This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/xdOptcLghP-Uvz4M-klrTMY4ES4.roa File: xdOptcLghP-Uvz4M-klrTMY4ES4.roa (raw, json) Hash identifier: Slwt7gL42EyfqojCKzhTPCC7jAxxoAR7bu6b3w09Sxo= Subject key identifier: C5:D3:A9:B5:C2:E0:84:FF:94:BF:3E:0C:FA:49:6B:4C:C6:38:11:2E Certificate issuer: /CN=4100e4b4a97882c1798c470e3abd805e325dd595 Certificate serial: 019B7D5BF92683234D9A3EB7F61F7E5045A3 Authority key identifier: 41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/xdOptcLghP-Uvz4M-klrTMY4ES4.roa Signing time: Fri 02 Jan 2026 06:18:58 +0000 ROA not before: Fri 02 Jan 2026 06:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28878 IP address blocks: 185.72.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:f9:26:83:23:4d:9a:3e:b7:f6:1f:7e:50:45:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4100e4b4a97882c1798c470e3abd805e325dd595 Validity Not Before: Jan 2 06:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5d3a9b5c2e084ff94bf3e0cfa496b4cc638112e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c5:33:9a:23:a5:3c:ab:bb:70:09:92:7a:17: 6f:9b:2e:f5:64:1f:92:61:8d:7d:6b:cf:ca:bf:58: 95:16:08:a1:49:15:d3:33:b5:f5:36:26:6f:c3:64: 78:bb:66:c3:04:10:4b:7c:07:5a:b8:ad:c1:30:fa: 76:0b:0e:65:b1:05:ff:68:10:be:40:4e:2f:bf:ed: 67:52:da:b4:a7:61:94:d5:8c:73:63:8e:d7:25:30: 3c:d4:29:0b:e3:f8:ff:d6:8f:31:39:71:8e:6a:8c: 04:41:73:70:4a:26:3d:7f:63:75:56:cb:ea:4d:0d: 5c:d1:07:b3:6d:62:3d:bc:be:31:62:1e:d6:7d:82: 45:b9:29:0e:92:db:86:76:4d:3a:ac:93:c6:ce:a3: 16:8f:4e:5b:92:37:e7:b7:d5:22:b9:90:89:d6:f1: b3:50:74:12:d4:e1:37:f0:d7:54:26:05:a7:7c:81: 45:7c:ed:4a:82:b5:f2:45:e2:d4:e2:5b:1f:96:23: a9:63:ac:26:03:42:86:d1:55:ef:32:79:ab:e8:db: fc:e7:2a:1c:32:7c:f0:08:91:2b:2a:26:f0:1f:e9: e1:82:50:e2:12:2c:6f:77:61:c4:02:31:67:f3:1e: 66:8c:d7:0f:8d:b0:c4:95:7b:47:f3:87:d6:3d:02: 8c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D3:A9:B5:C2:E0:84:FF:94:BF:3E:0C:FA:49:6B:4C:C6:38:11:2E X509v3 Authority Key Identifier: keyid:41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/xdOptcLghP-Uvz4M-klrTMY4ES4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.72.132.0/22 Signature Algorithm: sha256WithRSAEncryption 09:eb:ed:2b:25:c5:82:63:06:9b:57:b6:c3:9f:50:b7:b6:50: 0a:ce:95:73:05:1e:c5:63:e7:a3:07:e7:59:31:51:ac:e7:2b: 30:2c:10:5a:18:0d:7b:de:95:dd:0e:42:ab:07:59:a9:8e:10: 97:e0:39:a5:cf:81:62:bd:8c:30:24:d5:77:ce:d9:48:84:68: 83:21:4f:58:3b:11:c4:00:a6:6e:4a:c7:41:84:9a:91:32:d6: 39:95:e6:8b:e8:6e:9e:3c:4e:1a:bc:df:f5:ff:06:6a:ce:8f: 89:71:6e:3c:f1:ae:b2:4f:f0:09:12:ca:c5:1d:17:f9:37:8c: c5:11:0d:24:3b:06:cd:54:7e:75:bd:a3:b2:3d:7d:47:ef:dd: 44:3d:03:3f:df:7a:d4:f3:09:c9:5d:bd:bf:b4:29:37:97:eb: 47:39:fe:61:b3:d9:8e:79:4b:bd:a9:ea:4e:5d:b3:96:7b:d8: 89:7a:d0:3d:ab:6d:41:90:2f:bc:ab:a4:4d:a9:d0:52:0d:4c: 9b:57:88:83:44:19:0e:3c:ff:53:e1:44:5c:3d:de:e2:b1:b8: d4:75:01:9f:f6:1a:64:b6:7b:47:f1:e6:63:12:eb:bb:00:6c: 9c:f6:e7:48:ec:36:13:3d:42:86:f3:9c:bf:10:2d:89:a5:dd: 67:e8:d2:1d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W/kmgyNNmj639h9+UEWjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMDBlNGI0YTk3ODgyYzE3OThjNDcwZTNhYmQ4MDVlMzI1 ZGQ1OTUwHhcNMjYwMTAyMDYxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNWQzYTliNWMyZTA4NGZmOTRiZjNlMGNmYTQ5NmI0Y2M2MzgxMTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncUzmiOlPKu7cAmSehdvmy71ZB+S YY19a8/Kv1iVFgihSRXTM7X1NiZvw2R4u2bDBBBLfAdauK3BMPp2Cw5lsQX/aBC+ QE4vv+1nUtq0p2GU1YxzY47XJTA81CkL4/j/1o8xOXGOaowEQXNwSiY9f2N1Vsvq TQ1c0QezbWI9vL4xYh7WfYJFuSkOktuGdk06rJPGzqMWj05bkjfnt9UiuZCJ1vGz UHQS1OE38NdUJgWnfIFFfO1KgrXyReLU4lsfliOpY6wmA0KG0VXvMnmr6Nv85yoc MnzwCJErKibwH+nhglDiEixvd2HEAjFn8x5mjNcPjbDElXtH84fWPQKM3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMXTqbXC4IT/lL8+DPpJa0zGOBEuMB8GA1UdIwQY MBaAFEEA5LSpeILBeYxHDjq9gF4yXdWVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVFEa3RLbDRnc0Y1akVjT09yMkFYakpkMVpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9iZWI5N2UtMDk1Ny00NDgwLThiNDAt ZGFhOWYyYTMzYmFmLzEveGRPcHRjTGdoUC1Vdno0TS1rbHJUTVk0RVM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9iZWI5N2UtMDk1Ny00NDgwLThiNDAtZGFhOWYyYTMzYmFm LzEvUVFEa3RLbDRnc0Y1akVjT09yMkFYakpkMVpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUiEMA0G CSqGSIb3DQEBCwUAA4IBAQAJ6+0rJcWCYwabV7bDn1C3tlAKzpVzBR7FY+ejB+dZ MVGs5yswLBBaGA173pXdDkKrB1mpjhCX4Dmlz4FivYwwJNV3ztlIhGiDIU9YOxHE AKZuSsdBhJqRMtY5leaL6G6ePE4avN/1/wZqzo+JcW488a6yT/AJEsrFHRf5N4zF EQ0kOwbNVH51vaOyPX1H791EPQM/33rU8wnJXb2/tCk3l+tHOf5hs9mOeUu9qepO XbOWe9iJetA9q21BkC+8q6RNqdBSDUybV4iDRBkOPP9T4URcPd7isbjUdQGf9hpk tntH8eZjEuu7AGyc9udI7DYTPUKG85y/EC2Jpd1n6NId -----END CERTIFICATE-----Generated at Sun Jan 25 16:35:56 2026 by rpki-client