This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/XF5YCv5InZ3eQDwQtIZCzm4p-p8.roa File: XF5YCv5InZ3eQDwQtIZCzm4p-p8.roa (raw, json) Hash identifier: WZz5fH/inmisjDgfduYv271FfaeCoOytDiztCH+AR90= Subject key identifier: 5C:5E:58:0A:FE:48:9D:9D:DE:40:3C:10:B4:86:42:CE:6E:29:FA:9F Certificate issuer: /CN=f374f734c3695e67906a7032eb2e59fb3eb41b22 Certificate serial: 019B78A3411B372478B123B0FF26C4CE6940 Authority key identifier: F3:74:F7:34:C3:69:5E:67:90:6A:70:32:EB:2E:59:FB:3E:B4:1B:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/XF5YCv5InZ3eQDwQtIZCzm4p-p8.roa Signing time: Thu 01 Jan 2026 08:18:43 +0000 ROA not before: Thu 01 Jan 2026 08:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 192.162.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.crl rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:41:1b:37:24:78:b1:23:b0:ff:26:c4:ce:69:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f374f734c3695e67906a7032eb2e59fb3eb41b22 Validity Not Before: Jan 1 08:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c5e580afe489d9dde403c10b48642ce6e29fa9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:37:62:6d:55:fa:b8:6a:9e:80:2c:59:db:e4: a4:04:a0:02:fb:97:6d:03:9e:68:8b:b0:a4:02:d1: 30:49:fc:1b:f0:9f:d1:fc:41:34:2e:54:d3:b6:d3: 59:cf:78:03:af:92:0e:d2:c6:4a:2c:f8:a9:0e:49: ee:a3:27:36:b1:43:25:3d:23:f0:fa:04:d4:e5:5d: 67:0d:84:64:cd:b3:6d:e2:82:22:ae:44:63:a8:b5: 87:36:b6:a0:af:e6:66:a8:34:11:2b:6c:c4:d4:73: 6f:35:ae:23:fd:49:77:80:04:bf:3e:2c:b0:cf:e2: b8:3b:77:08:1f:4e:ac:e4:fb:3c:6c:1f:aa:64:dd: 78:99:fa:9e:1b:df:06:d2:50:b3:99:d2:85:74:9e: 55:85:18:63:9d:4c:55:92:33:e4:9e:87:3c:a8:b0: 95:fc:6e:c7:0e:f7:7b:61:73:3d:b7:0f:a7:7c:72: b9:aa:be:2e:4f:59:48:1a:d9:fa:80:75:2c:0a:a8: 3a:28:cb:d1:b0:bd:0a:7d:54:9d:f0:19:95:58:c5: c7:3f:2c:a9:bd:f8:8f:99:4d:60:6b:8b:5e:c5:6e: f4:46:48:d6:40:1d:6e:18:87:0b:61:2b:8b:fe:60: 9e:77:ef:c6:f8:39:3c:84:e6:e0:76:c4:66:3e:57: cd:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:5E:58:0A:FE:48:9D:9D:DE:40:3C:10:B4:86:42:CE:6E:29:FA:9F X509v3 Authority Key Identifier: keyid:F3:74:F7:34:C3:69:5E:67:90:6A:70:32:EB:2E:59:FB:3E:B4:1B:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/XF5YCv5InZ3eQDwQtIZCzm4p-p8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.162.219.0/24 Signature Algorithm: sha256WithRSAEncryption 74:04:e2:08:be:c6:10:18:c6:67:72:f2:02:5a:18:2a:a4:ae: 20:2b:81:41:9e:5d:09:53:7e:c9:09:eb:ce:a1:ac:da:09:5f: 65:7d:3b:e1:12:b3:16:c4:f3:0e:69:38:9a:77:bc:62:f7:f2: b2:d8:5a:75:8f:97:f7:2f:ef:2c:59:a4:9b:8f:27:c4:e0:2c: fb:f4:6f:38:6f:82:e7:87:52:5e:d3:23:a0:fc:98:24:40:0e: 01:28:5f:33:3b:3c:1c:6f:a0:1a:63:47:9a:b1:c8:bf:ee:dd: 5b:75:c6:85:53:dd:3b:fb:bf:ae:60:e7:c1:cc:f0:d4:5c:7d: 27:e1:c1:1f:25:da:67:e5:94:7d:f1:19:b3:5b:2d:32:ef:2d: 30:65:31:57:f1:c6:43:df:bf:ea:64:ce:d6:2a:e1:42:08:32: 5e:dc:a2:2d:af:9e:a7:c8:40:16:39:5c:e0:0e:54:32:39:1c: 34:c4:34:34:f3:1b:35:90:be:71:1a:1f:24:32:2f:ef:5a:b6: 21:bc:93:5e:49:e2:d7:78:be:47:49:c4:3e:1f:f9:e4:81:a4: 8d:63:21:0c:82:a4:18:ce:73:3d:e8:a3:85:dc:a1:98:86:47: 94:8c:db:5d:b3:7c:a7:fa:9b:7f:0a:8f:b8:c5:8d:da:9f:0b: cc:26:15:a2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o0EbNyR4sSOw/ybEzmlAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzNzRmNzM0YzM2OTVlNjc5MDZhNzAzMmViMmU1OWZiM2Vi NDFiMjIwHhcNMjYwMTAxMDgxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzVlNTgwYWZlNDg5ZDlkZGU0MDNjMTBiNDg2NDJjZTZlMjlmYTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTdibVX6uGqegCxZ2+SkBKAC+5dt A55oi7CkAtEwSfwb8J/R/EE0LlTTttNZz3gDr5IO0sZKLPipDknuoyc2sUMlPSPw +gTU5V1nDYRkzbNt4oIirkRjqLWHNragr+ZmqDQRK2zE1HNvNa4j/Ul3gAS/Piyw z+K4O3cIH06s5Ps8bB+qZN14mfqeG98G0lCzmdKFdJ5VhRhjnUxVkjPknoc8qLCV /G7HDvd7YXM9tw+nfHK5qr4uT1lIGtn6gHUsCqg6KMvRsL0KfVSd8BmVWMXHPyyp vfiPmU1ga4texW70RkjWQB1uGIcLYSuL/mCed+/G+Dk8hObgdsRmPlfN4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFxeWAr+SJ2d3kA8ELSGQs5uKfqfMB8GA1UdIwQY MBaAFPN09zTDaV5nkGpwMusuWfs+tBsiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODNUM05NTnBYbWVRYW5BeTZ5NVotejYwR3lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mNzQ5MTQtZGRhOC00ZDQ1LTk5OTIt NGJlZjgzMjhhYWFiLzEvWEY1WUN2NUluWjNlUUR3UXRJWkN6bTRwLXA4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9mNzQ5MTQtZGRhOC00ZDQ1LTk5OTItNGJlZjgzMjhhYWFi LzEvODNUM05NTnBYbWVRYW5BeTZ5NVotejYwR3lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKLbMA0G CSqGSIb3DQEBCwUAA4IBAQB0BOIIvsYQGMZncvICWhgqpK4gK4FBnl0JU37JCevO oazaCV9lfTvhErMWxPMOaTiad7xi9/Ky2Fp1j5f3L+8sWaSbjyfE4Cz79G84b4Ln h1Je0yOg/JgkQA4BKF8zOzwcb6AaY0easci/7t1bdcaFU907+7+uYOfBzPDUXH0n 4cEfJdpn5ZR98RmzWy0y7y0wZTFX8cZD37/qZM7WKuFCCDJe3KItr56nyEAWOVzg DlQyORw0xDQ08xs1kL5xGh8kMi/vWrYhvJNeSeLXeL5HScQ+H/nkgaSNYyEMgqQY znM96KOF3KGYhkeUjNtds3yn+pt/Co+4xY3anwvMJhWi -----END CERTIFICATE-----Generated at Fri Jan 9 17:05:12 2026 by rpki-client