This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/XX639XievMdqJ8SDTTjke_CjH90.roa File: XX639XievMdqJ8SDTTjke_CjH90.roa (raw, json) Hash identifier: eFHYg4wIZNajc7SdejcYRKfEHVh83hlLOw8omNGRsMs= Subject key identifier: 5D:7E:B7:F5:78:9E:BC:C7:6A:27:C4:83:4D:38:E4:7B:F0:A3:1F:DD Certificate issuer: /CN=d00b37b6f4b445645e6993a9c5ec608492425f0e Certificate serial: 019B7EA618A3CF36DB809CA2DE0C2C72AEEC Authority key identifier: D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/XX639XievMdqJ8SDTTjke_CjH90.roa Signing time: Fri 02 Jan 2026 12:19:32 +0000 ROA not before: Fri 02 Jan 2026 12:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8412 IP address blocks: 152.53.234.0/23 maxlen: 23 152.53.234.0/24 maxlen: 24 152.53.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:18:a3:cf:36:db:80:9c:a2:de:0c:2c:72:ae:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d00b37b6f4b445645e6993a9c5ec608492425f0e Validity Not Before: Jan 2 12:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d7eb7f5789ebcc76a27c4834d38e47bf0a31fdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:77:92:72:2a:d6:ad:1a:37:96:3a:13:cb:1b: cb:f9:f6:a7:28:58:02:f7:f2:65:aa:ca:2f:13:52: 4b:7b:63:31:40:93:80:0d:a0:bc:92:43:cc:74:7d: 06:1a:ac:a3:1c:4e:89:6e:4a:02:cf:ef:40:86:3c: b5:72:1d:24:4b:67:f4:a1:c9:b4:d1:75:e3:03:29: 54:5b:f3:d1:ba:cf:94:4e:7c:bd:23:0b:89:9f:2c: fa:76:36:fe:f3:81:e7:38:ab:28:03:cd:64:3f:a9: 66:7e:d2:10:eb:44:2d:8c:4b:39:81:a4:69:82:54: 83:bd:08:78:c0:bd:26:e5:db:fe:f4:10:8e:0f:14: d2:3e:24:96:42:3e:87:7d:24:d3:22:62:61:d5:e4: b2:37:41:06:1d:36:44:af:95:63:aa:b9:af:cb:ef: 5d:47:2d:1b:f2:c8:cf:38:e6:03:a2:41:bf:b2:61: 9f:34:59:8f:5f:b2:f9:bd:97:5f:0d:f3:ec:de:e8: fc:f9:4a:97:c3:74:c8:2f:d0:b5:c9:f3:c2:60:f8: b9:01:79:37:5c:40:01:db:01:8e:b3:f4:d9:53:63: 2b:1e:23:7c:ff:cd:0c:06:53:73:8d:d1:c6:58:1e: 5c:0a:b0:67:3d:2e:ac:12:17:06:5b:96:96:fd:dd: 4b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:7E:B7:F5:78:9E:BC:C7:6A:27:C4:83:4D:38:E4:7B:F0:A3:1F:DD X509v3 Authority Key Identifier: keyid:D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/XX639XievMdqJ8SDTTjke_CjH90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.53.234.0/23 Signature Algorithm: sha256WithRSAEncryption 55:07:e2:d3:f2:03:38:ca:22:72:2b:5d:4c:99:f4:37:de:58: 6c:74:a7:22:79:aa:fc:1c:42:16:7e:45:24:7f:57:56:97:44: f3:93:f3:93:c8:e2:cf:07:39:8c:94:07:b0:45:43:68:80:22: 34:03:f0:74:5d:24:9e:b8:6e:5e:ce:31:94:23:1f:58:85:fc: 35:81:99:8b:f8:db:04:89:97:b7:41:d3:f6:c5:48:d4:0e:5a: 4e:e3:54:7a:1c:ee:7d:be:93:b1:cb:d9:3c:f6:99:7b:04:dd: a6:7c:2c:c2:ab:24:02:e5:27:6d:bc:67:16:b5:f1:3a:4f:cc: 0a:b0:d1:47:de:f9:e4:cb:b6:25:7e:d1:1d:ae:68:17:4d:89: 95:3a:44:cd:76:07:48:fe:65:79:8d:eb:e2:c0:45:a9:b5:b7: 70:08:12:fb:b1:b7:d2:11:09:65:fa:0f:1f:56:25:9e:b8:ad: 3e:9f:25:3a:99:b1:49:c2:ec:aa:11:fd:a7:82:bb:c7:4e:f6: b6:52:8a:68:e2:87:5c:e6:d4:11:e1:51:f2:74:e3:c5:14:62: 4f:7d:0e:56:8d:53:af:c1:0d:d9:ba:b3:3f:a5:0f:a0:c6:6c: 97:2d:47:9d:be:03:a2:00:b1:63:5b:cd:f7:29:46:36:74:f1: 60:d5:b0:cb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+phijzzbbgJyi3gwscq7sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMGIzN2I2ZjRiNDQ1NjQ1ZTY5OTNhOWM1ZWM2MDg0OTI0 MjVmMGUwHhcNMjYwMTAyMTIxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDdlYjdmNTc4OWViY2M3NmEyN2M0ODM0ZDM4ZTQ3YmYwYTMxZmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA73eScirWrRo3ljoTyxvL+fanKFgC 9/JlqsovE1JLe2MxQJOADaC8kkPMdH0GGqyjHE6JbkoCz+9Ahjy1ch0kS2f0ocm0 0XXjAylUW/PRus+UTny9IwuJnyz6djb+84HnOKsoA81kP6lmftIQ60QtjEs5gaRp glSDvQh4wL0m5dv+9BCODxTSPiSWQj6HfSTTImJh1eSyN0EGHTZEr5Vjqrmvy+9d Ry0b8sjPOOYDokG/smGfNFmPX7L5vZdfDfPs3uj8+UqXw3TIL9C1yfPCYPi5AXk3 XEAB2wGOs/TZU2MrHiN8/80MBlNzjdHGWB5cCrBnPS6sEhcGW5aW/d1LyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF1+t/V4nrzHaifEg0045Hvwox/dMB8GA1UdIwQY MBaAFNALN7b0tEVkXmmTqcXsYISSQl8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEFzM3R2UzBSV1JlYVpPcHhleGdoSkpDWHc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83MzBmYzUtNzMwMS00YTYwLTg2ZDEt N2RiNjg2OGQ4NDc0LzEvWFg2MzlYaWV2TWRxSjhTRFRUamtlX0NqSDkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC83MzBmYzUtNzMwMS00YTYwLTg2ZDEtN2RiNjg2OGQ4NDc0 LzEvMEFzM3R2UzBSV1JlYVpPcHhleGdoSkpDWHc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmDXqMA0G CSqGSIb3DQEBCwUAA4IBAQBVB+LT8gM4yiJyK11MmfQ33lhsdKciear8HEIWfkUk f1dWl0Tzk/OTyOLPBzmMlAewRUNogCI0A/B0XSSeuG5ezjGUIx9Yhfw1gZmL+NsE iZe3QdP2xUjUDlpO41R6HO59vpOxy9k89pl7BN2mfCzCqyQC5SdtvGcWtfE6T8wK sNFH3vnky7YlftEdrmgXTYmVOkTNdgdI/mV5jeviwEWptbdwCBL7sbfSEQll+g8f ViWeuK0+nyU6mbFJwuyqEf2ngrvHTva2Uopo4odc5tQR4VHydOPFFGJPfQ5WjVOv wQ3ZurM/pQ+gxmyXLUedvgOiALFjW833KUY2dPFg1bDL -----END CERTIFICATE-----Generated at Mon Jan 26 12:23:36 2026 by rpki-client