This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/Xf5rpKoBI7BsYh_voz1J6f7LZno.roa File: Xf5rpKoBI7BsYh_voz1J6f7LZno.roa (raw, json) Hash identifier: yCI1kMz5PIyVImE2jYrenMk6gjrCzrC62f+tybJ0tIQ= Subject key identifier: 5D:FE:6B:A4:AA:01:23:B0:6C:62:1F:EF:A3:3D:49:E9:FE:CB:66:7A Certificate issuer: /CN=a5541609cd947bedfc99125840030108a3f141c1 Certificate serial: 019B7E376DFDC19B4197079B577687306FDD Authority key identifier: A5:54:16:09:CD:94:7B:ED:FC:99:12:58:40:03:01:08:A3:F1:41:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pVQWCc2Ue-38mRJYQAMBCKPxQcE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/Xf5rpKoBI7BsYh_voz1J6f7LZno.roa Signing time: Fri 02 Jan 2026 10:18:40 +0000 ROA not before: Fri 02 Jan 2026 10:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13274 IP address blocks: 185.210.158.0/24 maxlen: 24 195.42.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft rsync://rpki.ripe.net/repository/DEFAULT/pVQWCc2Ue-38mRJYQAMBCKPxQcE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:6d:fd:c1:9b:41:97:07:9b:57:76:87:30:6f:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5541609cd947bedfc99125840030108a3f141c1 Validity Not Before: Jan 2 10:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5dfe6ba4aa0123b06c621fefa33d49e9fecb667a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9e:94:52:54:68:cc:80:7a:dd:f6:6d:1b:48: 66:67:94:38:63:c1:d1:6a:c9:9f:6a:ac:b9:81:cf: ce:0a:4c:67:be:82:cd:e7:19:13:48:f7:b7:6a:52: bc:a1:1c:fb:66:7a:57:c4:39:1d:4e:53:e5:65:a4: 2f:a4:9b:50:84:92:73:75:a9:a1:de:55:01:30:2e: d9:cd:d0:40:ff:55:eb:e4:a4:cb:97:ab:6d:f7:0f: e7:c0:88:4b:0e:b0:e3:cc:7c:4b:ba:01:97:ac:1b: 89:88:3b:c0:9a:c1:47:e5:34:52:7f:ee:9c:ca:7f: 81:94:eb:e3:3f:41:bf:c3:b8:4f:38:60:3c:ed:19: 77:72:84:5f:e8:5a:54:44:53:b0:26:51:c3:c1:82: db:65:5e:ce:87:27:97:7d:e9:a7:1b:31:73:32:eb: 90:07:e2:7f:30:11:21:dc:2e:98:fb:50:e3:67:bb: 5f:e1:c3:fe:07:03:c7:61:4b:eb:1b:a5:25:a0:9d: cf:30:a8:5a:cc:5a:86:5f:9c:de:25:23:4b:b6:43: 10:30:e2:50:bb:1c:75:65:ba:62:f1:0d:39:77:b0: de:cf:55:85:1a:7e:41:a1:2d:2e:d6:2c:16:ff:89: a3:45:ff:f2:72:b8:83:aa:06:1f:fc:5c:a9:73:98: 76:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:FE:6B:A4:AA:01:23:B0:6C:62:1F:EF:A3:3D:49:E9:FE:CB:66:7A X509v3 Authority Key Identifier: keyid:A5:54:16:09:CD:94:7B:ED:FC:99:12:58:40:03:01:08:A3:F1:41:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pVQWCc2Ue-38mRJYQAMBCKPxQcE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/Xf5rpKoBI7BsYh_voz1J6f7LZno.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.210.158.0/24 195.42.249.0/24 Signature Algorithm: sha256WithRSAEncryption b2:9e:f7:d7:0b:e3:b8:c2:d2:3b:e7:f1:3f:cf:9c:c7:6e:06: cf:4e:47:d0:df:9c:32:bf:dd:29:d2:ab:ae:46:70:87:00:87: af:1f:40:b5:fa:d0:6b:db:1f:61:db:1b:59:2b:b6:2a:c7:a2: ac:30:13:81:69:d3:b1:f3:0d:79:1c:0e:04:c7:2a:e3:4b:2f: 45:89:e4:71:d8:44:1a:e8:b1:b9:a3:ca:6d:5d:3c:79:01:e7: 15:91:d1:a7:ff:0c:2f:ca:ac:21:71:ab:ae:c0:b4:91:1d:25: 19:12:81:7f:1e:7b:55:4b:f5:fa:7d:57:ca:a1:3a:10:5e:59: e5:86:33:8e:bd:13:75:76:15:32:56:56:06:7d:a1:91:c9:fd: 2f:b5:f7:63:bc:87:f2:b2:44:62:b2:d2:27:9b:c6:8d:77:02: 2b:eb:fb:52:f2:d4:1d:d0:9e:ac:71:43:b8:83:c7:da:de:84: 93:84:fe:18:27:bb:0d:01:93:dd:80:2c:c7:d1:39:60:91:61: 87:8c:50:5b:bb:b1:6e:7e:65:98:cc:0a:89:df:c6:2a:ba:50: f7:e7:7e:8b:71:3f:d0:8e:fa:5e:1f:5f:31:0e:3a:c0:5a:36: c3:06:44:4a:9b:a1:20:5e:b9:8a:f9:64:f8:a9:b5:22:5f:07: ee:08:88:61 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+N239wZtBlwebV3aHMG/dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NTQxNjA5Y2Q5NDdiZWRmYzk5MTI1ODQwMDMwMTA4YTNm MTQxYzEwHhcNMjYwMTAyMTAxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZGZlNmJhNGFhMDEyM2IwNmM2MjFmZWZhMzNkNDllOWZlY2I2NjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt56UUlRozIB63fZtG0hmZ5Q4Y8HR asmfaqy5gc/OCkxnvoLN5xkTSPe3alK8oRz7ZnpXxDkdTlPlZaQvpJtQhJJzdamh 3lUBMC7ZzdBA/1Xr5KTLl6tt9w/nwIhLDrDjzHxLugGXrBuJiDvAmsFH5TRSf+6c yn+BlOvjP0G/w7hPOGA87Rl3coRf6FpURFOwJlHDwYLbZV7OhyeXfemnGzFzMuuQ B+J/MBEh3C6Y+1DjZ7tf4cP+BwPHYUvrG6UloJ3PMKhazFqGX5zeJSNLtkMQMOJQ uxx1Zbpi8Q05d7Dez1WFGn5BoS0u1iwW/4mjRf/ycriDqgYf/Fypc5h2hwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFF3+a6SqASOwbGIf76M9Sen+y2Z6MB8GA1UdIwQY MBaAFKVUFgnNlHvt/JkSWEADAQij8UHBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFZRV0NjMlVlLTM4bVJKWVFBTUJDS1B4UWNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8wNGEzYzQtMGQ4OC00OGU3LTg0ZGUt NTRjMmMwY2FiN2MzLzEvWGY1cnBLb0JJN0JzWWhfdm96MUo2ZjdMWm5vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8wNGEzYzQtMGQ4OC00OGU3LTg0ZGUtNTRjMmMwY2FiN2Mz LzEvcFZRV0NjMlVlLTM4bVJKWVFBTUJDS1B4UWNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAudKeAwQA wyr5MA0GCSqGSIb3DQEBCwUAA4IBAQCynvfXC+O4wtI75/E/z5zHbgbPTkfQ35wy v90p0quuRnCHAIevH0C1+tBr2x9h2xtZK7Yqx6KsMBOBadOx8w15HA4ExyrjSy9F ieRx2EQa6LG5o8ptXTx5AecVkdGn/wwvyqwhcauuwLSRHSUZEoF/HntVS/X6fVfK oToQXlnlhjOOvRN1dhUyVlYGfaGRyf0vtfdjvIfyskRistInm8aNdwIr6/tS8tQd 0J6scUO4g8fa3oSThP4YJ7sNAZPdgCzH0TlgkWGHjFBbu7FufmWYzAqJ38YqulD3 536LcT/QjvpeH18xDjrAWjbDBkRKm6EgXrmK+WT4qbUiXwfuCIhh -----END CERTIFICATE-----Generated at Tue Feb 10 02:30:04 2026 by rpki-client