This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/XIpAxxpbG5GjUPy_zxHWltgBxDQ.roa File: XIpAxxpbG5GjUPy_zxHWltgBxDQ.roa (raw, json) Hash identifier: T2mIb6X0eqEPDAVOO/ebU2ewF480tOCHv4ChfQbc97I= Subject key identifier: 5C:8A:40:C7:1A:5B:1B:91:A3:50:FC:BF:CF:11:D6:96:D8:01:C4:34 Certificate issuer: /CN=56e3353d5f423ad4271c3261caa543140530bddb Certificate serial: 019B7835517687EB2573153DCEE0339DAF4F Authority key identifier: 56:E3:35:3D:5F:42:3A:D4:27:1C:32:61:CA:A5:43:14:05:30:BD:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VuM1PV9COtQnHDJhyqVDFAUwvds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/XIpAxxpbG5GjUPy_zxHWltgBxDQ.roa Signing time: Thu 01 Jan 2026 06:18:38 +0000 ROA not before: Thu 01 Jan 2026 06:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34757 IP address blocks: 5.44.168.0/23 maxlen: 24 109.111.176.0/20 maxlen: 24 193.238.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.crl rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.mft rsync://rpki.ripe.net/repository/DEFAULT/VuM1PV9COtQnHDJhyqVDFAUwvds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:51:76:87:eb:25:73:15:3d:ce:e0:33:9d:af:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56e3353d5f423ad4271c3261caa543140530bddb Validity Not Before: Jan 1 06:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c8a40c71a5b1b91a350fcbfcf11d696d801c434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f1:6f:96:23:3c:69:ea:e1:72:32:73:d5:1b: 81:bc:28:96:60:72:b6:66:ec:6c:d9:54:61:c8:16: ed:f4:3d:78:7b:ca:86:e7:db:6c:5a:d3:ec:39:a2: 58:a2:b6:da:9c:83:d8:d4:32:ee:7b:51:85:74:9b: 45:dd:20:de:2b:df:50:31:76:06:ac:b6:af:c9:ea: 2c:68:ad:30:ea:63:a1:f5:d2:73:03:3b:ab:d1:8b: 1e:9e:85:72:3e:94:cc:17:b9:a1:d2:f3:6e:04:50: 42:34:33:ab:fa:52:4f:23:fb:05:7f:38:70:92:5d: 69:ac:87:6f:7f:d7:ce:2d:25:e8:3b:b7:72:5c:b1: 29:00:03:a4:ba:06:6a:f7:8f:54:2c:33:8c:9c:10: 0f:cc:13:8f:ab:5e:bc:80:45:64:54:1b:b6:52:42: a5:8f:57:f9:40:0d:06:fb:b9:1d:36:cf:49:f8:59: 88:13:1d:fa:c4:12:70:bd:75:aa:92:cc:04:d8:92: 03:4a:ab:fd:74:5e:bc:23:71:5a:db:bb:fa:3a:0a: 55:b5:81:f6:9a:04:9f:00:ee:2c:99:1c:78:21:62: 78:9c:75:b7:85:87:08:44:46:c4:b1:61:30:91:20: 9b:53:45:e4:53:dd:01:95:07:e2:4c:a0:e9:5c:f8: f7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:8A:40:C7:1A:5B:1B:91:A3:50:FC:BF:CF:11:D6:96:D8:01:C4:34 X509v3 Authority Key Identifier: keyid:56:E3:35:3D:5F:42:3A:D4:27:1C:32:61:CA:A5:43:14:05:30:BD:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuM1PV9COtQnHDJhyqVDFAUwvds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/XIpAxxpbG5GjUPy_zxHWltgBxDQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.44.168.0/23 109.111.176.0/20 193.238.128.0/22 Signature Algorithm: sha256WithRSAEncryption 44:05:97:74:07:f6:c0:fb:07:a3:b8:98:d0:a3:71:77:e6:3c: e4:eb:ff:18:d9:12:0d:89:b7:b7:e4:b6:fb:33:5a:0a:5c:fb: 47:4a:20:3e:fd:0a:d9:7c:45:03:99:56:99:37:7e:b0:d3:17: a5:e3:0a:15:ed:36:6a:ba:97:86:db:fe:60:b0:b5:6b:b8:a1: 57:ef:17:69:fd:30:4b:08:ca:f7:44:0b:0a:f5:eb:15:df:df: 50:9d:bb:bb:90:3f:e0:a6:d2:78:cc:76:5d:fa:01:d2:92:44: 48:81:04:94:4d:31:56:b2:bd:10:21:b6:8e:71:0f:91:c9:18: f1:4d:05:81:64:b8:a0:ee:f8:4e:6d:37:14:e6:c3:81:1f:1c: c4:08:67:0d:2e:41:6a:cd:8f:45:9f:8b:12:c2:a7:1a:ce:be: 90:f4:3b:f0:43:e8:0b:9e:7c:ca:76:4b:f2:45:80:8a:a4:72: 2b:e6:29:69:db:98:4b:d0:07:81:30:36:89:b9:0c:ca:a3:55: 77:4b:15:0f:95:95:84:bd:c8:2f:45:f2:f7:75:4f:af:10:7c: ba:b6:41:42:69:21:0a:d8:9c:4c:4e:e3:92:f2:f0:8d:2e:77: c6:c5:7c:2b:00:00:c3:f1:f0:85:76:23:1d:56:ad:8b:d5:78: b9:97:9a:f3 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4NVF2h+slcxU9zuAzna9PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2ZTMzNTNkNWY0MjNhZDQyNzFjMzI2MWNhYTU0MzE0MDUz MGJkZGIwHhcNMjYwMTAxMDYxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzhhNDBjNzFhNWIxYjkxYTM1MGZjYmZjZjExZDY5NmQ4MDFjNDM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvFvliM8aerhcjJz1RuBvCiWYHK2 Zuxs2VRhyBbt9D14e8qG59tsWtPsOaJYorbanIPY1DLue1GFdJtF3SDeK99QMXYG rLavyeosaK0w6mOh9dJzAzur0YsenoVyPpTMF7mh0vNuBFBCNDOr+lJPI/sFfzhw kl1prIdvf9fOLSXoO7dyXLEpAAOkugZq949ULDOMnBAPzBOPq168gEVkVBu2UkKl j1f5QA0G+7kdNs9J+FmIEx36xBJwvXWqkswE2JIDSqv9dF68I3Fa27v6OgpVtYH2 mgSfAO4smRx4IWJ4nHW3hYcIREbEsWEwkSCbU0XkU90BlQfiTKDpXPj38wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFyKQMcaWxuRo1D8v88R1pbYAcQ0MB8GA1UdIwQY MBaAFFbjNT1fQjrUJxwyYcqlQxQFML3bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnVNMVBWOUNPdFFuSERKaHlxVkRGQVV3dmRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82MTA5ZDYtMGE4YS00YmY2LWEwZTIt ZTUyZGEzYjg2NzU0LzEvWElwQXh4cGJHNUdqVVB5X3p4SFdsdGdCeERRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS82MTA5ZDYtMGE4YS00YmY2LWEwZTItZTUyZGEzYjg2NzU0 LzEvVnVNMVBWOUNPdFFuSERKaHlxVkRGQVV3dmRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBBSyoAwQE bW+wAwQCwe6AMA0GCSqGSIb3DQEBCwUAA4IBAQBEBZd0B/bA+wejuJjQo3F35jzk 6/8Y2RINibe35Lb7M1oKXPtHSiA+/QrZfEUDmVaZN36w0xel4woV7TZqupeG2/5g sLVruKFX7xdp/TBLCMr3RAsK9esV399Qnbu7kD/gptJ4zHZd+gHSkkRIgQSUTTFW sr0QIbaOcQ+RyRjxTQWBZLig7vhObTcU5sOBHxzECGcNLkFqzY9Fn4sSwqcazr6Q 9DvwQ+gLnnzKdkvyRYCKpHIr5ilp25hL0AeBMDaJuQzKo1V3SxUPlZWEvcgvRfL3 dU+vEHy6tkFCaSEK2JxMTuOS8vCNLnfGxXwrAADD8fCFdiMdVq2L1Xi5l5rz -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:42 2026 by rpki-client