This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/xdcZpWEbrxMAWI2r6x9fHtNAeos.roa File: xdcZpWEbrxMAWI2r6x9fHtNAeos.roa (raw, json) Hash identifier: pQvg5+txs+5H+YwG4r27g6XNgPtuojFD8BoBa08f/h8= Subject key identifier: C5:D7:19:A5:61:1B:AF:13:00:58:8D:AB:EB:1F:5F:1E:D3:40:7A:8B Certificate issuer: /CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593 Certificate serial: 019B7FF281A636FFC55470DCE0B051080432 Authority key identifier: 4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/xdcZpWEbrxMAWI2r6x9fHtNAeos.roa Signing time: Fri 02 Jan 2026 18:22:37 +0000 ROA not before: Fri 02 Jan 2026 18:22:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50923 IP address blocks: 5.129.0.0/16 maxlen: 16 5.129.192.0/19 maxlen: 19 5.129.192.0/20 maxlen: 20 5.129.192.0/21 maxlen: 21 5.129.200.0/21 maxlen: 21 5.129.208.0/20 maxlen: 20 5.129.208.0/21 maxlen: 21 5.129.224.0/19 maxlen: 19 5.129.224.0/20 maxlen: 20 5.129.224.0/21 maxlen: 21 5.129.232.0/21 maxlen: 21 5.129.240.0/20 maxlen: 20 5.129.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:81:a6:36:ff:c5:54:70:dc:e0:b0:51:08:04:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593 Validity Not Before: Jan 2 18:22:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5d719a5611baf1300588dabeb1f5f1ed3407a8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:04:e3:a5:6e:14:1f:f2:98:26:93:ea:28:c6: da:1d:11:a9:de:e1:87:68:2b:06:e9:8a:da:72:5c: be:e1:0a:c2:58:a5:4a:08:9e:f9:60:a5:21:2e:3e: ec:8c:f8:44:50:8d:3d:11:56:19:df:87:7f:8f:74: c3:c8:c1:23:86:3e:59:e2:d9:12:5a:73:1f:74:72: 67:0d:36:c4:93:d5:78:a2:47:bb:64:c8:5a:c1:f7: 4a:22:89:01:72:06:a7:34:de:56:b2:cd:a4:80:15: c4:8b:5e:81:d6:98:2c:d4:53:a0:0a:4e:81:a4:e8: 46:7e:00:03:3e:04:81:5f:d3:24:b4:65:df:91:d4: a1:d7:14:be:03:2f:c4:a8:e9:2f:e7:2b:10:3e:e0: 1c:54:e9:95:d5:2e:87:78:70:8f:61:96:5f:26:50: 28:b8:e7:df:19:e3:83:68:24:ae:19:45:b8:00:73: ad:9f:dd:87:7c:c6:9a:5f:de:3a:b2:29:40:03:83: 2f:84:d2:92:cf:12:fe:b0:f4:fd:38:02:ac:a7:13: 3f:be:0f:15:8f:37:c0:92:b7:5c:44:aa:22:f1:f9: cd:89:a3:ab:4a:1a:f9:06:c9:c1:ca:a2:6f:23:9e: 70:1b:43:04:e6:69:f7:e5:5e:5f:1d:b9:f8:e5:13: c5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D7:19:A5:61:1B:AF:13:00:58:8D:AB:EB:1F:5F:1E:D3:40:7A:8B X509v3 Authority Key Identifier: keyid:4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/xdcZpWEbrxMAWI2r6x9fHtNAeos.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.129.0.0/16 Signature Algorithm: sha256WithRSAEncryption 9a:97:b9:83:e0:55:04:5e:78:3e:a7:de:c9:24:92:3c:0b:d5: 90:80:32:01:93:a5:16:92:f2:48:64:22:a8:9e:d1:ae:5a:14: 32:94:37:6e:48:91:c5:68:33:e0:2d:fb:19:a4:f7:80:35:21: 2b:d7:23:9a:76:e1:74:cc:58:1e:84:d8:da:c7:d4:fa:08:ca: a1:92:ad:70:8d:ed:a2:3d:58:8a:31:5d:30:29:90:ed:db:76: a1:c2:7b:65:ec:c4:0f:32:3f:c5:ae:ea:c6:8d:72:77:e7:68: d1:83:92:02:79:ce:9b:97:67:3f:e2:67:5f:03:09:99:a8:05: fb:e5:6b:ad:48:a9:86:a1:cc:8d:39:63:09:e8:bd:a5:6b:2e: 61:2c:73:b0:63:db:c6:f1:b6:3b:98:4a:c7:5a:44:36:a4:b9: 1b:62:ae:70:84:f4:78:28:18:61:97:1c:15:69:7e:52:a4:29: 40:41:7a:f1:8c:87:31:48:5c:10:a2:ab:e2:f3:80:d3:3e:5c: 20:53:0e:7d:77:41:d1:58:7a:5e:1d:77:ff:83:9c:4f:eb:de: fe:8e:a2:50:26:ef:9a:52:ee:ef:9a:6d:8c:13:7f:98:93:2e: 60:6a:ad:e7:56:04:7e:ed:a3:92:7f:52:6e:b7:b8:6e:a0:b6: 6f:8a:72:ed -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt/8oGmNv/FVHDc4LBRCAQyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZGIzZGNkZjVlNmJlZTA5ODI1YzM3YmYzYjhiZGYyOGI2 ZmI1OTMwHhcNMjYwMTAyMTgyMjM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNWQ3MTlhNTYxMWJhZjEzMDA1ODhkYWJlYjFmNWYxZWQzNDA3YThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQTjpW4UH/KYJpPqKMbaHRGp3uGH aCsG6Yracly+4QrCWKVKCJ75YKUhLj7sjPhEUI09EVYZ34d/j3TDyMEjhj5Z4tkS WnMfdHJnDTbEk9V4oke7ZMhawfdKIokBcganNN5Wss2kgBXEi16B1pgs1FOgCk6B pOhGfgADPgSBX9MktGXfkdSh1xS+Ay/EqOkv5ysQPuAcVOmV1S6HeHCPYZZfJlAo uOffGeODaCSuGUW4AHOtn92HfMaaX946silAA4MvhNKSzxL+sPT9OAKspxM/vg8V jzfAkrdcRKoi8fnNiaOrShr5BsnByqJvI55wG0ME5mn35V5fHbn45RPFgwIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFMXXGaVhG68TAFiNq+sfXx7TQHqLMB8GA1UdIwQY MBaAFE3bPc315r7gmCXDe/O4vfKLb7WTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83OTBjZWUtZDU0ZS00NTk4LThiYzEt MjE3MGM1YzFkM2VkLzEveGRjWnBXRWJyeE1BV0kycjZ4OWZIdE5BZW9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83OTBjZWUtZDU0ZS00NTk4LThiYzEtMjE3MGM1YzFkM2Vk LzEvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMABYEwDQYJ KoZIhvcNAQELBQADggEBAJqXuYPgVQReeD6n3skkkjwL1ZCAMgGTpRaS8khkIqie 0a5aFDKUN25IkcVoM+At+xmk94A1ISvXI5p24XTMWB6E2NrH1PoIyqGSrXCN7aI9 WIoxXTApkO3bdqHCe2XsxA8yP8Wu6saNcnfnaNGDkgJ5zpuXZz/iZ18DCZmoBfvl a61IqYahzI05YwnovaVrLmEsc7Bj28bxtjuYSsdaRDakuRtirnCE9HgoGGGXHBVp flKkKUBBevGMhzFIXBCiq+LzgNM+XCBTDn13QdFYel4dd/+DnE/r3v6OolAm75pS 7u+abYwTf5iTLmBqredWBH7to5J/Um63uG6gtm+Kcu0= -----END CERTIFICATE-----Generated at Sun Jan 25 19:37:12 2026 by rpki-client