This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/XOOM-dH84H7UxsX_I1xUFD2MCiU.roa File: XOOM-dH84H7UxsX_I1xUFD2MCiU.roa (raw, json) Hash identifier: yF0/ZzZszM6k3jBSRxWniYaHE+/EQQL9gELNFRwQiJ0= Subject key identifier: 5C:E3:8C:F9:D1:FC:E0:7E:D4:C6:C5:FF:23:5C:54:14:3D:8C:0A:25 Certificate issuer: /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa Certificate serial: 019B7F151C72FD42C1273C0B7A7B98EF1997 Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/XOOM-dH84H7UxsX_I1xUFD2MCiU.roa Signing time: Fri 02 Jan 2026 14:20:48 +0000 ROA not before: Fri 02 Jan 2026 14:20:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35680 IP address blocks: 77.120.96.0/22 maxlen: 22 77.120.100.0/22 maxlen: 22 77.120.104.0/22 maxlen: 22 77.120.108.0/22 maxlen: 22 77.120.112.0/22 maxlen: 22 77.120.116.0/22 maxlen: 22 77.120.120.0/22 maxlen: 22 77.120.124.0/22 maxlen: 22 77.123.128.0/22 maxlen: 22 77.123.132.0/22 maxlen: 22 77.123.136.0/22 maxlen: 22 77.123.140.0/22 maxlen: 22 77.123.144.0/22 maxlen: 22 77.123.148.0/22 maxlen: 22 77.123.152.0/22 maxlen: 22 77.123.156.0/22 maxlen: 22 82.144.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:1c:72:fd:42:c1:27:3c:0b:7a:7b:98:ef:19:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa Validity Not Before: Jan 2 14:20:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ce38cf9d1fce07ed4c6c5ff235c54143d8c0a25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:80:a4:4e:e5:60:3d:9e:07:b0:6d:67:a0:5e: ee:17:eb:db:c3:c1:45:d3:23:47:30:71:fa:80:f3: b6:cb:6d:9b:6a:fd:36:f5:38:b8:f5:6c:75:e5:1b: f1:82:e3:d9:32:10:6e:b2:22:bc:b0:d7:d5:9c:16: 8a:3e:02:06:f6:77:47:5b:b9:eb:19:25:bf:8e:54: ff:09:f5:09:a8:76:f4:10:72:42:a8:fd:f7:c9:4d: 74:ce:d5:42:c1:8f:0d:9c:be:ea:10:42:08:66:dd: 41:02:cf:48:61:e8:5f:ab:d7:b1:56:22:9c:a9:d5: e8:b0:af:4b:97:52:0e:4e:5d:52:dc:b8:d1:0e:5a: 09:53:8d:74:f2:1f:62:dd:b2:26:d5:fc:95:4d:23: 19:28:af:54:37:5f:09:11:5a:45:50:e0:ba:39:26: 6d:ce:bc:49:5e:93:19:d6:5c:01:5f:75:76:d5:21: 65:cc:83:5f:7b:3a:48:2d:db:5d:a2:b2:76:e0:a6: 20:15:c5:c4:0e:15:29:97:44:1e:27:40:93:ff:29: a1:ed:96:50:d1:9f:a5:a1:9f:53:14:ce:f0:46:25: 5f:ba:e4:09:94:0a:11:02:27:9d:3e:a5:01:38:a0: 81:ec:49:68:36:00:c5:f3:68:4d:cf:0e:d3:8a:4a: a5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E3:8C:F9:D1:FC:E0:7E:D4:C6:C5:FF:23:5C:54:14:3D:8C:0A:25 X509v3 Authority Key Identifier: keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/XOOM-dH84H7UxsX_I1xUFD2MCiU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.120.96.0/19 77.123.128.0/19 82.144.220.0/22 Signature Algorithm: sha256WithRSAEncryption 5b:1f:17:3b:c1:36:c6:31:44:65:6b:aa:f9:dd:62:f6:da:7d: 07:0e:59:ca:7c:ab:d9:f6:a5:27:40:61:0a:34:5c:95:df:44: 6e:a1:69:9f:1b:8b:58:fc:4d:fd:9e:90:e4:ee:da:47:fb:d4: 89:1e:56:79:45:45:3a:c8:d1:4f:08:1b:ac:16:9b:94:02:ec: a4:14:a2:7a:3a:6a:37:c1:c5:d7:e9:d1:bb:50:74:53:3e:3d: 48:5d:fb:6b:d5:a0:04:a5:e6:a0:9c:6d:04:3f:74:5d:c0:88: 20:39:3f:fb:6f:76:53:d1:df:9f:74:cb:4d:48:8a:53:87:00: 96:67:fb:76:14:ee:bb:8f:ca:e0:d7:6f:42:a2:db:6f:3c:11: c5:5c:ba:33:43:b8:35:fd:4a:76:61:98:27:ef:ca:26:84:b5: f2:af:9a:ae:bc:c1:5f:97:9b:8f:83:04:56:0c:be:9e:2e:a8: 54:30:0e:3d:17:3e:d8:37:98:72:d9:e5:b3:8c:58:52:a1:ab: 77:59:a6:5d:30:86:d7:0a:06:1f:72:a1:ea:04:5f:80:fd:73: 52:b5:a9:4b:75:55:08:d3:13:a4:d0:17:b9:95:54:ee:d6:ce: 0f:ac:2f:a0:29:6a:62:cc:f0:4f:8a:a2:d8:00:af:4b:97:16: 63:16:c3:6a -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/FRxy/ULBJzwLenuY7xmXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkNWVkYTBhMWU3NDc5YzRjYTc4ZmU0MWM1OGQxN2U5ZDEz YjY3YWEwHhcNMjYwMTAyMTQyMDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2UzOGNmOWQxZmNlMDdlZDRjNmM1ZmYyMzVjNTQxNDNkOGMwYTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYCkTuVgPZ4HsG1noF7uF+vbw8FF 0yNHMHH6gPO2y22bav029Ti49Wx15RvxguPZMhBusiK8sNfVnBaKPgIG9ndHW7nr GSW/jlT/CfUJqHb0EHJCqP33yU10ztVCwY8NnL7qEEIIZt1BAs9IYehfq9exViKc qdXosK9Ll1IOTl1S3LjRDloJU4108h9i3bIm1fyVTSMZKK9UN18JEVpFUOC6OSZt zrxJXpMZ1lwBX3V21SFlzINfezpILdtdorJ24KYgFcXEDhUpl0QeJ0CT/ymh7ZZQ 0Z+loZ9TFM7wRiVfuuQJlAoRAiedPqUBOKCB7EloNgDF82hNzw7Tikql6QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFzjjPnR/OB+1MbF/yNcVBQ9jAolMB8GA1UdIwQY MBaAFK1e2goedHnEynj+QcWNF+nRO2eqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclY3YUNoNTBlY1RLZVA1QnhZMFg2ZEU3WjZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9mZWJiMTgtZTc4YS00ZDEyLTgwYTIt OTQ0Y2U3ZWViMTU0LzEvWE9PTS1kSDg0SDdVeHNYX0kxeFVGRDJNQ2lVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9mZWJiMTgtZTc4YS00ZDEyLTgwYTItOTQ0Y2U3ZWViMTU0 LzEvclY3YUNoNTBlY1RLZVA1QnhZMFg2ZEU3WjZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQFTXhgAwQF TXuAAwQCUpDcMA0GCSqGSIb3DQEBCwUAA4IBAQBbHxc7wTbGMURla6r53WL22n0H DlnKfKvZ9qUnQGEKNFyV30RuoWmfG4tY/E39npDk7tpH+9SJHlZ5RUU6yNFPCBus FpuUAuykFKJ6Omo3wcXX6dG7UHRTPj1IXftr1aAEpeagnG0EP3RdwIggOT/7b3ZT 0d+fdMtNSIpThwCWZ/t2FO67j8rg129CottvPBHFXLozQ7g1/Up2YZgn78omhLXy r5quvMFfl5uPgwRWDL6eLqhUMA49Fz7YN5hy2eWzjFhSoat3WaZdMIbXCgYfcqHq BF+A/XNStalLdVUI0xOk0Be5lVTu1s4PrC+gKWpizPBPiqLYAK9LlxZjFsNq -----END CERTIFICATE-----Generated at Mon Jan 26 05:14:55 2026 by rpki-client