This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/Xw-YfGo9dbYYynT4e8fytlvPIDM.roa File: Xw-YfGo9dbYYynT4e8fytlvPIDM.roa (raw, json) Hash identifier: GIydqVz0uBGXp6zRLhHB8inOB1N9/5K9aw+gLa9sp4c= Subject key identifier: 5F:0F:98:7C:6A:3D:75:B6:18:CA:74:F8:7B:C7:F2:B6:5B:CF:20:33 Certificate issuer: /CN=7a8a1e836fa921d29af89c4a6ed6a0450003933c Certificate serial: 019B797E10B03E90A918B30D94681B69D02A Authority key identifier: 7A:8A:1E:83:6F:A9:21:D2:9A:F8:9C:4A:6E:D6:A0:45:00:03:93:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eooeg2-pIdKa-JxKbtagRQADkzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/Xw-YfGo9dbYYynT4e8fytlvPIDM.roa Signing time: Thu 01 Jan 2026 12:17:43 +0000 ROA not before: Thu 01 Jan 2026 12:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199284 IP address blocks: 5.102.160.0/21 maxlen: 24 178.19.224.0/20 maxlen: 24 185.97.180.0/22 maxlen: 24 2a01:75c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.crl rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft rsync://rpki.ripe.net/repository/DEFAULT/eooeg2-pIdKa-JxKbtagRQADkzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:10:b0:3e:90:a9:18:b3:0d:94:68:1b:69:d0:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a8a1e836fa921d29af89c4a6ed6a0450003933c Validity Not Before: Jan 1 12:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f0f987c6a3d75b618ca74f87bc7f2b65bcf2033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ad:5f:7f:2a:d4:06:f6:d6:49:fc:8e:a7:b6: f9:eb:bd:0b:39:f5:98:f5:6a:1f:bd:05:53:e5:2c: 68:f8:d4:b8:3c:f6:0c:23:40:6f:71:74:70:41:0e: 42:36:b7:64:92:89:99:e1:45:a0:aa:36:b0:89:3a: 4b:6a:dd:71:a6:f4:ab:2d:94:bd:9b:2a:fa:09:18: 12:c7:a6:a4:ac:5b:06:08:42:99:ac:d3:c9:b9:f9: 05:16:01:fd:4b:c3:e0:4d:95:32:9a:4e:ce:17:29: 0f:a6:8c:b1:d0:6f:27:be:a7:86:79:1a:2f:14:f9: 2a:9a:8b:d7:d9:a1:59:a9:d2:e2:01:91:27:8b:a4: 65:e2:56:7b:95:b3:c7:63:ea:66:f8:ed:30:db:37: 1b:d2:0e:89:11:7e:b7:24:6c:81:48:5e:63:65:06: 2f:23:bf:a4:2b:ef:c8:87:b9:47:ff:43:35:e6:61: 4e:ec:47:6e:d2:0d:3d:ba:77:63:7b:51:11:51:7e: e9:f7:be:de:1a:b6:6e:84:72:78:e6:b6:c7:77:6f: c6:b5:99:78:b4:45:7f:e4:9a:65:39:32:93:54:97: 33:c4:5b:e1:21:17:73:a5:1a:a6:51:55:2a:6c:2e: eb:ae:15:68:4b:cd:49:ea:58:d5:0a:b1:fd:28:f4: c7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:0F:98:7C:6A:3D:75:B6:18:CA:74:F8:7B:C7:F2:B6:5B:CF:20:33 X509v3 Authority Key Identifier: keyid:7A:8A:1E:83:6F:A9:21:D2:9A:F8:9C:4A:6E:D6:A0:45:00:03:93:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eooeg2-pIdKa-JxKbtagRQADkzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/Xw-YfGo9dbYYynT4e8fytlvPIDM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.102.160.0/21 178.19.224.0/20 185.97.180.0/22 IPv6: 2a01:75c0::/29 Signature Algorithm: sha256WithRSAEncryption 64:dc:3d:70:78:1d:10:f8:a6:7b:14:db:6a:57:b1:4a:ad:95: f9:9f:76:f8:a2:ac:35:f2:05:5b:a3:36:d6:56:3a:0c:ff:8b: 82:13:ac:6c:5d:cf:af:a1:0e:85:2b:53:86:72:b2:d4:ec:02: b7:98:f5:5b:e6:0a:9f:28:14:9d:af:8a:65:88:2a:2a:aa:f6: e6:41:ad:72:24:8d:5d:d9:4a:ca:43:63:55:5a:05:3f:97:8b: e6:5a:71:26:c8:1d:60:bc:f9:31:3f:8e:20:2d:7a:b1:81:83: 06:a3:db:e4:03:ae:08:49:2d:ee:59:ab:0f:ca:cf:af:55:8e: cf:ff:2b:a5:d5:d6:99:00:43:5a:f9:40:91:b1:c9:33:e2:27: 8d:e9:4d:91:43:8d:71:38:e4:a1:60:16:b9:27:d8:51:7b:ed: 74:e6:51:a9:21:79:11:5e:4c:4e:ce:d3:72:88:bb:0b:dc:f2: 84:80:d3:a4:e2:e0:40:04:b5:a2:cd:b2:4a:2c:c5:2a:9b:1e: 54:4f:d3:ff:4e:9e:11:d6:9d:64:a6:e8:78:74:09:f5:5b:da: 31:e9:ed:55:49:7d:71:89:b3:5a:d7:c0:fb:79:de:98:d4:93: 7b:a4:c0:26:fc:00:a8:3f:af:8a:79:07:89:05:e2:0c:5f:7b: ff:87:72:0a -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt5fhCwPpCpGLMNlGgbadAqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhOGExZTgzNmZhOTIxZDI5YWY4OWM0YTZlZDZhMDQ1MDAw MzkzM2MwHhcNMjYwMTAxMTIxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjBmOTg3YzZhM2Q3NWI2MThjYTc0Zjg3YmM3ZjJiNjViY2YyMDMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAva1ffyrUBvbWSfyOp7b5670LOfWY 9WofvQVT5Sxo+NS4PPYMI0BvcXRwQQ5CNrdkkomZ4UWgqjawiTpLat1xpvSrLZS9 myr6CRgSx6akrFsGCEKZrNPJufkFFgH9S8PgTZUymk7OFykPpoyx0G8nvqeGeRov FPkqmovX2aFZqdLiAZEni6Rl4lZ7lbPHY+pm+O0w2zcb0g6JEX63JGyBSF5jZQYv I7+kK+/Ih7lH/0M15mFO7Edu0g09undje1ERUX7p977eGrZuhHJ45rbHd2/GtZl4 tEV/5JplOTKTVJczxFvhIRdzpRqmUVUqbC7rrhVoS81J6ljVCrH9KPTHcQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFF8PmHxqPXW2GMp0+HvH8rZbzyAzMB8GA1UdIwQY MBaAFHqKHoNvqSHSmvicSm7WoEUAA5M8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZW9vZWcyLXBJZEthLUp4S2J0YWdSUUFEa3p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi80MjZiOWQtMGU2MS00ZmFkLTk4ZjMt YTBjNTk3MGE2Zjc2LzEvWHctWWZHbzlkYllZeW5UNGU4Znl0bHZQSURNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi80MjZiOWQtMGU2MS00ZmFkLTk4ZjMtYTBjNTk3MGE2Zjc2 LzEvZW9vZWcyLXBJZEthLUp4S2J0YWdSUUFEa3p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDBWagAwQE shPgAwQCuWG0MA0EAgACMAcDBQMqAXXAMA0GCSqGSIb3DQEBCwUAA4IBAQBk3D1w eB0Q+KZ7FNtqV7FKrZX5n3b4oqw18gVbozbWVjoM/4uCE6xsXc+voQ6FK1OGcrLU 7AK3mPVb5gqfKBSdr4pliCoqqvbmQa1yJI1d2UrKQ2NVWgU/l4vmWnEmyB1gvPkx P44gLXqxgYMGo9vkA64ISS3uWasPys+vVY7P/yul1daZAENa+UCRsckz4ieN6U2R Q41xOOShYBa5J9hRe+105lGpIXkRXkxOztNyiLsL3PKEgNOk4uBABLWizbJKLMUq mx5UT9P/Tp4R1p1kpuh4dAn1W9ox6e1VSX1xibNa18D7ed6Y1JN7pMAm/ACoP6+K eQeJBeIMX3v/h3IK -----END CERTIFICATE-----Generated at Mon Jan 26 18:10:51 2026 by rpki-client