This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/xEtH3nZkjZP1cHLTfmkxzgvLsMU.roa File: xEtH3nZkjZP1cHLTfmkxzgvLsMU.roa (raw, json) Hash identifier: BGUb3g3pcbUOTctA2o1s832xh1EgHk8oxohuvzvEQok= Subject key identifier: C4:4B:47:DE:76:64:8D:93:F5:70:72:D3:7E:69:31:CE:0B:CB:B0:C5 Certificate issuer: /CN=7f168028ec0dab668a67d5bf6f5358caabe337a8 Certificate serial: 019B7AC914085787E5E85AD3551B9B14320D Authority key identifier: 7F:16:80:28:EC:0D:AB:66:8A:67:D5:BF:6F:53:58:CA:AB:E3:37:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/xEtH3nZkjZP1cHLTfmkxzgvLsMU.roa Signing time: Thu 01 Jan 2026 18:19:16 +0000 ROA not before: Thu 01 Jan 2026 18:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29119 IP address blocks: 5.57.224.0/22 maxlen: 24 5.57.228.0/22 maxlen: 24 146.255.16.0/22 maxlen: 24 146.255.19.0/24 maxlen: 24 146.255.20.0/22 maxlen: 24 146.255.21.0/24 maxlen: 24 185.2.148.0/23 maxlen: 24 185.2.150.0/23 maxlen: 24 185.47.12.0/22 maxlen: 24 185.57.172.0/23 maxlen: 24 185.57.174.0/23 maxlen: 24 185.99.184.0/22 maxlen: 24 185.103.36.0/22 maxlen: 24 185.104.132.0/22 maxlen: 24 185.104.132.0/23 maxlen: 24 185.104.134.0/23 maxlen: 24 185.104.134.0/24 maxlen: 24 185.105.220.0/22 maxlen: 24 185.105.222.0/23 maxlen: 24 2a00:de40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:14:08:57:87:e5:e8:5a:d3:55:1b:9b:14:32:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f168028ec0dab668a67d5bf6f5358caabe337a8 Validity Not Before: Jan 1 18:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c44b47de76648d93f57072d37e6931ce0bcbb0c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1d:cd:52:11:8c:88:27:78:25:73:b8:cf:4b: 61:16:3a:e8:11:ab:89:90:49:1a:0d:f5:80:25:3a: 75:42:5e:cb:bc:4c:c6:bc:c4:bb:d5:f7:2b:38:cc: 1d:b5:79:6a:12:4e:0b:75:76:60:98:2b:b0:9c:c7: b5:df:2d:a6:3e:c2:cb:c0:f0:6a:b7:79:e4:82:e3: c9:bb:8a:c8:b5:4f:5e:fa:36:f4:2f:cb:1b:47:d5: a3:88:fc:77:8d:ce:e8:4b:3f:ba:df:5c:aa:38:56: 59:eb:13:2e:6b:31:2f:97:f0:bd:a1:ca:11:ad:74: db:b3:b5:ca:f0:b5:f5:16:1d:8a:e3:24:12:c5:74: 76:e6:05:9d:ab:55:4f:df:69:eb:b1:76:ee:04:46: 0b:1f:2b:f3:81:f4:b3:f2:21:2a:71:52:3d:c3:15: c6:6b:31:fc:2e:9d:55:e3:6b:2c:a3:19:ee:ff:6f: 47:dc:c8:18:a2:ac:46:d0:d2:f2:df:3e:ee:cb:aa: 7e:c3:cb:94:60:e1:74:19:54:83:12:7c:a9:8e:00: 04:12:7a:95:2d:ef:ea:17:41:8c:26:65:36:4f:c8: 5d:ae:9e:bd:ba:ef:72:10:e1:71:3a:71:d9:b1:f5: 16:fa:3a:a1:68:0e:6e:3f:78:69:3b:f8:ab:a5:b6: e6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:4B:47:DE:76:64:8D:93:F5:70:72:D3:7E:69:31:CE:0B:CB:B0:C5 X509v3 Authority Key Identifier: keyid:7F:16:80:28:EC:0D:AB:66:8A:67:D5:BF:6F:53:58:CA:AB:E3:37:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/xEtH3nZkjZP1cHLTfmkxzgvLsMU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.57.224.0/21 146.255.16.0/21 185.2.148.0/22 185.47.12.0/22 185.57.172.0/22 185.99.184.0/22 185.103.36.0/22 185.104.132.0/22 185.105.220.0/22 IPv6: 2a00:de40::/32 Signature Algorithm: sha256WithRSAEncryption 9f:22:b4:c2:f7:17:fe:36:5a:68:e2:92:1a:67:cf:7a:ff:f3: 18:99:17:7b:5c:78:b7:0f:05:02:d1:76:90:75:c6:3f:bf:b8: ca:16:0f:c1:ad:0f:e1:71:2c:98:0d:e3:30:2a:15:53:6f:85: 26:d2:f2:70:57:47:79:f1:8f:02:ee:fd:72:cd:63:37:aa:c9: 1a:16:5a:41:8b:5e:0a:70:ce:30:2e:a5:bd:f5:43:a1:1c:d8: be:ce:85:8f:56:df:ce:ef:2f:9b:c1:c1:37:c6:e9:df:e9:76: 7a:83:62:f1:e0:e5:82:f4:5d:ff:1b:06:21:72:f9:68:5d:15: 97:31:d3:02:eb:d0:70:9e:39:1b:e8:18:e5:67:d8:cf:b5:31: 85:35:f5:dd:de:12:1c:e1:f7:53:f2:76:36:75:09:51:6b:23: c2:28:63:a9:8b:6a:ee:03:fd:77:8e:16:5a:76:a7:ec:f7:9f: e9:b3:8b:e3:ea:7f:9b:09:76:59:8b:de:71:46:0d:96:69:9d: 2a:0b:f8:27:84:b6:68:49:a9:84:94:df:ee:87:6e:b9:77:2d: 59:9c:c3:ca:fe:ed:84:38:96:d2:72:42:c1:8e:68:ee:da:b6: 42:b9:7e:58:ee:fd:52:bb:85:3f:a6:69:08:89:2a:51:e3:08: d2:b9:81:9a -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgISAZt6yRQIV4fl6FrTVRubFDINMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmMTY4MDI4ZWMwZGFiNjY4YTY3ZDViZjZmNTM1OGNhYWJl MzM3YTgwHhcNMjYwMTAxMTgxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDRiNDdkZTc2NjQ4ZDkzZjU3MDcyZDM3ZTY5MzFjZTBiY2JiMGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqx3NUhGMiCd4JXO4z0thFjroEauJ kEkaDfWAJTp1Ql7LvEzGvMS71fcrOMwdtXlqEk4LdXZgmCuwnMe13y2mPsLLwPBq t3nkguPJu4rItU9e+jb0L8sbR9WjiPx3jc7oSz+631yqOFZZ6xMuazEvl/C9ocoR rXTbs7XK8LX1Fh2K4yQSxXR25gWdq1VP32nrsXbuBEYLHyvzgfSz8iEqcVI9wxXG azH8Lp1V42ssoxnu/29H3MgYoqxG0NLy3z7uy6p+w8uUYOF0GVSDEnypjgAEEnqV Le/qF0GMJmU2T8hdrp69uu9yEOFxOnHZsfUW+jqhaA5uP3hpO/irpbbmUwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFMRLR952ZI2T9XBy035pMc4Ly7DFMB8GA1UdIwQY MBaAFH8WgCjsDatmimfVv29TWMqr4zeoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnhhQUtPd05xMmFLWjlXX2IxTll5cXZqTjZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9iMTUyODYtZmQ0ZC00OWZlLWE2OWUt N2ZhZGY1MGEyZTM3LzEveEV0SDNuWmtqWlAxY0hMVGZta3h6Z3ZMc01VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9iMTUyODYtZmQ0ZC00OWZlLWE2OWUtN2ZhZGY1MGEyZTM3 LzEvZnhhQUtPd05xMmFLWjlXX2IxTll5cXZqTjZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQDBTngAwQD kv8QAwQCuQKUAwQCuS8MAwQCuTmsAwQCuWO4AwQCuWckAwQCuWiEAwQCuWncMA0E AgACMAcDBQAqAN5AMA0GCSqGSIb3DQEBCwUAA4IBAQCfIrTC9xf+Nlpo4pIaZ896 //MYmRd7XHi3DwUC0XaQdcY/v7jKFg/BrQ/hcSyYDeMwKhVTb4Um0vJwV0d58Y8C 7v1yzWM3qskaFlpBi14KcM4wLqW99UOhHNi+zoWPVt/O7y+bwcE3xunf6XZ6g2Lx 4OWC9F3/GwYhcvloXRWXMdMC69Bwnjkb6BjlZ9jPtTGFNfXd3hIc4fdT8nY2dQlR ayPCKGOpi2ruA/13jhZadqfs95/ps4vj6n+bCXZZi95xRg2WaZ0qC/gnhLZoSamE lN/uh265dy1ZnMPK/u2EOJbSckLBjmju2rZCuX5Y7v1Su4U/pmkIiSpR4wjSuYGa -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:26 2026 by rpki-client