This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/PX4jRvV2Is0w59EuWq6-Cko1_qM.roa File: PX4jRvV2Is0w59EuWq6-Cko1_qM.roa (raw, json) Hash identifier: o5zSrmvOazS6EGtXXnfbpDTf59xV6PS54zdbjnXbBvw= Subject key identifier: 3D:7E:23:46:F5:76:22:CD:30:E7:D1:2E:5A:AE:BE:0A:4A:35:FE:A3 Certificate issuer: /CN=5f099f49978b960fa31f81acf54671273dc7ff61 Certificate serial: 019B7D5CEAC5980F5C62EB352F338A8538CE Authority key identifier: 5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/PX4jRvV2Is0w59EuWq6-Cko1_qM.roa Signing time: Fri 02 Jan 2026 06:19:59 +0000 ROA not before: Fri 02 Jan 2026 06:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60979 IP address blocks: 185.22.68.0/22 maxlen: 24 185.70.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ea:c5:98:0f:5c:62:eb:35:2f:33:8a:85:38:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f099f49978b960fa31f81acf54671273dc7ff61 Validity Not Before: Jan 2 06:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d7e2346f57622cd30e7d12e5aaebe0a4a35fea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:74:f8:11:31:d0:ca:fc:c4:3a:9f:0b:e8:21: 35:ee:36:3b:f2:9a:c2:f9:28:52:98:34:72:ee:24: 4b:45:94:1f:f3:03:ef:2a:de:c2:89:ef:31:31:8a: f9:31:ed:65:63:34:10:18:b8:c5:80:41:f2:23:60: d2:57:11:5a:ea:72:bf:ba:79:fe:32:24:5f:bf:42: 89:14:2e:60:9a:07:aa:8f:5a:81:97:55:db:4d:b1: 8c:8b:f5:47:5f:f1:79:c2:d4:8f:f6:7d:ee:6c:4e: 8a:d4:54:78:46:21:2a:95:2c:4b:a9:20:ee:b2:ec: ef:2c:cf:57:e2:79:93:8c:01:82:6a:1b:15:ac:88: f3:60:94:bc:fe:dd:b4:28:e3:13:b4:b0:60:be:d9: 3d:b0:ad:8a:59:76:31:f9:29:3a:2e:23:fc:2f:0c: 71:80:4b:3d:8d:60:39:39:28:02:27:40:92:6f:bf: ce:ba:d3:d4:02:d4:9c:fd:16:fc:bc:6c:2e:d8:20: ec:f7:da:ac:00:f3:e9:01:95:b4:63:05:2e:c8:96: 4e:d4:ac:ae:0d:75:3a:6c:4c:74:f8:e2:31:e8:a4: 8b:b2:c2:1f:72:1c:20:2b:bc:80:6f:72:d0:fe:14: 5a:74:4d:97:27:68:d0:f0:16:b8:c4:9f:37:57:38: ef:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:7E:23:46:F5:76:22:CD:30:E7:D1:2E:5A:AE:BE:0A:4A:35:FE:A3 X509v3 Authority Key Identifier: keyid:5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/PX4jRvV2Is0w59EuWq6-Cko1_qM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.22.68.0/22 185.70.120.0/22 Signature Algorithm: sha256WithRSAEncryption 78:a5:df:56:eb:5b:42:40:08:9c:70:3e:0d:11:d5:3f:7c:af: a0:5f:22:e2:b4:17:49:a3:e4:e6:b1:ae:7a:67:5c:23:f6:3a: 33:24:74:82:d9:c2:a2:14:da:b3:6c:a9:0e:9e:94:b3:0c:ba: 27:d5:4c:9f:e3:9e:8d:65:d4:59:99:e9:72:7a:6c:fa:cb:9f: fb:b4:7c:07:73:88:08:1e:8e:4a:ff:4c:d2:f3:95:00:a7:a8: 4f:e2:15:e4:20:d7:24:71:c2:a4:1d:51:79:60:0a:01:09:8f: be:76:26:9f:22:3b:95:43:f7:4c:b8:4f:f9:3b:f5:34:e3:e6: a3:34:b5:b4:06:7a:20:6c:e6:5c:e8:03:cb:42:77:76:ee:8a: 4d:d6:22:00:ef:7a:e0:c1:81:98:e3:48:57:d8:10:f6:21:77: a2:9b:12:b4:eb:44:64:b1:1d:06:ed:1b:c7:b3:22:13:35:aa: e0:60:9a:d1:cc:26:df:74:66:e7:c9:3d:7d:ab:c5:cc:53:44: 24:cc:16:3e:30:71:2b:c0:3c:d5:21:30:56:7f:18:23:52:2c: c3:dd:f6:78:ac:8f:e2:e0:d2:ab:a3:27:59:2f:40:1b:0b:bd: 38:57:48:0d:4a:c0:69:fe:4f:b9:ce:13:9d:5a:98:9c:37:9b: be:d0:44:b1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XOrFmA9cYus1LzOKhTjOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMDk5ZjQ5OTc4Yjk2MGZhMzFmODFhY2Y1NDY3MTI3M2Rj N2ZmNjEwHhcNMjYwMTAyMDYxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDdlMjM0NmY1NzYyMmNkMzBlN2QxMmU1YWFlYmUwYTRhMzVmZWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnT4ETHQyvzEOp8L6CE17jY78prC +ShSmDRy7iRLRZQf8wPvKt7Cie8xMYr5Me1lYzQQGLjFgEHyI2DSVxFa6nK/unn+ MiRfv0KJFC5gmgeqj1qBl1XbTbGMi/VHX/F5wtSP9n3ubE6K1FR4RiEqlSxLqSDu suzvLM9X4nmTjAGCahsVrIjzYJS8/t20KOMTtLBgvtk9sK2KWXYx+Sk6LiP8Lwxx gEs9jWA5OSgCJ0CSb7/OutPUAtSc/Rb8vGwu2CDs99qsAPPpAZW0YwUuyJZO1Kyu DXU6bEx0+OIx6KSLssIfchwgK7yAb3LQ/hRadE2XJ2jQ8Ba4xJ83VzjvYQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFD1+I0b1diLNMOfRLlquvgpKNf6jMB8GA1UdIwQY MBaAFF8Jn0mXi5YPox+BrPVGcSc9x/9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHdtZlNaZUxsZy1qSDRHczlVWnhKejNIXzJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hZDViZmQtODVjNy00N2I3LTk5N2Mt ZjVkMmNiNzk0NTZkLzEvUFg0alJ2VjJJczB3NTlFdVdxNi1Da28xX3FNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9hZDViZmQtODVjNy00N2I3LTk5N2MtZjVkMmNiNzk0NTZk LzEvWHdtZlNaZUxsZy1qSDRHczlVWnhKejNIXzJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuRZEAwQC uUZ4MA0GCSqGSIb3DQEBCwUAA4IBAQB4pd9W61tCQAiccD4NEdU/fK+gXyLitBdJ o+Tmsa56Z1wj9jozJHSC2cKiFNqzbKkOnpSzDLon1Uyf456NZdRZmelyemz6y5/7 tHwHc4gIHo5K/0zS85UAp6hP4hXkINckccKkHVF5YAoBCY++diafIjuVQ/dMuE/5 O/U04+ajNLW0BnogbOZc6APLQnd27opN1iIA73rgwYGY40hX2BD2IXeimxK060Rk sR0G7RvHsyITNargYJrRzCbfdGbnyT19q8XMU0QkzBY+MHErwDzVITBWfxgjUizD 3fZ4rI/i4NKroydZL0AbC704V0gNSsBp/k+5zhOdWpicN5u+0ESx -----END CERTIFICATE-----Generated at Tue Jan 20 04:47:36 2026 by rpki-client