This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/Xix9A97ayWDPHJAD9nOZlkvalAY.roa File: Xix9A97ayWDPHJAD9nOZlkvalAY.roa (raw, json) Hash identifier: 01E/73qs5IxYDyn0I+VrJJgO3tRvtSmgt4GyIQH4+tw= Subject key identifier: 5E:2C:7D:03:DE:DA:C9:60:CF:1C:90:03:F6:73:99:96:4B:DA:94:06 Certificate issuer: /CN=2fcf619ccecf836f56a72010e82fb7dd240402f9 Certificate serial: 019B797E1F65066D2F0EAA688357D31E8581 Authority key identifier: 2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/Xix9A97ayWDPHJAD9nOZlkvalAY.roa Signing time: Thu 01 Jan 2026 12:17:47 +0000 ROA not before: Thu 01 Jan 2026 12:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61026 IP address blocks: 5.182.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:1f:65:06:6d:2f:0e:aa:68:83:57:d3:1e:85:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fcf619ccecf836f56a72010e82fb7dd240402f9 Validity Not Before: Jan 1 12:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e2c7d03dedac960cf1c9003f67399964bda9406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:59:c6:77:71:98:46:4a:0f:4a:ef:5d:3a:42: 23:b5:52:99:1e:fe:7d:91:09:8c:7a:c1:18:74:a2: a3:11:7d:38:e8:fc:55:cd:61:9d:28:a7:2a:44:98: 9d:bc:da:fa:55:61:38:ff:c6:14:38:f1:d4:43:d0: b4:c3:91:f8:01:1e:17:f7:c2:46:9f:8d:c4:fa:d3: 85:c4:d2:90:99:dc:01:33:a9:64:7c:80:66:f0:22: b0:d9:61:37:2c:d7:9a:9a:47:56:8e:e1:9a:81:d2: b7:a9:e6:9e:f9:ad:23:d5:c7:1e:1b:d5:c7:6c:ed: 80:f3:cd:6b:ad:96:31:4a:68:04:dd:39:ec:11:bb: a0:c7:b2:09:22:0c:c9:23:4b:34:75:ae:4d:f7:18: e8:d9:40:14:a0:1b:7d:f5:2b:fe:04:37:41:2b:f9: 37:d8:b4:f4:eb:49:06:4b:2b:16:6b:98:8d:03:ee: 90:30:7b:a1:ac:41:21:d6:92:1a:a9:49:aa:50:8e: ed:5f:30:67:92:0e:54:49:ce:05:1d:80:f7:1e:98: 8a:dc:29:e0:5f:f2:47:3f:d5:4b:a8:6a:e4:ea:91: 0d:a6:a1:59:d3:90:89:03:1b:2e:f4:db:e2:32:8e: f4:17:d6:f0:22:21:c1:64:4a:c3:db:65:eb:c9:95: 11:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:2C:7D:03:DE:DA:C9:60:CF:1C:90:03:F6:73:99:96:4B:DA:94:06 X509v3 Authority Key Identifier: keyid:2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/Xix9A97ayWDPHJAD9nOZlkvalAY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.136.0/22 Signature Algorithm: sha256WithRSAEncryption 42:2c:dd:70:3b:7b:d1:a1:1e:07:01:4a:98:72:95:55:be:bd: d4:25:73:d4:f1:f7:0d:f7:c5:53:6b:b0:2f:da:e9:c8:87:79: cd:2b:8f:e7:3f:b8:fb:e7:fb:47:79:d3:fe:5d:64:0d:f1:a9: de:1f:cc:8d:cf:8d:09:1e:1f:68:c4:86:22:84:6a:1f:7e:43: 61:ab:28:33:c1:dd:04:97:f7:4c:47:1d:bc:ab:f2:23:27:30: fd:d1:99:fe:93:24:03:2b:c4:fe:0d:f5:91:ee:a0:d4:1e:24: 78:fc:e0:17:67:57:4b:f5:fd:1c:d6:03:5c:ff:d8:66:a8:c3: 9f:cf:a4:9a:39:c8:39:e7:2a:37:41:3b:df:c7:1a:b4:92:a1: 39:77:b4:8f:59:7a:e6:fa:f9:86:86:9e:d4:0b:51:de:92:9d: fa:ec:29:95:2c:e3:93:2f:92:f1:05:ae:a1:66:57:cc:72:7a: a2:11:c7:14:42:f5:81:07:f2:d6:9d:d4:47:99:48:56:ff:98: 01:aa:4b:48:20:a8:ab:18:20:42:c9:bf:66:73:4e:2e:ec:17: 90:83:e0:12:8a:86:0f:75:88:c3:51:62:83:bf:c0:c6:3c:da: d6:01:00:2e:33:4f:fd:9a:81:f8:d0:c0:07:89:f4:7b:17:a3: c9:ed:23:08 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fh9lBm0vDqpog1fTHoWBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmY2Y2MTljY2VjZjgzNmY1NmE3MjAxMGU4MmZiN2RkMjQw NDAyZjkwHhcNMjYwMTAxMTIxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTJjN2QwM2RlZGFjOTYwY2YxYzkwMDNmNjczOTk5NjRiZGE5NDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1nGd3GYRkoPSu9dOkIjtVKZHv59 kQmMesEYdKKjEX046PxVzWGdKKcqRJidvNr6VWE4/8YUOPHUQ9C0w5H4AR4X98JG n43E+tOFxNKQmdwBM6lkfIBm8CKw2WE3LNeamkdWjuGagdK3qeae+a0j1cceG9XH bO2A881rrZYxSmgE3TnsEbugx7IJIgzJI0s0da5N9xjo2UAUoBt99Sv+BDdBK/k3 2LT060kGSysWa5iNA+6QMHuhrEEh1pIaqUmqUI7tXzBnkg5USc4FHYD3HpiK3Cng X/JHP9VLqGrk6pENpqFZ05CJAxsu9NviMo70F9bwIiHBZErD22XryZURUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF4sfQPe2slgzxyQA/ZzmZZL2pQGMB8GA1UdIwQY MBaAFC/PYZzOz4NvVqcgEOgvt90kBAL5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDg5aG5NN1BnMjlXcHlBUTZDLTMzU1FFQXZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9jNWRjNzMtOWJlMi00NTAzLTgyODEt NGIzNTBlYWNjODZiLzEvWGl4OUE5N2F5V0RQSEpBRDluT1psa3ZhbEFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9jNWRjNzMtOWJlMi00NTAzLTgyODEtNGIzNTBlYWNjODZi LzEvTDg5aG5NN1BnMjlXcHlBUTZDLTMzU1FFQXZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBbaIMA0G CSqGSIb3DQEBCwUAA4IBAQBCLN1wO3vRoR4HAUqYcpVVvr3UJXPU8fcN98VTa7Av 2unIh3nNK4/nP7j75/tHedP+XWQN8aneH8yNz40JHh9oxIYihGoffkNhqygzwd0E l/dMRx28q/IjJzD90Zn+kyQDK8T+DfWR7qDUHiR4/OAXZ1dL9f0c1gNc/9hmqMOf z6SaOcg55yo3QTvfxxq0kqE5d7SPWXrm+vmGhp7UC1Hekp367CmVLOOTL5LxBa6h ZlfMcnqiEccUQvWBB/LWndRHmUhW/5gBqktIIKirGCBCyb9mc04u7BeQg+ASioYP dYjDUWKDv8DGPNrWAQAuM0/9moH40MAHifR7F6PJ7SMI -----END CERTIFICATE-----Generated at Mon Jan 26 10:14:02 2026 by rpki-client