This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/X-4V7xzl5bM1v7YWDyF_SZW5lrc.roa File: X-4V7xzl5bM1v7YWDyF_SZW5lrc.roa (raw, json) Hash identifier: I3o7rUH/RKJK5k980x+148YLL5ZlqYblJvTvhEFHuDU= Subject key identifier: 5F:EE:15:EF:1C:E5:E5:B3:35:BF:B6:16:0F:21:7F:49:95:B9:96:B7 Certificate issuer: /CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d Certificate serial: 019B7F8006ACD29B065B56D2AE67513FE53A Authority key identifier: D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/X-4V7xzl5bM1v7YWDyF_SZW5lrc.roa Signing time: Fri 02 Jan 2026 16:17:35 +0000 ROA not before: Fri 02 Jan 2026 16:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201916 IP address blocks: 185.59.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.crl rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:06:ac:d2:9b:06:5b:56:d2:ae:67:51:3f:e5:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d Validity Not Before: Jan 2 16:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5fee15ef1ce5e5b335bfb6160f217f4995b996b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f9:53:2f:ee:97:53:f5:62:98:7f:15:eb:67: 32:74:03:77:0e:c5:7b:d3:60:b7:0f:95:bf:09:61: 39:2b:7d:c2:52:d5:4c:f8:56:d7:6c:99:1d:5a:d9: 11:75:c6:eb:96:50:bb:ee:11:7f:36:02:d8:f9:a8: 24:8a:de:12:d1:f1:0d:83:7c:d5:58:66:22:f8:c3: e4:6c:8c:88:19:68:da:2e:bb:d3:22:58:5b:ad:ee: e7:9f:bb:b3:fb:4d:11:35:0b:ad:67:b7:64:c1:db: 51:d7:65:f0:5c:f7:74:c5:fc:fb:72:6c:d5:26:6d: b4:b0:5c:32:ef:99:bb:7c:15:b6:8f:cb:1a:65:02: bb:21:9d:10:4c:5d:d2:55:1c:3a:7e:ba:22:d0:16: bc:de:17:39:61:cc:5a:db:e1:37:59:34:9e:99:54: a2:68:87:e0:ca:52:39:3f:77:f0:e0:42:f5:90:37: 69:9a:ab:10:d5:bd:f4:65:5c:69:ee:ea:17:3c:05: 34:7b:e1:b9:f4:40:1e:2a:c9:09:58:f9:2d:f5:e9: 58:45:c0:0a:08:8b:48:ea:11:9f:82:31:93:d0:08: ea:20:b4:39:3c:16:06:7a:f6:0c:a5:a3:69:f2:fd: b4:5f:de:43:91:1d:bb:54:6e:fd:00:ea:d8:49:97: c9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:EE:15:EF:1C:E5:E5:B3:35:BF:B6:16:0F:21:7F:49:95:B9:96:B7 X509v3 Authority Key Identifier: keyid:D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/X-4V7xzl5bM1v7YWDyF_SZW5lrc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.59.216.0/24 Signature Algorithm: sha256WithRSAEncryption 29:1f:58:39:9d:56:4c:b8:63:a6:fa:6d:28:d8:4e:76:2b:84: c6:71:44:ea:9d:5f:cf:43:3f:88:e7:1f:0c:5a:1c:89:25:33: 52:5f:ca:ff:16:65:2c:3c:b1:61:de:99:45:c2:81:65:a9:31: bf:d8:f9:a9:63:e8:a5:11:89:9f:40:84:d1:68:e8:57:f2:2e: 06:e0:df:fd:36:f8:b8:be:c9:b2:a1:88:c4:67:25:bb:65:7a: cc:15:69:b3:bf:c5:a9:dc:db:a5:2d:ae:e1:41:d5:87:63:82: e5:cb:cf:9f:a2:38:6a:59:9b:88:27:33:35:bf:e2:5a:11:57: f3:29:98:14:f3:df:6e:9f:d4:3c:91:1f:7f:bb:26:5d:55:1c: cb:df:bd:7a:fa:fc:d1:17:d2:d5:6a:29:0d:7a:39:0e:09:a7: 36:6f:41:4b:13:12:d9:07:0e:4e:6e:43:3d:8b:c0:6f:50:6f: 6e:60:41:c2:60:8c:13:58:69:a9:14:9c:9f:6c:b0:37:5e:db: 7b:b5:3e:45:80:a1:b7:cc:af:f9:56:17:38:e6:ee:10:d4:f7: cc:40:40:02:d9:9c:e2:4b:ec:5a:40:23:38:ae:c6:ba:04:96: 3e:c8:bc:58:f3:ef:ad:41:bc:43:42:9d:fa:7c:c8:9f:ff:57: 9a:8f:8e:c1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gAas0psGW1bSrmdRP+U6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZDFjZDQ3YTUzZWY1N2ViYjU2N2JjODgyYWQyOTg2ZmFh YzVmMGQwHhcNMjYwMTAyMTYxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmVlMTVlZjFjZTVlNWIzMzViZmI2MTYwZjIxN2Y0OTk1Yjk5NmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPlTL+6XU/VimH8V62cydAN3DsV7 02C3D5W/CWE5K33CUtVM+FbXbJkdWtkRdcbrllC77hF/NgLY+agkit4S0fENg3zV WGYi+MPkbIyIGWjaLrvTIlhbre7nn7uz+00RNQutZ7dkwdtR12XwXPd0xfz7cmzV Jm20sFwy75m7fBW2j8saZQK7IZ0QTF3SVRw6froi0Ba83hc5Ycxa2+E3WTSemVSi aIfgylI5P3fw4EL1kDdpmqsQ1b30ZVxp7uoXPAU0e+G59EAeKskJWPkt9elYRcAK CItI6hGfgjGT0AjqILQ5PBYGevYMpaNp8v20X95DkR27VG79AOrYSZfJ3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF/uFe8c5eWzNb+2Fg8hf0mVuZa3MB8GA1UdIwQY MBaAFNXRzUelPvV+u1Z7yIKtKYb6rF8NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWRITlI2VS05WDY3Vm52SWdxMHBodnFzWHcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS84NjE5NTMtNWY2NS00NDY1LTkwNDYt ZjRkMDcxZjUwZjFkLzEvWC00Vjd4emw1Yk0xdjdZV0R5Rl9TWlc1bHJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS84NjE5NTMtNWY2NS00NDY1LTkwNDYtZjRkMDcxZjUwZjFk LzEvMWRITlI2VS05WDY3Vm52SWdxMHBodnFzWHcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTvYMA0G CSqGSIb3DQEBCwUAA4IBAQApH1g5nVZMuGOm+m0o2E52K4TGcUTqnV/PQz+I5x8M WhyJJTNSX8r/FmUsPLFh3plFwoFlqTG/2PmpY+ilEYmfQITRaOhX8i4G4N/9Nvi4 vsmyoYjEZyW7ZXrMFWmzv8Wp3NulLa7hQdWHY4Lly8+fojhqWZuIJzM1v+JaEVfz KZgU899un9Q8kR9/uyZdVRzL3716+vzRF9LVaikNejkOCac2b0FLExLZBw5ObkM9 i8BvUG9uYEHCYIwTWGmpFJyfbLA3Xtt7tT5FgKG3zK/5Vhc45u4Q1PfMQEAC2Zzi S+xaQCM4rsa6BJY+yLxY8++tQbxDQp36fMif/1eaj47B -----END CERTIFICATE-----Generated at Sun Jan 25 17:28:10 2026 by rpki-client