This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/XvpIxax5LoOTMUOJKo6zJ6-LPpQ.roa File: XvpIxax5LoOTMUOJKo6zJ6-LPpQ.roa (raw, json) Hash identifier: xd4ZIb6AXuHRZkUUIhsSqoc8RpLfQOFfY2snegwSNbM= Subject key identifier: 5E:FA:48:C5:AC:79:2E:83:93:31:43:89:2A:8E:B3:27:AF:8B:3E:94 Certificate issuer: /CN=918901662a8ec5ff4d3f48d29099230a0575ec8a Certificate serial: 019B7D5C08723ED14270DBA36D92E8C1BB25 Authority key identifier: 91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/XvpIxax5LoOTMUOJKo6zJ6-LPpQ.roa Signing time: Fri 02 Jan 2026 06:19:02 +0000 ROA not before: Fri 02 Jan 2026 06:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39402 IP address blocks: 185.128.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.crl rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:08:72:3e:d1:42:70:db:a3:6d:92:e8:c1:bb:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=918901662a8ec5ff4d3f48d29099230a0575ec8a Validity Not Before: Jan 2 06:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5efa48c5ac792e83933143892a8eb327af8b3e94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9d:8b:46:f6:79:39:dc:6e:9f:2c:03:00:df: 17:e6:e7:4d:2f:95:12:6d:97:54:bc:fe:de:d6:c2: 28:0d:e8:99:14:e4:2a:b5:78:0a:41:54:56:03:7d: 1d:2b:be:36:af:90:7c:a7:76:7d:f3:66:d4:aa:a7: 7f:3c:1f:3a:7a:4c:92:c1:21:93:1c:a0:1f:3b:15: c7:1a:f3:59:f0:21:01:7e:e4:eb:f1:af:3a:85:98: dc:46:91:cd:5f:1b:58:44:74:b8:0a:a6:b8:b7:4a: 9d:5f:77:7d:c5:2d:ab:8f:a7:48:11:32:59:e5:0b: 37:17:f0:c3:92:af:94:4c:53:05:58:8c:c9:7f:40: f5:b1:59:1e:82:72:f7:91:e6:ca:3d:d6:d6:16:a4: e7:eb:fd:08:e0:27:b5:48:13:f7:53:a5:cc:24:8c: 5c:a9:c1:e0:cb:80:2a:12:85:b8:df:47:69:f7:96: 0d:1a:d8:c4:18:31:e7:f0:a1:02:1c:46:87:b1:46: 6b:e8:73:8e:fa:32:47:a7:a4:bf:f2:14:6d:d5:b0: 3a:bb:95:3d:7a:55:8c:c3:41:68:8b:e6:b4:76:60: 14:3f:db:44:19:fd:cd:36:27:5e:0c:c8:33:72:65: af:e4:98:5a:8e:6c:d5:cf:eb:d5:af:05:6e:cd:d0: 11:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:FA:48:C5:AC:79:2E:83:93:31:43:89:2A:8E:B3:27:AF:8B:3E:94 X509v3 Authority Key Identifier: keyid:91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/XvpIxax5LoOTMUOJKo6zJ6-LPpQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.128.124.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:95:65:4a:40:4a:0d:67:8d:f3:6e:3b:e1:02:f3:ff:64:21: 79:71:4d:16:59:c4:2a:85:d0:c5:3a:ce:91:55:51:d1:1d:8d: 5b:a8:a9:77:e4:46:b7:64:4a:f6:0e:2d:b1:84:f9:31:c6:91: 8e:77:67:24:27:0d:b7:41:f1:fb:39:88:33:26:26:ca:be:5c: 91:43:23:3e:75:0c:23:93:9b:b5:44:dc:5b:ee:f8:9b:fc:af: 69:e6:cd:38:a9:db:5c:de:98:18:05:71:16:b8:ed:d5:1b:ab: 75:43:4a:54:70:f6:d5:a8:a7:fd:bf:b1:69:0c:f8:86:cd:2c: 3a:71:55:e1:15:56:07:52:f3:a3:ac:81:2f:67:a5:35:93:66: 06:1e:0b:be:84:71:eb:82:08:b4:56:ca:42:69:d9:db:63:b4: 4f:0d:dd:0c:23:d4:f0:69:2e:30:a2:bd:1a:b5:e2:62:97:d6: c7:69:bc:32:33:da:5b:39:c7:81:c4:36:35:65:6e:07:e7:4e: 70:dc:1a:a5:2f:83:23:96:f4:3d:ff:39:78:53:9a:43:41:e0: ce:b8:b5:f4:8f:bb:9b:41:92:c2:a9:a0:c3:08:a0:33:07:e3: 0b:08:ca:64:45:3c:5f:f2:b6:b2:64:2d:3b:c6:3c:c4:97:ee: 6e:6d:98:3d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XAhyPtFCcNujbZLowbslMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxODkwMTY2MmE4ZWM1ZmY0ZDNmNDhkMjkwOTkyMzBhMDU3 NWVjOGEwHhcNMjYwMTAyMDYxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZWZhNDhjNWFjNzkyZTgzOTMzMTQzODkyYThlYjMyN2FmOGIzZTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy52LRvZ5OdxunywDAN8X5udNL5US bZdUvP7e1sIoDeiZFOQqtXgKQVRWA30dK742r5B8p3Z982bUqqd/PB86ekySwSGT HKAfOxXHGvNZ8CEBfuTr8a86hZjcRpHNXxtYRHS4Cqa4t0qdX3d9xS2rj6dIETJZ 5Qs3F/DDkq+UTFMFWIzJf0D1sVkegnL3kebKPdbWFqTn6/0I4Ce1SBP3U6XMJIxc qcHgy4AqEoW430dp95YNGtjEGDHn8KECHEaHsUZr6HOO+jJHp6S/8hRt1bA6u5U9 elWMw0Foi+a0dmAUP9tEGf3NNideDMgzcmWv5JhajmzVz+vVrwVuzdARqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF76SMWseS6DkzFDiSqOsyeviz6UMB8GA1UdIwQY MBaAFJGJAWYqjsX/TT9I0pCZIwoFdeyKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1lrQlppcU94ZjlOUDBqU2tKa2pDZ1YxN0lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC81YjkyYTctMjgzNy00NjllLTgyMTQt ZTgxMWUyM2MxODA0LzEvWHZwSXhheDVMb09UTVVPSktvNnpKNi1MUHBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC81YjkyYTctMjgzNy00NjllLTgyMTQtZTgxMWUyM2MxODA0 LzEva1lrQlppcU94ZjlOUDBqU2tKa2pDZ1YxN0lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYB8MA0G CSqGSIb3DQEBCwUAA4IBAQCOlWVKQEoNZ43zbjvhAvP/ZCF5cU0WWcQqhdDFOs6R VVHRHY1bqKl35Ea3ZEr2Di2xhPkxxpGOd2ckJw23QfH7OYgzJibKvlyRQyM+dQwj k5u1RNxb7vib/K9p5s04qdtc3pgYBXEWuO3VG6t1Q0pUcPbVqKf9v7FpDPiGzSw6 cVXhFVYHUvOjrIEvZ6U1k2YGHgu+hHHrggi0VspCadnbY7RPDd0MI9TwaS4wor0a teJil9bHabwyM9pbOceBxDY1ZW4H505w3BqlL4MjlvQ9/zl4U5pDQeDOuLX0j7ub QZLCqaDDCKAzB+MLCMpkRTxf8rayZC07xjzEl+5ubZg9 -----END CERTIFICATE-----Generated at Sun Jan 25 20:29:43 2026 by rpki-client