This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/XxEZsYZPdK3SWZkomBsTv8LFNVg.roa File: XxEZsYZPdK3SWZkomBsTv8LFNVg.roa (raw, json) Hash identifier: tM6CB687KapDIQ9ieiEYJfXEzIc4ztoUppntZfCjT5g= Subject key identifier: 5F:11:19:B1:86:4F:74:AD:D2:59:99:28:98:1B:13:BF:C2:C5:35:58 Certificate issuer: /CN=107807c2518915138f555123605c0133dfdbb4fa Certificate serial: 019C037E3BB448C215C9BA086CF87F5BEA0C Authority key identifier: 10:78:07:C2:51:89:15:13:8F:55:51:23:60:5C:01:33:DF:DB:B4:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHgHwlGJFROPVVEjYFwBM9_btPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/XxEZsYZPdK3SWZkomBsTv8LFNVg.roa Signing time: Wed 28 Jan 2026 07:25:30 +0000 ROA not before: Wed 28 Jan 2026 07:25:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 378 IP address blocks: 132.70.0.0/15 maxlen: 24 132.70.0.0/16 maxlen: 24 132.71.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.crl rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft rsync://rpki.ripe.net/repository/DEFAULT/EHgHwlGJFROPVVEjYFwBM9_btPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Feb 2026 10:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:03:7e:3b:b4:48:c2:15:c9:ba:08:6c:f8:7f:5b:ea:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=107807c2518915138f555123605c0133dfdbb4fa Validity Not Before: Jan 28 07:25:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f1119b1864f74add2599928981b13bfc2c53558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:55:9f:5c:80:a2:c2:be:da:ef:82:b5:85:a0: 50:ca:53:6d:f2:c2:99:7b:4d:58:67:9f:85:24:54: 93:55:9b:a3:91:a0:ad:be:39:38:d4:21:2b:a5:0b: a7:d8:12:a5:04:05:cd:e4:ad:0d:e3:61:68:9e:5c: e9:30:25:9a:fb:c2:e0:fe:b6:d1:7f:07:4c:7d:b4: 21:b7:a1:5d:f2:64:4b:73:cf:83:e8:1e:82:78:b5: 56:f8:df:fc:52:58:c0:1a:f6:9e:31:7f:e9:25:fe: aa:5a:06:3b:f9:ce:a9:f9:af:c5:30:3b:65:08:88: f9:52:0a:1c:07:a4:bc:0e:12:60:f7:a0:64:e5:8e: 3c:dc:60:7d:9e:5b:36:37:6d:b5:b4:f8:ba:0d:13: 77:fa:1c:fd:1c:ca:e3:75:7f:f1:27:b5:f5:ab:65: 0d:06:39:95:17:7b:2a:c4:5d:4d:6f:8b:66:41:dd: b0:bf:d6:30:a2:80:ce:7f:95:ec:2b:0e:9f:87:61: 66:17:e7:01:9b:b4:b3:79:3d:34:2d:5f:fc:20:bc: e0:c7:2d:94:e0:03:e1:17:c6:75:db:93:3a:cc:c9: 16:e4:1f:44:fe:bc:72:49:a3:f8:b5:39:29:1d:fe: d4:6b:62:26:89:f6:ee:66:d0:42:37:0b:42:f2:99: 2c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:11:19:B1:86:4F:74:AD:D2:59:99:28:98:1B:13:BF:C2:C5:35:58 X509v3 Authority Key Identifier: keyid:10:78:07:C2:51:89:15:13:8F:55:51:23:60:5C:01:33:DF:DB:B4:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHgHwlGJFROPVVEjYFwBM9_btPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/XxEZsYZPdK3SWZkomBsTv8LFNVg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 132.70.0.0/15 Signature Algorithm: sha256WithRSAEncryption 91:73:bf:f8:ed:78:26:b5:9a:e8:60:a6:35:e2:5a:97:83:cf: 4a:1b:3a:6e:7d:3a:47:a2:00:52:86:bb:4f:d9:eb:75:24:e9: be:d0:8b:c4:a8:89:b9:86:72:85:73:3c:6d:75:76:b1:9f:a0: 20:ea:2c:df:b3:82:d0:03:a5:41:a6:bc:ec:2c:a5:19:fb:bc: a2:c3:19:1c:3b:e7:d5:52:36:3a:3c:60:cb:67:6e:f4:03:00: f1:b6:ab:6e:39:96:8e:be:fd:e7:9f:a5:45:c1:94:09:b7:0d: b7:57:3a:4e:b8:30:9c:c8:c4:ca:fc:6c:9d:f3:2e:2e:5b:c6: 4b:a5:20:c9:68:3d:cd:d0:1c:c3:28:e1:8b:92:3b:e7:f9:86: a1:3f:8b:a5:21:4c:d6:84:f6:a0:3f:3b:df:0e:b2:e3:c3:0c: d4:74:99:af:08:c5:26:b6:e0:ba:37:f2:df:78:9e:f5:db:66: aa:61:8a:c8:2e:b4:91:0e:36:c6:10:cd:36:a5:aa:77:a4:00: 97:be:07:77:fa:74:67:71:d4:47:f9:a3:af:42:41:2d:91:15: cf:77:1b:bd:90:73:e4:49:a6:98:03:87:ad:3c:74:9d:bb:98: ad:4f:46:5b:e9:52:99:3a:af:33:b3:d3:f3:63:1e:7c:0a:58: 55:c3:8a:7e -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZwDfju0SMIVyboIbPh/W+oMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNzgwN2MyNTE4OTE1MTM4ZjU1NTEyMzYwNWMwMTMzZGZk YmI0ZmEwHhcNMjYwMTI4MDcyNTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjExMTliMTg2NGY3NGFkZDI1OTk5Mjg5ODFiMTNiZmMyYzUzNTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1WfXICiwr7a74K1haBQylNt8sKZ e01YZ5+FJFSTVZujkaCtvjk41CErpQun2BKlBAXN5K0N42FonlzpMCWa+8Lg/rbR fwdMfbQht6Fd8mRLc8+D6B6CeLVW+N/8UljAGvaeMX/pJf6qWgY7+c6p+a/FMDtl CIj5UgocB6S8DhJg96Bk5Y483GB9nls2N221tPi6DRN3+hz9HMrjdX/xJ7X1q2UN BjmVF3sqxF1Nb4tmQd2wv9YwooDOf5XsKw6fh2FmF+cBm7SzeT00LV/8ILzgxy2U 4APhF8Z125M6zMkW5B9E/rxySaP4tTkpHf7Ua2ImifbuZtBCNwtC8pkscQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFF8RGbGGT3St0lmZKJgbE7/CxTVYMB8GA1UdIwQY MBaAFBB4B8JRiRUTj1VRI2BcATPf27T6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUhnSHdsR0pGUk9QVlZFallGd0JNOV9idFBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8yODYwYTQtM2I5NC00Mjc0LWEzYTIt ZjlhYzE1ZTY2Mzg2LzEvWHhFWnNZWlBkSzNTV1prb21Cc1R2OExGTlZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8yODYwYTQtM2I5NC00Mjc0LWEzYTItZjlhYzE1ZTY2Mzg2 LzEvRUhnSHdsR0pGUk9QVlZFallGd0JNOV9idFBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBhEYwDQYJ KoZIhvcNAQELBQADggEBAJFzv/jteCa1muhgpjXiWpeDz0obOm59OkeiAFKGu0/Z 63Uk6b7Qi8SoibmGcoVzPG11drGfoCDqLN+zgtADpUGmvOwspRn7vKLDGRw759VS Njo8YMtnbvQDAPG2q245lo6+/eefpUXBlAm3DbdXOk64MJzIxMr8bJ3zLi5bxkul IMloPc3QHMMo4YuSO+f5hqE/i6UhTNaE9qA/O98OsuPDDNR0ma8IxSa24Lo38t94 nvXbZqphisgutJEONsYQzTalqnekAJe+B3f6dGdx1Ef5o69CQS2RFc93G72Qc+RJ ppgDh608dJ27mK1PRlvpUpk6rzOz0/NjHnwKWFXDin4= -----END CERTIFICATE-----Generated at Sat Feb 7 20:25:02 2026 by rpki-client