This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/XNcWMVyK-AaHJ7nzMwrq6f81Q2c.roa File: XNcWMVyK-AaHJ7nzMwrq6f81Q2c.roa (raw, json) Hash identifier: S/O1AiJNehkfXGq3UwqQVRSapGWwctUVrQ8+mxLuPW0= Subject key identifier: 5C:D7:16:31:5C:8A:F8:06:87:27:B9:F3:33:0A:EA:E9:FF:35:43:67 Certificate issuer: /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d Certificate serial: 019B7D5AF2F61B91400A898038BC6550E657 Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/XNcWMVyK-AaHJ7nzMwrq6f81Q2c.roa Signing time: Fri 02 Jan 2026 06:17:50 +0000 ROA not before: Fri 02 Jan 2026 06:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 36007 IP address blocks: 45.91.171.0/24 maxlen: 24 45.248.37.0/24 maxlen: 24 91.202.170.0/24 maxlen: 24 91.223.169.0/24 maxlen: 24 93.93.205.0/24 maxlen: 24 103.45.245.0/24 maxlen: 24 103.45.246.0/24 maxlen: 24 103.240.146.0/24 maxlen: 24 103.240.147.0/24 maxlen: 24 103.241.66.0/24 maxlen: 24 103.241.67.0/24 maxlen: 24 185.47.172.0/24 maxlen: 24 185.53.209.0/24 maxlen: 24 185.139.228.0/24 maxlen: 24 185.144.156.0/22 maxlen: 22 193.168.172.0/24 maxlen: 24 193.168.175.0/24 maxlen: 24 2a06:c5c0:1500::/48 maxlen: 48 2a06:c5c0:1600::/48 maxlen: 48 2a06:c5c0:1700::/48 maxlen: 48 2a07:3b80::/48 maxlen: 48 2a07:3b80:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:f2:f6:1b:91:40:0a:89:80:38:bc:65:50:e6:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d Validity Not Before: Jan 2 06:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5cd716315c8af8068727b9f3330aeae9ff354367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:56:aa:f6:23:bc:a1:b8:14:73:d6:b1:2b:57: 76:79:df:28:45:98:84:62:75:0b:5a:a5:f9:7f:8d: b5:f9:5e:7f:a0:c3:05:9b:ef:7e:34:db:da:77:4a: 9f:c2:09:ce:94:5b:17:62:ba:0f:dc:12:5c:a0:54: 9e:a2:20:3b:aa:9e:5a:b9:7c:d0:38:b0:a4:1a:8e: 60:23:b0:d6:be:6f:e2:06:28:a6:3b:e2:46:4a:4f: c0:e6:ca:3b:37:33:f1:0b:8e:36:55:e6:8f:fe:89: 52:a1:e1:6c:14:bc:2f:d9:51:5d:16:6c:a0:31:c4: 69:d3:85:8f:65:bd:1d:44:cb:8c:64:2b:c6:f5:18: d9:78:bc:b7:fe:0d:32:30:bd:da:d3:0b:94:64:75: 94:c0:45:f0:d9:a6:f9:d0:76:87:f0:cc:85:de:e9: 6d:35:46:8d:15:f0:73:3b:70:2e:03:50:17:a1:07: 40:08:da:d9:61:aa:f5:cd:ee:da:45:21:66:93:2d: db:18:76:09:20:be:b5:9b:ce:80:06:ce:b0:0b:59: 41:99:69:3a:f1:b0:99:97:18:3e:d2:18:df:39:20: d9:44:13:7d:90:57:7c:d1:93:27:93:8d:af:90:11: 51:0f:c1:cf:74:39:1c:ae:09:48:a5:33:a3:bd:32: 32:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:D7:16:31:5C:8A:F8:06:87:27:B9:F3:33:0A:EA:E9:FF:35:43:67 X509v3 Authority Key Identifier: keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/XNcWMVyK-AaHJ7nzMwrq6f81Q2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.171.0/24 45.248.37.0/24 91.202.170.0/24 91.223.169.0/24 93.93.205.0/24 103.45.245.0-103.45.246.255 103.240.146.0/23 103.241.66.0/23 185.47.172.0/24 185.53.209.0/24 185.139.228.0/24 185.144.156.0/22 193.168.172.0/24 193.168.175.0/24 IPv6: 2a06:c5c0:1500::/48 2a06:c5c0:1600::/48 2a06:c5c0:1700::/48 2a07:3b80::/48 2a07:3b80:8::/48 Signature Algorithm: sha256WithRSAEncryption 14:57:c5:c1:0b:df:2d:19:d7:e5:e0:49:43:75:ad:13:6c:a7: a4:0e:46:8a:a9:43:a3:7f:97:1a:4a:33:03:a6:31:3e:a9:c9: 46:64:a5:94:3b:5e:4e:36:15:21:65:c4:5d:90:16:70:38:8b: 2b:ea:ed:a0:c6:5a:dc:f2:2e:ad:83:9a:3e:67:f5:8f:89:7e: 7b:6e:7a:93:f7:f5:95:a8:68:c7:44:c9:f0:c6:43:d0:26:d4: 15:66:be:d2:54:41:8e:2a:6f:bf:40:6e:fb:a1:ca:ca:8b:8c: 84:47:8d:b8:69:fa:f0:f9:94:0c:d9:3f:f3:8c:21:b4:a6:da: cb:c3:45:42:5d:c4:da:5b:78:e2:ee:88:f6:6e:d3:16:50:2f: 0e:d7:13:1f:e2:0a:0d:eb:30:0d:89:62:fb:41:ad:f6:e4:65: b6:2a:bc:31:21:41:fa:7e:87:09:a2:70:ae:d4:95:15:b4:39: 66:ce:22:e1:b2:cf:89:0c:16:1c:1f:f3:f2:f0:e6:a2:2c:b3: 56:d5:48:04:c6:c9:db:2e:31:6c:a6:e9:bc:51:44:87:05:ce: 70:2c:54:36:90:63:b0:4c:75:36:34:79:fd:91:40:15:f5:88: 29:92:f7:69:13:00:3f:f3:b9:c1:b8:25:2e:70:a0:d4:42:60: b1:64:46:c0 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgISAZt9WvL2G5FAComAOLxlUOZXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YmQ3OTIzYWZkYmFlODdkMDdiMjMwOGRkMzg5ZDljZjA4 MmVkNmQwHhcNMjYwMTAyMDYxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2Q3MTYzMTVjOGFmODA2ODcyN2I5ZjMzMzBhZWFlOWZmMzU0MzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFaq9iO8obgUc9axK1d2ed8oRZiE YnULWqX5f421+V5/oMMFm+9+NNvad0qfwgnOlFsXYroP3BJcoFSeoiA7qp5auXzQ OLCkGo5gI7DWvm/iBiimO+JGSk/A5so7NzPxC442VeaP/olSoeFsFLwv2VFdFmyg McRp04WPZb0dRMuMZCvG9RjZeLy3/g0yML3a0wuUZHWUwEXw2ab50HaH8MyF3ult NUaNFfBzO3AuA1AXoQdACNrZYar1ze7aRSFmky3bGHYJIL61m86ABs6wC1lBmWk6 8bCZlxg+0hjfOSDZRBN9kFd80ZMnk42vkBFRD8HPdDkcrglIpTOjvTIymQIDAQAB o4IClzCCApMwHQYDVR0OBBYEFFzXFjFcivgGhye58zMK6un/NUNnMB8GA1UdIwQY MBaAFOW9eSOv266H0HsjCN04nZzwgu1tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWIxNUk2X2Jyb2ZRZXlNSTNUaWRuUENDN1cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8yNjkyMjktMjBlYi00ZjFjLWExM2Ut MjZkMWU1NDU3OGYxLzEvWE5jV01WeUstQWFISjduek13cnE2ZjgxUTJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS8yNjkyMjktMjBlYi00ZjFjLWExM2UtMjZkMWU1NDU3OGYx LzEvNWIxNUk2X2Jyb2ZRZXlNSTNUaWRuUENDN1cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGsBggrBgEFBQcBBwEB/wSBnDCBmTBiBAIAATBcAwQALVur AwQALfglAwQAW8qqAwQAW9+pAwQAXV3NMAwDBABnLfUDBABnLfYDBAFn8JIDBAFn 8UIDBAC5L6wDBAC5NdEDBAC5i+QDBAK5kJwDBADBqKwDBADBqK8wMwQCAAIwLQMH ACoGxcAVAAMHACoGxcAWAAMHACoGxcAXAAMHACoHO4AAAAMHACoHO4AACDANBgkq hkiG9w0BAQsFAAOCAQEAFFfFwQvfLRnX5eBJQ3WtE2ynpA5GiqlDo3+XGkozA6Yx PqnJRmSllDteTjYVIWXEXZAWcDiLK+rtoMZa3PIurYOaPmf1j4l+e256k/f1laho x0TJ8MZD0CbUFWa+0lRBjipvv0Bu+6HKyouMhEeNuGn68PmUDNk/84whtKbay8NF Ql3E2lt44u6I9m7TFlAvDtcTH+IKDeswDYli+0Gt9uRltiq8MSFB+n6HCaJwrtSV FbQ5Zs4i4bLPiQwWHB/z8vDmoiyzVtVIBMbJ2y4xbKbpvFFEhwXOcCxUNpBjsEx1 NjR5/ZFAFfWIKZL3aRMAP/O5wbglLnCg1EJgsWRGwA== -----END CERTIFICATE-----Generated at Sun Jan 25 21:06:29 2026 by rpki-client