This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/XGCNBsd4u6QOk9r0MzhRQOuN9ZU.roa File: XGCNBsd4u6QOk9r0MzhRQOuN9ZU.roa (raw, json) Hash identifier: FSmwQ5r6NLBZECcz2CKbhB2EYhBz90265wYtBC2pd4E= Subject key identifier: 5C:60:8D:06:C7:78:BB:A4:0E:93:DA:F4:33:38:51:40:EB:8D:F5:95 Certificate issuer: /CN=133cd7c1a9c79c82eee5c86a423c17c1d63c3413 Certificate serial: 019B7A5AD6B200BF579D905889E2CE11A487 Authority key identifier: 13:3C:D7:C1:A9:C7:9C:82:EE:E5:C8:6A:42:3C:17:C1:D6:3C:34:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EzzXwanHnILu5chqQjwXwdY8NBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/XGCNBsd4u6QOk9r0MzhRQOuN9ZU.roa Signing time: Thu 01 Jan 2026 16:18:52 +0000 ROA not before: Thu 01 Jan 2026 16:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39743 IP address blocks: 185.5.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/EzzXwanHnILu5chqQjwXwdY8NBM.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/EzzXwanHnILu5chqQjwXwdY8NBM.mft rsync://rpki.ripe.net/repository/DEFAULT/EzzXwanHnILu5chqQjwXwdY8NBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:d6:b2:00:bf:57:9d:90:58:89:e2:ce:11:a4:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=133cd7c1a9c79c82eee5c86a423c17c1d63c3413 Validity Not Before: Jan 1 16:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c608d06c778bba40e93daf433385140eb8df595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3d:8d:96:bb:7b:9f:cc:f5:5c:e9:b5:f8:cc: 13:43:85:90:f6:f4:e3:63:6d:e3:c9:e3:33:57:d6: a9:6c:b2:9f:8a:e9:dd:5e:ea:a3:04:ac:20:ef:dd: cd:66:15:ab:00:97:41:37:81:82:ee:c8:49:04:09: bb:49:59:3c:90:cc:c7:09:b9:56:2e:55:5a:55:d7: 3b:da:53:99:7c:93:53:83:26:0d:68:a4:aa:a2:e5: 28:b5:08:4e:60:f1:e5:5b:a0:c3:7e:56:fd:c4:3e: 9f:74:cb:c4:e0:ce:7f:b9:7b:2e:6f:ac:6e:3f:46: ce:a9:83:87:da:6d:33:20:96:69:02:9d:f2:11:9b: 46:d2:4f:a1:e1:88:71:38:5a:b4:c3:9e:8f:89:fa: 3f:34:e6:ef:d1:01:da:b1:70:19:39:62:3a:30:9f: 4c:50:20:54:42:84:14:63:2c:03:85:72:25:b6:d8: 6a:e6:59:96:d7:25:db:ee:c1:6a:ee:17:51:03:54: 18:2f:4a:57:7b:c0:a1:a7:b9:c4:91:ab:97:98:cd: 9d:f0:84:48:91:80:aa:01:69:fd:c2:8e:85:fa:3d: 57:7f:a9:d6:e0:17:10:73:13:71:fd:ed:07:3f:5e: f2:b5:75:69:90:72:62:35:9d:f4:9c:f1:d6:a1:50: fe:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:60:8D:06:C7:78:BB:A4:0E:93:DA:F4:33:38:51:40:EB:8D:F5:95 X509v3 Authority Key Identifier: keyid:13:3C:D7:C1:A9:C7:9C:82:EE:E5:C8:6A:42:3C:17:C1:D6:3C:34:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzzXwanHnILu5chqQjwXwdY8NBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/XGCNBsd4u6QOk9r0MzhRQOuN9ZU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/EzzXwanHnILu5chqQjwXwdY8NBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.5.46.0/24 Signature Algorithm: sha256WithRSAEncryption 01:0e:09:84:af:d6:61:c4:a1:17:5a:8f:c7:51:6a:ba:de:ef: 49:7a:d9:40:02:88:4b:9d:e0:84:6b:2a:9c:11:4c:4c:8c:90: 53:d0:b8:43:04:3e:e2:f7:64:c1:4e:58:5d:13:fd:cc:c3:40: ba:81:49:e2:cf:54:8d:56:9c:3a:e7:e9:45:9e:61:50:e5:ec: 09:e5:ff:0c:eb:83:a7:06:7d:63:1d:54:63:a4:49:c9:41:69: 7e:f7:4f:99:98:69:cb:f2:e7:f9:59:bb:ef:7e:10:b8:df:ce: e6:6f:39:61:ae:d6:06:7a:75:a8:d1:69:07:ce:ed:fb:6c:ce: cb:9a:03:a7:64:9b:37:31:c9:b3:7a:45:02:73:e4:5e:e0:4c: b7:be:1a:59:a5:9f:c7:7a:0d:06:ab:15:6d:43:2e:59:f8:01: 47:12:83:f9:57:78:15:16:07:9b:a7:99:5e:bf:87:1e:ce:1e: f0:48:5a:73:f6:2b:6b:83:dd:77:26:5e:e6:e3:62:39:b4:98: 96:01:e6:8c:de:50:f8:49:14:6b:be:bc:40:68:2d:9f:63:36: ee:ed:e8:d6:33:0e:88:44:98:ec:53:6c:ba:69:96:71:67:e4: c5:c7:b2:4c:55:96:6f:f9:a9:ab:ea:9a:d0:9b:db:52:06:e0: f9:31:5b:9c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WtayAL9XnZBYieLOEaSHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzM2NkN2MxYTljNzljODJlZWU1Yzg2YTQyM2MxN2MxZDYz YzM0MTMwHhcNMjYwMTAxMTYxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzYwOGQwNmM3NzhiYmE0MGU5M2RhZjQzMzM4NTE0MGViOGRmNTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwT2Nlrt7n8z1XOm1+MwTQ4WQ9vTj Y23jyeMzV9apbLKfiundXuqjBKwg793NZhWrAJdBN4GC7shJBAm7SVk8kMzHCblW LlVaVdc72lOZfJNTgyYNaKSqouUotQhOYPHlW6DDflb9xD6fdMvE4M5/uXsub6xu P0bOqYOH2m0zIJZpAp3yEZtG0k+h4YhxOFq0w56Pifo/NObv0QHasXAZOWI6MJ9M UCBUQoQUYywDhXIltthq5lmW1yXb7sFq7hdRA1QYL0pXe8Chp7nEkauXmM2d8IRI kYCqAWn9wo6F+j1Xf6nW4BcQcxNx/e0HP17ytXVpkHJiNZ30nPHWoVD+RQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFxgjQbHeLukDpPa9DM4UUDrjfWVMB8GA1UdIwQY MBaAFBM818Gpx5yC7uXIakI8F8HWPDQTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXp6WHdhbkhuSUx1NWNocVFqd1h3ZFk4TkJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC84MmMwYTItODA0Yi00NDZkLWFiMjQt NGYzOGM2NTZiMjU2LzEvWEdDTkJzZDR1NlFPazlyME16aFJRT3VOOVpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC84MmMwYTItODA0Yi00NDZkLWFiMjQtNGYzOGM2NTZiMjU2 LzEvRXp6WHdhbkhuSUx1NWNocVFqd1h3ZFk4TkJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQUuMA0G CSqGSIb3DQEBCwUAA4IBAQABDgmEr9ZhxKEXWo/HUWq63u9JetlAAohLneCEayqc EUxMjJBT0LhDBD7i92TBTlhdE/3Mw0C6gUniz1SNVpw65+lFnmFQ5ewJ5f8M64On Bn1jHVRjpEnJQWl+90+ZmGnL8uf5WbvvfhC4387mbzlhrtYGenWo0WkHzu37bM7L mgOnZJs3McmzekUCc+Re4Ey3vhpZpZ/Heg0GqxVtQy5Z+AFHEoP5V3gVFgebp5le v4cezh7wSFpz9itrg913Jl7m42I5tJiWAeaM3lD4SRRrvrxAaC2fYzbu7ejWMw6I RJjsU2y6aZZxZ+TFx7JMVZZv+amr6prQm9tSBuD5MVuc -----END CERTIFICATE-----Generated at Sun Jan 25 16:13:48 2026 by rpki-client