This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/XPEjOR9wfMRq3tc6C9A_BMhG_wo.roa File: XPEjOR9wfMRq3tc6C9A_BMhG_wo.roa (raw, json) Hash identifier: GmkdYdin0NadahEWqjYD5B4MFdZI4+3bV+vumXZ+bRQ= Subject key identifier: 5C:F1:23:39:1F:70:7C:C4:6A:DE:D7:3A:0B:D0:3F:04:C8:46:FF:0A Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Certificate serial: 019B7D5D013358F3FD98CCE313E51363CFC5 Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/XPEjOR9wfMRq3tc6C9A_BMhG_wo.roa Signing time: Fri 02 Jan 2026 06:20:05 +0000 ROA not before: Fri 02 Jan 2026 06:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203000 IP address blocks: 185.79.96.0/22 maxlen: 32 185.79.96.0/24 maxlen: 32 185.79.97.0/24 maxlen: 32 185.79.98.0/24 maxlen: 32 185.79.99.0/24 maxlen: 32 185.129.116.0/22 maxlen: 32 185.129.116.0/24 maxlen: 32 185.129.117.0/24 maxlen: 32 185.129.118.0/24 maxlen: 32 185.129.119.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:51:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:01:33:58:f3:fd:98:cc:e3:13:e5:13:63:cf:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Validity Not Before: Jan 2 06:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5cf123391f707cc46aded73a0bd03f04c846ff0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fe:f6:ca:4b:fa:6f:5f:03:9b:f9:9b:7e:d9: 5b:f6:58:2a:82:77:5d:10:56:cf:06:95:24:09:6b: a1:15:f3:f3:1b:3b:df:d5:16:c2:37:ab:16:9c:40: 2e:7d:0e:ce:9d:86:b2:44:fb:8b:35:b1:fe:fd:88: 1a:e6:a7:e0:d6:4e:2c:5b:ce:fa:a0:b7:71:3c:0b: dc:a0:28:54:1e:75:8c:00:64:0a:c1:88:24:fa:90: dc:c7:33:20:86:c5:f3:fb:06:ac:36:01:bc:52:86: 77:62:7e:2e:e6:0b:fa:5c:e4:3d:0a:6e:8f:51:78: 59:6d:c1:3d:0a:55:28:08:5b:e9:10:82:ff:b8:f3: 77:c8:bc:2c:10:93:b9:c2:70:82:0b:67:82:15:d5: 82:0e:a2:8b:1d:d2:06:d9:57:ea:77:80:5d:52:d1: 8a:22:b8:a0:36:df:56:e7:f9:6c:ad:e6:f0:fe:be: 21:3e:71:f7:aa:55:5a:3c:6a:f0:9f:2c:ff:e2:cc: 0f:c2:6d:1f:b9:26:bb:3b:00:16:9d:04:35:2c:0c: 7a:e0:dd:09:cc:31:83:f1:f3:a2:e6:57:79:db:28: 7a:f6:78:18:2f:b9:a5:f7:b2:e4:95:ba:c8:8e:95: c8:03:8d:50:85:54:25:c1:84:40:3b:46:e9:13:6d: a9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F1:23:39:1F:70:7C:C4:6A:DE:D7:3A:0B:D0:3F:04:C8:46:FF:0A X509v3 Authority Key Identifier: keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/XPEjOR9wfMRq3tc6C9A_BMhG_wo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.79.96.0/22 185.129.116.0/22 Signature Algorithm: sha256WithRSAEncryption 48:a3:08:0c:c7:c2:8f:e9:dc:dc:2f:39:9d:3c:30:8e:56:70: 8d:d3:d3:22:15:9d:2f:4d:34:9b:22:88:93:96:bb:43:c0:b4: 33:5a:61:29:4a:27:eb:26:ac:17:4e:f4:dd:b3:70:11:34:e8: ec:10:f0:02:b2:4f:6d:f2:0e:33:93:28:2d:38:3a:89:0c:81: 11:98:31:1b:73:7f:22:79:f9:4d:44:08:a8:68:57:8a:38:35: c5:7a:3f:05:b7:3e:3d:ee:f6:9c:b3:fa:5c:4b:bd:a7:6a:df: a9:8a:e6:5a:51:14:e7:1d:14:da:98:19:54:89:4d:51:ab:9b: 07:44:a3:77:b4:fe:1b:bd:9b:7f:92:17:03:08:25:a6:65:e9: 64:4c:a0:06:93:bf:d3:cb:18:61:5f:30:88:9f:ef:f1:74:23: 6e:be:5f:e2:6e:0d:7a:90:5b:60:b4:01:1c:3c:38:c4:2f:dc: a6:a8:fe:9e:f3:0e:61:89:15:47:c3:3e:6d:2f:27:c7:ff:c7: 60:ce:0f:ca:67:4e:7c:ce:1c:6c:5f:2e:2a:cc:39:73:39:27: cb:37:9a:c6:a5:dd:29:db:46:34:fb:f0:a5:72:fe:52:21:3f: 27:8b:54:72:c7:33:9b:de:8d:e1:2b:ed:b7:de:9f:25:02:66: af:32:4b:06 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XQEzWPP9mMzjE+UTY8/FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNTI2MzRhMmViMDNmODU2NWI1ZTMzZGMyYjlmNDkwNDFm N2NmYjAwHhcNMjYwMTAyMDYyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2YxMjMzOTFmNzA3Y2M0NmFkZWQ3M2EwYmQwM2YwNGM4NDZmZjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwP72ykv6b18Dm/mbftlb9lgqgndd EFbPBpUkCWuhFfPzGzvf1RbCN6sWnEAufQ7OnYayRPuLNbH+/Yga5qfg1k4sW876 oLdxPAvcoChUHnWMAGQKwYgk+pDcxzMghsXz+wasNgG8UoZ3Yn4u5gv6XOQ9Cm6P UXhZbcE9ClUoCFvpEIL/uPN3yLwsEJO5wnCCC2eCFdWCDqKLHdIG2Vfqd4BdUtGK IrigNt9W5/lsrebw/r4hPnH3qlVaPGrwnyz/4swPwm0fuSa7OwAWnQQ1LAx64N0J zDGD8fOi5ld52yh69ngYL7ml97LklbrIjpXIA41QhVQlwYRAO0bpE22p2QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFzxIzkfcHzEat7XOgvQPwTIRv8KMB8GA1UdIwQY MBaAFFtSY0ousD+FZbXjPcK59JBB98+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUt ZGM2NTU0ZmQxMjM1LzEvWFBFak9SOXdmTVJxM3RjNkM5QV9CTWhHX3dvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUtZGM2NTU0ZmQxMjM1 LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuU9gAwQC uYF0MA0GCSqGSIb3DQEBCwUAA4IBAQBIowgMx8KP6dzcLzmdPDCOVnCN09MiFZ0v TTSbIoiTlrtDwLQzWmEpSifrJqwXTvTds3ARNOjsEPACsk9t8g4zkygtODqJDIER mDEbc38ieflNRAioaFeKODXFej8Ftz497vacs/pcS72nat+piuZaURTnHRTamBlU iU1Rq5sHRKN3tP4bvZt/khcDCCWmZelkTKAGk7/TyxhhXzCIn+/xdCNuvl/ibg16 kFtgtAEcPDjEL9ymqP6e8w5hiRVHwz5tLyfH/8dgzg/KZ058zhxsXy4qzDlzOSfL N5rGpd0p20Y0+/Clcv5SIT8ni1RyxzOb3o3hK+233p8lAmavMksG -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:32 2026 by rpki-client