This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/XM6w5HowZWBtpHPnnj9Mwr-w-qw.roa File: XM6w5HowZWBtpHPnnj9Mwr-w-qw.roa (raw, json) Hash identifier: sO/zxb0InsWF34Hr/VTHqeD4EmRo9FGLqjvxwwn51/c= Subject key identifier: 5C:CE:B0:E4:7A:30:65:60:6D:A4:73:E7:9E:3F:4C:C2:BF:B0:FA:AC Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Certificate serial: 019B77C679AB79CA636DC0E7DFC07432859D Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/XM6w5HowZWBtpHPnnj9Mwr-w-qw.roa Signing time: Thu 01 Jan 2026 04:17:34 +0000 ROA not before: Thu 01 Jan 2026 04:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 980 IP address blocks: 5.249.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:79:ab:79:ca:63:6d:c0:e7:df:c0:74:32:85:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Validity Not Before: Jan 1 04:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5cceb0e47a3065606da473e79e3f4cc2bfb0faac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b3:00:a9:02:26:0c:c3:78:00:bb:61:50:d8: ec:bb:2d:83:10:a0:07:c7:db:a0:3b:ba:a8:ae:96: 25:c3:ef:6c:7c:34:1f:30:25:84:bc:69:73:0e:b8: c5:5b:61:f6:26:ca:0d:0e:8a:2a:cb:56:13:48:b6: b1:09:a5:c4:65:c3:a9:cf:bf:99:e0:a4:cf:59:76: fb:e3:4a:e9:06:a4:e5:ce:8b:18:d8:4d:cd:02:52: 64:23:5a:f8:df:0f:d0:b9:ae:c8:7f:f1:6d:a6:c9: 05:ac:60:90:a0:07:b8:4e:78:d0:9d:b3:78:6e:24: d6:df:63:af:4e:1d:29:b9:a7:74:83:d4:5f:89:86: 74:fa:00:19:b4:18:65:e6:da:50:b4:b1:68:12:43: ef:60:f1:39:fd:41:db:55:1e:1a:ac:14:9a:b7:62: 4e:a4:09:de:9b:46:c7:c3:73:22:4a:73:ae:4e:0a: af:a7:72:be:18:f1:ee:0a:34:ad:94:17:f0:4e:8f: 1f:8a:54:c2:0f:ae:61:d3:ee:06:a0:c4:7b:d4:3d: 1a:5f:e5:62:f7:4b:68:45:71:66:a1:33:f7:23:d2: c9:30:1c:ac:ed:3c:61:b7:6c:97:93:2c:ed:4d:43: 8c:dd:c5:b2:b1:3c:a5:5b:12:31:a9:bb:87:c0:ff: 27:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:CE:B0:E4:7A:30:65:60:6D:A4:73:E7:9E:3F:4C:C2:BF:B0:FA:AC X509v3 Authority Key Identifier: keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/XM6w5HowZWBtpHPnnj9Mwr-w-qw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.249.180.0/22 Signature Algorithm: sha256WithRSAEncryption 49:f2:21:0d:70:84:0e:84:33:5e:99:92:2f:93:8c:77:51:35: d5:27:a2:6a:c0:67:a6:90:4a:e2:01:b7:b0:7f:38:17:0b:5a: ef:94:68:a7:f4:4c:29:6d:af:3b:bd:d8:18:5e:2e:dc:5e:34: 4e:92:11:4d:2e:50:64:c8:c9:63:e2:83:7a:76:66:21:63:42: 09:76:b3:e6:8d:d5:65:8a:0a:5f:e0:b7:73:d6:a1:e6:2f:f6: d8:e1:d0:5e:31:a9:91:4c:09:80:04:7e:03:ad:15:d4:10:f6: df:10:b5:4b:12:c7:eb:8d:5e:a8:52:51:15:0d:72:e6:8f:c9: 99:ae:e8:f4:24:8b:a1:b9:69:fb:94:89:3b:0e:f4:01:a0:63: 26:53:e6:0a:4e:ca:a2:9c:ee:05:6b:8f:45:18:bc:c5:90:aa: ae:20:64:2c:5b:e9:3d:91:0b:da:c4:2c:34:65:e4:fe:45:2d: fa:51:08:39:fc:7c:e8:eb:22:66:18:f8:6e:16:06:3e:7c:1c: 08:4d:dc:81:55:b4:d2:8a:f2:8d:f7:7f:5b:bd:8d:95:38:e9: 1d:56:bd:ec:0d:2b:56:f4:d0:43:85:d8:5c:b8:df:11:3b:2d: 59:0c:cb:47:d2:f5:97:db:7b:1c:76:df:76:87:ed:a8:62:d8: 70:9b:3b:9e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xnmrecpjbcDn38B0MoWdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlODI5NjNmZjFhYTcwYWIxMGQxZDMzZTg2YjFkNmQ0OTRk NmNlNTEwHhcNMjYwMTAxMDQxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2NlYjBlNDdhMzA2NTYwNmRhNDczZTc5ZTNmNGNjMmJmYjBmYWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubMAqQImDMN4ALthUNjsuy2DEKAH x9ugO7qorpYlw+9sfDQfMCWEvGlzDrjFW2H2JsoNDooqy1YTSLaxCaXEZcOpz7+Z 4KTPWXb740rpBqTlzosY2E3NAlJkI1r43w/Qua7If/FtpskFrGCQoAe4TnjQnbN4 biTW32OvTh0puad0g9RfiYZ0+gAZtBhl5tpQtLFoEkPvYPE5/UHbVR4arBSat2JO pAnem0bHw3MiSnOuTgqvp3K+GPHuCjStlBfwTo8filTCD65h0+4GoMR71D0aX+Vi 90toRXFmoTP3I9LJMBys7Txht2yXkyztTUOM3cWysTylWxIxqbuHwP8nHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFzOsOR6MGVgbaRz554/TMK/sPqsMB8GA1UdIwQY MBaAFC6Clj/xqnCrENHTPoax1tSU1s5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQt ZGY2NGYwZTgyMzYwLzEvWE02dzVIb3daV0J0cEhQbm5qOU13ci13LXF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQtZGY2NGYwZTgyMzYw LzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBfm0MA0G CSqGSIb3DQEBCwUAA4IBAQBJ8iENcIQOhDNemZIvk4x3UTXVJ6JqwGemkEriAbew fzgXC1rvlGin9Ewpba87vdgYXi7cXjROkhFNLlBkyMlj4oN6dmYhY0IJdrPmjdVl igpf4Ldz1qHmL/bY4dBeMamRTAmABH4DrRXUEPbfELVLEsfrjV6oUlEVDXLmj8mZ ruj0JIuhuWn7lIk7DvQBoGMmU+YKTsqinO4Fa49FGLzFkKquIGQsW+k9kQvaxCw0 ZeT+RS36UQg5/Hzo6yJmGPhuFgY+fBwITdyBVbTSivKN939bvY2VOOkdVr3sDStW 9NBDhdhcuN8ROy1ZDMtH0vWX23scdt92h+2oYthwmzue -----END CERTIFICATE-----Generated at Sun Jan 25 13:46:33 2026 by rpki-client