This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/xE39Ruj0m92ceMsS3LNfFTVLuDk.roa
File: xE39Ruj0m92ceMsS3LNfFTVLuDk.roa (raw, json)
Hash identifier: X8+e4gKAkSWFlzWGvgEu09Paqpm627rMwTZHilH3gFg=
Subject key identifier: C4:4D:FD:46:E8:F4:9B:DD:9C:78:CB:12:DC:B3:5F:15:35:4B:B8:39
Certificate issuer: /CN=5d6c15ca903d7d25453eaeb5f724a04e3aa65908
Certificate serial: 019B79110AFDF184F1722B0A0E3358CE6597
Authority key identifier: 5D:6C:15:CA:90:3D:7D:25:45:3E:AE:B5:F7:24:A0:4E:3A:A6:59:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/xE39Ruj0m92ceMsS3LNfFTVLuDk.roa
Signing time: Thu 01 Jan 2026 10:18:38 +0000
ROA not before: Thu 01 Jan 2026 10:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60728
IP address blocks: 185.22.52.0/22 maxlen: 22
185.22.52.0/24 maxlen: 24
185.22.53.0/24 maxlen: 24
185.22.54.0/24 maxlen: 24
185.22.55.0/24 maxlen: 24
2a04:1d40::/29 maxlen: 29
2a04:1d40::/32 maxlen: 32
2a04:1d41::/32 maxlen: 32
2a04:1d42::/32 maxlen: 32
2a04:1d43::/32 maxlen: 32
2a04:1d44::/32 maxlen: 32
2a04:1d45::/32 maxlen: 32
2a04:1d46::/32 maxlen: 32
2a04:1d47::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:11:0a:fd:f1:84:f1:72:2b:0a:0e:33:58:ce:65:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6c15ca903d7d25453eaeb5f724a04e3aa65908
Validity
Not Before: Jan 1 10:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c44dfd46e8f49bdd9c78cb12dcb35f15354bb839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0c:e8:d2:c9:fa:69:cb:a9:6a:70:e2:1f:4a:
0b:48:1a:9c:a1:f8:e5:78:20:bb:28:e5:54:25:4d:
8a:9a:be:6f:c1:8e:f9:9d:97:53:01:ec:c0:3c:83:
ff:93:cb:ca:12:11:99:d2:13:2e:b1:fa:d0:f5:50:
af:11:33:09:6f:c0:40:b9:2b:3d:d2:00:70:3b:43:
2e:5d:bc:32:11:62:c3:c1:75:71:f5:2c:c4:44:81:
76:78:02:30:97:ed:04:9e:4e:82:6f:2b:a0:4e:08:
f7:30:9b:42:30:15:54:e0:fa:9a:60:2b:b5:36:b0:
19:a7:6a:7a:0b:47:51:1d:7c:65:ae:c9:59:60:ca:
58:2c:a7:d2:bd:3e:db:f3:45:84:b2:53:ba:b7:9c:
ba:0d:66:72:3e:f6:52:26:70:8f:4f:df:fb:d5:23:
7f:90:8a:ed:7a:6f:47:e1:5e:36:16:26:d1:89:4a:
fd:73:d6:08:b2:4f:32:eb:36:46:7f:f1:32:f4:e5:
a4:50:93:ac:1a:99:6e:30:10:f5:b5:98:55:cd:25:
67:43:a7:a6:c8:f4:90:56:e8:c7:f5:f9:df:41:a6:
d3:d7:8d:69:4e:94:c7:cd:dc:22:9e:63:8a:58:71:
76:30:41:95:95:26:df:2c:dd:aa:50:50:ad:21:07:
40:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:4D:FD:46:E8:F4:9B:DD:9C:78:CB:12:DC:B3:5F:15:35:4B:B8:39
X509v3 Authority Key Identifier:
keyid:5D:6C:15:CA:90:3D:7D:25:45:3E:AE:B5:F7:24:A0:4E:3A:A6:59:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/xE39Ruj0m92ceMsS3LNfFTVLuDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.22.52.0/22
IPv6:
2a04:1d40::/29
Signature Algorithm: sha256WithRSAEncryption
86:83:f5:44:cf:13:5d:3b:9c:ec:63:cd:dc:f2:0f:94:47:cf:
51:b3:6d:62:71:a0:4e:59:08:9c:2b:22:cb:c0:44:fa:46:94:
04:5b:04:83:09:0e:36:f6:4a:17:19:ea:47:2a:02:e8:63:e2:
ac:9c:fb:d0:a2:2a:90:09:85:c7:96:d4:18:cc:b3:1f:1d:db:
4a:e1:4f:88:6f:b9:c9:34:c3:28:f9:32:87:a4:28:8d:dd:00:
c2:8c:25:94:22:4b:69:4a:57:21:a9:e8:c1:29:69:41:10:6f:
b2:9a:0f:b4:74:c7:0e:f3:6a:a4:3f:65:88:b5:bf:b8:3e:e6:
71:9d:e0:3d:6f:b4:b9:b9:e2:10:c7:55:c6:f5:e2:3f:0f:38:
ce:79:97:63:97:81:a5:7b:ac:7d:ab:6f:7a:cc:52:8f:c6:3f:
15:7f:d0:95:48:61:af:ba:eb:fc:5b:f2:5f:9f:74:8b:d3:b4:
1b:01:27:6e:6d:0c:7e:d7:cc:0c:11:37:ff:8b:e9:f5:f7:65:
82:4a:cc:78:0a:82:69:3f:6c:bc:e2:e2:3b:db:51:d4:ac:c0:
7b:98:8d:93:6a:a5:b6:a1:9a:ce:ae:21:03:e3:b0:bd:b2:d1:
05:d4:12:35:63:e7:76:ea:d4:4f:59:ca:fe:b3:50:e6:28:0b:
5c:46:f8:10
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZt5EQr98YTxcisKDjNYzmWXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkNmMxNWNhOTAzZDdkMjU0NTNlYWViNWY3MjRhMDRlM2Fh
NjU5MDgwHhcNMjYwMTAxMTAxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDRkZmQ0NmU4ZjQ5YmRkOWM3OGNiMTJkY2IzNWYxNTM1NGJiODM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgzo0sn6acupanDiH0oLSBqcofjl
eCC7KOVUJU2Kmr5vwY75nZdTAezAPIP/k8vKEhGZ0hMusfrQ9VCvETMJb8BAuSs9
0gBwO0MuXbwyEWLDwXVx9SzERIF2eAIwl+0Enk6CbyugTgj3MJtCMBVU4PqaYCu1
NrAZp2p6C0dRHXxlrslZYMpYLKfSvT7b80WEslO6t5y6DWZyPvZSJnCPT9/71SN/
kIrtem9H4V42FibRiUr9c9YIsk8y6zZGf/Ey9OWkUJOsGpluMBD1tZhVzSVnQ6em
yPSQVujH9fnfQabT141pTpTHzdwinmOKWHF2MEGVlSbfLN2qUFCtIQdA2wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFMRN/Ubo9JvdnHjLEtyzXxU1S7g5MB8GA1UdIwQY
MBaAFF1sFcqQPX0lRT6utfckoE46plkIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFd3VnlwQTlmU1ZGUHE2MTl5U2dUanFtV1FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yODY0YzgtYzA0Mi00MjhmLWEwMmQt
M2IzNGMyM2I5YzVhLzEveEUzOVJ1ajBtOTJjZU1zUzNMTmZGVFZMdURrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8yODY0YzgtYzA0Mi00MjhmLWEwMmQtM2IzNGMyM2I5YzVh
LzEvWFd3VnlwQTlmU1ZGUHE2MTl5U2dUanFtV1FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuRY0MA0E
AgACMAcDBQMqBB1AMA0GCSqGSIb3DQEBCwUAA4IBAQCGg/VEzxNdO5zsY83c8g+U
R89Rs21icaBOWQicKyLLwET6RpQEWwSDCQ429koXGepHKgLoY+KsnPvQoiqQCYXH
ltQYzLMfHdtK4U+Ib7nJNMMo+TKHpCiN3QDCjCWUIktpSlchqejBKWlBEG+ymg+0
dMcO82qkP2WItb+4PuZxneA9b7S5ueIQx1XG9eI/DzjOeZdjl4Gle6x9q296zFKP
xj8Vf9CVSGGvuuv8W/Jfn3SL07QbASdubQx+18wMETf/i+n192WCSsx4CoJpP2y8
4uI721HUrMB7mI2TaqW2oZrOriED47C9stEF1BI1Y+d26tRPWcr+s1DmKAtcRvgQ
-----END CERTIFICATE-----
Generated at Mon Feb 9 23:42:03 2026 by rpki-client