA1DDDDEB6B55BB2D3 Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/x5Qwhv7R0VHh2__9bUe3MfdsZS8.roa Signing time: Fri 02 Jan 2026 06:19:17 +0000 ROA not before: Fri 02 Jan 2026 06:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59682 IP address blocks: 94.131.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:45:c5:25:76:e1:ca:1d:dd:de:b6:b5:5b:b2:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03 Validity Not Before: Jan 2 06:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7943086fed1d151e1dbfffd6d47b731f76c652f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:36:5a:95:e5:f8:f7:55:ca:da:62:31:8a:6f: 17:f7:ae:b1:aa:6b:f2:43:b9:7f:5a:f5:47:34:c4: de:8a:59:9a:93:d0:0b:e0:19:42:87:63:78:e0:45: 82:4f:25:7c:87:38:51:3d:4d:50:ce:78:fb:4b:82: f6:ac:b4:18:f1:b8:7d:95:2e:aa:7b:33:e7:98:b0: 98:38:b5:74:8b:fe:c6:7a:09:4d:a8:58:f1:d0:9d: 0c:f9:2d:78:af:35:21:f9:3a:e3:57:6c:51:72:62: f9:ef:73:68:f2:9b:19:a2:db:3b:5a:cd:df:25:fe: 03:64:a8:27:1e:9c:a2:e2:21:c0:ff:75:b0:83:6e: c9:98:45:64:31:24:90:c6:69:8c:c2:93:84:04:ce: 8d:58:c0:0f:1d:fc:51:a4:88:99:cb:ea:ab:c9:a3: f6:ef:af:71:f6:0c:23:bf:b1:f1:84:45:fe:07:44: c1:a2:c1:c4:27:2d:7e:cc:d9:73:c7:48:96:b8:9e: 9e:31:cf:6a:76:2f:52:78:31:af:c3:de:62:00:84: 12:9c:40:42:b2:88:02:67:85:1f:b6:75:4f:06:f4: 41:bf:96:24:e8:89:14:06:e0:7b:9a:58:5c:b5:76: 5d:a7:a4:7c:fa:ee:f8:be:48:53:63:51:67:28:fb: b5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:94:30:86:FE:D1:D1:51:E1:DB:FF:FD:6D:47:B7:31:F7:6C:65:2F X509v3 Authority Key Identifier: keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/x5Qwhv7R0VHh2__9bUe3MfdsZS8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.131.5.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:12:6d:49:7b:d3:4f:41:59:4e:c5:72:39:b6:87:b5:54:b5: a9:b2:54:0d:bf:0e:4e:ca:d0:9d:3e:92:05:a8:e8:69:a5:40: 63:92:32:92:42:26:26:89:41:58:da:5c:51:c8:68:fa:1b:82: d2:ae:03:d7:43:b5:55:05:11:d8:ca:7d:ae:86:a6:01:4c:2a: c4:fc:bf:f7:1e:2f:72:f8:da:b2:90:9d:51:51:4a:f7:24:89: 91:b1:a9:6a:e7:f7:a0:43:81:fa:8b:a4:47:5e:cf:12:b2:4f: 4b:89:bb:07:22:25:9b:3f:6d:4a:7f:0f:6f:99:4d:b3:79:5a: 35:17:5d:15:ac:45:a0:b3:59:5e:52:a9:9d:35:64:65:8a:81: 79:68:0c:7e:e2:72:7b:0f:a2:9f:ce:e6:72:d7:c6:73:90:29: 7e:93:a0:7e:bd:3a:1a:93:61:16:bf:e9:36:57:7c:a5:f2:a3: 1e:02:2f:13:24:1d:eb:b2:8a:1e:f0:fb:63:90:ac:a2:10:c0: 4d:2c:7c:27:83:ff:de:7b:12:44:98:a2:f5:61:ab:f5:df:9e: 11:fc:3b:f4:4b:d3:dc:90:e0:ea:5a:0d:c4:2d:36:2e:24:38: fb:57:51:2d:bb:14:60:aa:8a:85:b7:1e:97:52:65:12:5d:d4: 67:8f:6a:c6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XEXFJXbhyh3d3ra1W7LTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNzQzZWQ2M2U4NjhlZjUwZjZkODRjMDAwM2E4MzQ4M2Zj NjJhMDMwHhcNMjYwMTAyMDYxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzk0MzA4NmZlZDFkMTUxZTFkYmZmZmQ2ZDQ3YjczMWY3NmM2NTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDZaleX491XK2mIxim8X966xqmvy Q7l/WvVHNMTeilmak9AL4BlCh2N44EWCTyV8hzhRPU1Qznj7S4L2rLQY8bh9lS6q ezPnmLCYOLV0i/7GeglNqFjx0J0M+S14rzUh+TrjV2xRcmL573No8psZots7Ws3f Jf4DZKgnHpyi4iHA/3Wwg27JmEVkMSSQxmmMwpOEBM6NWMAPHfxRpIiZy+qryaP2 769x9gwjv7HxhEX+B0TBosHEJy1+zNlzx0iWuJ6eMc9qdi9SeDGvw95iAIQSnEBC sogCZ4UftnVPBvRBv5Yk6IkUBuB7mlhctXZdp6R8+u74vkhTY1FnKPu1/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMeUMIb+0dFR4dv//W1HtzH3bGUvMB8GA1UdIwQY MBaAFG10PtY+ho71D22EwAA6g0g/xioDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQt ZTk3MjRhN2E2YmM4LzEveDVRd2h2N1IwVkhoMl9fOWJVZTNNZmRzWlM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQtZTk3MjRhN2E2YmM4 LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXoMFMA0G CSqGSIb3DQEBCwUAA4IBAQCaEm1Je9NPQVlOxXI5toe1VLWpslQNvw5OytCdPpIF qOhppUBjkjKSQiYmiUFY2lxRyGj6G4LSrgPXQ7VVBRHYyn2uhqYBTCrE/L/3Hi9y +NqykJ1RUUr3JImRsalq5/egQ4H6i6RHXs8Ssk9LibsHIiWbP21Kfw9vmU2zeVo1 F10VrEWgs1leUqmdNWRlioF5aAx+4nJ7D6KfzuZy18ZzkCl+k6B+vToak2EWv+k2 V3yl8qMeAi8TJB3rsooe8PtjkKyiEMBNLHwng//eexJEmKL1Yav1354R/Dv0S9Pc kODqWg3ELTYuJDj7V1EtuxRgqoqFtx6XUmUSXdRnj2rG -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:41 2026 by rpki-client