This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/XAbgL3yvZgOKNAQjd1K9TP7pR8E.roa File: XAbgL3yvZgOKNAQjd1K9TP7pR8E.roa (raw, json) Hash identifier: EjsNK7RSKyP5lQacqZqjj1ZJHHLWHYhMqYQnL5S1TtQ= Subject key identifier: 5C:06:E0:2F:7C:AF:66:03:8A:34:04:23:77:52:BD:4C:FE:E9:47:C1 Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7 Certificate serial: 019BE978DAF6CFAC4F7806250666786CC13E Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/XAbgL3yvZgOKNAQjd1K9TP7pR8E.roa Signing time: Fri 23 Jan 2026 06:09:30 +0000 ROA not before: Fri 23 Jan 2026 06:09:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215540 IP address blocks: 5.44.42.0/24 maxlen: 24 45.129.185.0/24 maxlen: 24 157.22.240.0/24 maxlen: 24 2a05:541:102::/48 maxlen: 48 2a05:541:103::/48 maxlen: 48 2a05:541:104::/48 maxlen: 48 2a05:541:105::/48 maxlen: 48 2a05:541:106::/48 maxlen: 48 2a05:541:107::/48 maxlen: 48 2a05:541:108::/48 maxlen: 48 2a05:541:109::/48 maxlen: 48 2a05:541:110::/48 maxlen: 48 2a05:541:111::/48 maxlen: 48 2a05:541:112::/48 maxlen: 48 2a05:541:113::/48 maxlen: 48 2a05:541:114::/48 maxlen: 48 2a05:541:115::/48 maxlen: 48 2a05:541:116::/48 maxlen: 48 2a05:541:117::/48 maxlen: 48 2a05:541:118::/48 maxlen: 48 2a05:541:119::/48 maxlen: 48 2a05:541:121::/48 maxlen: 48 2a05:541:122::/48 maxlen: 48 2a05:541:123::/48 maxlen: 48 2a05:541:124::/48 maxlen: 48 2a05:541:125::/48 maxlen: 48 2a05:541:126::/48 maxlen: 48 2a05:541:127::/48 maxlen: 48 2a05:541:129::/48 maxlen: 48 2a05:541:131::/48 maxlen: 48 2a05:541:133::/48 maxlen: 48 2a05:541:134::/48 maxlen: 48 2a05:541:135::/48 maxlen: 48 2a05:541:136::/48 maxlen: 48 2a05:541:137::/48 maxlen: 48 2a05:541:138::/48 maxlen: 48 2a05:541:139::/48 maxlen: 48 2a05:541:141::/48 maxlen: 48 2a05:541:152::/48 maxlen: 48 2a05:541:153::/48 maxlen: 48 2a05:541:156::/48 maxlen: 48 2a05:541:157::/48 maxlen: 48 2a05:541:158::/48 maxlen: 48 2a05:541:159::/48 maxlen: 48 2a05:541:170::/48 maxlen: 48 2a05:541:171::/48 maxlen: 48 2a05:541:172::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e9:78:da:f6:cf:ac:4f:78:06:25:06:66:78:6c:c1:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7 Validity Not Before: Jan 23 06:09:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c06e02f7caf66038a3404237752bd4cfee947c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fe:c7:b7:65:ec:7a:b8:b0:60:c0:d1:60:1f: e9:e5:a9:15:c8:01:6f:1c:86:1c:26:15:a5:01:b9: 6a:83:88:6e:33:e2:90:7f:9d:52:06:fb:e3:5e:1a: c2:26:3e:17:b7:80:3d:e8:1b:f0:d6:04:ed:f0:2b: f3:e3:74:ab:a3:c1:e0:3e:4d:ad:ec:2f:45:e2:4b: d9:6d:25:3a:94:0f:fd:c3:51:84:bb:1e:2d:69:53: 86:c8:ab:8c:33:ca:e0:b1:63:78:e9:85:c5:88:3a: 7d:48:45:24:38:a8:fb:d2:52:90:fe:d4:e5:b0:52: e6:93:16:23:31:8e:74:e6:de:e6:e6:a5:39:65:b2: ff:dc:87:c2:a5:a2:fe:11:61:93:1b:d8:3d:97:11: 7e:65:32:de:b2:1e:b9:76:16:fb:26:44:8d:42:a6: 6d:51:c6:70:73:8b:e8:46:a7:b2:fc:21:4c:25:a9: 47:22:9c:0d:aa:2b:04:6b:1a:f7:9f:2e:f8:3b:df: 05:6b:08:bf:d5:1c:62:7e:a3:2a:83:4b:ca:8d:46: 9e:a8:2d:53:ae:78:88:02:7a:4f:50:f9:40:46:99: 85:a0:0c:ed:cf:41:9a:7b:fd:ba:4d:2e:cb:c8:76: a5:b8:69:f8:ab:50:08:d3:4a:aa:73:b7:21:64:e0: 70:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:06:E0:2F:7C:AF:66:03:8A:34:04:23:77:52:BD:4C:FE:E9:47:C1 X509v3 Authority Key Identifier: keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/XAbgL3yvZgOKNAQjd1K9TP7pR8E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.44.42.0/24 45.129.185.0/24 157.22.240.0/24 IPv6: 2a05:541:102::-2a05:541:109:ffff:ffff:ffff:ffff:ffff 2a05:541:110::-2a05:541:119:ffff:ffff:ffff:ffff:ffff 2a05:541:121::-2a05:541:127:ffff:ffff:ffff:ffff:ffff 2a05:541:129::/48 2a05:541:131::/48 2a05:541:133::-2a05:541:139:ffff:ffff:ffff:ffff:ffff 2a05:541:141::/48 2a05:541:152::/47 2a05:541:156::-2a05:541:159:ffff:ffff:ffff:ffff:ffff 2a05:541:170::-2a05:541:172:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 9e:b5:a7:b9:ca:1a:d1:30:a5:40:f9:4c:bb:4e:f8:1a:b6:0b: 24:c0:bc:fd:81:2c:6b:89:eb:4f:b5:65:38:b2:86:12:12:5d: d7:97:06:fb:c6:db:78:f0:ff:5c:e7:89:98:3a:17:7b:d4:37: 69:36:7c:53:1f:b9:2c:3e:0f:ff:a7:40:22:8e:df:c4:d6:2d: 5b:e8:c9:3b:f2:99:12:73:9a:34:92:16:59:3b:ce:f0:f7:ee: ae:41:87:10:5a:41:fb:4f:f4:42:8f:6d:09:bf:5f:12:13:3e: 3a:8d:3a:13:c4:29:aa:10:2e:30:a6:ab:2e:10:6f:10:52:a8: 2d:a4:80:4e:86:04:28:a0:28:6f:a1:fa:00:78:ef:f7:6d:2f: 21:47:fc:31:01:06:dc:69:70:71:51:96:14:de:c0:ce:8e:2f: 92:04:cd:f5:63:c3:52:ea:0b:5b:a0:5b:ce:10:42:9b:56:a9: a5:f8:02:73:55:4c:24:1e:2b:a0:d4:e4:e0:9f:2d:18:b7:a1: 7a:59:1b:f6:d8:ea:24:e6:2a:fa:50:9e:9d:27:d6:1a:eb:6f: 08:b5:7b:e3:47:6c:86:56:56:46:b0:50:aa:1d:4b:25:bc:83: e4:e6:e9:c0:e3:9c:2f:c5:2b:5f:33:9d:37:ec:17:6e:b1:47: c4:dd:3c:0c -----BEGIN CERTIFICATE----- MIIFsjCCBJqgAwIBAgISAZvpeNr2z6xPeAYlBmZ4bME+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NjcwMjM2Y2QwZTAzODY4NGEzMzE5NGJkZTdkNGI5NWFk YzY2ZjcwHhcNMjYwMTIzMDYwOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzA2ZTAyZjdjYWY2NjAzOGEzNDA0MjM3NzUyYmQ0Y2ZlZTk0N2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtf7Ht2XseriwYMDRYB/p5akVyAFv HIYcJhWlAblqg4huM+KQf51SBvvjXhrCJj4Xt4A96Bvw1gTt8Cvz43Sro8HgPk2t 7C9F4kvZbSU6lA/9w1GEux4taVOGyKuMM8rgsWN46YXFiDp9SEUkOKj70lKQ/tTl sFLmkxYjMY505t7m5qU5ZbL/3IfCpaL+EWGTG9g9lxF+ZTLesh65dhb7JkSNQqZt UcZwc4voRqey/CFMJalHIpwNqisEaxr3ny74O98Fawi/1RxifqMqg0vKjUaeqC1T rniIAnpPUPlARpmFoAztz0Gae/26TS7LyHaluGn4q1AI00qqc7chZOBwawIDAQAB o4ICvjCCArowHQYDVR0OBBYEFFwG4C98r2YDijQEI3dSvUz+6UfBMB8GA1UdIwQY MBaAFHZnAjbNDgOGhKMxlL3n1Lla3Gb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgt YmE0ZmMyMzQ2ODNlLzEvWEFiZ0wzeXZaZ09LTkFRamQxSzlUUDdwUjhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgtYmE0ZmMyMzQ2ODNl LzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHTBggrBgEFBQcBBwEB/wSBwzCBwDAYBAIAATASAwQABSwq AwQALYG5AwQAnRbwMIGjBAIAAjCBnDASAwcBKgUFQQECAwcBKgUFQQEIMBIDBwQq BQVBARADBwEqBQVBARgwEgMHACoFBUEBIQMHAyoFBUEBIAMHACoFBUEBKQMHACoF BUEBMTASAwcAKgUFQQEzAwcBKgUFQQE4AwcAKgUFQQFBAwcBKgUFQQFSMBIDBwEq BQVBAVYDBwEqBQVBAVgwEgMHBCoFBUEBcAMHACoFBUEBcjANBgkqhkiG9w0BAQsF AAOCAQEAnrWnucoa0TClQPlMu074GrYLJMC8/YEsa4nrT7VlOLKGEhJd15cG+8bb ePD/XOeJmDoXe9Q3aTZ8Ux+5LD4P/6dAIo7fxNYtW+jJO/KZEnOaNJIWWTvO8Pfu rkGHEFpB+0/0Qo9tCb9fEhM+Oo06E8QpqhAuMKarLhBvEFKoLaSAToYEKKAob6H6 AHjv920vIUf8MQEG3GlwcVGWFN7Azo4vkgTN9WPDUuoLW6BbzhBCm1appfgCc1VM JB4roNTk4J8tGLehelkb9tjqJOYq+lCenSfWGutvCLV740dshlZWRrBQqh1LJbyD 5ObpwOOcL8UrXzOdN+wXbrFHxN08DA== -----END CERTIFICATE-----Generated at Sun Jan 25 14:36:26 2026 by rpki-client