This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/XMW-FvJp0UB69_mYCPgZQKDCoB4.roa File: XMW-FvJp0UB69_mYCPgZQKDCoB4.roa (raw, json) Hash identifier: YY+hrL4E4Lqfk5dAIJ94zNynA5kCU1X+7ti7MU3G9VY= Subject key identifier: 5C:C5:BE:16:F2:69:D1:40:7A:F7:F9:98:08:F8:19:40:A0:C2:A0:1E Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C130210EDF10A7A5C059DC1B94BB295 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/XMW-FvJp0UB69_mYCPgZQKDCoB4.roa Signing time: Fri 02 Jan 2026 00:19:39 +0000 ROA not before: Fri 02 Jan 2026 00:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213999 IP address blocks: 5.175.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:02:10:ed:f1:0a:7a:5c:05:9d:c1:b9:4b:b2:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5cc5be16f269d1407af7f99808f81940a0c2a01e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bf:a7:98:23:d2:41:40:4e:8f:cb:00:06:30: 4a:ad:07:8a:33:b5:35:b7:2c:fd:5a:88:95:d5:34: 02:a9:dd:34:e3:57:c2:f6:7a:4e:65:44:49:c3:73: bc:f2:10:61:69:d0:07:98:7c:27:fe:74:3e:07:82: 18:54:6d:e3:67:3c:bf:59:85:12:f1:35:f0:bb:95: ce:75:d5:dd:10:dd:f0:24:b5:2a:23:93:0c:7e:4d: 2b:cb:92:ca:e3:9b:05:c3:4f:7b:9f:54:4f:ef:9c: 06:72:0b:7f:ea:e7:e1:3e:68:c8:97:b3:fa:63:0a: de:02:7d:c1:9c:09:dc:02:cd:c3:99:f2:6c:e2:f3: ad:d7:fc:10:9c:18:57:c6:ee:c1:7c:8d:e0:bf:6a: e6:e0:ab:f4:47:76:d7:32:52:39:0d:e0:65:5a:1c: 63:9e:a9:95:19:cf:b3:46:5d:77:d1:8d:34:61:5f: f1:a5:69:d6:88:c4:e2:c1:35:0a:a9:84:d1:c8:b1: 0b:5e:04:f5:6d:65:e9:b9:ab:8e:70:95:56:33:4b: 6f:e4:28:4c:7b:75:f2:8d:80:6c:08:8e:dc:40:d3: 88:ac:d0:40:3e:f8:6a:58:f6:a2:46:90:5c:3a:3e: c2:3d:ca:fd:a7:69:f6:45:f2:4c:b5:c3:50:c7:08: c6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:C5:BE:16:F2:69:D1:40:7A:F7:F9:98:08:F8:19:40:A0:C2:A0:1E X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/XMW-FvJp0UB69_mYCPgZQKDCoB4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.250.0/24 Signature Algorithm: sha256WithRSAEncryption 44:5d:d6:49:ad:c3:9e:fb:8b:86:0f:d7:d3:64:0a:d3:8c:35: 33:c9:f7:bc:10:47:73:b6:79:e0:32:b7:d4:f0:d4:05:00:58: 75:c8:34:f9:d7:4a:9d:88:f8:82:00:f1:20:30:dc:16:b6:a9: d2:09:d7:7a:35:d4:ba:e0:65:d4:2d:3d:d5:78:dd:99:50:ff: 29:6f:ed:30:7f:87:ec:19:67:e3:c0:df:32:82:0f:d4:b4:16: b4:b8:11:18:e1:43:c2:fa:ca:74:32:c3:46:32:16:bf:f7:93: 47:9f:fe:74:c6:b7:32:10:25:2b:d0:61:63:08:7c:77:33:8b: bf:d7:4e:b9:21:08:c5:0c:66:d8:65:ea:af:78:fc:af:5a:71: e8:26:b0:f7:f2:a4:f8:fb:86:63:14:fb:e1:13:79:18:19:74: 39:7b:b1:17:1e:c4:f6:84:35:af:ec:06:88:fc:41:25:5a:52: 45:0c:d3:6b:29:24:93:1e:47:65:64:8f:86:91:44:60:ac:c5: f0:37:6d:24:bf:65:cb:1b:0d:69:63:2f:bf:bb:73:4a:4f:9b: 50:3e:50:f9:f3:97:ab:df:46:35:9e:fa:c4:5e:bd:64:a7:8c: ab:de:95:3c:af:49:8b:69:aa:64:39:52:76:39:db:77:da:00: 92:c0:ad:f4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EwIQ7fEKelwFncG5S7KVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2M1YmUxNmYyNjlkMTQwN2FmN2Y5OTgwOGY4MTk0MGEwYzJhMDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAub+nmCPSQUBOj8sABjBKrQeKM7U1 tyz9WoiV1TQCqd0041fC9npOZURJw3O88hBhadAHmHwn/nQ+B4IYVG3jZzy/WYUS 8TXwu5XOddXdEN3wJLUqI5MMfk0ry5LK45sFw097n1RP75wGcgt/6ufhPmjIl7P6 YwreAn3BnAncAs3DmfJs4vOt1/wQnBhXxu7BfI3gv2rm4Kv0R3bXMlI5DeBlWhxj nqmVGc+zRl130Y00YV/xpWnWiMTiwTUKqYTRyLELXgT1bWXpuauOcJVWM0tv5ChM e3XyjYBsCI7cQNOIrNBAPvhqWPaiRpBcOj7CPcr9p2n2RfJMtcNQxwjG9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFzFvhbyadFAevf5mAj4GUCgwqAeMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvWE1XLUZ2SnAwVUI2OV9tWUNQZ1pRS0RDb0I0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABa/6MA0G CSqGSIb3DQEBCwUAA4IBAQBEXdZJrcOe+4uGD9fTZArTjDUzyfe8EEdztnngMrfU 8NQFAFh1yDT510qdiPiCAPEgMNwWtqnSCdd6NdS64GXULT3VeN2ZUP8pb+0wf4fs GWfjwN8ygg/UtBa0uBEY4UPC+sp0MsNGMha/95NHn/50xrcyECUr0GFjCHx3M4u/ 1065IQjFDGbYZeqvePyvWnHoJrD38qT4+4ZjFPvhE3kYGXQ5e7EXHsT2hDWv7AaI /EElWlJFDNNrKSSTHkdlZI+GkURgrMXwN20kv2XLGw1pYy+/u3NKT5tQPlD585er 30Y1nvrEXr1kp4yr3pU8r0mLaapkOVJ2Odt32gCSwK30 -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:14 2026 by rpki-client