This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/XonmnFu_hl5fLd1NFTkRdlszSzs.roa File: XonmnFu_hl5fLd1NFTkRdlszSzs.roa (raw, json) Hash identifier: nis1JSWNkVlYV4JdLmei0R+V1a6IX6+JXGHy2zIU2ZA= Subject key identifier: 5E:89:E6:9C:5B:BF:86:5E:5F:2D:DD:4D:15:39:11:76:5B:33:4B:3B Certificate issuer: /CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30 Certificate serial: 019B7EA457F7C965C6E05374C537799A1CD9 Authority key identifier: 50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/XonmnFu_hl5fLd1NFTkRdlszSzs.roa Signing time: Fri 02 Jan 2026 12:17:38 +0000 ROA not before: Fri 02 Jan 2026 12:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8561 IP address blocks: 185.119.136.0/22 maxlen: 24 194.77.54.0/23 maxlen: 23 195.253.64.0/24 maxlen: 24 195.253.66.0/24 maxlen: 24 195.253.74.0/24 maxlen: 24 195.253.88.0/21 maxlen: 24 195.253.96.0/19 maxlen: 24 2a01:5b0:3::/48 maxlen: 48 2a01:5b0:4::/48 maxlen: 48 2a01:5b0:6::/48 maxlen: 48 2a01:5b0:8::/46 maxlen: 48 2a01:5b0:d::/48 maxlen: 48 2a01:5b0:10::/45 maxlen: 48 2a01:5b0:20::/43 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:57:f7:c9:65:c6:e0:53:74:c5:37:79:9a:1c:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30 Validity Not Before: Jan 2 12:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e89e69c5bbf865e5f2ddd4d153911765b334b3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:84:83:59:22:6d:9e:33:17:dc:98:25:a2:17: 9f:4c:d1:17:d4:ed:ea:4e:76:f1:b0:72:50:b5:55: bc:d8:43:cb:d7:fb:ed:7f:29:c3:fb:a8:a8:3a:08: bf:a9:39:a6:a5:4d:a4:d8:47:75:91:7f:69:7f:78: db:d0:17:89:91:91:2c:7e:8c:86:f0:67:1f:ba:50: 61:11:a6:97:ac:81:59:4c:71:57:a3:5e:b4:4c:ad: 00:19:7e:4a:e1:8b:01:b5:1b:ec:55:25:b9:01:cb: 71:8e:7d:74:ad:70:c1:84:93:6a:4c:f2:88:37:15: b8:2d:66:11:60:2e:b3:ba:c9:61:16:23:e8:1f:96: 64:39:63:91:e6:da:fa:bb:a1:f1:13:01:eb:e9:89: 68:5c:29:81:44:e1:fd:af:32:15:d8:be:0a:1d:a4: 20:43:45:81:4d:4d:8f:a6:30:ef:28:8c:ad:d1:fb: b4:59:e6:48:d4:53:5a:27:ae:fd:48:a0:87:23:10: 0d:73:be:61:5e:a7:42:fb:f6:d5:6a:99:2e:ca:a6: 21:f7:fc:a4:ac:86:84:14:93:b6:73:94:3d:4d:45: df:71:d5:92:54:0e:5d:8e:c0:92:5a:3c:df:74:bd: 66:d9:64:c2:b9:4e:37:3c:d9:ab:72:e7:59:e3:59: 5a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:89:E6:9C:5B:BF:86:5E:5F:2D:DD:4D:15:39:11:76:5B:33:4B:3B X509v3 Authority Key Identifier: keyid:50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/XonmnFu_hl5fLd1NFTkRdlszSzs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.119.136.0/22 194.77.54.0/23 195.253.64.0/24 195.253.66.0/24 195.253.74.0/24 195.253.88.0-195.253.127.255 IPv6: 2a01:5b0:3::-2a01:5b0:4:ffff:ffff:ffff:ffff:ffff 2a01:5b0:6::/48 2a01:5b0:8::/46 2a01:5b0:d::/48 2a01:5b0:10::/45 2a01:5b0:20::/43 Signature Algorithm: sha256WithRSAEncryption 40:47:f0:f6:05:92:1f:16:db:cf:e9:b2:4a:a8:d3:b3:9d:ed: 8f:39:e4:e6:b1:a9:97:44:1b:39:be:ce:80:8a:45:c2:a6:20: 53:71:17:46:25:d9:f2:65:d9:37:77:b5:be:6c:b5:66:31:8c: 58:9c:ab:ca:36:12:d4:76:41:0b:48:a3:4b:f7:2f:ad:32:e1: 76:fe:fd:22:0e:d9:d7:50:10:df:3a:f0:d1:36:9a:85:16:04: e5:b6:5e:f8:10:0d:4b:69:51:93:6e:5c:11:5b:be:34:a3:65: 6d:d6:07:fa:bf:fe:7b:d9:77:47:00:60:b0:a6:25:a6:96:a0: cf:01:f8:5b:b2:d8:5f:0d:88:05:f4:18:15:e1:9e:51:ac:7f: 48:7d:65:4a:c3:39:79:34:55:60:00:9e:e3:24:01:69:f7:ae: 34:f3:81:0a:4b:7c:45:ea:cd:e7:d6:2e:fd:eb:93:69:c1:bb: ff:2b:a5:2a:be:b7:5f:b5:c4:33:cd:19:8b:2d:30:7b:e1:84: c0:cc:75:77:3c:9d:cb:f2:44:ac:0f:fd:1b:cb:a4:d9:9d:9d: 0e:ca:bd:b4:a8:f7:61:4b:5e:7a:28:f4:38:cc:f4:61:d6:96: c9:33:f9:8b:2d:9c:e9:8f:94:7c:e5:5f:ed:ec:f0:47:f6:97: 34:a0:f2:df -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgISAZt+pFf3yWXG4FN0xTd5mhzZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwYzFlNDI2ZjU4ZTQyYWUzMGU1NmNkYjdmZjRkOGY5ZGRk ODViMzAwHhcNMjYwMTAyMTIxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTg5ZTY5YzViYmY4NjVlNWYyZGRkNGQxNTM5MTE3NjViMzM0YjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YSDWSJtnjMX3JglohefTNEX1O3q TnbxsHJQtVW82EPL1/vtfynD+6ioOgi/qTmmpU2k2Ed1kX9pf3jb0BeJkZEsfoyG 8GcfulBhEaaXrIFZTHFXo160TK0AGX5K4YsBtRvsVSW5Actxjn10rXDBhJNqTPKI NxW4LWYRYC6zuslhFiPoH5ZkOWOR5tr6u6HxEwHr6YloXCmBROH9rzIV2L4KHaQg Q0WBTU2PpjDvKIyt0fu0WeZI1FNaJ679SKCHIxANc75hXqdC+/bVapkuyqYh9/yk rIaEFJO2c5Q9TUXfcdWSVA5djsCSWjzfdL1m2WTCuU43PNmrcudZ41laJQIDAQAB o4ICeTCCAnUwHQYDVR0OBBYEFF6J5pxbv4ZeXy3dTRU5EXZbM0s7MB8GA1UdIwQY MBaAFFDB5Cb1jkKuMOVs23/02Pnd2FswMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVU1Ia0p2V09RcTR3NVd6YmZfVFktZDNZV3pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi85YzZkYWQtMzc3YS00NDRlLWIwZGMt MDYzY2U2Y2Y0NjBkLzEvWG9ubW5GdV9obDVmTGQxTkZUa1JkbHN6U3pzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi85YzZkYWQtMzc3YS00NDRlLWIwZGMtMDYzY2U2Y2Y0NjBk LzEvVU1Ia0p2V09RcTR3NVd6YmZfVFktZDNZV3pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGOBggrBgEFBQcBBwEB/wR/MH0wMgQCAAEwLAMEArl3iAME AcJNNgMEAMP9QAMEAMP9QgMEAMP9SjAMAwQDw/1YAwQHw/0AMEcEAgACMEEwEgMH ACoBBbAAAwMHACoBBbAABAMHACoBBbAABgMHAioBBbAACAMHACoBBbAADQMHAyoB BbAAEAMHBSoBBbAAIDANBgkqhkiG9w0BAQsFAAOCAQEAQEfw9gWSHxbbz+mySqjT s53tjznk5rGpl0QbOb7OgIpFwqYgU3EXRiXZ8mXZN3e1vmy1ZjGMWJyryjYS1HZB C0ijS/cvrTLhdv79Ig7Z11AQ3zrw0TaahRYE5bZe+BANS2lRk25cEVu+NKNlbdYH +r/+e9l3RwBgsKYlppagzwH4W7LYXw2IBfQYFeGeUax/SH1lSsM5eTRVYACe4yQB afeuNPOBCkt8RerN59Yu/euTacG7/yulKr63X7XEM80Ziy0we+GEwMx1dzydy/JE rA/9G8uk2Z2dDsq9tKj3YUteeij0OMz0YdaWyTP5iy2c6Y+UfOVf7ezwR/aXNKDy 3w== -----END CERTIFICATE-----Generated at Sun Jan 25 15:11:25 2026 by rpki-client