This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/xA5S8Q23tn6kwPblMUVqVCh_On4.roa File: xA5S8Q23tn6kwPblMUVqVCh_On4.roa (raw, json) Hash identifier: AY00oeE2hfvtkb7ocOc5BNmCAA1HRh7fBrNBcjQAmbY= Subject key identifier: C4:0E:52:F1:0D:B7:B6:7E:A4:C0:F6:E5:31:45:6A:54:28:7F:3A:7E Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B7CEE591099A2EE757D40DD072A94F94F Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/xA5S8Q23tn6kwPblMUVqVCh_On4.roa Signing time: Fri 02 Jan 2026 04:19:13 +0000 ROA not before: Fri 02 Jan 2026 04:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47169 IP address blocks: 84.21.4.0/24 maxlen: 24 87.229.16.0/22 maxlen: 22 87.229.38.0/24 maxlen: 24 87.229.39.0/24 maxlen: 24 87.229.42.0/23 maxlen: 24 87.229.106.0/24 maxlen: 24 87.229.107.0/24 maxlen: 24 213.181.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:59:10:99:a2:ee:75:7d:40:dd:07:2a:94:f9:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Jan 2 04:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c40e52f10db7b67ea4c0f6e531456a54287f3a7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8c:12:98:24:5f:14:c5:27:fd:38:d2:93:6b: 67:03:7d:5b:61:6d:84:9a:e2:e0:3b:fb:b2:92:cb: 4a:4e:27:0b:3d:fb:38:f4:4f:88:5e:c1:0d:fd:75: 09:91:52:b2:88:4c:a4:ae:c6:bc:fa:b6:85:2d:45: ce:1b:02:9e:5f:cb:d9:10:07:a6:01:40:e3:b4:2e: 10:30:ae:84:11:e5:f6:5a:b1:eb:7a:b6:72:43:0b: 5a:00:b0:b8:91:8d:88:a5:1d:e8:0c:f4:30:91:42: d2:7d:09:6f:86:7a:59:3a:27:74:85:2f:44:ca:88: 74:50:0e:81:d1:73:eb:0e:d9:5a:a9:d5:8d:e9:29: 94:d3:08:49:07:51:6e:69:93:8f:91:37:72:fa:2f: 6b:ff:c0:e9:78:d9:18:29:53:69:15:b8:07:52:28: 05:5b:9e:81:e6:eb:9a:86:ce:65:ec:70:3d:50:db: 78:aa:57:16:be:80:a5:96:a2:50:9e:ac:67:19:0b: 26:9f:30:a9:79:11:33:51:97:29:1d:68:6c:1d:e5: fd:29:94:63:05:e6:c0:b9:35:ed:8a:89:7e:2a:d7: 11:21:df:43:6a:f1:e5:ae:13:8a:11:e1:85:e5:46: d1:75:4f:16:c0:80:b4:1d:62:6a:c1:64:be:26:64: 86:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:0E:52:F1:0D:B7:B6:7E:A4:C0:F6:E5:31:45:6A:54:28:7F:3A:7E X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/xA5S8Q23tn6kwPblMUVqVCh_On4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.21.4.0/24 87.229.16.0/22 87.229.38.0/23 87.229.42.0/23 87.229.106.0/23 213.181.212.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:e8:1d:2a:0e:ab:52:39:7b:d5:87:54:27:f0:59:e9:b2:a3: 39:83:a3:93:09:f1:04:30:a0:ed:13:a7:c6:7e:97:89:f7:ca: 46:12:27:6c:5d:7e:c8:e0:ce:16:b9:cc:28:b8:af:31:da:b8: af:65:53:26:00:f6:47:8b:63:5a:d3:56:ea:79:4b:38:34:29: 37:b9:a4:f8:26:76:5a:b4:9e:c4:66:22:df:ba:d6:79:b6:a2: 56:03:d9:bf:7a:40:1f:3a:e8:88:21:3f:50:06:20:ed:10:92: e6:28:dd:b6:f5:82:cc:ee:e2:29:f6:54:09:6e:25:51:70:63: 8b:e5:47:6a:c1:d3:12:89:67:96:73:e7:c4:d5:6a:2b:10:d8: 51:48:97:33:b1:34:99:b2:08:2b:d4:e8:d8:c9:8b:cb:a8:e3: 7e:c9:ed:a2:70:df:14:f4:a7:64:ab:ff:32:c5:28:10:51:c4: 77:2b:34:13:be:6d:fa:2b:ef:ab:86:e4:9d:e3:1d:4b:0a:e5: ce:bb:0d:69:dd:a3:bb:9d:e3:0d:29:c0:01:31:0e:8b:1f:f6: ee:a1:fa:ee:3b:19:6a:5b:38:10:9a:e3:97:1b:e9:d7:ca:bc: c2:b5:da:46:df:ba:78:36:16:ba:5d:4f:24:ea:b2:02:ac:c7: 22:10:3d:f1 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt87lkQmaLudX1A3QcqlPlPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjYwMTAyMDQxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDBlNTJmMTBkYjdiNjdlYTRjMGY2ZTUzMTQ1NmE1NDI4N2YzYTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYwSmCRfFMUn/TjSk2tnA31bYW2E muLgO/uykstKTicLPfs49E+IXsEN/XUJkVKyiEykrsa8+raFLUXOGwKeX8vZEAem AUDjtC4QMK6EEeX2WrHrerZyQwtaALC4kY2IpR3oDPQwkULSfQlvhnpZOid0hS9E yoh0UA6B0XPrDtlaqdWN6SmU0whJB1FuaZOPkTdy+i9r/8DpeNkYKVNpFbgHUigF W56B5uuahs5l7HA9UNt4qlcWvoCllqJQnqxnGQsmnzCpeREzUZcpHWhsHeX9KZRj BebAuTXtiol+KtcRId9DavHlrhOKEeGF5UbRdU8WwIC0HWJqwWS+JmSGfwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFMQOUvENt7Z+pMD25TFFalQofzp+MB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEveEE1UzhRMjN0bjZrd1BibE1VVnFWQ2hfT240LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAVBUEAwQC V+UQAwQBV+UmAwQBV+UqAwQBV+VqAwQA1bXUMA0GCSqGSIb3DQEBCwUAA4IBAQAe 6B0qDqtSOXvVh1Qn8FnpsqM5g6OTCfEEMKDtE6fGfpeJ98pGEidsXX7I4M4Wucwo uK8x2rivZVMmAPZHi2Na01bqeUs4NCk3uaT4JnZatJ7EZiLfutZ5tqJWA9m/ekAf OuiIIT9QBiDtEJLmKN229YLM7uIp9lQJbiVRcGOL5UdqwdMSiWeWc+fE1WorENhR SJczsTSZsggr1OjYyYvLqON+ye2icN8U9Kdkq/8yxSgQUcR3KzQTvm36K++rhuSd 4x1LCuXOuw1p3aO7neMNKcABMQ6LH/buofruOxlqWzgQmuOXG+nXyrzCtdpG37p4 Nha6XU8k6rICrMciED3x -----END CERTIFICATE-----Generated at Sun Jan 25 07:16:57 2026 by rpki-client