This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/X3dyFFJkWZ_5C7a0JwroT3BzGyo.roa File: X3dyFFJkWZ_5C7a0JwroT3BzGyo.roa (raw, json) Hash identifier: oojtdwuF0DNI776adrLDqDwOyCRSKnaBuQ3LrX5M380= Subject key identifier: 5F:77:72:14:52:64:59:9F:F9:0B:B6:B4:27:0A:E8:4F:70:73:1B:2A Certificate issuer: /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2 Certificate serial: 019B7AC952F75666DA0920B06EC16C95729E Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/X3dyFFJkWZ_5C7a0JwroT3BzGyo.roa Signing time: Thu 01 Jan 2026 18:19:32 +0000 ROA not before: Thu 01 Jan 2026 18:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205645 IP address blocks: 5.59.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.mft rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:52:f7:56:66:da:09:20:b0:6e:c1:6c:95:72:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2 Validity Not Before: Jan 1 18:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f7772145264599ff90bb6b4270ae84f70731b2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:07:c0:b2:91:1c:47:4a:86:c3:2d:13:a2:7d: 20:61:04:0f:f4:98:a2:f6:94:cb:98:4b:40:4f:66: fc:2f:26:42:47:5c:f2:b6:a6:10:55:a8:70:8a:f8: 7c:35:d0:34:9f:b0:92:5a:48:ec:05:8b:35:7b:1d: 2c:cc:89:4e:da:17:f0:6c:70:c2:81:bf:7c:0a:e5: 3a:e7:46:85:8b:71:72:a4:7f:c7:f9:16:87:3f:46: d7:0d:d3:97:be:f4:9e:6f:ac:b4:2f:08:47:df:cf: d1:0f:8c:d7:58:e1:d9:3b:09:77:bc:d8:e6:e1:17: 33:8e:d4:1f:62:c4:90:af:98:62:25:fa:44:06:e4: 88:e7:ec:a0:3a:86:70:89:c9:e9:9f:81:ec:97:43: d7:6e:4f:20:e7:22:0e:99:0a:d9:86:a3:05:b5:b5: 66:cb:4e:87:a1:cf:88:6a:25:49:30:50:b4:fd:11: c1:c1:0f:35:d3:8b:d0:31:a1:d7:56:98:16:69:b6: c2:25:7d:64:4b:81:e7:2b:c7:2e:f1:e3:f5:87:bf: ca:a3:45:c4:e5:9b:af:ab:b2:ed:09:a0:ef:78:b4: 33:8b:b0:82:09:68:8f:e3:47:6c:8f:46:56:d5:30: 7d:0b:78:a2:92:9f:8c:46:be:25:d3:24:fa:be:3f: 52:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:77:72:14:52:64:59:9F:F9:0B:B6:B4:27:0A:E8:4F:70:73:1B:2A X509v3 Authority Key Identifier: keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/X3dyFFJkWZ_5C7a0JwroT3BzGyo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.59.68.0/22 Signature Algorithm: sha256WithRSAEncryption 1e:95:e3:da:b0:a7:a4:ee:fc:03:71:52:69:d4:e2:33:f1:07: 58:b3:55:f5:20:86:13:f2:81:65:ef:f0:bd:ba:2f:b9:37:63: f8:08:18:f2:0d:86:ec:8a:76:5b:d9:fe:00:ef:97:06:8c:f9: 57:6f:08:b8:2c:6b:07:fc:87:66:69:45:1f:72:69:c5:06:99: 34:cd:b4:c1:c8:4f:97:ec:0b:24:a5:51:5e:3d:ed:02:63:51: c6:56:85:66:1f:6e:9c:ae:04:50:c9:76:f3:03:d5:9d:c8:ef: b8:01:a1:c9:ae:15:ae:86:0b:1b:0b:e1:01:9a:12:cd:c2:55: 4b:b1:22:1c:c4:80:b9:17:cc:0c:09:f5:ea:3f:ce:55:36:e5: 24:75:e3:04:51:cd:73:5e:20:2d:0a:23:3e:78:7c:28:19:5e: e3:2b:b7:12:b3:25:ea:8d:6d:96:9e:e8:1a:19:4e:4d:30:d7: d0:a5:81:4c:e5:fa:ec:7b:c1:8f:26:ca:b5:2c:a1:0c:ef:12: de:9e:5f:8e:2d:4f:43:b0:6d:67:b6:5d:ab:06:19:00:87:c7: 50:b3:2d:71:14:03:68:c0:81:62:57:30:25:fe:1b:a7:bc:4d: 0d:36:d2:a9:29:63:97:93:e2:99:3f:c9:00:93:76:9a:b5:d6: fd:83:82:23 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yVL3VmbaCSCwbsFslXKeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5NDgxMTE5YWZlMWJmZjIyOWZhY2Q0ZWY5YzhjNjFiMGZh YmVhZjIwHhcNMjYwMTAxMTgxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Zjc3NzIxNDUyNjQ1OTlmZjkwYmI2YjQyNzBhZTg0ZjcwNzMxYjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQfAspEcR0qGwy0Ton0gYQQP9Jii 9pTLmEtAT2b8LyZCR1zytqYQVahwivh8NdA0n7CSWkjsBYs1ex0szIlO2hfwbHDC gb98CuU650aFi3FypH/H+RaHP0bXDdOXvvSeb6y0LwhH38/RD4zXWOHZOwl3vNjm 4RczjtQfYsSQr5hiJfpEBuSI5+ygOoZwicnpn4Hsl0PXbk8g5yIOmQrZhqMFtbVm y06Hoc+IaiVJMFC0/RHBwQ8104vQMaHXVpgWabbCJX1kS4HnK8cu8eP1h7/Ko0XE 5Zuvq7LtCaDveLQzi7CCCWiP40dsj0ZW1TB9C3iikp+MRr4l0yT6vj9SdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF93chRSZFmf+Qu2tCcK6E9wcxsqMB8GA1UdIwQY MBaAFLlIERmv4b/yKfrNTvnIxhsPq+ryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVVnUkdhX2h2X0lwLXMxTy1jakdHdy1yNnZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jYjAwMDctM2VhOS00NzU5LThkNzAt OWI5YmNlMTVlMGM2LzEvWDNkeUZGSmtXWl81QzdhMEp3cm9UM0J6R3lvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9jYjAwMDctM2VhOS00NzU5LThkNzAtOWI5YmNlMTVlMGM2 LzEvdVVnUkdhX2h2X0lwLXMxTy1jakdHdy1yNnZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBTtEMA0G CSqGSIb3DQEBCwUAA4IBAQAelePasKek7vwDcVJp1OIz8QdYs1X1IIYT8oFl7/C9 ui+5N2P4CBjyDYbsinZb2f4A75cGjPlXbwi4LGsH/IdmaUUfcmnFBpk0zbTByE+X 7AskpVFePe0CY1HGVoVmH26crgRQyXbzA9WdyO+4AaHJrhWuhgsbC+EBmhLNwlVL sSIcxIC5F8wMCfXqP85VNuUkdeMEUc1zXiAtCiM+eHwoGV7jK7cSsyXqjW2Wnuga GU5NMNfQpYFM5frse8GPJsq1LKEM7xLenl+OLU9DsG1ntl2rBhkAh8dQsy1xFANo wIFiVzAl/hunvE0NNtKpKWOXk+KZP8kAk3aatdb9g4Ij -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:37 2026 by rpki-client