This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xj5S_kTRL6Ym4XR3fuNSUYdcl0I.roa File: xj5S_kTRL6Ym4XR3fuNSUYdcl0I.roa (raw, json) Hash identifier: JbmQV9xSsXlZXPNzM/3inWFU1eb0sw8l1DxxNxxM8lA= Subject key identifier: C6:3E:52:FE:44:D1:2F:A6:26:E1:74:77:7E:E3:52:51:87:5C:97:42 Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d Certificate serial: 019B7758AAD1383EA30F87C5321703C03135 Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xj5S_kTRL6Ym4XR3fuNSUYdcl0I.roa Signing time: Thu 01 Jan 2026 02:17:38 +0000 ROA not before: Thu 01 Jan 2026 02:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43260 IP address blocks: 91.194.55.0/24 maxlen: 24 185.85.188.0/24 maxlen: 24 185.85.189.0/24 maxlen: 24 185.86.4.0/24 maxlen: 24 185.86.6.0/24 maxlen: 24 185.86.7.0/24 maxlen: 24 185.86.12.0/24 maxlen: 24 185.86.14.0/24 maxlen: 24 185.86.15.0/24 maxlen: 24 185.86.152.0/24 maxlen: 24 185.86.155.0/24 maxlen: 24 185.87.120.0/24 maxlen: 24 185.88.172.0/24 maxlen: 24 185.88.173.0/24 maxlen: 24 185.88.174.0/24 maxlen: 24 185.88.175.0/24 maxlen: 24 185.98.61.0/24 maxlen: 24 185.98.62.0/24 maxlen: 24 185.98.63.0/24 maxlen: 24 185.141.33.0/24 maxlen: 24 185.141.34.0/24 maxlen: 24 185.141.35.0/24 maxlen: 24 185.184.24.0/24 maxlen: 24 185.184.25.0/24 maxlen: 24 185.184.26.0/24 maxlen: 24 185.184.27.0/24 maxlen: 24 185.185.232.0/24 maxlen: 24 185.185.233.0/24 maxlen: 24 185.185.234.0/24 maxlen: 24 185.243.180.0/24 maxlen: 24 185.243.181.0/24 maxlen: 24 185.243.182.0/24 maxlen: 24 185.243.183.0/24 maxlen: 24 185.250.210.0/24 maxlen: 24 185.254.236.0/24 maxlen: 24 185.254.237.0/24 maxlen: 24 185.254.238.0/24 maxlen: 24 185.254.239.0/24 maxlen: 24 193.160.140.0/24 maxlen: 24 193.160.141.0/24 maxlen: 24 193.160.142.0/24 maxlen: 24 193.160.143.0/24 maxlen: 24 193.223.104.0/24 maxlen: 24 193.223.105.0/24 maxlen: 24 193.223.106.0/24 maxlen: 24 193.223.107.0/24 maxlen: 24 2a05:bf00::/29 maxlen: 29 2a07:e700::/29 maxlen: 29 2a0b:2780::/29 maxlen: 29 2a0d:49c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:aa:d1:38:3e:a3:0f:87:c5:32:17:03:c0:31:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d Validity Not Before: Jan 1 02:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c63e52fe44d12fa626e174777ee35251875c9742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:14:81:2d:3d:a1:fc:49:8e:a2:92:0e:f1:4c: fe:da:a8:99:d3:52:4a:fe:4d:b6:1a:19:8b:fa:15: 19:d3:6e:08:00:55:88:d4:b8:38:ce:67:b3:40:ea: 08:6f:51:54:b6:1e:98:c9:5f:c6:28:30:ed:04:7b: fb:18:db:1b:b3:0b:8a:a2:3c:26:53:b3:65:80:23: 92:26:e0:9d:91:0b:80:6c:c4:99:6c:aa:1d:c4:b9: 6c:5f:ef:3c:29:48:5d:90:b2:0a:37:0a:e1:eb:ef: 63:21:c9:10:85:6a:ca:c1:9b:eb:f6:63:0e:a8:45: 40:49:ea:0e:56:3a:e6:b9:3e:91:3b:26:68:b0:b1: 17:5a:d8:de:c1:7c:61:d6:ad:70:fd:cd:a4:75:c1: f0:41:72:52:bf:35:5b:3b:0b:ef:ef:c0:13:47:ba: 8a:bf:89:45:3a:53:a0:42:52:22:84:5d:82:a6:73: 41:95:7c:ad:6e:5b:c2:69:c9:56:7b:3e:d2:b1:34: 39:4d:01:6a:4c:be:82:f6:5b:f7:c6:2b:9a:52:ef: 49:63:b4:f2:52:d4:38:f4:e0:bc:43:84:44:76:a1: 85:81:e3:36:e2:83:f3:9c:93:c6:5c:aa:3f:54:b6: 2b:cc:c3:c5:d0:b1:e0:91:b5:4f:c6:67:0f:7a:8e: 17:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:3E:52:FE:44:D1:2F:A6:26:E1:74:77:7E:E3:52:51:87:5C:97:42 X509v3 Authority Key Identifier: keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xj5S_kTRL6Ym4XR3fuNSUYdcl0I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.194.55.0/24 185.85.188.0/23 185.86.4.0/24 185.86.6.0/23 185.86.12.0/24 185.86.14.0/23 185.86.152.0/24 185.86.155.0/24 185.87.120.0/24 185.88.172.0/22 185.98.61.0-185.98.63.255 185.141.33.0-185.141.35.255 185.184.24.0/22 185.185.232.0-185.185.234.255 185.243.180.0/22 185.250.210.0/24 185.254.236.0/22 193.160.140.0/22 193.223.104.0/22 IPv6: 2a05:bf00::/29 2a07:e700::/29 2a0b:2780::/29 2a0d:49c0::/29 Signature Algorithm: sha256WithRSAEncryption 92:c4:c6:cb:74:df:d1:aa:5c:1b:be:b8:ed:3b:d4:5a:ac:f2: 0c:f2:6d:ca:7c:ea:34:ef:0b:05:0c:be:40:56:d8:23:4d:4c: 50:3d:c1:cc:29:6a:52:e9:48:4f:f5:f1:24:63:b0:b1:c9:db: 44:e9:2d:ea:58:27:4e:be:9e:bc:ca:39:36:5b:6d:eb:0b:e9: ce:14:6c:5f:7b:39:79:43:9d:e8:ea:2f:24:cd:75:63:04:9b: c5:48:f4:43:57:c5:f8:cf:0e:43:2b:32:72:9a:bf:f6:46:f1: 6c:8e:53:bb:fb:4d:5c:e5:d4:3f:5f:ef:bc:f7:75:ba:d1:5e: 56:db:46:ac:aa:1f:1a:7d:45:60:01:ce:92:5f:8e:40:b1:f0: 6f:30:fd:46:0b:51:98:0e:72:5e:17:f3:c5:75:08:ed:27:9e: b3:22:8f:3c:a1:e0:ed:39:47:ea:8f:e5:28:c0:1d:53:50:d6: 89:3e:96:6e:ab:57:49:ec:dc:65:44:02:8f:5e:4f:ea:df:e8: 1a:c2:d2:c8:96:38:83:67:ec:2b:b9:f6:8a:cd:4f:ad:55:28: 8c:44:18:15:df:04:d5:85:2e:2a:a8:24:fd:47:0c:9e:7d:89: df:7c:d8:f1:7c:a6:00:5e:c3:3d:fa:5e:de:a4:51:de:ea:a8: 69:73:89:1d -----BEGIN CERTIFICATE----- MIIFqjCCBJKgAwIBAgISAZt3WKrROD6jD4fFMhcDwDE1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw OTBlNGQwHhcNMjYwMTAxMDIxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjNlNTJmZTQ0ZDEyZmE2MjZlMTc0Nzc3ZWUzNTI1MTg3NWM5NzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhSBLT2h/EmOopIO8Uz+2qiZ01JK /k22GhmL+hUZ024IAFWI1Lg4zmezQOoIb1FUth6YyV/GKDDtBHv7GNsbswuKojwm U7NlgCOSJuCdkQuAbMSZbKodxLlsX+88KUhdkLIKNwrh6+9jIckQhWrKwZvr9mMO qEVASeoOVjrmuT6ROyZosLEXWtjewXxh1q1w/c2kdcHwQXJSvzVbOwvv78ATR7qK v4lFOlOgQlIihF2CpnNBlXytblvCaclWez7SsTQ5TQFqTL6C9lv3xiuaUu9JY7Ty UtQ49OC8Q4REdqGFgeM24oPznJPGXKo/VLYrzMPF0LHgkbVPxmcPeo4XBQIDAQAB o4ICtjCCArIwHQYDVR0OBBYEFMY+Uv5E0S+mJuF0d37jUlGHXJdCMB8GA1UdIwQY MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt MzlmZGI5ODZmMDU5LzEveGo1U19rVFJMNlltNFhSM2Z1TlNVWWRjbDBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5 LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHLBggrBgEFBQcBBwEB/wSBuzCBuDCBkQQCAAEwgYoDBABb wjcDBAG5VbwDBAC5VgQDBAG5VgYDBAC5VgwDBAG5Vg4DBAC5VpgDBAC5VpsDBAC5 V3gDBAK5WKwwDAMEALliPQMEBrliADAMAwQAuY0hAwQCuY0gAwQCubgYMAwDBAO5 uegDBAC5ueoDBAK587QDBAC5+tIDBAK5/uwDBALBoIwDBALB32gwIgQCAAIwHAMF AyoFvwADBQMqB+cAAwUDKgsngAMFAyoNScAwDQYJKoZIhvcNAQELBQADggEBAJLE xst039GqXBu+uO071Fqs8gzybcp86jTvCwUMvkBW2CNNTFA9wcwpalLpSE/18SRj sLHJ20TpLepYJ06+nrzKOTZbbesL6c4UbF97OXlDnejqLyTNdWMEm8VI9ENXxfjP DkMrMnKav/ZG8WyOU7v7TVzl1D9f77z3dbrRXlbbRqyqHxp9RWABzpJfjkCx8G8w /UYLUZgOcl4X88V1CO0nnrMijzyh4O05R+qP5SjAHVNQ1ok+lm6rV0ns3GVEAo9e T+rf6BrC0siWOINn7Cu59orNT61VKIxEGBXfBNWFLiqoJP1HDJ59id982PF8pgBe wz36Xt6kUd7qqGlziR0= -----END CERTIFICATE-----Generated at Mon Jan 19 16:52:55 2026 by rpki-client