This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xG071WO-yWAvjoV2xz7VnojTYQw.roa File: xG071WO-yWAvjoV2xz7VnojTYQw.roa (raw, json) Hash identifier: AAskZSzoH0rQfIgHcWaSLNq2fEFDc0qlCmaV6fmPtok= Subject key identifier: C4:6D:3B:D5:63:BE:C9:60:2F:8E:85:76:C7:3E:D5:9E:88:D3:61:0C Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A348A864D643BDB0C82A55222D17AF Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xG071WO-yWAvjoV2xz7VnojTYQw.roa Signing time: Thu 01 Jan 2026 08:18:45 +0000 ROA not before: Thu 01 Jan 2026 08:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214238 IP address blocks: 5.253.56.0/24 maxlen: 24 5.253.57.0/24 maxlen: 24 5.253.58.0/24 maxlen: 24 45.88.66.0/24 maxlen: 24 87.120.108.0/24 maxlen: 24 87.120.196.0/24 maxlen: 24 87.121.216.0/24 maxlen: 24 93.123.31.0/24 maxlen: 24 94.125.102.0/24 maxlen: 24 94.125.103.0/24 maxlen: 24 185.207.14.0/24 maxlen: 24 185.207.15.0/24 maxlen: 24 185.252.179.0/24 maxlen: 24 193.8.186.0/24 maxlen: 24 193.8.187.0/24 maxlen: 24 193.148.56.0/24 maxlen: 24 193.148.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:48:a8:64:d6:43:bd:b0:c8:2a:55:22:2d:17:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c46d3bd563bec9602f8e8576c73ed59e88d3610c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6b:28:8d:10:3d:f8:8f:fd:fb:28:7c:a9:fb: 1d:bf:95:55:89:fb:b4:70:87:5d:16:a8:80:2e:73: ad:5a:7c:40:49:fc:2e:5d:49:69:1b:9c:bf:21:53: bd:67:cc:6d:f1:ab:c4:d2:9e:f6:97:cb:92:bb:4c: 08:af:e3:c4:cd:3b:88:f7:4c:2e:ac:c7:d4:bc:64: a6:e2:6a:61:38:b6:75:0f:0f:17:1e:6f:0e:6a:98: 98:d9:d0:c6:3b:15:35:9e:6e:fc:26:3d:08:60:a0: 92:a6:13:c0:96:a9:d3:d4:ef:f8:83:95:7b:5b:de: 50:17:2f:18:32:03:c4:10:3c:47:69:0f:fb:ba:ca: f2:51:99:be:e0:81:e0:ee:8b:ec:d1:ac:a7:6c:9b: bf:09:5d:f2:da:1d:9f:04:ff:bd:f3:13:39:0f:5e: 5c:77:2f:1b:23:12:7a:70:65:4e:6e:b2:ed:ad:be: 6c:aa:ed:49:49:85:e9:d7:85:90:69:c6:e1:fe:c5: 4d:dc:15:71:78:2e:e6:d9:63:81:05:0f:46:7c:81: c9:a7:9e:78:a2:b8:9f:ab:8a:ee:73:0e:9b:eb:87: 81:72:9e:25:44:0a:8e:bc:9c:0c:a0:5a:b0:1c:03: 29:55:94:9c:f3:f8:33:1c:56:c4:c7:a7:b1:62:1d: ca:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:6D:3B:D5:63:BE:C9:60:2F:8E:85:76:C7:3E:D5:9E:88:D3:61:0C X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xG071WO-yWAvjoV2xz7VnojTYQw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.56.0-5.253.58.255 45.88.66.0/24 87.120.108.0/24 87.120.196.0/24 87.121.216.0/24 93.123.31.0/24 94.125.102.0/23 185.207.14.0/23 185.252.179.0/24 193.8.186.0/23 193.148.56.0/23 Signature Algorithm: sha256WithRSAEncryption 45:1f:0c:f6:36:98:a8:1c:d3:bb:48:06:be:91:6d:96:a3:d9: 06:d3:e6:13:a4:e3:59:9f:3f:14:ea:77:38:6c:30:d1:db:6c: c6:09:3d:c8:c9:79:92:d2:11:a8:81:1d:cb:ff:8b:70:8b:da: 3e:65:c4:1d:6f:c1:88:dc:00:d5:ea:8e:c7:67:79:11:85:b6: 49:98:64:97:f1:c3:2d:e7:93:c1:43:87:e7:71:80:68:5d:eb: cb:c2:bd:65:f3:3b:22:00:13:fe:59:75:f7:d9:3e:57:c0:c9: 4b:d3:60:54:e3:cc:77:c9:1f:39:44:4d:c4:e9:9b:ef:6c:64: 83:f4:3c:f4:5b:20:56:0c:db:24:24:cc:65:b1:b3:9c:20:73: 4e:43:9d:ae:d9:3d:78:38:88:1e:04:b8:23:6a:aa:bf:c4:b5: 3f:84:43:6d:25:21:fb:40:05:a4:13:6b:a2:b6:61:b5:d2:98: 23:f6:1d:f3:35:59:a6:96:fa:85:bc:12:11:2a:76:60:cf:70: 13:7a:46:c5:ee:8d:12:50:2b:ea:34:bb:69:e1:36:04:d3:b8: 28:47:de:58:17:68:e5:e0:02:c7:9e:ea:d8:0b:85:e0:73:94: 6a:a3:fc:34:ec:68:24:8c:7c:62:c3:62:ec:b3:88:78:92:2e: f5:1b:32:7e -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgISAZt4o0ioZNZDvbDIKlUiLRevMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDZkM2JkNTYzYmVjOTYwMmY4ZTg1NzZjNzNlZDU5ZTg4ZDM2MTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGsojRA9+I/9+yh8qfsdv5VVifu0 cIddFqiALnOtWnxASfwuXUlpG5y/IVO9Z8xt8avE0p72l8uSu0wIr+PEzTuI90wu rMfUvGSm4mphOLZ1Dw8XHm8OapiY2dDGOxU1nm78Jj0IYKCSphPAlqnT1O/4g5V7 W95QFy8YMgPEEDxHaQ/7usryUZm+4IHg7ovs0aynbJu/CV3y2h2fBP+98xM5D15c dy8bIxJ6cGVObrLtrb5squ1JSYXp14WQacbh/sVN3BVxeC7m2WOBBQ9GfIHJp554 orifq4rucw6b64eBcp4lRAqOvJwMoFqwHAMpVZSc8/gzHFbEx6exYh3KPQIDAQAB o4ICTTCCAkkwHQYDVR0OBBYEFMRtO9VjvslgL46Fdsc+1Z6I02EMMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEveEcwNzFXTy15V0F2am9WMnh6N1Zub2pUWVF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKMAwDBAMF/TgD BAAF/ToDBAAtWEIDBABXeGwDBABXeMQDBABXedgDBABdex8DBAFefWYDBAG5zw4D BAC5/LMDBAHBCLoDBAHBlDgwDQYJKoZIhvcNAQELBQADggEBAEUfDPY2mKgc07tI Br6RbZaj2QbT5hOk41mfPxTqdzhsMNHbbMYJPcjJeZLSEaiBHcv/i3CL2j5lxB1v wYjcANXqjsdneRGFtkmYZJfxwy3nk8FDh+dxgGhd68vCvWXzOyIAE/5ZdffZPlfA yUvTYFTjzHfJHzlETcTpm+9sZIP0PPRbIFYM2yQkzGWxs5wgc05Dna7ZPXg4iB4E uCNqqr/EtT+EQ20lIftABaQTa6K2YbXSmCP2HfM1WaaW+oW8EhEqdmDPcBN6RsXu jRJQK+o0u2nhNgTTuChH3lgXaOXgAsee6tgLheBzlGqj/DTsaCSMfGLDYuyziHiS LvUbMn4= -----END CERTIFICATE-----Generated at Fri Jan 2 12:08:24 2026 by rpki-client