This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/X0ojMkNeyFClUGlQvNWrEk9lhbc.roa File: X0ojMkNeyFClUGlQvNWrEk9lhbc.roa (raw, json) Hash identifier: Ii+YbydzlxoJvpnON4VwXJuJxN3e8pSyx1ELN6lSTl0= Subject key identifier: 5F:4A:23:32:43:5E:C8:50:A5:50:69:50:BC:D5:AB:12:4F:65:85:B7 Certificate issuer: /CN=cbd4719d72d288a73218d8c1a498823333297e25 Certificate serial: 019B77C6B5787B9CC375B38D6714F4C9711C Authority key identifier: CB:D4:71:9D:72:D2:88:A7:32:18:D8:C1:A4:98:82:33:33:29:7E:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/X0ojMkNeyFClUGlQvNWrEk9lhbc.roa Signing time: Thu 01 Jan 2026 04:17:49 +0000 ROA not before: Thu 01 Jan 2026 04:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50597 IP address blocks: 167.160.5.0/24 maxlen: 24 185.98.157.0/24 maxlen: 24 185.181.52.0/22 maxlen: 22 185.181.52.0/23 maxlen: 24 185.181.54.0/24 maxlen: 24 185.181.55.0/24 maxlen: 24 192.161.6.0/24 maxlen: 24 192.161.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:b5:78:7b:9c:c3:75:b3:8d:67:14:f4:c9:71:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbd4719d72d288a73218d8c1a498823333297e25 Validity Not Before: Jan 1 04:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f4a2332435ec850a5506950bcd5ab124f6585b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:02:95:82:59:3e:1c:aa:8f:6a:be:f0:4e:ee: 69:2c:d4:61:62:41:e2:46:06:8e:d6:83:1c:41:bc: 6a:73:33:16:6b:33:7e:d1:43:35:f1:e4:b8:9d:a7: cd:20:2e:cb:0b:1e:38:c1:47:b1:da:bc:36:5c:8c: b6:86:ab:62:f4:65:c7:44:8f:00:88:bf:60:98:fc: 65:94:49:19:e8:c3:c9:da:d7:18:74:55:76:e8:4e: d3:d2:62:ee:e0:6d:f6:5a:fe:4b:63:00:44:e1:5b: b9:73:50:f0:06:78:dd:40:f6:7c:2c:e7:68:13:9b: 04:8e:95:d7:67:73:37:e2:1a:6f:7a:48:f8:7d:07: a1:f3:17:fc:b7:14:dc:13:d5:47:17:12:a0:c9:68: 6d:2b:90:6a:63:30:09:ad:27:3b:2a:5a:0e:fd:ca: 5c:df:f7:34:e6:fc:3f:87:3c:67:98:71:bb:27:60: 33:df:52:8b:0b:24:06:51:02:e3:7d:7d:81:87:ef: 00:b7:f4:6f:1d:24:74:cc:2a:94:67:b3:b5:03:3c: a3:cc:63:b7:ca:a9:0b:85:f1:21:47:6c:3e:4c:bf: 28:d8:f7:1c:0d:95:54:c0:3b:04:04:ad:cd:ee:53: 97:70:af:4a:96:3c:53:d4:c1:62:7f:3b:ea:f0:78: 57:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:4A:23:32:43:5E:C8:50:A5:50:69:50:BC:D5:AB:12:4F:65:85:B7 X509v3 Authority Key Identifier: keyid:CB:D4:71:9D:72:D2:88:A7:32:18:D8:C1:A4:98:82:33:33:29:7E:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/X0ojMkNeyFClUGlQvNWrEk9lhbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.160.5.0/24 185.98.157.0/24 185.181.52.0/22 192.161.6.0/23 Signature Algorithm: sha256WithRSAEncryption 2c:5c:eb:53:31:9b:58:d5:66:09:76:f7:c7:79:f9:53:f8:6e: 8d:0e:14:91:2b:ca:79:73:ad:f3:af:a3:33:54:fe:73:70:1f: 37:03:d6:8d:7a:23:f2:be:e9:e8:06:a3:61:9f:bd:76:70:1a: e2:d6:c1:5d:bd:b5:45:d3:4f:04:28:1c:87:f8:6c:06:e9:4e: 38:db:7e:ab:d4:fd:59:53:28:5b:c6:cb:8e:ee:60:9b:15:a9: 9a:21:9d:87:c1:ff:2e:7d:39:98:28:4c:04:36:c9:76:20:88: e0:b6:d8:20:b3:05:61:23:ba:49:f4:da:ca:88:e1:5d:fe:b3: 9e:51:12:56:6d:f8:e1:7c:f5:fc:89:06:b6:02:e8:cc:a1:8c: 39:57:03:d4:80:a1:d8:72:56:42:9d:e4:66:75:39:e0:f9:b5: 0a:bb:e5:0a:1c:31:e2:10:5f:3d:84:0a:70:de:e9:07:f8:cd: 3f:c6:8e:70:46:0f:71:12:45:d4:30:60:6b:94:c8:49:d4:84: 43:3b:68:d6:89:14:5d:ce:76:67:1c:2c:e0:60:58:ee:72:a7: f4:d3:89:9c:bf:e3:65:d8:ab:8b:1e:2e:2b:b7:e4:d2:21:18: 04:c2:00:ac:4b:8f:7a:24:e7:9c:03:fe:69:ec:73:ce:9c:bb: e0:2b:e8:4d -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt3xrV4e5zDdbONZxT0yXEcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZDQ3MTlkNzJkMjg4YTczMjE4ZDhjMWE0OTg4MjMzMzMy OTdlMjUwHhcNMjYwMTAxMDQxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjRhMjMzMjQzNWVjODUwYTU1MDY5NTBiY2Q1YWIxMjRmNjU4NWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQKVglk+HKqPar7wTu5pLNRhYkHi RgaO1oMcQbxqczMWazN+0UM18eS4nafNIC7LCx44wUex2rw2XIy2hqti9GXHRI8A iL9gmPxllEkZ6MPJ2tcYdFV26E7T0mLu4G32Wv5LYwBE4Vu5c1DwBnjdQPZ8LOdo E5sEjpXXZ3M34hpvekj4fQeh8xf8txTcE9VHFxKgyWhtK5BqYzAJrSc7KloO/cpc 3/c05vw/hzxnmHG7J2Az31KLCyQGUQLjfX2Bh+8At/RvHSR0zCqUZ7O1AzyjzGO3 yqkLhfEhR2w+TL8o2PccDZVUwDsEBK3N7lOXcK9KljxT1MFifzvq8HhXEQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFF9KIzJDXshQpVBpULzVqxJPZYW3MB8GA1UdIwQY MBaAFMvUcZ1y0oinMhjYwaSYgjMzKX4lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTlSeG5YTFNpS2N5R05qQnBKaUNNek1wZmlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9kYzhjMGQtZjhjMy00MDZjLWI3OWUt YjQ5MmQ2ZmY0ODNmLzEvWDBvak1rTmV5RkNsVUdsUXZOV3JFazlsaGJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9kYzhjMGQtZjhjMy00MDZjLWI3OWUtYjQ5MmQ2ZmY0ODNm LzEveTlSeG5YTFNpS2N5R05qQnBKaUNNek1wZmlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAp6AFAwQA uWKdAwQCubU0AwQBwKEGMA0GCSqGSIb3DQEBCwUAA4IBAQAsXOtTMZtY1WYJdvfH eflT+G6NDhSRK8p5c63zr6MzVP5zcB83A9aNeiPyvunoBqNhn712cBri1sFdvbVF 008EKByH+GwG6U44236r1P1ZUyhbxsuO7mCbFamaIZ2Hwf8ufTmYKEwENsl2IIjg ttggswVhI7pJ9NrKiOFd/rOeURJWbfjhfPX8iQa2AujMoYw5VwPUgKHYclZCneRm dTng+bUKu+UKHDHiEF89hApw3ukH+M0/xo5wRg9xEkXUMGBrlMhJ1IRDO2jWiRRd znZnHCzgYFjucqf004mcv+Nl2KuLHi4rt+TSIRgEwgCsS496JOecA/5p7HPOnLvg K+hN -----END CERTIFICATE-----Generated at Sun Jan 25 14:21:19 2026 by rpki-client