This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XMWq_m5tHaIbIUu0RVXBMvU5fl0.roa File: XMWq_m5tHaIbIUu0RVXBMvU5fl0.roa (raw, json) Hash identifier: 4+cpc4DVgZdJa5zHdGk9dGBbY3iWmnzofc7xfbX+OXc= Subject key identifier: 5C:C5:AA:FE:6E:6D:1D:A2:1B:21:4B:B4:45:55:C1:32:F5:39:7E:5D Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019BEADFC29B2833BC1393C52FF59F77E084 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XMWq_m5tHaIbIUu0RVXBMvU5fl0.roa Signing time: Fri 23 Jan 2026 12:41:31 +0000 ROA not before: Fri 23 Jan 2026 12:41:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 87.120.68.0/23 maxlen: 24 185.252.160.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ea:df:c2:9b:28:33:bc:13:93:c5:2f:f5:9f:77:e0:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 23 12:41:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5cc5aafe6e6d1da21b214bb44555c132f5397e5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:58:e5:b4:2d:82:24:27:cd:a3:f3:92:0a:1c: 57:62:66:55:9c:b2:35:f8:b4:41:96:6f:22:4b:11: e5:fa:a6:27:0f:fc:5d:7a:77:66:e1:09:0a:42:ef: fe:28:b7:ef:d3:35:d3:01:8f:31:b5:d1:a3:32:a4: 94:27:43:c8:79:c9:78:2c:32:70:b1:19:8e:41:46: ab:c1:77:37:18:75:73:c6:09:eb:e3:1d:cc:09:bc: 0d:9d:dc:7d:15:8a:64:f8:00:f0:7c:5c:98:f9:aa: f2:d6:01:ea:43:80:9c:fb:65:25:9e:d6:14:93:c5: 61:25:04:62:3c:93:52:62:ea:73:b5:bd:ae:c5:27: 53:ea:f0:cf:1b:56:8c:da:d4:df:9e:58:4d:77:68: 44:e1:af:d0:53:9a:70:38:30:c3:cb:1a:ff:93:13: eb:20:fa:9a:ea:48:b4:97:9f:3e:ec:2e:c8:05:41: 76:28:ee:0a:bc:19:0e:3f:3c:23:39:d8:e9:e9:d1: a2:e2:a5:a0:44:64:7e:48:5f:00:04:63:49:12:cb: b1:01:96:cb:1b:76:57:ac:84:35:90:69:8c:76:06: 83:52:89:fd:dc:41:0c:64:2d:ea:49:89:5e:f9:da: fb:b9:85:14:52:fc:7a:9d:01:4a:59:e4:81:21:e8: ad:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:C5:AA:FE:6E:6D:1D:A2:1B:21:4B:B4:45:55:C1:32:F5:39:7E:5D X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XMWq_m5tHaIbIUu0RVXBMvU5fl0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.120.68.0/23 185.252.160.0/23 Signature Algorithm: sha256WithRSAEncryption 3a:85:bc:f2:9f:e1:a9:0a:b3:71:87:30:b1:4c:4e:36:80:82: 24:92:60:ea:ba:da:c4:09:44:36:cb:a2:41:10:a4:be:d2:4d: b5:8f:81:ed:14:04:c9:d2:de:8e:ae:1f:bc:44:04:23:91:c8: 4e:77:ef:24:b3:7d:d7:74:db:d9:4e:b9:22:ff:82:66:fb:a2: 87:05:c2:e2:c9:42:ec:4c:0b:b5:23:03:be:93:b5:09:41:41: 11:ee:24:db:87:28:90:4c:ed:dc:da:81:3c:2d:af:a4:0c:6e: 3e:8d:e9:7d:48:c3:2a:1d:44:19:38:c7:49:83:96:13:93:de: d5:2a:4c:bf:20:a6:b2:82:9b:d1:5b:dd:14:7c:56:97:30:8d: 55:b8:79:9d:8e:58:7b:90:3b:b5:48:83:9f:dd:62:76:97:7a: 65:a4:a4:6e:96:c6:78:e7:c1:30:05:a2:7a:d7:2e:74:2e:68: a8:c2:02:dc:3a:5f:75:f9:c7:0a:18:e8:77:f9:fe:a8:29:f6: 2d:e8:4e:59:07:f7:8a:f7:a8:3c:b1:3d:d2:f7:a0:bf:6c:2c: 0e:a5:7c:09:99:59:73:76:ce:8f:3e:f9:4b:50:bf:0e:e3:30: a7:18:19:e4:7c:c1:46:63:79:39:3d:74:98:8d:ac:91:5d:5f: d5:e8:4b:9c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvq38KbKDO8E5PFL/Wfd+CEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTIzMTI0MTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2M1YWFmZTZlNmQxZGEyMWIyMTRiYjQ0NTU1YzEzMmY1Mzk3ZTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ljltC2CJCfNo/OSChxXYmZVnLI1 +LRBlm8iSxHl+qYnD/xdendm4QkKQu/+KLfv0zXTAY8xtdGjMqSUJ0PIecl4LDJw sRmOQUarwXc3GHVzxgnr4x3MCbwNndx9FYpk+ADwfFyY+ary1gHqQ4Cc+2UlntYU k8VhJQRiPJNSYupztb2uxSdT6vDPG1aM2tTfnlhNd2hE4a/QU5pwODDDyxr/kxPr IPqa6ki0l58+7C7IBUF2KO4KvBkOPzwjOdjp6dGi4qWgRGR+SF8ABGNJEsuxAZbL G3ZXrIQ1kGmMdgaDUon93EEMZC3qSYle+dr7uYUUUvx6nQFKWeSBIeit2wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFzFqv5ubR2iGyFLtEVVwTL1OX5dMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvWE1XcV9tNXRIYUliSVV1MFJWWEJNdlU1ZmwwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBV3hEAwQB ufygMA0GCSqGSIb3DQEBCwUAA4IBAQA6hbzyn+GpCrNxhzCxTE42gIIkkmDqutrE CUQ2y6JBEKS+0k21j4HtFATJ0t6Orh+8RAQjkchOd+8ks33XdNvZTrki/4Jm+6KH BcLiyULsTAu1IwO+k7UJQUER7iTbhyiQTO3c2oE8La+kDG4+jel9SMMqHUQZOMdJ g5YTk97VKky/IKaygpvRW90UfFaXMI1VuHmdjlh7kDu1SIOf3WJ2l3plpKRulsZ4 58EwBaJ61y50LmiowgLcOl91+ccKGOh3+f6oKfYt6E5ZB/eK96g8sT3S96C/bCwO pXwJmVlzds6PPvlLUL8O4zCnGBnkfMFGY3k5PXSYjayRXV/V6Euc -----END CERTIFICATE-----Generated at Sun Jan 25 17:20:38 2026 by rpki-client