This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/XwdOGh8ycNBpTq8G5zGL9gUi3JE.roa File: XwdOGh8ycNBpTq8G5zGL9gUi3JE.roa (raw, json) Hash identifier: WHHEykz34YVsOI9ST91HLTQ8eMlE9IdCIj+UhWYkBxk= Subject key identifier: 5F:07:4E:1A:1F:32:70:D0:69:4E:AF:06:E7:31:8B:F6:05:22:DC:91 Certificate issuer: /CN=9870bf4f95350d0377fa8938bf4f2dcb7e72ff12 Certificate serial: 019B7A5A8C00D09FF46BB4761CD09FE1434D Authority key identifier: 98:70:BF:4F:95:35:0D:03:77:FA:89:38:BF:4F:2D:CB:7E:72:FF:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/XwdOGh8ycNBpTq8G5zGL9gUi3JE.roa Signing time: Thu 01 Jan 2026 16:18:33 +0000 ROA not before: Thu 01 Jan 2026 16:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3194 IP address blocks: 5.10.224.0/24 maxlen: 24 5.10.225.0/24 maxlen: 24 5.10.226.0/24 maxlen: 24 5.10.227.0/24 maxlen: 24 5.10.228.0/24 maxlen: 24 5.10.229.0/24 maxlen: 24 5.10.230.0/24 maxlen: 24 5.10.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.crl rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 18:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:8c:00:d0:9f:f4:6b:b4:76:1c:d0:9f:e1:43:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9870bf4f95350d0377fa8938bf4f2dcb7e72ff12 Validity Not Before: Jan 1 16:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f074e1a1f3270d0694eaf06e7318bf60522dc91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d1:9d:12:8f:23:14:81:04:e7:29:6a:93:ce: 7d:c1:ef:0f:e6:10:e4:53:0a:7b:56:3f:a7:3b:e0: 86:02:cf:2e:c3:85:04:32:21:9b:ac:77:0a:cd:ef: a8:3b:bc:c7:80:e3:4d:84:25:45:cb:3d:93:a0:8d: eb:36:18:b3:e0:24:17:e0:f8:1f:80:c4:e9:29:bb: 41:92:49:af:7b:fc:e5:c4:d1:d9:ce:f4:8b:e1:fc: fa:59:7e:b1:b0:66:6c:20:12:48:30:72:57:e7:fe: 47:9a:f7:65:72:a4:3d:58:5d:ea:80:39:1b:13:c6: 14:63:35:94:42:a6:46:f5:ec:e7:0f:e1:b0:29:30: a9:7e:d9:49:0b:e8:1b:c6:33:54:b1:7c:72:75:c9: 15:a5:27:36:a4:ad:e3:83:ec:2b:9c:6e:ff:f7:c4: a3:6f:ff:f7:a5:07:f7:fd:41:fa:a1:cc:bd:04:a1: 4e:0a:85:1a:59:57:c9:68:bd:9f:a8:c2:c7:dd:76: 78:7d:6f:88:a8:72:14:5d:d4:9d:99:f7:9b:35:ef: 84:fe:81:e3:20:de:fa:3d:9e:ba:d9:91:f1:01:83: 31:0b:6c:fd:15:a3:56:2f:23:ee:1f:77:82:88:aa: 1b:f7:f9:50:27:dc:f8:a4:7e:ef:57:f6:a8:d0:a7: 9c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:07:4E:1A:1F:32:70:D0:69:4E:AF:06:E7:31:8B:F6:05:22:DC:91 X509v3 Authority Key Identifier: keyid:98:70:BF:4F:95:35:0D:03:77:FA:89:38:BF:4F:2D:CB:7E:72:FF:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/XwdOGh8ycNBpTq8G5zGL9gUi3JE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.10.224.0/21 Signature Algorithm: sha256WithRSAEncryption 0a:05:88:23:cd:2f:9b:eb:c4:dc:8a:32:57:93:4d:7b:73:2a: 21:98:d6:a0:80:52:78:bd:36:1c:47:5a:d4:be:ba:19:33:de: 68:34:54:89:67:49:8a:8d:f6:82:4c:61:53:ac:b1:6e:ec:d0: 6f:b3:fc:63:9e:81:97:b7:7d:70:2f:84:fa:58:03:c6:c5:a6: 3b:a6:10:db:cc:e1:3b:25:90:6a:61:3d:b6:34:79:9f:19:db: 40:92:2a:07:41:a0:69:6d:c0:e9:cf:5b:48:ed:28:4d:60:c4: 51:16:fd:72:9d:7b:49:67:f0:b1:c7:6e:54:13:e2:79:f5:97: ac:83:c4:fc:5a:a6:bc:3b:40:a2:c9:6c:00:40:57:09:f6:61: c7:95:97:95:9b:a5:5b:0d:54:3f:63:a9:47:f6:1f:0a:e5:60: 58:90:58:a1:65:1d:18:f0:80:68:1b:e5:a0:05:49:8b:98:81: 29:1f:e8:46:37:e5:32:5f:e6:9d:1d:60:12:0f:a4:3a:14:8a: ab:3c:a2:dd:de:d2:2e:8e:fa:87:97:12:85:f8:4d:23:5f:0d: 9f:88:b6:4a:1f:62:0a:0f:54:81:07:59:37:c8:7d:33:6b:56: 1d:2d:fe:a7:24:64:cb:45:7f:43:db:7e:b6:40:67:68:fe:53: fd:70:91:72 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WowA0J/0a7R2HNCf4UNNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NzBiZjRmOTUzNTBkMDM3N2ZhODkzOGJmNGYyZGNiN2U3 MmZmMTIwHhcNMjYwMTAxMTYxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjA3NGUxYTFmMzI3MGQwNjk0ZWFmMDZlNzMxOGJmNjA1MjJkYzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdGdEo8jFIEE5ylqk859we8P5hDk Uwp7Vj+nO+CGAs8uw4UEMiGbrHcKze+oO7zHgONNhCVFyz2ToI3rNhiz4CQX4Pgf gMTpKbtBkkmve/zlxNHZzvSL4fz6WX6xsGZsIBJIMHJX5/5HmvdlcqQ9WF3qgDkb E8YUYzWUQqZG9eznD+GwKTCpftlJC+gbxjNUsXxydckVpSc2pK3jg+wrnG7/98Sj b//3pQf3/UH6ocy9BKFOCoUaWVfJaL2fqMLH3XZ4fW+IqHIUXdSdmfebNe+E/oHj IN76PZ662ZHxAYMxC2z9FaNWLyPuH3eCiKob9/lQJ9z4pH7vV/ao0Kec7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF8HThofMnDQaU6vBucxi/YFItyRMB8GA1UdIwQY MBaAFJhwv0+VNQ0Dd/qJOL9PLct+cv8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUhDX1Q1VTFEUU4zLW9rNHYwOHR5MzV5X3hJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi82MDBhMzctZjk2Ny00NWIxLWExZGQt MDdhMzE1ZTkwMzNkLzEvWHdkT0doOHljTkJwVHE4RzV6R0w5Z1VpM0pFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi82MDBhMzctZjk2Ny00NWIxLWExZGQtMDdhMzE1ZTkwMzNk LzEvbUhDX1Q1VTFEUU4zLW9rNHYwOHR5MzV5X3hJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDBQrgMA0G CSqGSIb3DQEBCwUAA4IBAQAKBYgjzS+b68TcijJXk017cyohmNaggFJ4vTYcR1rU vroZM95oNFSJZ0mKjfaCTGFTrLFu7NBvs/xjnoGXt31wL4T6WAPGxaY7phDbzOE7 JZBqYT22NHmfGdtAkioHQaBpbcDpz1tI7ShNYMRRFv1ynXtJZ/Cxx25UE+J59Zes g8T8Wqa8O0CiyWwAQFcJ9mHHlZeVm6VbDVQ/Y6lH9h8K5WBYkFihZR0Y8IBoG+Wg BUmLmIEpH+hGN+UyX+adHWASD6Q6FIqrPKLd3tIujvqHlxKF+E0jXw2fiLZKH2IK D1SBB1k3yH0za1YdLf6nJGTLRX9D2362QGdo/lP9cJFy -----END CERTIFICATE-----Generated at Thu Jan 29 03:11:41 2026 by rpki-client