This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/xnX10RwznEnmTe1E1E5B2rhOTnA.roa File: xnX10RwznEnmTe1E1E5B2rhOTnA.roa (raw, json) Hash identifier: feg+CLsY1TCQ8UES6e5qZUfIKp0hLMvvn81xyTCKGRc= Subject key identifier: C6:75:F5:D1:1C:33:9C:49:E6:4D:ED:44:D4:4E:41:DA:B8:4E:4E:70 Certificate issuer: /CN=bc6892e99c84a1c5dc9b12e114d67af16c24a9d6 Certificate serial: 019B9A24FE103B9024D4BCCE53F36974587F Authority key identifier: BC:68:92:E9:9C:84:A1:C5:DC:9B:12:E1:14:D6:7A:F1:6C:24:A9:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGiS6ZyEocXcmxLhFNZ68WwkqdY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/xnX10RwznEnmTe1E1E5B2rhOTnA.roa Signing time: Wed 07 Jan 2026 20:27:54 +0000 ROA not before: Wed 07 Jan 2026 20:27:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42831 IP address blocks: 5.8.251.0/24 maxlen: 24 46.102.158.0/24 maxlen: 24 46.102.159.0/24 maxlen: 24 94.177.134.0/24 maxlen: 24 94.177.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.crl rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft rsync://rpki.ripe.net/repository/DEFAULT/vGiS6ZyEocXcmxLhFNZ68WwkqdY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9a:24:fe:10:3b:90:24:d4:bc:ce:53:f3:69:74:58:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc6892e99c84a1c5dc9b12e114d67af16c24a9d6 Validity Not Before: Jan 7 20:27:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c675f5d11c339c49e64ded44d44e41dab84e4e70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ab:21:23:7d:d1:61:4a:61:5a:1d:79:10:6a: 24:d5:e2:1a:d1:d2:2e:0d:90:f6:ff:d0:d4:9c:01: 00:5c:e0:dc:c2:07:12:f6:a0:50:c6:b7:e9:66:6c: db:4b:3e:f5:26:3b:14:5c:11:b3:7b:17:b9:82:0c: 5a:c7:1d:14:2f:cf:ab:fd:f3:b2:d4:65:65:1b:bf: c3:6a:ea:f7:8d:3e:f5:e0:21:83:87:33:06:6a:25: 39:c6:f9:0e:95:e5:4d:38:33:79:d4:c8:d0:a1:25: 1f:59:49:26:e9:d0:b6:50:c9:43:95:4b:83:57:9b: b4:78:2a:22:4a:40:4a:d6:ca:7a:ee:5c:59:ed:f1: f3:77:31:c9:49:6b:62:5f:7e:43:3e:34:88:df:06: 95:bc:4e:29:eb:19:6d:20:48:ea:2a:87:22:22:52: d4:e0:fe:7d:5a:b1:b9:fb:a9:36:1b:39:0b:6f:2d: 0c:16:3a:14:2b:91:5f:4b:68:8a:6e:a7:2a:78:6b: da:1c:e1:db:fd:f3:93:5f:59:68:43:d2:10:1b:69: d4:18:8f:5d:fd:4e:3d:55:6b:c2:e9:76:5a:41:20: 5e:64:4e:a3:43:f8:e7:89:89:4d:0a:67:81:9e:b3: 51:3f:85:af:cd:41:13:3b:c1:01:ba:3e:2a:4a:52: 78:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:75:F5:D1:1C:33:9C:49:E6:4D:ED:44:D4:4E:41:DA:B8:4E:4E:70 X509v3 Authority Key Identifier: keyid:BC:68:92:E9:9C:84:A1:C5:DC:9B:12:E1:14:D6:7A:F1:6C:24:A9:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGiS6ZyEocXcmxLhFNZ68WwkqdY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/xnX10RwznEnmTe1E1E5B2rhOTnA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.8.251.0/24 46.102.158.0/23 94.177.134.0/23 Signature Algorithm: sha256WithRSAEncryption 3e:00:93:b7:46:5a:dc:84:ee:62:f8:b2:27:20:f1:a2:47:3f: 91:29:b3:1b:81:f0:2f:7d:18:91:7e:2b:e8:dd:5b:79:ac:06: b4:88:f1:e8:0b:13:3b:4c:35:fc:c3:e0:f9:70:81:37:d1:22: 0f:78:fc:5f:19:e0:af:b4:52:0f:d1:14:df:d3:6a:f3:3b:f1: 25:fe:a4:5b:9a:5a:2d:83:00:78:86:90:28:25:6a:83:87:8f: 9e:4a:2d:18:ef:2a:11:d2:82:20:d9:3e:4a:f4:a1:0f:a6:a3: 98:30:8f:5c:8c:d5:eb:38:6b:e4:dc:e6:6a:97:48:dc:9b:4e: 43:0f:d1:85:ed:c0:4a:ed:1c:9b:7d:82:d0:2d:2f:bf:da:12: 95:90:6f:ad:af:57:c1:0d:f7:d2:94:d7:c5:42:5a:a3:54:62: 64:1c:c6:01:ce:53:e0:f8:f7:b9:ae:eb:08:bd:c4:83:1b:5f: 7a:50:ad:d1:7f:94:1b:56:0b:af:53:9f:08:0f:0c:b5:6b:c8: 1e:ac:35:dd:6c:cc:27:af:84:66:f7:4e:d6:b2:8c:1a:c6:94: b5:8b:43:dc:2b:35:4c:83:15:7e:0b:8f:de:b1:86:b1:44:f1: 6b:78:89:4d:c8:89:e9:42:98:ce:e9:fa:18:31:66:82:3b:b9: a8:5f:3b:c8 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZuaJP4QO5Ak1LzOU/NpdFh/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNjg5MmU5OWM4NGExYzVkYzliMTJlMTE0ZDY3YWYxNmMy NGE5ZDYwHhcNMjYwMTA3MjAyNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjc1ZjVkMTFjMzM5YzQ5ZTY0ZGVkNDRkNDRlNDFkYWI4NGU0ZTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKshI33RYUphWh15EGok1eIa0dIu DZD2/9DUnAEAXODcwgcS9qBQxrfpZmzbSz71JjsUXBGzexe5ggxaxx0UL8+r/fOy 1GVlG7/Daur3jT714CGDhzMGaiU5xvkOleVNODN51MjQoSUfWUkm6dC2UMlDlUuD V5u0eCoiSkBK1sp67lxZ7fHzdzHJSWtiX35DPjSI3waVvE4p6xltIEjqKociIlLU 4P59WrG5+6k2GzkLby0MFjoUK5FfS2iKbqcqeGvaHOHb/fOTX1loQ9IQG2nUGI9d /U49VWvC6XZaQSBeZE6jQ/jniYlNCmeBnrNRP4WvzUETO8EBuj4qSlJ4CQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMZ19dEcM5xJ5k3tRNROQdq4Tk5wMB8GA1UdIwQY MBaAFLxokumchKHF3JsS4RTWevFsJKnWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkdpUzZaeUVvY1hjbXhMaEZOWjY4V3drcWRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My82MmQ5ZGQtNzJmMi00MmE3LTk5ODIt YjY0ZTBmNmEwOWNhLzEveG5YMTBSd3puRW5tVGUxRTFFNUIycmhPVG5BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My82MmQ5ZGQtNzJmMi00MmE3LTk5ODItYjY0ZTBmNmEwOWNh LzEvdkdpUzZaeUVvY1hjbXhMaEZOWjY4V3drcWRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABQj7AwQB LmaeAwQBXrGGMA0GCSqGSIb3DQEBCwUAA4IBAQA+AJO3RlrchO5i+LInIPGiRz+R KbMbgfAvfRiRfivo3Vt5rAa0iPHoCxM7TDX8w+D5cIE30SIPePxfGeCvtFIP0RTf 02rzO/El/qRbmlotgwB4hpAoJWqDh4+eSi0Y7yoR0oIg2T5K9KEPpqOYMI9cjNXr OGvk3OZql0jcm05DD9GF7cBK7RybfYLQLS+/2hKVkG+tr1fBDffSlNfFQlqjVGJk HMYBzlPg+Pe5rusIvcSDG196UK3Rf5QbVguvU58IDwy1a8gerDXdbMwnr4Rm907W sowaxpS1i0PcKzVMgxV+C4/esYaxRPFreIlNyInpQpjO6foYMWaCO7moXzvI -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:01 2026 by rpki-client