This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/XhC0wvZVbOgmnkqmdg5TkjK_jkE.roa File: XhC0wvZVbOgmnkqmdg5TkjK_jkE.roa (raw, json) Hash identifier: NxUjDJP+gkzyC6qL8mUykman5N4DTp6Y5GNrm0hEdsY= Subject key identifier: 5E:10:B4:C2:F6:55:6C:E8:26:9E:4A:A6:76:0E:53:92:32:BF:8E:41 Certificate issuer: /CN=468c267a6474fcb7cc49cf325d0e9dcc5fe8d20d Certificate serial: 019B7D5AD907EDA7F323998E92BD553BCD3F Authority key identifier: 46:8C:26:7A:64:74:FC:B7:CC:49:CF:32:5D:0E:9D:CC:5F:E8:D2:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RowmemR0_LfMSc8yXQ6dzF_o0g0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/XhC0wvZVbOgmnkqmdg5TkjK_jkE.roa Signing time: Fri 02 Jan 2026 06:17:44 +0000 ROA not before: Fri 02 Jan 2026 06:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210051 IP address blocks: 195.245.84.0/24 maxlen: 24 2a09:a280::/29 maxlen: 29 2a0d:c5c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/RowmemR0_LfMSc8yXQ6dzF_o0g0.crl rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/RowmemR0_LfMSc8yXQ6dzF_o0g0.mft rsync://rpki.ripe.net/repository/DEFAULT/RowmemR0_LfMSc8yXQ6dzF_o0g0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:d9:07:ed:a7:f3:23:99:8e:92:bd:55:3b:cd:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=468c267a6474fcb7cc49cf325d0e9dcc5fe8d20d Validity Not Before: Jan 2 06:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e10b4c2f6556ce8269e4aa6760e539232bf8e41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:59:3b:5e:da:df:43:c6:79:8f:2e:29:40:33: ab:6c:15:70:ca:76:d8:9c:1d:e8:34:39:d4:4b:c0: f0:e8:58:d8:37:c7:8a:f7:ef:66:95:63:25:78:15: bf:5f:21:5e:fe:d9:78:d9:e3:9b:57:3e:1b:39:f2: 86:50:30:1d:11:7c:4b:78:2c:a9:c0:ec:80:f4:d0: 30:a2:e5:e5:f2:b5:03:53:49:7a:0b:14:29:90:5a: e1:7a:20:39:a5:6a:17:5b:2e:6c:db:dd:97:1c:f7: ac:5f:86:ff:01:35:f2:f9:1e:0a:d8:e3:d8:07:9e: 7f:7b:5c:35:78:3d:6c:3a:dd:41:71:fa:93:c0:84: cd:f4:ef:52:3a:06:46:31:bd:15:f5:cd:58:ec:a9: 7b:b2:66:d7:ee:9c:9b:8c:a1:a7:97:77:0b:ac:6d: c5:99:dd:d6:d7:6f:04:2c:e6:bf:4c:86:a3:28:3b: af:0a:51:f1:95:29:fd:ca:96:9a:c7:09:42:58:f1: ca:57:56:e1:7e:8f:5b:be:92:e1:ee:f5:d9:39:45: 63:79:61:fc:dc:a4:e6:be:e4:54:59:ab:49:fb:a7: e9:4f:2b:00:09:b0:07:a6:6c:b6:9c:7e:a4:5b:f1: ed:7d:68:1a:aa:ea:63:2b:1b:62:59:76:d3:08:fb: e9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:10:B4:C2:F6:55:6C:E8:26:9E:4A:A6:76:0E:53:92:32:BF:8E:41 X509v3 Authority Key Identifier: keyid:46:8C:26:7A:64:74:FC:B7:CC:49:CF:32:5D:0E:9D:CC:5F:E8:D2:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RowmemR0_LfMSc8yXQ6dzF_o0g0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/XhC0wvZVbOgmnkqmdg5TkjK_jkE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/RowmemR0_LfMSc8yXQ6dzF_o0g0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.245.84.0/24 IPv6: 2a09:a280::/29 2a0d:c5c0::/32 Signature Algorithm: sha256WithRSAEncryption 2c:08:9c:ef:69:ea:36:82:cc:7e:45:43:57:0e:c5:54:06:49: 37:ee:47:e1:4a:a0:ba:2f:00:e8:50:b1:03:6e:3c:b2:90:67: b9:36:35:a1:23:75:f3:a6:c2:e6:4f:35:49:19:c0:ec:12:2a: f2:b3:aa:95:7b:02:19:9c:46:85:40:b9:4d:49:b9:f4:75:10: 09:4f:23:09:d4:7d:3c:47:c7:c6:d8:ec:7d:ca:be:3c:54:90: 6e:9a:bf:35:c0:a8:d4:90:20:3c:00:0a:6c:ad:d6:21:7c:ae: d0:95:4d:eb:96:39:b1:d0:e8:f3:3c:3f:b4:c6:f0:42:19:28: a5:c4:a8:fe:d1:bf:17:dc:45:c9:b7:43:be:95:c5:e7:b7:15: d0:9a:7c:77:73:88:5e:fe:26:79:1d:1f:4a:22:3f:08:79:3d: ce:6e:d6:48:c1:bb:eb:82:c5:1b:23:4d:d7:6a:44:fd:78:c0: 3d:74:21:fd:f1:40:ae:b3:d2:ec:1d:b1:c2:bc:f3:59:c3:44: dc:5c:2f:b6:ae:a0:43:4c:c5:f4:2a:2b:8a:b1:9a:25:dd:55: 61:ea:2a:47:fb:f5:50:ad:db:ca:23:f0:14:cf:60:99:a1:ef: be:7e:70:d7:01:11:8a:a1:8c:df:35:23:4e:4f:8c:ed:ed:7f: d4:70:a2:43 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt9WtkH7afzI5mOkr1VO80/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2OGMyNjdhNjQ3NGZjYjdjYzQ5Y2YzMjVkMGU5ZGNjNWZl OGQyMGQwHhcNMjYwMTAyMDYxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTEwYjRjMmY2NTU2Y2U4MjY5ZTRhYTY3NjBlNTM5MjMyYmY4ZTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVk7XtrfQ8Z5jy4pQDOrbBVwynbY nB3oNDnUS8Dw6FjYN8eK9+9mlWMleBW/XyFe/tl42eObVz4bOfKGUDAdEXxLeCyp wOyA9NAwouXl8rUDU0l6CxQpkFrheiA5pWoXWy5s292XHPesX4b/ATXy+R4K2OPY B55/e1w1eD1sOt1BcfqTwITN9O9SOgZGMb0V9c1Y7Kl7smbX7pybjKGnl3cLrG3F md3W128ELOa/TIajKDuvClHxlSn9ypaaxwlCWPHKV1bhfo9bvpLh7vXZOUVjeWH8 3KTmvuRUWatJ+6fpTysACbAHpmy2nH6kW/HtfWgaqupjKxtiWXbTCPvpQwIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFF4QtML2VWzoJp5KpnYOU5Iyv45BMB8GA1UdIwQY MBaAFEaMJnpkdPy3zEnPMl0Oncxf6NINMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm93bWVtUjBfTGZNU2M4eVhRNmR6Rl9vMGcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82ZTYxNWYtNWZkNy00NWI2LThhY2It NzY5OTliZjk5OTlmLzEvWGhDMHd2WlZiT2dtbmtxbWRnNVRraktfamtFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC82ZTYxNWYtNWZkNy00NWI2LThhY2ItNzY5OTliZjk5OTlm LzEvUm93bWVtUjBfTGZNU2M4eVhRNmR6Rl9vMGcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAMBAIAATAGAwQAw/VUMBQE AgACMA4DBQMqCaKAAwUAKg3FwDANBgkqhkiG9w0BAQsFAAOCAQEALAic72nqNoLM fkVDVw7FVAZJN+5H4Uqgui8A6FCxA248spBnuTY1oSN186bC5k81SRnA7BIq8rOq lXsCGZxGhUC5TUm59HUQCU8jCdR9PEfHxtjsfcq+PFSQbpq/NcCo1JAgPAAKbK3W IXyu0JVN65Y5sdDo8zw/tMbwQhkopcSo/tG/F9xFybdDvpXF57cV0Jp8d3OIXv4m eR0fSiI/CHk9zm7WSMG764LFGyNN12pE/XjAPXQh/fFArrPS7B2xwrzzWcNE3Fwv tq6gQ0zF9CorirGaJd1VYeoqR/v1UK3byiPwFM9gmaHvvn5w1wERiqGM3zUjTk+M 7e1/1HCiQw== -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:02 2026 by rpki-client