This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/YXLIHJqG-SjnWz2mCVVJ_ezTKSs.roa File: YXLIHJqG-SjnWz2mCVVJ_ezTKSs.roa (raw, json) Hash identifier: Mhnp5e3BJ7gjsyOPcctRIJrsmbal4VQexixZEqreufU= Subject key identifier: 61:72:C8:1C:9A:86:F9:28:E7:5B:3D:A6:09:55:49:FD:EC:D3:29:2B Certificate issuer: /CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd Certificate serial: 019B7EA6290FBA6FD68E30E41F59D2422192 Authority key identifier: 42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/YXLIHJqG-SjnWz2mCVVJ_ezTKSs.roa Signing time: Fri 02 Jan 2026 12:19:37 +0000 ROA not before: Fri 02 Jan 2026 12:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29386 IP address blocks: 5.0.128.0/21 maxlen: 21 5.0.136.0/21 maxlen: 21 5.0.144.0/21 maxlen: 21 5.0.152.0/21 maxlen: 21 5.0.160.0/21 maxlen: 21 5.0.168.0/21 maxlen: 21 5.0.176.0/21 maxlen: 21 5.0.184.0/21 maxlen: 21 5.155.128.0/21 maxlen: 21 5.155.136.0/21 maxlen: 21 5.155.144.0/21 maxlen: 21 5.155.152.0/21 maxlen: 21 5.155.160.0/21 maxlen: 21 5.155.168.0/21 maxlen: 21 5.155.176.0/21 maxlen: 21 5.155.184.0/21 maxlen: 21 5.155.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:29:0f:ba:6f:d6:8e:30:e4:1f:59:d2:42:21:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd Validity Not Before: Jan 2 12:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6172c81c9a86f928e75b3da6095549fdecd3292b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0d:5a:93:82:a0:27:b9:38:e7:24:62:8c:0c: 7c:b2:7b:5c:db:7b:c8:2f:c4:68:35:03:a3:9c:15: 29:a9:c8:6d:37:bf:a4:a8:c4:7e:a4:aa:32:17:a1: 83:3b:88:bc:1e:9f:4b:51:0b:c7:23:b0:f3:ce:cc: b6:ff:37:4e:66:ca:b8:d6:0a:92:05:38:2b:7e:a9: 14:dd:ef:cc:bd:56:99:c4:76:3f:93:ff:a2:3d:f9: ba:61:4c:b3:16:79:0c:71:bc:e5:dd:b9:6a:f9:49: c4:c0:31:48:c7:6e:c4:6c:4e:7b:2f:39:27:8a:8e: 47:c1:5e:e7:45:78:de:d5:31:7f:d2:57:2a:cf:a5: 60:3d:ec:74:36:bf:7f:b6:68:35:9b:10:a2:17:e9: 8d:a6:65:10:44:36:c0:ed:fe:a0:1f:26:47:aa:25: 88:18:ba:10:ff:dc:75:41:64:a6:f4:d6:9c:2e:a2: 49:05:b5:ca:3a:ba:6e:78:bd:71:67:dc:79:a4:35: 4b:dd:c4:5b:2f:e6:6c:9d:33:a2:43:30:9e:f8:61: a0:91:bd:88:b8:e1:2a:d0:c3:4e:e6:33:f2:cb:41: 3a:20:01:5c:47:dc:17:b9:47:4c:30:24:f1:b5:88: c8:4a:7c:d1:66:02:55:76:15:22:3b:b7:e2:66:10: 07:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:72:C8:1C:9A:86:F9:28:E7:5B:3D:A6:09:55:49:FD:EC:D3:29:2B X509v3 Authority Key Identifier: keyid:42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/YXLIHJqG-SjnWz2mCVVJ_ezTKSs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.0.128.0/18 5.155.128.0-5.155.223.255 Signature Algorithm: sha256WithRSAEncryption 9a:a6:0d:6d:b1:66:e8:55:5d:10:29:3c:c8:27:bc:f9:93:9c: 35:23:a4:cd:2d:19:61:ad:55:c7:2d:3e:8d:9f:1d:85:fb:de: 9d:ac:1d:a6:15:f5:b3:54:10:8a:32:5c:68:af:3d:7c:7c:23: 99:c3:6b:9d:6e:7d:1c:00:14:68:50:c7:13:6b:8c:d5:0f:d1: be:c1:86:5e:08:55:44:08:a5:f5:39:06:a6:66:9e:52:a1:3f: 52:3b:19:3c:42:bf:3c:cd:9f:fe:8c:fc:28:3d:55:2d:a8:a5: 6c:da:d9:20:82:f2:46:d7:dc:89:0c:de:ba:5d:00:eb:8a:d7: aa:15:30:19:0a:3d:40:c7:9f:23:e0:09:66:20:3d:54:25:d8: ae:d6:cf:4c:d6:88:25:e8:08:4c:8d:aa:69:e6:19:6f:62:92: 3c:bb:eb:a0:f6:02:9b:e3:aa:d5:89:e5:28:19:f0:c8:e7:c7: 4c:0a:54:44:2c:a6:e6:50:7b:16:88:70:d8:73:63:de:54:f3: 18:52:59:14:25:6e:9f:b4:55:84:17:75:a9:59:c1:5b:75:60: 33:75:f5:6d:dc:b8:35:f9:32:7c:e2:95:5c:8a:f7:20:91:27: a8:7a:71:da:f3:15:c8:7e:f2:88:90:73:82:41:cc:da:91:cf: 5f:06:79:5d -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt+pikPum/WjjDkH1nSQiGSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyODM2OTY3MTZkYmNjMzYwYjlhNjJlZjdkODRiNGQyOGY5 NThiZGQwHhcNMjYwMTAyMTIxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTcyYzgxYzlhODZmOTI4ZTc1YjNkYTYwOTU1NDlmZGVjZDMyOTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2w1ak4KgJ7k45yRijAx8sntc23vI L8RoNQOjnBUpqchtN7+kqMR+pKoyF6GDO4i8Hp9LUQvHI7Dzzsy2/zdOZsq41gqS BTgrfqkU3e/MvVaZxHY/k/+iPfm6YUyzFnkMcbzl3blq+UnEwDFIx27EbE57Lzkn io5HwV7nRXje1TF/0lcqz6VgPex0Nr9/tmg1mxCiF+mNpmUQRDbA7f6gHyZHqiWI GLoQ/9x1QWSm9NacLqJJBbXKOrpueL1xZ9x5pDVL3cRbL+ZsnTOiQzCe+GGgkb2I uOEq0MNO5jPyy0E6IAFcR9wXuUdMMCTxtYjISnzRZgJVdhUiO7fiZhAHowIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFGFyyByahvko51s9pglVSf3s0ykrMB8GA1UdIwQY MBaAFEKDaWcW28w2C5pi732EtNKPlYvdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUW9OcFp4YmJ6RFlMbW1MdmZZUzAwby1WaTkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS81NDQyY2UtNDhiYy00MTY0LTkzNTAt OTI0MGQ5Zjc1YWU2LzEvWVhMSUhKcUctU2puV3oybUNWVkpfZXpUS1NzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS81NDQyY2UtNDhiYy00MTY0LTkzNTAtOTI0MGQ5Zjc1YWU2 LzEvUW9OcFp4YmJ6RFlMbW1MdmZZUzAwby1WaTkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQGBQCAMAwD BAcFm4ADBAUFm8AwDQYJKoZIhvcNAQELBQADggEBAJqmDW2xZuhVXRApPMgnvPmT nDUjpM0tGWGtVcctPo2fHYX73p2sHaYV9bNUEIoyXGivPXx8I5nDa51ufRwAFGhQ xxNrjNUP0b7Bhl4IVUQIpfU5BqZmnlKhP1I7GTxCvzzNn/6M/Cg9VS2opWza2SCC 8kbX3IkM3rpdAOuK16oVMBkKPUDHnyPgCWYgPVQl2K7Wz0zWiCXoCEyNqmnmGW9i kjy766D2ApvjqtWJ5SgZ8Mjnx0wKVEQspuZQexaIcNhzY95U8xhSWRQlbp+0VYQX dalZwVt1YDN19W3cuDX5MnzilVyK9yCRJ6h6cdrzFch+8oiQc4JBzNqRz18GeV0= -----END CERTIFICATE-----Generated at Mon Jan 26 01:29:49 2026 by rpki-client