This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/5-xa1DwYQklowUOFsT1S-uTdWNs.roa File: 5-xa1DwYQklowUOFsT1S-uTdWNs.roa (raw, json) Hash identifier: L6ahwy7v3F/eJH7YLdiIkbI0hjgLlbmnqluQBda3pbM= Subject key identifier: E7:EC:5A:D4:3C:18:42:49:68:C1:43:85:B1:3D:52:FA:E4:DD:58:DB Certificate issuer: /CN=0dd441c3ffae829842249e944b03851081f4d9e0 Certificate serial: 019B79ECDE8C5AA59C6BE3693C3F696C68F7 Authority key identifier: 0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/5-xa1DwYQklowUOFsT1S-uTdWNs.roa Signing time: Thu 01 Jan 2026 14:18:45 +0000 ROA not before: Thu 01 Jan 2026 14:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 185.1.32.0/24 maxlen: 24 2001:7f8:8f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 17:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:de:8c:5a:a5:9c:6b:e3:69:3c:3f:69:6c:68:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dd441c3ffae829842249e944b03851081f4d9e0 Validity Not Before: Jan 1 14:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e7ec5ad43c18424968c14385b13d52fae4dd58db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3b:41:90:05:cf:17:f8:a0:da:74:5e:2a:77: 4b:81:8c:96:94:92:00:9a:13:ce:f9:97:10:2c:15: 5c:e0:1b:7c:73:3e:7f:89:01:05:ff:28:0d:8e:7c: b2:51:24:fe:95:e5:a8:fe:a2:9d:82:63:0a:f9:95: 5d:cb:ce:af:a2:de:da:7f:5f:74:91:4c:a1:e3:65: 98:23:ba:11:a9:b3:e9:39:3d:c5:06:76:8a:0d:10: 80:fe:75:c0:22:63:05:d8:66:89:66:4c:30:16:33: 6c:ac:eb:6c:58:4a:1d:65:6c:71:d8:8f:62:46:17: 41:93:18:ab:61:8c:e9:f3:c7:cf:56:8e:d5:85:57: 44:cc:98:ae:cd:d5:a4:93:28:67:b2:e3:0d:e3:1f: ba:e8:d4:51:00:b4:1f:14:9a:6b:20:87:81:11:8f: 2d:86:fd:48:ba:d8:a2:29:c9:fb:46:20:db:9f:b1: e9:01:78:2b:6e:82:5e:b6:39:2a:0d:71:d5:b6:6b: fc:7a:91:a1:15:b9:f1:dc:37:cf:19:f6:b4:b9:2d: c7:ae:2d:0a:aa:a5:c9:8f:31:e4:91:bc:97:a0:d4: 93:42:35:37:fc:f0:da:8c:59:da:74:d0:3d:68:46: 53:1a:77:7f:f0:22:6d:9b:f1:70:bc:f1:9e:12:e9: a5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:EC:5A:D4:3C:18:42:49:68:C1:43:85:B1:3D:52:FA:E4:DD:58:DB X509v3 Authority Key Identifier: keyid:0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/5-xa1DwYQklowUOFsT1S-uTdWNs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.1.32.0/24 IPv6: 2001:7f8:8f::/48 Signature Algorithm: sha256WithRSAEncryption 52:cd:6c:97:59:eb:0c:19:ed:8c:ce:71:de:aa:87:18:2a:9c: 5f:71:8c:91:b1:17:69:c0:e1:21:8b:d4:4c:50:63:c2:c8:71: f9:20:47:dc:08:cd:42:12:4b:35:cb:89:0b:37:15:d5:21:0a: 71:5a:f3:e2:4d:c4:d9:de:5e:78:38:a3:92:64:e2:7f:9b:64: b8:32:5c:6b:23:e5:ab:88:d4:ee:71:3a:df:e3:6d:b3:a5:02: ff:8f:b3:90:c5:9b:c7:f8:f7:4e:07:b4:50:6b:06:22:da:86: 33:44:dd:54:07:a4:e9:af:6f:b6:7e:28:2a:75:3e:96:cb:89: af:63:59:34:51:a7:56:61:41:8a:9d:ec:51:81:ff:f4:96:da: d4:77:3e:34:20:dc:ad:27:ef:c5:77:bd:4b:c8:38:c1:77:72: 2b:99:2a:7b:19:d1:66:6e:c4:ec:2e:a6:36:b4:53:d6:a9:47: a9:3d:dd:31:8b:7c:dd:85:9f:c3:91:ac:f2:15:36:42:18:86: c7:00:2b:2b:f3:cb:7c:71:89:d1:88:4b:1d:df:69:74:43:4f: 3d:9d:8f:78:bf:14:c5:68:d9:95:55:bc:61:ca:0e:bc:a1:21: 7d:d8:22:31:d4:75:02:66:39:4e:5e:ef:ec:be:23:3d:70:fc: 76:01:c3:aa -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt57N6MWqWca+NpPD9pbGj3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZDQ0MWMzZmZhZTgyOTg0MjI0OWU5NDRiMDM4NTEwODFm NGQ5ZTAwHhcNMjYwMTAxMTQxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlN2VjNWFkNDNjMTg0MjQ5NjhjMTQzODViMTNkNTJmYWU0ZGQ1OGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDtBkAXPF/ig2nReKndLgYyWlJIA mhPO+ZcQLBVc4Bt8cz5/iQEF/ygNjnyyUST+leWo/qKdgmMK+ZVdy86vot7af190 kUyh42WYI7oRqbPpOT3FBnaKDRCA/nXAImMF2GaJZkwwFjNsrOtsWEodZWxx2I9i RhdBkxirYYzp88fPVo7VhVdEzJiuzdWkkyhnsuMN4x+66NRRALQfFJprIIeBEY8t hv1IutiiKcn7RiDbn7HpAXgrboJetjkqDXHVtmv8epGhFbnx3DfPGfa0uS3Hri0K qqXJjzHkkbyXoNSTQjU3/PDajFnadNA9aEZTGnd/8CJtm/FwvPGeEumlEwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFOfsWtQ8GEJJaMFDhbE9Uvrk3VjbMB8GA1UdIwQY MBaAFA3UQcP/roKYQiSelEsDhRCB9NngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMt ZTljOTEzMjgzNmZmLzEvNS14YTFEd1lRa2xvd1VPRnNUMVMtdVRkV05zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMtZTljOTEzMjgzNmZm LzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuQEgMA8E AgACMAkDBwAgAQf4AI8wDQYJKoZIhvcNAQELBQADggEBAFLNbJdZ6wwZ7YzOcd6q hxgqnF9xjJGxF2nA4SGL1ExQY8LIcfkgR9wIzUISSzXLiQs3FdUhCnFa8+JNxNne Xng4o5Jk4n+bZLgyXGsj5auI1O5xOt/jbbOlAv+Ps5DFm8f4904HtFBrBiLahjNE 3VQHpOmvb7Z+KCp1PpbLia9jWTRRp1ZhQYqd7FGB//SW2tR3PjQg3K0n78V3vUvI OMF3ciuZKnsZ0WZuxOwupja0U9apR6k93TGLfN2Fn8ORrPIVNkIYhscAKyvzy3xx idGISx3faXRDTz2dj3i/FMVo2ZVVvGHKDryhIX3YIjHUdQJmOU5e7+y+Iz1w/HYB w6o= -----END CERTIFICATE-----Generated at Fri Jan 9 00:56:57 2026 by rpki-client