This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/xWkHq7OIQ8g_-84oE6K5BEv2GC4.roa File: xWkHq7OIQ8g_-84oE6K5BEv2GC4.roa (raw, json) Hash identifier: Q2y+f16eTdxYLcVJIdtMlh5TQXlgsuWa+aMEDs13J+I= Subject key identifier: C5:69:07:AB:B3:88:43:C8:3F:FB:CE:28:13:A2:B9:04:4B:F6:18:2E Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7 Certificate serial: 019B7DC973B9445F5BADB2043C176D1CC0E1 Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/xWkHq7OIQ8g_-84oE6K5BEv2GC4.roa Signing time: Fri 02 Jan 2026 08:18:32 +0000 ROA not before: Fri 02 Jan 2026 08:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207713 IP address blocks: 5.44.42.0/24 maxlen: 24 130.49.213.0/24 maxlen: 24 157.22.241.0/24 maxlen: 24 2a05:541:102::/48 maxlen: 48 2a05:541:103::/48 maxlen: 48 2a05:541:104::/48 maxlen: 48 2a05:541:105::/48 maxlen: 48 2a05:541:106::/48 maxlen: 48 2a05:541:107::/48 maxlen: 48 2a05:541:108::/48 maxlen: 48 2a05:541:109::/48 maxlen: 48 2a05:541:110::/48 maxlen: 48 2a05:541:111::/48 maxlen: 48 2a05:541:112::/48 maxlen: 48 2a05:541:113::/48 maxlen: 48 2a05:541:114::/48 maxlen: 48 2a05:541:115::/48 maxlen: 48 2a05:541:116::/48 maxlen: 48 2a05:541:117::/48 maxlen: 48 2a05:541:118::/48 maxlen: 48 2a05:541:119::/48 maxlen: 48 2a05:541:121::/48 maxlen: 48 2a05:541:122::/48 maxlen: 48 2a05:541:123::/48 maxlen: 48 2a05:541:124::/48 maxlen: 48 2a05:541:125::/48 maxlen: 48 2a05:541:126::/48 maxlen: 48 2a05:541:127::/48 maxlen: 48 2a05:541:129::/48 maxlen: 48 2a05:541:131::/48 maxlen: 48 2a05:541:132::/48 maxlen: 48 2a05:541:133::/48 maxlen: 48 2a05:541:134::/48 maxlen: 48 2a05:541:135::/48 maxlen: 48 2a05:541:136::/48 maxlen: 48 2a05:541:137::/48 maxlen: 48 2a05:541:138::/48 maxlen: 48 2a05:541:139::/48 maxlen: 48 2a05:541:140::/48 maxlen: 48 2a05:541:141::/48 maxlen: 48 2a05:544::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 20:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:73:b9:44:5f:5b:ad:b2:04:3c:17:6d:1c:c0:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7 Validity Not Before: Jan 2 08:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c56907abb38843c83ffbce2813a2b9044bf6182e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:45:e9:b1:4d:71:f3:09:ae:6d:b4:a2:76:5e: 5e:5a:17:c2:91:26:d4:62:50:e2:b0:49:17:30:c3: 3c:87:51:8e:8e:bd:d9:5e:38:fc:f2:44:bc:ad:f8: 08:f7:15:0e:1c:9c:09:8d:7d:19:ed:82:af:7f:26: 51:b6:b8:8f:93:6f:d0:cc:81:a7:aa:e3:e5:9b:b4: 65:2a:b3:b2:8f:7a:03:90:32:e1:b8:93:e1:69:77: 43:3b:45:f1:12:0c:02:78:a5:ee:9e:37:bc:c2:80: 9b:f9:67:ed:10:f5:c1:23:a7:ba:2b:f0:f8:3c:41: 33:32:22:5a:4d:75:4c:09:cc:7c:4a:7d:06:68:e1: 1a:57:d5:6e:6c:13:d8:e9:e1:5e:3f:38:a5:09:c5: 03:ea:d8:f5:61:ca:09:2d:11:9c:7d:a0:67:c0:12: 43:d2:9f:c5:7a:9c:a8:0a:22:3f:77:c3:a2:a5:38: b5:95:f5:9e:df:36:c6:75:c6:33:89:34:06:57:6e: 14:a5:b0:3e:0a:ab:32:d3:e4:04:be:55:4a:47:d0: 15:dc:16:0a:1c:89:a9:80:1e:9b:67:4a:02:86:09: d9:7a:54:51:f5:00:ae:9c:1a:9a:d5:16:ff:cd:40: c8:d7:08:a5:e1:cc:8c:90:62:75:4a:aa:98:33:34: 99:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:69:07:AB:B3:88:43:C8:3F:FB:CE:28:13:A2:B9:04:4B:F6:18:2E X509v3 Authority Key Identifier: keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/xWkHq7OIQ8g_-84oE6K5BEv2GC4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.44.42.0/24 130.49.213.0/24 157.22.241.0/24 IPv6: 2a05:541:102::-2a05:541:109:ffff:ffff:ffff:ffff:ffff 2a05:541:110::-2a05:541:119:ffff:ffff:ffff:ffff:ffff 2a05:541:121::-2a05:541:127:ffff:ffff:ffff:ffff:ffff 2a05:541:129::/48 2a05:541:131::-2a05:541:139:ffff:ffff:ffff:ffff:ffff 2a05:541:140::/47 2a05:544::/32 Signature Algorithm: sha256WithRSAEncryption 9e:ed:ef:d3:01:b1:7a:79:d1:26:3e:c8:43:33:d8:cc:50:f7: fc:59:4d:f9:3a:cd:e0:01:53:3c:d3:1d:ca:77:87:1c:2b:7d: 61:6a:a7:7f:22:87:bd:dc:85:a8:52:d9:00:4c:b0:2b:84:11: b3:bc:9d:21:05:78:cb:71:a8:0f:cb:32:ab:82:3a:f3:11:2a: fd:ac:04:3f:87:87:e5:41:3b:58:39:83:ad:df:50:36:99:5e: 9d:df:30:6d:46:4b:d5:5e:a8:e0:3d:f2:29:fb:5e:d4:14:25: 99:ab:4f:77:75:b2:4f:16:68:34:7c:ad:6a:53:72:af:9d:ce: 4d:d9:45:55:1d:5e:76:7b:7d:ff:47:1e:49:f4:6c:dc:2e:66: da:ec:6b:bf:7d:3a:3a:c7:6a:78:1e:3d:ae:87:8a:46:84:46: 20:7d:43:9a:36:c2:37:3a:48:1b:a5:16:ea:b3:fc:d6:62:22: 9e:e3:38:4c:49:cd:8d:e5:b7:42:a8:92:6a:1e:67:3c:f1:e4: f0:5b:bb:cb:6d:77:c6:17:82:eb:a9:27:97:b4:e9:38:1f:cb: 31:c2:4b:c0:75:73:c4:b1:29:25:00:7c:7d:3f:36:76:50:a2: 1a:13:fd:87:bf:64:61:c9:bd:2f:1c:ea:3d:43:1e:97:00:14: 6d:73:56:2f -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgISAZt9yXO5RF9brbIEPBdtHMDhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NjcwMjM2Y2QwZTAzODY4NGEzMzE5NGJkZTdkNGI5NWFk YzY2ZjcwHhcNMjYwMTAyMDgxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTY5MDdhYmIzODg0M2M4M2ZmYmNlMjgxM2EyYjkwNDRiZjYxODJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0XpsU1x8wmubbSidl5eWhfCkSbU YlDisEkXMMM8h1GOjr3ZXjj88kS8rfgI9xUOHJwJjX0Z7YKvfyZRtriPk2/QzIGn quPlm7RlKrOyj3oDkDLhuJPhaXdDO0XxEgwCeKXunje8woCb+WftEPXBI6e6K/D4 PEEzMiJaTXVMCcx8Sn0GaOEaV9VubBPY6eFePzilCcUD6tj1YcoJLRGcfaBnwBJD 0p/FepyoCiI/d8OipTi1lfWe3zbGdcYziTQGV24UpbA+Cqsy0+QEvlVKR9AV3BYK HImpgB6bZ0oChgnZelRR9QCunBqa1Rb/zUDI1wil4cyMkGJ1SqqYMzSZIwIDAQAB o4ICiTCCAoUwHQYDVR0OBBYEFMVpB6uziEPIP/vOKBOiuQRL9hguMB8GA1UdIwQY MBaAFHZnAjbNDgOGhKMxlL3n1Lla3Gb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgt YmE0ZmMyMzQ2ODNlLzEveFdrSHE3T0lROGdfLTg0b0U2SzVCRXYyR0M0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgtYmE0ZmMyMzQ2ODNl LzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGeBggrBgEFBQcBBwEB/wSBjjCBizAYBAIAATASAwQABSwq AwQAgjHVAwQAnRbxMG8EAgACMGkwEgMHASoFBUEBAgMHASoFBUEBCDASAwcEKgUF QQEQAwcBKgUFQQEYMBIDBwAqBQVBASEDBwMqBQVBASADBwAqBQVBASkwEgMHACoF BUEBMQMHASoFBUEBOAMHASoFBUEBQAMFACoFBUQwDQYJKoZIhvcNAQELBQADggEB AJ7t79MBsXp50SY+yEMz2MxQ9/xZTfk6zeABUzzTHcp3hxwrfWFqp38ih73chahS 2QBMsCuEEbO8nSEFeMtxqA/LMquCOvMRKv2sBD+Hh+VBO1g5g63fUDaZXp3fMG1G S9VeqOA98in7XtQUJZmrT3d1sk8WaDR8rWpTcq+dzk3ZRVUdXnZ7ff9HHkn0bNwu Ztrsa799OjrHangePa6HikaERiB9Q5o2wjc6SBulFuqz/NZiIp7jOExJzY3lt0Ko kmoeZzzx5PBbu8ttd8YXguupJ5e06TgfyzHCS8B1c8SxKSUAfH0/NnZQohoT/Ye/ ZGHJvS8c6j1DHpcAFG1zVi8= -----END CERTIFICATE-----Generated at Sat Jan 10 03:16:17 2026 by rpki-client