This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/XbJXKJ_0E0WQxkfv8SQ64kHlpqw.roa File: XbJXKJ_0E0WQxkfv8SQ64kHlpqw.roa (raw, json) Hash identifier: jT8xwpuYth9rIc6SHYbo7yHBo19Prde5zs/tMrFquVw= Subject key identifier: 5D:B2:57:28:9F:F4:13:45:90:C6:47:EF:F1:24:3A:E2:41:E5:A6:AC Certificate issuer: /CN=01626ffd800eafa336bdf343141f03f7c393c364 Certificate serial: 019B797E33F032821F1C8FDF2087924EC73B Authority key identifier: 01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/XbJXKJ_0E0WQxkfv8SQ64kHlpqw.roa Signing time: Thu 01 Jan 2026 12:17:52 +0000 ROA not before: Thu 01 Jan 2026 12:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48635 IP address blocks: 83.98.177.0/24 maxlen: 24 85.92.132.0/24 maxlen: 24 85.92.139.0/24 maxlen: 24 85.92.145.0/24 maxlen: 24 89.18.168.0/24 maxlen: 24 213.189.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:33:f0:32:82:1f:1c:8f:df:20:87:92:4e:c7:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01626ffd800eafa336bdf343141f03f7c393c364 Validity Not Before: Jan 1 12:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5db257289ff4134590c647eff1243ae241e5a6ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f4:78:66:97:e3:44:45:01:7f:03:ee:5b:a9: 3d:12:7c:08:7c:14:38:55:e8:02:95:9c:3b:c7:65: 01:4e:1e:2d:2d:7f:40:bc:34:cb:f3:4f:8a:ce:d5: be:7a:43:20:0d:bf:96:9c:aa:6b:cf:d1:25:4d:ba: 6a:be:98:8d:62:9c:df:ab:a5:86:96:79:78:3a:02: dc:77:62:55:bd:42:1e:87:79:59:be:a9:76:c9:c1: bf:36:1c:44:2d:24:86:c2:72:29:2e:62:aa:cc:13: 39:1d:15:28:8b:ae:e1:1f:41:1b:d1:93:4b:17:d0: 52:c6:b6:b9:ef:3d:0f:df:b5:32:a0:08:36:81:d0: dc:89:29:0b:32:7e:70:ee:3f:73:e3:b3:22:b8:28: ba:0e:aa:ac:4e:f4:ae:92:71:c2:03:51:20:01:9f: dd:e1:9b:f9:fd:d9:fc:72:57:08:1a:4a:98:dd:be: d3:e8:c5:33:69:4b:8b:df:82:92:f7:36:a7:0e:e3: 67:f6:65:26:82:d2:ae:dc:d5:7c:3f:3a:02:12:4c: 5d:b5:a3:be:fe:ae:bf:74:55:84:ad:2a:65:a7:95: 26:6b:ad:8e:9b:81:7d:8c:96:5f:15:81:89:b5:66: 8c:f0:35:2c:50:d8:4d:5a:41:c0:28:ab:31:a1:ef: 83:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:B2:57:28:9F:F4:13:45:90:C6:47:EF:F1:24:3A:E2:41:E5:A6:AC X509v3 Authority Key Identifier: keyid:01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/XbJXKJ_0E0WQxkfv8SQ64kHlpqw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.98.177.0/24 85.92.132.0/24 85.92.139.0/24 85.92.145.0/24 89.18.168.0/24 213.189.29.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:20:e2:0e:97:d1:8f:88:5e:2e:db:ea:66:86:77:16:0b:e7: 17:6d:3a:61:18:02:5b:e0:97:91:bc:98:c6:27:be:9d:29:ca: 8a:75:c7:32:e8:57:de:41:2a:3f:a1:c1:94:02:24:ee:09:6d: 50:0f:2b:45:8b:3a:a9:9e:b7:f3:bc:b1:41:a6:49:e2:c6:7e: d7:46:f4:6a:1d:3e:34:4e:ec:8e:30:de:a0:86:6a:e9:45:a4: 40:2c:9f:eb:96:79:d1:a3:62:77:f7:55:dd:b9:05:1a:a0:bd: 61:da:da:2b:d1:52:3d:e4:c6:c7:25:78:e9:18:e9:9d:cc:07: 5c:29:83:a7:8c:d3:3a:55:d4:5f:0e:38:cc:1c:84:84:47:6d: 7a:93:0b:d2:d3:6b:d1:dc:b3:ba:87:0b:69:c1:cc:6f:b9:4c: e1:e4:d0:76:dc:1f:04:99:8b:81:fc:3c:e1:e6:bc:2b:0e:5a: 63:e6:52:2a:1e:c6:7f:6b:ff:1f:d2:94:f8:72:ec:33:5c:f2: 67:8b:19:55:90:6f:52:c4:c0:7f:ad:44:bd:46:aa:8c:0a:00: 2a:fd:8c:e8:e1:6e:d1:6d:be:51:d0:dc:0e:23:5b:4d:bd:fc: e0:4c:61:a2:df:92:dc:ca:ca:b2:44:48:00:78:c5:26:e3:12: 65:c5:4b:13 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt5fjPwMoIfHI/fIIeSTsc7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNjI2ZmZkODAwZWFmYTMzNmJkZjM0MzE0MWYwM2Y3YzM5 M2MzNjQwHhcNMjYwMTAxMTIxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZGIyNTcyODlmZjQxMzQ1OTBjNjQ3ZWZmMTI0M2FlMjQxZTVhNmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvR4ZpfjREUBfwPuW6k9EnwIfBQ4 VegClZw7x2UBTh4tLX9AvDTL80+KztW+ekMgDb+WnKprz9ElTbpqvpiNYpzfq6WG lnl4OgLcd2JVvUIeh3lZvql2ycG/NhxELSSGwnIpLmKqzBM5HRUoi67hH0Eb0ZNL F9BSxra57z0P37UyoAg2gdDciSkLMn5w7j9z47MiuCi6DqqsTvSuknHCA1EgAZ/d 4Zv5/dn8clcIGkqY3b7T6MUzaUuL34KS9zanDuNn9mUmgtKu3NV8PzoCEkxdtaO+ /q6/dFWErSplp5Uma62Om4F9jJZfFYGJtWaM8DUsUNhNWkHAKKsxoe+DrwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFF2yVyif9BNFkMZH7/EkOuJB5aasMB8GA1UdIwQY MBaAFAFib/2ADq+jNr3zQxQfA/fDk8NkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVdKdl9ZQU9yNk0ydmZOREZCOEQ5OE9UdzJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jNGU1YTAtODIxOS00ZmY5LTgyODct MWY0YmVhMjNlNGM3LzEvWGJKWEtKXzBFMFdReGtmdjhTUTY0a0hscHF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9jNGU1YTAtODIxOS00ZmY5LTgyODctMWY0YmVhMjNlNGM3 LzEvQVdKdl9ZQU9yNk0ydmZOREZCOEQ5OE9UdzJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAU2KxAwQA VVyEAwQAVVyLAwQAVVyRAwQAWRKoAwQA1b0dMA0GCSqGSIb3DQEBCwUAA4IBAQAd IOIOl9GPiF4u2+pmhncWC+cXbTphGAJb4JeRvJjGJ76dKcqKdccy6FfeQSo/ocGU AiTuCW1QDytFizqpnrfzvLFBpknixn7XRvRqHT40TuyOMN6ghmrpRaRALJ/rlnnR o2J391XduQUaoL1h2tor0VI95MbHJXjpGOmdzAdcKYOnjNM6VdRfDjjMHISER216 kwvS02vR3LO6hwtpwcxvuUzh5NB23B8EmYuB/Dzh5rwrDlpj5lIqHsZ/a/8f0pT4 cuwzXPJnixlVkG9SxMB/rUS9RqqMCgAq/Yzo4W7Rbb5R0NwOI1tNvfzgTGGi35Lc ysqyREgAeMUm4xJlxUsT -----END CERTIFICATE-----Generated at Mon Jan 26 01:01:58 2026 by rpki-client