This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/Xq_RWfaCi568G5XqSjGiet-3ESg.roa File: Xq_RWfaCi568G5XqSjGiet-3ESg.roa (raw, json) Hash identifier: 1dWVkDzGdeaRRfX6M5oEf40LZlhh6Ek8g5TtCgeyNek= Subject key identifier: 5E:AF:D1:59:F6:82:8B:9E:BC:1B:95:EA:4A:31:A2:7A:DF:B7:11:28 Certificate issuer: /CN=7d15cfedb9aeab42bf8ac5b24cb1aeec2a660943 Certificate serial: 019B79EBB1C63C67B0833714316D070426DD Authority key identifier: 7D:15:CF:ED:B9:AE:AB:42:BF:8A:C5:B2:4C:B1:AE:EC:2A:66:09:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/Xq_RWfaCi568G5XqSjGiet-3ESg.roa Signing time: Thu 01 Jan 2026 14:17:28 +0000 ROA not before: Thu 01 Jan 2026 14:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12390 IP address blocks: 5.198.0.0/17 maxlen: 17 77.86.0.0/17 maxlen: 17 83.100.128.0/17 maxlen: 17 87.102.0.0/17 maxlen: 17 94.72.192.0/18 maxlen: 18 159.253.64.0/20 maxlen: 20 178.78.64.0/18 maxlen: 18 185.188.232.0/22 maxlen: 22 194.207.64.0/19 maxlen: 19 194.207.96.0/19 maxlen: 19 194.207.128.0/19 maxlen: 19 194.207.160.0/19 maxlen: 19 194.207.192.0/19 maxlen: 19 194.207.224.0/19 maxlen: 19 212.50.160.0/19 maxlen: 19 213.249.128.0/18 maxlen: 18 213.249.192.0/18 maxlen: 18 2a00:4900::/32 maxlen: 32 2a00:4902::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.mft rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:b1:c6:3c:67:b0:83:37:14:31:6d:07:04:26:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d15cfedb9aeab42bf8ac5b24cb1aeec2a660943 Validity Not Before: Jan 1 14:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5eafd159f6828b9ebc1b95ea4a31a27adfb71128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a3:44:c6:3e:31:ea:bf:3b:83:f0:f3:f1:f1: 0f:c5:cf:84:cd:61:5c:f5:b9:d9:5a:bf:67:2f:d5: dd:f6:98:87:e8:e1:a2:af:89:a3:2a:60:d5:2b:c4: 30:5a:fe:b7:97:f2:9c:46:d5:03:63:cf:07:62:47: 49:75:bf:ba:71:8a:cd:66:fe:39:51:21:46:c6:cb: d4:e9:45:00:46:87:0d:61:84:bc:0c:05:05:86:d5: 4a:bb:4a:f3:3c:d9:2b:c5:13:b2:8d:04:6a:2f:ee: b1:d5:af:1a:02:11:a7:1a:e2:14:a0:3c:7e:7b:71: 2f:ba:b0:28:7e:74:56:86:9b:64:01:83:36:34:b9: 4f:c1:57:08:6b:80:a4:b4:73:3e:d7:40:1e:3d:c7: 42:95:c8:61:9e:3e:ae:50:68:68:83:02:9e:31:d4: 00:1c:29:30:57:c2:62:fd:18:1b:b9:8e:ac:d9:90: 96:d4:47:1d:a0:b8:ef:78:04:b0:0e:a2:a7:63:f0: 1a:cf:c7:47:ef:76:b3:75:3e:83:7a:31:7b:82:ba: 51:fd:ed:1d:f3:d1:df:39:92:e2:a5:6f:9d:94:ce: 43:7f:d2:b7:d8:d8:55:16:d8:38:a4:03:27:d8:c5: 44:77:55:f8:61:32:ba:94:31:7c:44:69:e4:71:71: c5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:AF:D1:59:F6:82:8B:9E:BC:1B:95:EA:4A:31:A2:7A:DF:B7:11:28 X509v3 Authority Key Identifier: keyid:7D:15:CF:ED:B9:AE:AB:42:BF:8A:C5:B2:4C:B1:AE:EC:2A:66:09:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/Xq_RWfaCi568G5XqSjGiet-3ESg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.198.0.0/17 77.86.0.0/17 83.100.128.0/17 87.102.0.0/17 94.72.192.0/18 159.253.64.0/20 178.78.64.0/18 185.188.232.0/22 194.207.64.0-194.207.255.255 212.50.160.0/19 213.249.128.0/17 IPv6: 2a00:4900::/32 2a00:4902::/32 Signature Algorithm: sha256WithRSAEncryption 6b:be:84:cd:83:94:f7:ab:8f:9d:05:70:45:f4:3d:a7:73:b4: 9e:2f:9a:6e:ab:30:c0:fc:74:27:0f:f2:1e:f6:78:97:7a:c5: be:58:84:8a:3c:02:e5:0c:91:44:10:d2:61:5b:24:60:75:ff: 1f:0f:0e:bc:17:3b:3a:9f:f5:56:6d:c9:f1:8c:fb:40:a8:d5: 7d:ca:52:a3:81:f0:88:7c:25:26:33:62:21:77:92:c9:35:22: 93:60:4c:4f:1e:28:cd:84:d9:47:2e:c6:50:51:46:f5:55:25: f8:47:fd:93:db:51:59:f2:1a:c1:ed:0d:5b:1b:92:31:6f:78: 82:9a:b4:ba:30:35:a7:e3:a3:70:77:9a:69:81:7f:50:92:83: 56:97:e6:ec:88:62:2b:55:c5:f8:e5:74:c1:c5:0c:10:12:e2: 56:29:97:8b:bd:89:45:b9:7e:c1:d7:5f:4a:53:b4:d0:f1:37: c8:8b:f6:91:82:2e:50:a0:67:02:c6:de:d8:de:da:01:65:f5: 30:5d:a2:14:c1:21:35:55:eb:e0:7e:a0:25:90:ab:a7:d7:1d: b0:89:2a:5c:6a:04:81:74:c7:0b:e6:e7:20:e8:c6:20:5b:42: 26:8a:86:c3:33:63:bd:f4:f6:aa:a6:39:58:f4:41:7d:0e:e5: 78:20:48:b9 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgISAZt567HGPGewgzcUMW0HBCbdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMTVjZmVkYjlhZWFiNDJiZjhhYzViMjRjYjFhZWVjMmE2 NjA5NDMwHhcNMjYwMTAxMTQxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZWFmZDE1OWY2ODI4YjllYmMxYjk1ZWE0YTMxYTI3YWRmYjcxMTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1aNExj4x6r87g/Dz8fEPxc+EzWFc 9bnZWr9nL9Xd9piH6OGir4mjKmDVK8QwWv63l/KcRtUDY88HYkdJdb+6cYrNZv45 USFGxsvU6UUARocNYYS8DAUFhtVKu0rzPNkrxROyjQRqL+6x1a8aAhGnGuIUoDx+ e3EvurAofnRWhptkAYM2NLlPwVcIa4CktHM+10AePcdClchhnj6uUGhogwKeMdQA HCkwV8Ji/RgbuY6s2ZCW1EcdoLjveASwDqKnY/Aaz8dH73azdT6DejF7grpR/e0d 89HfOZLipW+dlM5Df9K32NhVFtg4pAMn2MVEd1X4YTK6lDF8RGnkcXHFHwIDAQAB o4ICYjCCAl4wHQYDVR0OBBYEFF6v0Vn2gouevBuV6koxonrftxEoMB8GA1UdIwQY MBaAFH0Vz+25rqtCv4rFskyxruwqZglDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlJYUDdibXVxMEtfaXNXeVRMR3U3Q3BtQ1VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hZDZiNzMtMGU4Yy00YTQ1LWI2YmIt NDIyODFmNTUxOGE5LzEvWHFfUldmYUNpNTY4RzVYcVNqR2lldC0zRVNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9hZDZiNzMtMGU4Yy00YTQ1LWI2YmItNDIyODFmNTUxOGE5 LzEvZlJYUDdibXVxMEtfaXNXeVRMR3U3Q3BtQ1VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHgGCCsGAQUFBwEHAQH/BGkwZzBPBAIAATBJAwQHBcYAAwQH TVYAAwQHU2SAAwQHV2YAAwQGXkjAAwQEn/1AAwQGsk5AAwQCubzoMAsDBAbCz0AD AwTCwAMEBdQyoAMEB9X5gDAUBAIAAjAOAwUAKgBJAAMFACoASQIwDQYJKoZIhvcN AQELBQADggEBAGu+hM2DlPerj50FcEX0PadztJ4vmm6rMMD8dCcP8h72eJd6xb5Y hIo8AuUMkUQQ0mFbJGB1/x8PDrwXOzqf9VZtyfGM+0Co1X3KUqOB8Ih8JSYzYiF3 ksk1IpNgTE8eKM2E2UcuxlBRRvVVJfhH/ZPbUVnyGsHtDVsbkjFveIKatLowNafj o3B3mmmBf1CSg1aX5uyIYitVxfjldMHFDBAS4lYpl4u9iUW5fsHXX0pTtNDxN8iL 9pGCLlCgZwLG3tje2gFl9TBdohTBITVV6+B+oCWQq6fXHbCJKlxqBIF0xwvm5yDo xiBbQiaKhsMzY7309qqmOVj0QX0O5XggSLk= -----END CERTIFICATE-----Generated at Mon Jan 26 01:15:53 2026 by rpki-client