This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/xTcMswF38ZE38tgLMYO-vbYGTRk.roa File: xTcMswF38ZE38tgLMYO-vbYGTRk.roa (raw, json) Hash identifier: PD9c4dxb1fJ5/IhIPAC6oOP7byhN52l5phW+HJUN+kg= Subject key identifier: C5:37:0C:B3:01:77:F1:91:37:F2:D8:0B:31:83:BE:BD:B6:06:4D:19 Certificate issuer: /CN=e6c9d48a18c3c0d2e4e63a7b83885a7967755826 Certificate serial: 019B7CEDC1171994EDE4626344F0CFA3471F Authority key identifier: E6:C9:D4:8A:18:C3:C0:D2:E4:E6:3A:7B:83:88:5A:79:67:75:58:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/xTcMswF38ZE38tgLMYO-vbYGTRk.roa Signing time: Fri 02 Jan 2026 04:18:34 +0000 ROA not before: Fri 02 Jan 2026 04:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25180 IP address blocks: 5.148.0.0/17 maxlen: 17 5.148.104.0/24 maxlen: 24 5.148.128.0/19 maxlen: 19 31.221.0.0/17 maxlen: 17 62.244.160.0/19 maxlen: 19 83.244.128.0/17 maxlen: 17 109.231.192.0/18 maxlen: 18 149.63.0.0/16 maxlen: 16 167.98.0.0/16 maxlen: 16 176.46.160.0/19 maxlen: 19 2a00:1d40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.crl rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:c1:17:19:94:ed:e4:62:63:44:f0:cf:a3:47:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6c9d48a18c3c0d2e4e63a7b83885a7967755826 Validity Not Before: Jan 2 04:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5370cb30177f19137f2d80b3183bebdb6064d19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c2:45:72:ef:90:c1:a3:1c:ed:2a:6c:dc:61: d8:6b:ad:eb:f7:f0:86:04:aa:b7:d3:3e:e3:fd:af: 25:3a:bb:ed:08:c5:0e:3f:01:e8:43:91:48:33:6c: 54:5f:6a:2a:07:fe:ee:57:ff:97:72:22:ab:6f:34: 85:06:07:12:63:a9:cc:f1:bf:f4:83:d8:79:ad:9e: cf:a2:c4:b7:60:6b:03:6c:00:d3:65:eb:b0:38:29: 28:3a:5a:0b:d3:51:e2:0d:f5:d6:37:82:0e:45:d3: 96:fc:29:23:53:4b:1d:14:69:3f:50:72:e1:83:55: 6f:8c:c4:69:1c:9c:1a:4a:9f:95:08:73:be:2f:0b: e3:04:ee:03:d4:4a:ad:4a:e1:22:86:6a:d8:96:81: 93:30:19:23:32:b3:6b:a7:9d:32:2f:74:84:45:40: 20:3c:87:e3:17:08:4b:bd:cb:60:d5:c8:b9:fb:51: 24:f1:e4:81:95:ad:e8:93:b8:f2:01:58:ae:a9:72: 48:68:51:04:56:d4:e2:1d:ec:e0:e2:a3:d6:49:96: 45:b5:59:7b:6f:30:fb:f0:be:ca:7d:36:86:3a:90: 72:20:ac:32:aa:b9:e1:d5:19:7a:0f:76:0c:1e:f1: 1b:aa:1c:69:6e:7b:76:f5:a5:60:ee:26:2c:d5:7f: 2d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:37:0C:B3:01:77:F1:91:37:F2:D8:0B:31:83:BE:BD:B6:06:4D:19 X509v3 Authority Key Identifier: keyid:E6:C9:D4:8A:18:C3:C0:D2:E4:E6:3A:7B:83:88:5A:79:67:75:58:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/xTcMswF38ZE38tgLMYO-vbYGTRk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.148.0.0-5.148.159.255 31.221.0.0/17 62.244.160.0/19 83.244.128.0/17 109.231.192.0/18 149.63.0.0/16 167.98.0.0/16 176.46.160.0/19 IPv6: 2a00:1d40::/32 Signature Algorithm: sha256WithRSAEncryption 19:19:51:a0:40:ef:fe:0c:c1:93:0b:6c:5d:0a:1e:bc:5a:f1: 01:10:a6:58:80:ac:2b:31:5e:8e:7e:ae:00:36:90:8e:30:9a: fe:02:42:0a:46:67:27:fe:6b:4b:80:2f:85:36:1b:0a:8d:4c: 32:7b:8a:2b:71:34:bf:16:fa:1a:84:52:b4:60:58:2d:bf:8b: 5e:aa:68:6d:9d:6d:98:60:80:cf:48:93:65:c9:72:05:a9:25: 38:08:ff:22:e0:c8:21:ae:91:59:15:28:88:b7:7c:e9:5b:b2: 1d:45:61:aa:c0:23:67:f8:4c:7a:f3:2a:fe:c5:7d:17:cb:a5: e7:3e:3c:db:b3:6a:8a:b0:5e:4a:0f:57:ba:1e:82:c0:b8:4f: c1:73:b4:28:41:01:8f:d3:50:0f:35:03:7f:f1:13:94:34:ce: be:62:c5:1b:09:08:8b:f7:12:69:9f:47:59:da:7f:0c:4e:d8: 1c:4d:09:4f:97:d2:09:cf:91:bb:91:4f:45:53:b2:1d:e4:41: 3c:57:14:c2:78:1d:09:e6:3d:67:93:0f:3a:28:93:c4:6c:e7: 58:4d:50:1a:fd:9b:ff:97:38:dc:46:80:16:12:5f:9a:34:7a: 54:06:09:5d:a0:22:26:13:05:07:da:eb:eb:04:f6:c8:b1:c0: 06:57:6f:b2 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgISAZt87cEXGZTt5GJjRPDPo0cfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2YzlkNDhhMThjM2MwZDJlNGU2M2E3YjgzODg1YTc5Njc3 NTU4MjYwHhcNMjYwMTAyMDQxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTM3MGNiMzAxNzdmMTkxMzdmMmQ4MGIzMTgzYmViZGI2MDY0ZDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssJFcu+QwaMc7Sps3GHYa63r9/CG BKq30z7j/a8lOrvtCMUOPwHoQ5FIM2xUX2oqB/7uV/+XciKrbzSFBgcSY6nM8b/0 g9h5rZ7PosS3YGsDbADTZeuwOCkoOloL01HiDfXWN4IORdOW/CkjU0sdFGk/UHLh g1VvjMRpHJwaSp+VCHO+LwvjBO4D1EqtSuEihmrYloGTMBkjMrNrp50yL3SERUAg PIfjFwhLvctg1ci5+1Ek8eSBla3ok7jyAViuqXJIaFEEVtTiHezg4qPWSZZFtVl7 bzD78L7KfTaGOpByIKwyqrnh1Rl6D3YMHvEbqhxpbnt29aVg7iYs1X8tWwIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFMU3DLMBd/GRN/LYCzGDvr22Bk0ZMB8GA1UdIwQY MBaAFObJ1IoYw8DS5OY6e4OIWnlndVgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXNuVWloakR3TkxrNWpwN2c0aGFlV2QxV0NZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9kMjVlMTQtNjI1ZC00N2I1LWEwZWMt ODQ4ZjczZGY4YjIwLzEveFRjTXN3RjM4WkUzOHRnTE1ZTy12YllHVFJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9kMjVlMTQtNjI1ZC00N2I1LWEwZWMtODQ4ZjczZGY4YjIw LzEvNXNuVWloakR3TkxrNWpwN2c0aGFlV2QxV0NZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDA7BAIAATA1MAsDAwIFlAME BQWUgAMEBx/dAAMEBT70oAMEB1P0gAMEBm3nwAMDAJU/AwMAp2IDBAWwLqAwDQQC AAIwBwMFACoAHUAwDQYJKoZIhvcNAQELBQADggEBABkZUaBA7/4MwZMLbF0KHrxa 8QEQpliArCsxXo5+rgA2kI4wmv4CQgpGZyf+a0uAL4U2GwqNTDJ7iitxNL8W+hqE UrRgWC2/i16qaG2dbZhggM9Ik2XJcgWpJTgI/yLgyCGukVkVKIi3fOlbsh1FYarA I2f4THrzKv7FfRfLpec+PNuzaoqwXkoPV7oegsC4T8FztChBAY/TUA81A3/xE5Q0 zr5ixRsJCIv3EmmfR1nafwxO2BxNCU+X0gnPkbuRT0VTsh3kQTxXFMJ4HQnmPWeT Dzook8Rs51hNUBr9m/+XONxGgBYSX5o0elQGCV2gIiYTBQfa6+sE9sixwAZXb7I= -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:14 2026 by rpki-client