This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/xq4w6SU6FPWxmcDW3OYVBGOmDJw.roa File: xq4w6SU6FPWxmcDW3OYVBGOmDJw.roa (raw, json) Hash identifier: +sNzfILgDAd4/zXK6g6HZ/0UtYtfupO/z9Wf0twQHHo= Subject key identifier: C6:AE:30:E9:25:3A:14:F5:B1:99:C0:D6:DC:E6:15:04:63:A6:0C:9C Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019BD2C13F436C2B6D0547866FB64A16FDAE Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/xq4w6SU6FPWxmcDW3OYVBGOmDJw.roa Signing time: Sun 18 Jan 2026 20:17:18 +0000 ROA not before: Sun 18 Jan 2026 20:17:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215607 IP address blocks: 5.175.186.0/24 maxlen: 24 77.90.33.0/24 maxlen: 24 85.93.5.0/24 maxlen: 24 89.106.89.0/24 maxlen: 24 94.249.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d2:c1:3f:43:6c:2b:6d:05:47:86:6f:b6:4a:16:fd:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 18 20:17:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6ae30e9253a14f5b199c0d6dce6150463a60c9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:04:1d:f3:a0:8e:c1:dc:ce:3c:99:18:12:f1: f8:3c:06:66:01:eb:aa:fb:56:47:eb:88:06:10:8f: 09:b5:3e:42:b0:f9:54:1f:87:ee:d4:66:42:9c:c8: 8a:c1:a4:18:50:d7:d2:57:72:3c:a4:1a:d3:65:4f: 1d:09:63:06:79:c7:44:39:96:b3:bb:7a:3a:b5:e0: 71:31:1d:e6:7d:fd:81:65:60:03:26:de:c6:34:8e: d2:e7:35:8b:66:62:4b:0e:55:a5:94:39:6c:6d:d2: 7f:40:cd:93:31:3b:a7:4b:7a:79:c8:b2:23:64:c0: 4e:3b:5b:15:73:59:af:bc:38:f0:c9:17:06:13:8e: 51:97:bf:d8:42:14:3c:f8:e7:bd:07:a5:b6:c6:d6: 5e:07:7b:5c:86:3e:58:18:57:df:fe:78:28:a4:00: 19:e9:ff:02:4d:ac:a1:04:50:ea:2a:f2:29:cc:b4: 15:f4:9a:35:5e:3d:c4:f7:b6:1f:3e:6e:68:31:d0: 73:13:6b:62:89:a2:b5:31:b4:53:59:48:01:de:63: ae:dc:76:51:39:2b:40:42:a5:95:f7:eb:9f:65:d0: 8b:2f:58:12:05:83:6c:15:56:aa:cd:08:27:4b:f9: 5c:c8:83:57:67:f8:53:88:d8:8b:93:34:01:34:aa: a5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:AE:30:E9:25:3A:14:F5:B1:99:C0:D6:DC:E6:15:04:63:A6:0C:9C X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/xq4w6SU6FPWxmcDW3OYVBGOmDJw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.186.0/24 77.90.33.0/24 85.93.5.0/24 89.106.89.0/24 94.249.239.0/24 Signature Algorithm: sha256WithRSAEncryption 44:f4:97:7c:d1:d1:e2:6e:8b:bc:e9:29:39:c2:e7:4c:1b:c2: 14:3c:b8:4c:2f:db:46:da:47:0b:32:07:96:83:35:b6:cb:d0: 50:97:2f:fa:bc:a8:e6:95:cc:b7:d5:4e:48:ee:20:99:48:33: 09:d6:52:e8:83:72:11:b2:d2:40:07:9c:c6:34:f5:ae:48:72: 4f:f4:00:70:86:b0:52:53:2b:4d:b4:3d:e8:88:1c:4f:0c:9b: 8d:28:b7:d0:79:f1:a0:d2:08:f9:d1:65:49:2d:8e:9f:4a:24: 2f:ce:9e:cc:e4:1c:23:e9:c7:50:ce:95:47:a0:64:17:17:86: 9b:ec:3b:c3:ce:6f:ae:44:bc:22:a4:2a:18:4b:5a:fe:8d:ba: ef:77:31:25:aa:f2:32:16:ef:8a:bd:54:06:de:6f:dc:54:ee: 4b:40:7d:fb:aa:2c:ff:0f:a6:2a:5a:8b:3a:e0:d3:cd:d6:ad: 4e:c1:a0:8a:b6:f6:11:26:76:a8:09:34:03:b3:d8:ee:e1:eb: 3c:86:5a:d0:64:30:e0:97:9f:f9:0c:bd:97:b8:ff:57:49:eb: 4f:58:18:74:13:0e:23:22:fd:ed:ec:6b:70:b6:23:0e:0e:9e: cc:e8:12:e3:3c:9f:d6:a0:f4:64:5c:fb:bf:ff:8b:f3:a5:75: 26:7d:62:b8 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZvSwT9DbCttBUeGb7ZKFv2uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTE4MjAxNzE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmFlMzBlOTI1M2ExNGY1YjE5OWMwZDZkY2U2MTUwNDYzYTYwYzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgQd86COwdzOPJkYEvH4PAZmAeuq +1ZH64gGEI8JtT5CsPlUH4fu1GZCnMiKwaQYUNfSV3I8pBrTZU8dCWMGecdEOZaz u3o6teBxMR3mff2BZWADJt7GNI7S5zWLZmJLDlWllDlsbdJ/QM2TMTunS3p5yLIj ZMBOO1sVc1mvvDjwyRcGE45Rl7/YQhQ8+Oe9B6W2xtZeB3tchj5YGFff/ngopAAZ 6f8CTayhBFDqKvIpzLQV9Jo1Xj3E97YfPm5oMdBzE2tiiaK1MbRTWUgB3mOu3HZR OStAQqWV9+ufZdCLL1gSBYNsFVaqzQgnS/lcyINXZ/hTiNiLkzQBNKqlPwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFMauMOklOhT1sZnA1tzmFQRjpgycMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEveHE0dzZTVTZGUFd4bWNEVzNPWVZCR09tREp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQABa+6AwQA TVohAwQAVV0FAwQAWWpZAwQAXvnvMA0GCSqGSIb3DQEBCwUAA4IBAQBE9Jd80dHi bou86Sk5wudMG8IUPLhML9tG2kcLMgeWgzW2y9BQly/6vKjmlcy31U5I7iCZSDMJ 1lLog3IRstJAB5zGNPWuSHJP9ABwhrBSUytNtD3oiBxPDJuNKLfQefGg0gj50WVJ LY6fSiQvzp7M5Bwj6cdQzpVHoGQXF4ab7DvDzm+uRLwipCoYS1r+jbrvdzElqvIy Fu+KvVQG3m/cVO5LQH37qiz/D6YqWos64NPN1q1OwaCKtvYRJnaoCTQDs9ju4es8 hlrQZDDgl5/5DL2XuP9XSetPWBh0Ew4jIv3t7GtwtiMODp7M6BLjPJ/WoPRkXPu/ /4vzpXUmfWK4 -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:41 2026 by rpki-client