This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/Xvor6sHffWDb_gSNM1nS_zNqIlk.roa File: Xvor6sHffWDb_gSNM1nS_zNqIlk.roa (raw, json) Hash identifier: FYSQWRIi2pReCA7SOIEtCKhDaRDp0KJNqlBByNN1x3M= Subject key identifier: 5E:FA:2B:EA:C1:DF:7D:60:DB:FE:04:8D:33:59:D2:FF:33:6A:22:59 Certificate issuer: /CN=0849757e3e35aaab5d57c5186243a437173e4d36 Certificate serial: 019B7F15BCD6D76D22DC43D66F4D2AFDEB43 Authority key identifier: 08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/Xvor6sHffWDb_gSNM1nS_zNqIlk.roa Signing time: Fri 02 Jan 2026 14:21:29 +0000 ROA not before: Fri 02 Jan 2026 14:21:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213195 IP address blocks: 5.254.168.0/22 maxlen: 22 5.254.192.0/19 maxlen: 19 46.230.168.0/22 maxlen: 22 46.230.172.0/22 maxlen: 22 92.241.208.0/22 maxlen: 22 92.241.212.0/22 maxlen: 22 178.72.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:bc:d6:d7:6d:22:dc:43:d6:6f:4d:2a:fd:eb:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0849757e3e35aaab5d57c5186243a437173e4d36 Validity Not Before: Jan 2 14:21:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5efa2beac1df7d60dbfe048d3359d2ff336a2259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:dd:bb:95:6a:58:66:d1:3d:2a:0a:d3:95:42: fb:2b:74:4f:06:cc:56:15:99:a3:5f:22:d6:34:89: 4b:8b:7f:64:8d:81:25:80:74:04:1c:da:6d:e8:bc: 63:6d:2c:74:da:1c:2e:4a:c7:20:1d:e6:38:9a:97: 07:12:ca:b7:1f:63:4f:f5:1c:db:f1:06:8f:27:c8: a9:e8:c6:54:64:d0:20:d0:6f:db:6a:f5:a5:bb:74: 6c:41:5b:5b:c2:33:72:69:a2:a0:92:e4:10:6f:4e: 44:c8:f3:00:35:9c:95:03:53:bc:23:3f:3a:13:21: 01:74:0c:d6:a0:84:fe:a5:64:53:1a:45:b1:cf:5a: 09:78:16:d7:62:0a:fc:24:e0:99:6f:2b:e2:b2:f7: 85:c7:3f:d5:4e:8b:27:3b:97:1e:5d:29:72:6b:05: 40:74:d4:eb:e1:ef:c2:ed:6f:e5:20:28:bc:d1:00: d4:8c:c4:7c:de:2f:da:2e:00:fc:9c:f5:f2:a9:9b: 63:0c:49:11:4a:fe:c2:5b:ed:0b:68:88:e8:27:77: e6:b8:f6:04:b3:76:a3:bc:84:2d:fb:88:ab:6f:9f: 40:a4:65:c6:ff:1f:f4:49:af:2b:1a:34:b8:6d:e2: 8c:20:48:91:d8:28:ae:cc:47:26:11:72:45:3a:dc: e0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:FA:2B:EA:C1:DF:7D:60:DB:FE:04:8D:33:59:D2:FF:33:6A:22:59 X509v3 Authority Key Identifier: keyid:08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/Xvor6sHffWDb_gSNM1nS_zNqIlk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.254.168.0/22 5.254.192.0/19 46.230.168.0/21 92.241.208.0/21 178.72.4.0/22 Signature Algorithm: sha256WithRSAEncryption 02:9d:91:74:ad:34:c2:b3:48:13:a0:0e:20:a3:7c:9e:db:7d: 93:14:fb:11:aa:41:be:3b:66:b0:80:89:41:25:be:6a:2a:06: 22:21:e0:aa:ad:7e:8e:1a:d7:d3:c4:17:0e:49:2a:df:b7:7a: 25:e0:61:16:83:05:42:66:82:c5:82:8e:4d:e6:71:b4:1c:c0: 4e:03:65:dc:4e:d1:ee:73:eb:cb:ad:de:04:55:84:b8:3d:85: d4:ea:46:fd:f7:79:31:60:df:eb:b9:22:78:6e:56:b0:b4:5b: 9e:fb:f8:88:89:ac:a0:16:4b:3e:49:1a:14:cb:59:04:fa:bd: 80:e5:71:70:7e:aa:24:95:ab:0b:91:70:e7:21:0a:47:09:4c: 48:bc:23:35:9b:2b:1d:4f:c7:e7:b9:00:ab:ea:a6:53:d6:ed: de:d8:00:49:d1:18:8a:b1:63:ba:4f:47:37:f0:b2:d6:8f:8f: 4a:30:e2:6c:b9:16:11:47:0d:c8:db:2c:d0:45:83:83:5d:03: 02:f5:54:06:91:d1:fc:3e:b8:dc:3a:ce:ea:b8:03:18:7e:24: b5:d6:cb:b2:33:02:8c:44:bc:b4:7c:49:bb:7f:05:af:05:f8: d7:60:3a:d2:b4:ab:29:3f:8f:bc:ea:56:a1:8b:42:e7:8f:03: d4:68:c0:da -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt/FbzW120i3EPWb00q/etDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4NDk3NTdlM2UzNWFhYWI1ZDU3YzUxODYyNDNhNDM3MTcz ZTRkMzYwHhcNMjYwMTAyMTQyMTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZWZhMmJlYWMxZGY3ZDYwZGJmZTA0OGQzMzU5ZDJmZjMzNmEyMjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1d27lWpYZtE9KgrTlUL7K3RPBsxW FZmjXyLWNIlLi39kjYElgHQEHNpt6LxjbSx02hwuSscgHeY4mpcHEsq3H2NP9Rzb 8QaPJ8ip6MZUZNAg0G/bavWlu3RsQVtbwjNyaaKgkuQQb05EyPMANZyVA1O8Iz86 EyEBdAzWoIT+pWRTGkWxz1oJeBbXYgr8JOCZbyvisveFxz/VTosnO5ceXSlyawVA dNTr4e/C7W/lICi80QDUjMR83i/aLgD8nPXyqZtjDEkRSv7CW+0LaIjoJ3fmuPYE s3ajvIQt+4irb59ApGXG/x/0Sa8rGjS4beKMIEiR2CiuzEcmEXJFOtzgTQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFF76K+rB331g2/4EjTNZ0v8zaiJZMB8GA1UdIwQY MBaAFAhJdX4+NaqrXVfFGGJDpDcXPk02MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0VsMWZqNDFxcXRkVjhVWVlrT2tOeGMtVFRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mYjI0MDEtZTQ3MC00YzA1LTk5Yjgt ZjhlZWNiNDI1MDg3LzEvWHZvcjZzSGZmV0RiX2dTTk0xblNfek5xSWxrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9mYjI0MDEtZTQ3MC00YzA1LTk5YjgtZjhlZWNiNDI1MDg3 LzEvQ0VsMWZqNDFxcXRkVjhVWVlrT2tOeGMtVFRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCBf6oAwQF Bf7AAwQDLuaoAwQDXPHQAwQCskgEMA0GCSqGSIb3DQEBCwUAA4IBAQACnZF0rTTC s0gToA4go3ye232TFPsRqkG+O2awgIlBJb5qKgYiIeCqrX6OGtfTxBcOSSrft3ol 4GEWgwVCZoLFgo5N5nG0HMBOA2XcTtHuc+vLrd4EVYS4PYXU6kb993kxYN/ruSJ4 blawtFue+/iIiaygFks+SRoUy1kE+r2A5XFwfqoklasLkXDnIQpHCUxIvCM1mysd T8fnuQCr6qZT1u3e2ABJ0RiKsWO6T0c38LLWj49KMOJsuRYRRw3I2yzQRYODXQMC 9VQGkdH8PrjcOs7quAMYfiS11suyMwKMRLy0fEm7fwWvBfjXYDrStKspP4+86lah i0LnjwPUaMDa -----END CERTIFICATE-----Generated at Mon Jan 26 04:38:47 2026 by rpki-client