This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/Xk5XLLpJTJ0en8K-haNjI8W7sqA.roa File: Xk5XLLpJTJ0en8K-haNjI8W7sqA.roa (raw, json) Hash identifier: dyeK7boJ0LjO1L8yQnVoytvIo19PRNiRm/STwxfeu9A= Subject key identifier: 5E:4E:57:2C:BA:49:4C:9D:1E:9F:C2:BE:85:A3:63:23:C5:BB:B2:A0 Certificate issuer: /CN=5503251db69693362a927e2b130467945c54f0fc Certificate serial: 019B76EAD09070B4D38EE0F6877E5C2220F5 Authority key identifier: 55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/Xk5XLLpJTJ0en8K-haNjI8W7sqA.roa Signing time: Thu 01 Jan 2026 00:17:38 +0000 ROA not before: Thu 01 Jan 2026 00:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212441 IP address blocks: 185.244.180.0/24 maxlen: 24 185.244.181.0/24 maxlen: 24 185.244.182.0/24 maxlen: 24 185.244.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:d0:90:70:b4:d3:8e:e0:f6:87:7e:5c:22:20:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5503251db69693362a927e2b130467945c54f0fc Validity Not Before: Jan 1 00:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e4e572cba494c9d1e9fc2be85a36323c5bbb2a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a7:9e:4b:eb:fd:32:58:8f:1e:a2:55:e2:81: 67:48:dc:fb:35:84:c0:07:1f:fd:d6:bf:8c:4c:66: 14:1a:3a:8a:b2:4a:76:6f:a5:ff:67:8a:4e:2e:af: 89:44:05:88:86:c0:1a:b3:a0:fe:7a:d2:dc:27:d5: 50:54:ac:68:db:c8:42:57:71:7b:ca:32:2e:e2:6f: 48:1d:18:1c:c8:6e:ab:24:62:0e:1b:24:6d:fc:0d: 68:35:48:43:1d:24:fd:56:dd:46:26:c4:f6:16:cf: a5:72:db:1f:16:58:82:0e:e9:c8:99:df:1a:90:db: 73:45:dd:f5:43:7b:74:68:ea:26:8d:67:13:09:d8: 35:98:81:b3:a1:0e:b2:34:60:8b:de:c3:41:5e:85: a7:ce:94:73:2d:dc:a6:ad:e2:1a:88:e6:34:a6:ec: 20:3a:5b:84:38:4c:ec:7f:c8:72:f4:06:a6:70:e4: 28:d5:c0:43:91:45:5c:ae:c1:86:35:d3:55:7a:d5: 59:b0:32:7b:44:5d:bb:f8:cc:dc:67:82:7b:af:08: e3:58:3b:e7:f8:64:3d:4d:0a:b6:cb:38:1d:c2:29: ef:92:99:8e:cd:92:51:d1:a7:d5:93:a5:b6:48:db: 17:5e:d0:21:15:63:68:ab:43:f6:01:5e:a7:15:c8: ab:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:4E:57:2C:BA:49:4C:9D:1E:9F:C2:BE:85:A3:63:23:C5:BB:B2:A0 X509v3 Authority Key Identifier: keyid:55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/Xk5XLLpJTJ0en8K-haNjI8W7sqA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.244.180.0/22 Signature Algorithm: sha256WithRSAEncryption 20:ac:9a:63:69:b0:33:4a:e4:a9:90:20:72:c6:6e:5f:ce:f6: 05:4b:4f:86:56:c8:6b:ab:a5:8a:41:6d:07:e9:e0:7d:43:16: 76:8c:47:1e:31:27:df:ac:33:bb:f0:c9:a2:bc:57:0c:b7:50: 3e:9e:7e:eb:80:a2:52:22:a7:3c:67:33:88:cf:3a:71:4f:b6: b2:fb:53:ac:53:20:ab:19:84:c5:ae:40:56:46:1b:a4:f7:88: c3:97:3e:c2:90:ac:5f:36:82:ff:cd:8c:b8:b0:12:4a:86:9c: f8:d1:ee:d5:7e:67:61:3e:fd:98:86:8b:09:d4:d0:a7:75:15: a9:f5:c7:ff:1d:11:50:aa:a5:59:80:ec:1e:82:6b:ef:57:10: 5c:6b:12:19:b2:a0:aa:1c:a3:02:b7:24:13:e8:5f:18:38:06: 94:9b:84:d9:1a:64:78:60:01:bc:2b:42:d5:69:df:50:25:a4: 05:4a:86:cb:a6:d5:de:14:01:77:47:f0:d3:02:b5:e1:a9:74: 5e:68:b8:ee:0a:f0:d5:93:bf:53:39:c4:2d:e7:6a:6d:ae:7e: 1d:45:08:34:3d:36:9b:f9:c7:83:47:29:a8:49:9c:36:aa:c6: c2:55:e0:35:4d:fa:ad:f3:63:48:3f:b0:31:1b:82:31:66:52: 05:76:d9:61 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26tCQcLTTjuD2h35cIiD1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1MDMyNTFkYjY5NjkzMzYyYTkyN2UyYjEzMDQ2Nzk0NWM1 NGYwZmMwHhcNMjYwMTAxMDAxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTRlNTcyY2JhNDk0YzlkMWU5ZmMyYmU4NWEzNjMyM2M1YmJiMmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqeeS+v9MliPHqJV4oFnSNz7NYTA Bx/91r+MTGYUGjqKskp2b6X/Z4pOLq+JRAWIhsAas6D+etLcJ9VQVKxo28hCV3F7 yjIu4m9IHRgcyG6rJGIOGyRt/A1oNUhDHST9Vt1GJsT2Fs+lctsfFliCDunImd8a kNtzRd31Q3t0aOomjWcTCdg1mIGzoQ6yNGCL3sNBXoWnzpRzLdymreIaiOY0puwg OluEOEzsf8hy9AamcOQo1cBDkUVcrsGGNdNVetVZsDJ7RF27+MzcZ4J7rwjjWDvn +GQ9TQq2yzgdwinvkpmOzZJR0afVk6W2SNsXXtAhFWNoq0P2AV6nFciruQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF5OVyy6SUydHp/CvoWjYyPFu7KgMB8GA1UdIwQY MBaAFFUDJR22lpM2KpJ+KxMEZ5RcVPD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlFNbEhiYVdrellxa240ckV3Um5sRnhVOFB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jN2I5ZGMtN2FjNi00YWNhLWE0M2It M2NiYWQ1YjkwNGI1LzEvWGs1WExMcEpUSjBlbjhLLWhhTmpJOFc3c3FBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9jN2I5ZGMtN2FjNi00YWNhLWE0M2ItM2NiYWQ1YjkwNGI1 LzEvVlFNbEhiYVdrellxa240ckV3Um5sRnhVOFB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufS0MA0G CSqGSIb3DQEBCwUAA4IBAQAgrJpjabAzSuSpkCByxm5fzvYFS0+GVshrq6WKQW0H 6eB9QxZ2jEceMSffrDO78MmivFcMt1A+nn7rgKJSIqc8ZzOIzzpxT7ay+1OsUyCr GYTFrkBWRhuk94jDlz7CkKxfNoL/zYy4sBJKhpz40e7VfmdhPv2YhosJ1NCndRWp 9cf/HRFQqqVZgOwegmvvVxBcaxIZsqCqHKMCtyQT6F8YOAaUm4TZGmR4YAG8K0LV ad9QJaQFSobLptXeFAF3R/DTArXhqXReaLjuCvDVk79TOcQt52ptrn4dRQg0PTab +ceDRymoSZw2qsbCVeA1Tfqt82NIP7AxG4IxZlIFdtlh -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:35 2026 by rpki-client