This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/X-px4GWmWK1tHfFvvKVtq26BwGU.roa File: X-px4GWmWK1tHfFvvKVtq26BwGU.roa (raw, json) Hash identifier: 6QX4M7z5W3rR9rM25tOqLmJp7qyvUXKYcg9TkAAogtg= Subject key identifier: 5F:EA:71:E0:65:A6:58:AD:6D:1D:F1:6F:BC:A5:6D:AB:6E:81:C0:65 Certificate issuer: /CN=42d9ec5e228b4af7f03c345bc3967f51d6ff8a09 Certificate serial: 019B78A367704AABFD0ED8755E51669493A5 Authority key identifier: 42:D9:EC:5E:22:8B:4A:F7:F0:3C:34:5B:C3:96:7F:51:D6:FF:8A:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtnsXiKLSvfwPDRbw5Z_Udb_igk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/X-px4GWmWK1tHfFvvKVtq26BwGU.roa Signing time: Thu 01 Jan 2026 08:18:53 +0000 ROA not before: Thu 01 Jan 2026 08:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57707 IP address blocks: 171.25.220.0/23 maxlen: 32 171.25.222.0/24 maxlen: 32 2001:678:88c::/48 maxlen: 128 2a11:db80::/29 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.crl rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft rsync://rpki.ripe.net/repository/DEFAULT/QtnsXiKLSvfwPDRbw5Z_Udb_igk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:67:70:4a:ab:fd:0e:d8:75:5e:51:66:94:93:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42d9ec5e228b4af7f03c345bc3967f51d6ff8a09 Validity Not Before: Jan 1 08:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5fea71e065a658ad6d1df16fbca56dab6e81c065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:42:c1:ba:a3:31:8c:f6:5e:f5:c0:32:93:8d: 01:84:0a:ef:cc:74:63:dc:27:84:b9:bd:ca:70:99: 2a:9c:db:bb:5a:ca:c0:06:2b:4b:88:b8:d7:c6:ea: da:4c:84:04:b8:0c:39:92:53:54:17:7a:9b:37:16: 8d:ac:22:6c:ae:8d:b1:7d:22:ff:3c:3b:1e:71:d4: 78:4f:8b:17:da:9d:19:13:b5:51:31:e4:27:e5:ba: 6c:cb:32:5b:01:11:3f:e7:f3:58:2e:3d:85:bb:44: 4d:cf:ff:f3:40:f4:e0:4f:dc:1a:19:8d:f7:35:fb: 4d:3d:11:62:53:85:6e:25:bc:30:25:0f:9e:5e:24: 87:19:5b:d7:00:4f:ec:67:f2:77:4c:7a:a4:2e:c9: 05:63:c0:3b:d0:b3:28:86:09:eb:cf:2b:d3:b9:66: ac:28:c3:16:e5:54:04:c6:6c:d2:ac:20:5e:73:07: bd:d3:ba:b2:b6:9c:a9:01:75:88:dc:f1:f9:98:7a: 7b:13:32:70:97:1f:09:3c:90:80:15:16:2f:43:4e: 2e:14:34:8d:71:ff:0f:97:d0:71:cd:0a:dc:b5:ac: 50:ed:20:34:5e:a9:71:02:45:e9:5f:0b:c9:0a:45: 78:2b:da:74:2a:6a:d6:b5:9a:ca:ee:a3:bb:4c:7a: 27:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:EA:71:E0:65:A6:58:AD:6D:1D:F1:6F:BC:A5:6D:AB:6E:81:C0:65 X509v3 Authority Key Identifier: keyid:42:D9:EC:5E:22:8B:4A:F7:F0:3C:34:5B:C3:96:7F:51:D6:FF:8A:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtnsXiKLSvfwPDRbw5Z_Udb_igk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/X-px4GWmWK1tHfFvvKVtq26BwGU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 171.25.220.0-171.25.222.255 IPv6: 2001:678:88c::/48 2a11:db80::/29 Signature Algorithm: sha256WithRSAEncryption 8c:91:6c:0b:23:0e:cd:36:dd:0b:fd:dc:09:0e:48:ce:6a:aa: cd:7b:8d:dc:c3:96:04:be:78:2f:5b:0f:29:dd:15:d7:03:a3: a8:66:f5:ef:98:c2:d1:41:87:8d:f7:05:a7:00:6f:39:f6:ab: bb:58:44:ea:20:06:17:17:88:55:4a:c5:6f:bf:70:81:1e:45: f4:dd:4a:8d:75:3e:51:06:1e:dc:8b:37:8c:ab:7c:98:55:e1: 3f:6e:86:dd:fb:76:f5:df:0a:eb:c9:a1:62:24:b7:9e:c7:a9: 18:ee:fb:e7:26:6d:05:08:3d:82:a9:c0:6f:83:dc:eb:3e:0e: 91:7f:92:29:e7:69:16:29:43:c7:be:a1:f4:7a:a7:d3:dc:0d: 69:fd:ba:7f:1d:44:d5:16:9e:f7:5c:36:39:43:90:cd:7c:8d: 41:a5:97:b8:11:4d:18:8e:ae:8d:a9:4f:91:e7:0e:cc:1a:fd: 30:e5:34:7b:98:06:64:b8:9d:3a:da:d9:a5:83:ad:73:70:b5: d8:f2:df:fd:7c:11:ea:95:8d:d7:88:36:43:11:a2:45:f5:5e: 33:94:03:07:13:d7:14:59:fe:cb:b8:68:5b:da:b3:87:60:20: 25:34:c5:6d:c0:5d:31:6c:e7:51:41:16:d7:d4:77:a2:39:f3: 40:01:ac:29 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt4o2dwSqv9Dth1XlFmlJOlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZDllYzVlMjI4YjRhZjdmMDNjMzQ1YmMzOTY3ZjUxZDZm ZjhhMDkwHhcNMjYwMTAxMDgxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmVhNzFlMDY1YTY1OGFkNmQxZGYxNmZiY2E1NmRhYjZlODFjMDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsELBuqMxjPZe9cAyk40BhArvzHRj 3CeEub3KcJkqnNu7WsrABitLiLjXxuraTIQEuAw5klNUF3qbNxaNrCJsro2xfSL/ PDsecdR4T4sX2p0ZE7VRMeQn5bpsyzJbARE/5/NYLj2Fu0RNz//zQPTgT9waGY33 NftNPRFiU4VuJbwwJQ+eXiSHGVvXAE/sZ/J3THqkLskFY8A70LMohgnrzyvTuWas KMMW5VQExmzSrCBecwe907qytpypAXWI3PH5mHp7EzJwlx8JPJCAFRYvQ04uFDSN cf8Pl9BxzQrctaxQ7SA0XqlxAkXpXwvJCkV4K9p0KmrWtZrK7qO7THonhQIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFF/qceBlplitbR3xb7ylbatugcBlMB8GA1UdIwQY MBaAFELZ7F4ii0r38Dw0W8OWf1HW/4oJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXRuc1hpS0xTdmZ3UERSYnc1Wl9VZGJfaWdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9kZGUzNTEtNzlhMi00M2E0LTgxYjkt NmM5YjQ4YmRiZmU1LzEvWC1weDRHV21XSzF0SGZGdnZLVnRxMjZCd0dVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9kZGUzNTEtNzlhMi00M2E0LTgxYjktNmM5YjQ4YmRiZmU1 LzEvUXRuc1hpS0xTdmZ3UERSYnc1Wl9VZGJfaWdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAUBAIAATAOMAwDBAKrGdwD BACrGd4wFgQCAAIwEAMHACABBngIjAMFAyoR24AwDQYJKoZIhvcNAQELBQADggEB AIyRbAsjDs023Qv93AkOSM5qqs17jdzDlgS+eC9bDyndFdcDo6hm9e+YwtFBh433 BacAbzn2q7tYROogBhcXiFVKxW+/cIEeRfTdSo11PlEGHtyLN4yrfJhV4T9uht37 dvXfCuvJoWIkt57HqRju++cmbQUIPYKpwG+D3Os+DpF/kinnaRYpQ8e+ofR6p9Pc DWn9un8dRNUWnvdcNjlDkM18jUGll7gRTRiOro2pT5HnDswa/TDlNHuYBmS4nTra 2aWDrXNwtdjy3/18EeqVjdeINkMRokX1XjOUAwcT1xRZ/su4aFvas4dgICU0xW3A XTFs51FBFtfUd6I580ABrCk= -----END CERTIFICATE-----Generated at Sun Jan 25 22:31:37 2026 by rpki-client