This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/xcM2ZVf37CdL382fjtuplxxQLE8.roa File: xcM2ZVf37CdL382fjtuplxxQLE8.roa (raw, json) Hash identifier: RiVH+1NRpDpLClbmDE2+b3AAqFcjkQt+b8cj0dwZl50= Subject key identifier: C5:C3:36:65:57:F7:EC:27:4B:DF:CD:9F:8E:DB:A9:97:1C:50:2C:4F Certificate issuer: /CN=f5d901201ff0b1b97ef3d1a72da41e18f0145762 Certificate serial: 019B7EA6FCE6D4DDBDAC1F32677E4456DA43 Authority key identifier: F5:D9:01:20:1F:F0:B1:B9:7E:F3:D1:A7:2D:A4:1E:18:F0:14:57:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dkBIB_wsbl-89GnLaQeGPAUV2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/xcM2ZVf37CdL382fjtuplxxQLE8.roa Signing time: Fri 02 Jan 2026 12:20:31 +0000 ROA not before: Fri 02 Jan 2026 12:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8855 IP address blocks: 212.78.0.0/24 maxlen: 24 212.78.2.0/24 maxlen: 24 212.78.3.0/24 maxlen: 24 212.78.4.0/24 maxlen: 24 212.78.5.0/24 maxlen: 24 212.78.6.0/24 maxlen: 24 212.78.7.0/24 maxlen: 24 212.78.9.0/24 maxlen: 24 212.78.10.0/24 maxlen: 24 212.78.11.0/24 maxlen: 24 212.78.12.0/24 maxlen: 24 212.78.13.0/24 maxlen: 24 212.78.14.0/24 maxlen: 24 212.78.15.0/24 maxlen: 24 212.78.26.0/24 maxlen: 24 212.78.28.0/23 maxlen: 23 212.78.28.0/24 maxlen: 24 212.78.29.0/24 maxlen: 24 212.78.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/9dkBIB_wsbl-89GnLaQeGPAUV2I.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/9dkBIB_wsbl-89GnLaQeGPAUV2I.mft rsync://rpki.ripe.net/repository/DEFAULT/9dkBIB_wsbl-89GnLaQeGPAUV2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:fc:e6:d4:dd:bd:ac:1f:32:67:7e:44:56:da:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5d901201ff0b1b97ef3d1a72da41e18f0145762 Validity Not Before: Jan 2 12:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5c3366557f7ec274bdfcd9f8edba9971c502c4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:56:92:56:90:0d:2d:4e:d3:e2:a9:4f:04:ed: 1c:c5:6f:c4:35:64:d7:23:58:ff:c6:23:d6:7c:58: 41:e4:8e:fb:15:2b:13:cc:49:2c:f2:56:60:52:d5: 5b:2d:87:ff:cc:a6:df:b3:75:ad:31:2c:09:58:c3: ff:61:b1:b0:35:b9:fd:11:04:47:08:dd:c5:6e:b5: ce:ff:0d:41:b0:a0:f0:8a:00:50:dd:f1:45:d9:a0: 7e:e4:f1:10:9b:4e:5d:af:09:16:b2:93:0f:17:e0: 69:14:1b:f8:1a:be:e3:99:60:29:13:ef:42:13:5b: ec:45:29:31:72:a4:61:ea:b8:d5:cf:5c:1c:f8:4b: c0:dd:63:a9:ca:9e:ff:d5:63:c7:97:96:2a:87:ef: f5:7c:34:c8:7d:94:5e:60:3c:39:18:11:7e:84:98: 48:f2:7e:70:08:5a:32:23:c9:88:59:24:88:54:68: 5f:88:38:e7:62:78:ae:77:91:42:69:fd:c7:0b:1a: 2f:0b:ca:72:70:c6:6e:4a:61:0d:f4:74:ba:74:9a: 2a:c1:4b:f3:69:0e:fa:9c:98:e2:fe:fe:18:8b:45: 8c:e0:13:7d:be:da:ff:db:bb:80:2f:26:63:ae:a6: 4c:46:d8:e4:7a:3f:00:2f:e9:db:08:ce:2c:3a:19: e2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C3:36:65:57:F7:EC:27:4B:DF:CD:9F:8E:DB:A9:97:1C:50:2C:4F X509v3 Authority Key Identifier: keyid:F5:D9:01:20:1F:F0:B1:B9:7E:F3:D1:A7:2D:A4:1E:18:F0:14:57:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dkBIB_wsbl-89GnLaQeGPAUV2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/xcM2ZVf37CdL382fjtuplxxQLE8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/9dkBIB_wsbl-89GnLaQeGPAUV2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.78.0.0/24 212.78.2.0-212.78.7.255 212.78.9.0-212.78.15.255 212.78.26.0/24 212.78.28.0/23 212.78.31.0/24 Signature Algorithm: sha256WithRSAEncryption 39:2c:13:b8:e3:99:d0:8b:a5:0a:d0:9e:9f:9a:54:27:33:30: 34:c7:1a:c0:48:03:dd:09:50:0f:77:5a:75:1b:eb:1d:25:a0: 53:db:46:79:81:bd:c5:3c:98:96:84:d0:7c:31:1f:98:32:38: 0c:f8:64:8e:2d:9b:d6:71:d7:61:5c:ef:35:ac:bb:29:03:b7: a3:b0:ba:18:9e:ac:eb:e5:89:f2:af:2b:6c:27:8b:9d:cb:95: d6:e7:28:f3:00:db:11:60:71:ae:3f:27:75:cc:3b:db:93:65: c8:04:8b:99:a6:53:dd:c5:10:34:b2:0c:23:e4:02:12:c6:b8: 90:dd:4a:6c:8d:c5:3e:64:e0:12:b9:74:af:34:1d:35:1e:32: 3a:a9:84:57:75:c1:b9:76:27:fd:2d:13:29:63:0c:13:2f:7a: 8c:cd:57:88:1b:fa:cd:24:c2:bc:03:4a:69:a3:00:a1:0b:a7: dd:39:5f:b5:5a:10:b9:53:dc:51:2f:ab:dd:03:1e:df:59:76: 2d:fe:51:46:73:e2:78:56:b4:55:89:d5:c7:27:df:be:a9:b4: b4:ed:4f:f9:34:62:2f:78:5f:7e:4b:4f:9c:7d:46:c9:8c:6f: ad:8b:56:6f:eb:67:2b:a8:88:7f:ed:11:2a:e8:46:4d:d5:53: 83:2a:94:bb -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgISAZt+pvzm1N29rB8yZ35EVtpDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZDkwMTIwMWZmMGIxYjk3ZWYzZDFhNzJkYTQxZTE4ZjAx NDU3NjIwHhcNMjYwMTAyMTIyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNWMzMzY2NTU3ZjdlYzI3NGJkZmNkOWY4ZWRiYTk5NzFjNTAyYzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVaSVpANLU7T4qlPBO0cxW/ENWTX I1j/xiPWfFhB5I77FSsTzEks8lZgUtVbLYf/zKbfs3WtMSwJWMP/YbGwNbn9EQRH CN3FbrXO/w1BsKDwigBQ3fFF2aB+5PEQm05drwkWspMPF+BpFBv4Gr7jmWApE+9C E1vsRSkxcqRh6rjVz1wc+EvA3WOpyp7/1WPHl5Yqh+/1fDTIfZReYDw5GBF+hJhI 8n5wCFoyI8mIWSSIVGhfiDjnYniud5FCaf3HCxovC8pycMZuSmEN9HS6dJoqwUvz aQ76nJji/v4Yi0WM4BN9vtr/27uALyZjrqZMRtjkej8AL+nbCM4sOhniPQIDAQAB o4ICNzCCAjMwHQYDVR0OBBYEFMXDNmVX9+wnS9/Nn47bqZccUCxPMB8GA1UdIwQY MBaAFPXZASAf8LG5fvPRpy2kHhjwFFdiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWRrQklCX3dzYmwtODlHbkxhUWVHUEFVVjJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9hZDU1NDUtZjhhZi00Mjc4LTkwYTUt YTNiYmM4N2E3N2NjLzEveGNNMlpWZjM3Q2RMMzgyZmp0dXBseHhRTEU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9hZDU1NDUtZjhhZi00Mjc4LTkwYTUtYTNiYmM4N2E3N2Nj LzEvOWRrQklCX3dzYmwtODlHbkxhUWVHUEFVVjJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0AwQA1E4AMAwD BAHUTgIDBAPUTgAwDAMEANROCQMEBNROAAMEANROGgMEAdROHAMEANROHzANBgkq hkiG9w0BAQsFAAOCAQEAOSwTuOOZ0IulCtCen5pUJzMwNMcawEgD3QlQD3dadRvr HSWgU9tGeYG9xTyYloTQfDEfmDI4DPhkji2b1nHXYVzvNay7KQO3o7C6GJ6s6+WJ 8q8rbCeLncuV1uco8wDbEWBxrj8ndcw725NlyASLmaZT3cUQNLIMI+QCEsa4kN1K bI3FPmTgErl0rzQdNR4yOqmEV3XBuXYn/S0TKWMMEy96jM1XiBv6zSTCvANKaaMA oQun3TlftVoQuVPcUS+r3QMe31l2Lf5RRnPieFa0VYnVxyffvqm0tO1P+TRiL3hf fktPnH1GyYxvrYtWb+tnK6iIf+0RKuhGTdVTgyqUuw== -----END CERTIFICATE-----Generated at Mon Jan 26 09:23:39 2026 by rpki-client