This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/Xyw_X4GzbwozPV7bmdhreFXRSgQ.roa File: Xyw_X4GzbwozPV7bmdhreFXRSgQ.roa (raw, json) Hash identifier: bf34zgz/96MaGcKXCeZJRm7nCxKcToEP6ozueo2hqgk= Subject key identifier: 5F:2C:3F:5F:81:B3:6F:0A:33:3D:5E:DB:99:D8:6B:78:55:D1:4A:04 Certificate issuer: /CN=e5cf78f5f339ee777da749210a96eced96b7f2e7 Certificate serial: 019B7B359C046806F93F642B8EFE8BF031BB Authority key identifier: E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/Xyw_X4GzbwozPV7bmdhreFXRSgQ.roa Signing time: Thu 01 Jan 2026 20:17:49 +0000 ROA not before: Thu 01 Jan 2026 20:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201612 IP address blocks: 185.80.188.0/24 maxlen: 24 185.80.189.0/24 maxlen: 24 185.80.190.0/24 maxlen: 24 185.80.191.0/24 maxlen: 24 2a05:7f00:188::/48 maxlen: 48 2a05:7f00:189::/48 maxlen: 48 2a05:7f00:190::/48 maxlen: 48 2a05:7f00:191::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:9c:04:68:06:f9:3f:64:2b:8e:fe:8b:f0:31:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5cf78f5f339ee777da749210a96eced96b7f2e7 Validity Not Before: Jan 1 20:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f2c3f5f81b36f0a333d5edb99d86b7855d14a04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:eb:57:2b:2f:4a:50:70:89:3a:43:98:62:e2: 6d:96:86:8e:e6:b4:da:ea:af:55:c3:01:69:fc:03: ce:5e:3b:ce:cf:19:9a:a2:2e:01:86:95:0b:e3:02: ef:02:3a:3c:80:f2:69:96:8d:ef:b2:3c:4a:d8:65: f7:90:ec:4f:4e:70:7c:da:2a:c3:9f:16:1c:73:bd: d5:97:92:b4:c8:61:fb:69:a1:52:43:aa:70:b9:72: 47:2c:1b:62:9e:58:b2:f1:4c:af:d0:42:4e:58:b5: fe:f0:31:43:4f:78:4d:98:25:07:99:bf:45:e2:b6: ef:17:67:dc:be:30:eb:ff:91:c2:05:f6:c8:f6:57: 2c:2f:7d:e1:37:52:3a:0a:90:b7:a2:e1:a8:ce:ed: d9:ff:a9:65:b7:90:47:43:f4:c1:42:de:c7:59:89: f8:b9:7b:53:e7:9a:0d:b4:ce:48:bc:b2:0f:54:1d: 92:32:c9:1c:2b:2a:70:7a:be:97:be:e5:12:d1:35: 46:b8:93:34:10:ca:d0:92:19:bd:e0:67:3b:57:2b: aa:35:9d:17:2f:09:ca:04:a2:f8:f1:d6:cd:29:b2: 7a:35:c9:6e:d4:0c:a4:b6:03:96:ab:fb:35:a8:05: 87:40:09:32:e3:a9:46:c4:76:28:5c:b7:e4:2f:4c: cf:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:2C:3F:5F:81:B3:6F:0A:33:3D:5E:DB:99:D8:6B:78:55:D1:4A:04 X509v3 Authority Key Identifier: keyid:E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/Xyw_X4GzbwozPV7bmdhreFXRSgQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.80.188.0/22 IPv6: 2a05:7f00:188::/47 2a05:7f00:190::/47 Signature Algorithm: sha256WithRSAEncryption 69:94:da:84:82:88:47:1d:5b:ca:93:3f:fc:7f:75:a3:2d:4b: 23:fb:13:e6:92:a3:70:fa:d9:6c:cd:c1:f7:ec:7b:bc:b4:a5: 16:e9:52:6c:d0:23:2b:88:75:cf:b9:3a:7f:37:a3:f9:fb:cd: 66:89:2b:ab:71:e5:f1:07:cb:7f:71:2e:11:dd:77:bb:ad:ff: de:e9:8e:53:18:03:7b:67:43:1c:0a:d2:6c:42:f0:91:bc:56: c4:03:2f:d6:05:ba:78:58:46:46:14:a2:21:43:2a:fb:6b:49: d0:98:04:61:25:47:af:15:b1:05:45:ef:cc:5e:d4:4a:64:16: cf:5a:da:02:6e:7e:3b:a6:6f:8b:cc:7c:97:58:1a:06:b5:ad: c8:51:39:bd:eb:d6:f5:ae:5d:2b:b3:18:47:d8:ea:c8:61:aa: ff:98:d0:cf:31:3c:4d:b6:7e:21:95:f5:73:49:25:33:c3:5b: e4:92:4d:dd:d5:55:3d:f4:e4:29:49:1b:2c:28:76:6d:95:d7: d0:74:19:40:61:44:a2:60:0a:ea:33:4d:5f:d3:54:a3:c4:87: 4e:16:50:ce:f2:76:51:4c:dd:d5:aa:02:f2:7e:cb:75:15:e0: d0:52:9e:5e:93:df:16:a9:9c:8f:3d:81:a9:a3:f0:46:45:1e: a3:96:c8:72 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt7NZwEaAb5P2Qrjv6L8DG7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1Y2Y3OGY1ZjMzOWVlNzc3ZGE3NDkyMTBhOTZlY2VkOTZi N2YyZTcwHhcNMjYwMTAxMjAxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjJjM2Y1ZjgxYjM2ZjBhMzMzZDVlZGI5OWQ4NmI3ODU1ZDE0YTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOtXKy9KUHCJOkOYYuJtloaO5rTa 6q9VwwFp/APOXjvOzxmaoi4BhpUL4wLvAjo8gPJplo3vsjxK2GX3kOxPTnB82irD nxYcc73Vl5K0yGH7aaFSQ6pwuXJHLBtinliy8Uyv0EJOWLX+8DFDT3hNmCUHmb9F 4rbvF2fcvjDr/5HCBfbI9lcsL33hN1I6CpC3ouGozu3Z/6llt5BHQ/TBQt7HWYn4 uXtT55oNtM5IvLIPVB2SMskcKypwer6XvuUS0TVGuJM0EMrQkhm94Gc7VyuqNZ0X LwnKBKL48dbNKbJ6Nclu1AyktgOWq/s1qAWHQAky46lGxHYoXLfkL0zPGwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFF8sP1+Bs28KMz1e25nYa3hV0UoEMB8GA1UdIwQY MBaAFOXPePXzOe53fadJIQqW7O2Wt/LnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWM5NDlmTTU3bmQ5cDBraENwYnM3WmEzOHVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9jNGJkOTUtYzY3MC00OTBkLThjYzAt YjdkYzgzNzA2YTJhLzEvWHl3X1g0R3pid296UFY3Ym1kaHJlRlhSU2dRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9jNGJkOTUtYzY3MC00OTBkLThjYzAtYjdkYzgzNzA2YTJh LzEvNWM5NDlmTTU3bmQ5cDBraENwYnM3WmEzOHVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQCuVC8MBgE AgACMBIDBwEqBX8AAYgDBwEqBX8AAZAwDQYJKoZIhvcNAQELBQADggEBAGmU2oSC iEcdW8qTP/x/daMtSyP7E+aSo3D62WzNwffse7y0pRbpUmzQIyuIdc+5On83o/n7 zWaJK6tx5fEHy39xLhHdd7ut/97pjlMYA3tnQxwK0mxC8JG8VsQDL9YFunhYRkYU oiFDKvtrSdCYBGElR68VsQVF78xe1EpkFs9a2gJufjumb4vMfJdYGga1rchROb3r 1vWuXSuzGEfY6shhqv+Y0M8xPE22fiGV9XNJJTPDW+SSTd3VVT305ClJGywodm2V 19B0GUBhRKJgCuozTV/TVKPEh04WUM7ydlFM3dWqAvJ+y3UV4NBSnl6T3xapnI89 gamj8EZFHqOWyHI= -----END CERTIFICATE-----Generated at Tue Jan 27 05:34:17 2026 by rpki-client