This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/Xu5BQ7LrXCR8lJBVkhb4CoSeWZc.roa File: Xu5BQ7LrXCR8lJBVkhb4CoSeWZc.roa (raw, json) Hash identifier: NXq7kChGH24MXWlnwrMypjf5dlmgOh9tkgpPRlq06/w= Subject key identifier: 5E:EE:41:43:B2:EB:5C:24:7C:94:90:55:92:16:F8:0A:84:9E:59:97 Certificate issuer: /CN=7c16e9d57efdacd3f7bc7e98496b719fadc5ae48 Certificate serial: 019B7910B4C708BE75A5B70A37518F6D919A Authority key identifier: 7C:16:E9:D5:7E:FD:AC:D3:F7:BC:7E:98:49:6B:71:9F:AD:C5:AE:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fBbp1X79rNP3vH6YSWtxn63Frkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/Xu5BQ7LrXCR8lJBVkhb4CoSeWZc.roa Signing time: Thu 01 Jan 2026 10:18:16 +0000 ROA not before: Thu 01 Jan 2026 10:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197909 IP address blocks: 94.154.2.0/24 maxlen: 24 185.240.72.0/22 maxlen: 22 193.35.80.0/22 maxlen: 22 2a07:2680::/29 maxlen: 29 2a0c:7580::/29 maxlen: 29 2a0d:6140::/29 maxlen: 29 2a0d:6140::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.crl rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft rsync://rpki.ripe.net/repository/DEFAULT/fBbp1X79rNP3vH6YSWtxn63Frkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:b4:c7:08:be:75:a5:b7:0a:37:51:8f:6d:91:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c16e9d57efdacd3f7bc7e98496b719fadc5ae48 Validity Not Before: Jan 1 10:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5eee4143b2eb5c247c9490559216f80a849e5997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:db:1c:fe:06:a0:e8:4f:5a:de:e8:4c:49:7a: 4f:38:a9:3f:10:9d:f5:f2:9c:b1:36:1d:cd:f2:1d: 25:60:52:19:95:51:a5:81:4b:7a:e7:ae:d5:f5:a1: 36:83:5c:5f:32:2a:c9:03:38:17:dd:05:f0:1a:ec: 9c:d6:36:93:c9:a0:3a:aa:69:f2:ef:f5:e8:e5:43: 58:f0:19:47:e0:e3:6a:8a:72:21:11:da:5f:ec:d5: 91:3d:f6:39:8c:0b:85:e9:07:fb:0b:ad:b1:76:17: 22:c5:cd:bc:3e:0a:24:13:4b:10:76:9d:0b:61:dd: aa:4e:fa:8b:71:3b:2f:88:7b:d0:ae:94:e1:af:db: 54:16:0e:4c:bf:d2:7a:9b:16:b9:12:6f:2c:f5:e3: 27:d8:22:1c:eb:52:b9:3d:3a:7f:0a:fe:13:14:ce: c5:a0:5c:75:44:f2:2c:bd:3b:88:a2:5d:a7:dd:d3: 42:e0:17:2d:7c:2d:35:92:ee:2c:f8:e4:eb:65:08: be:68:bc:00:d6:b7:be:c1:20:b5:8d:cb:ff:fe:46: e0:04:73:57:7f:6d:11:8c:31:7a:73:12:44:bb:a1: 9c:3d:50:91:6e:a8:f0:4d:95:dc:30:f6:35:ed:d2: 57:ea:31:be:22:66:cd:0f:aa:ca:d2:22:fb:00:07: 85:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:EE:41:43:B2:EB:5C:24:7C:94:90:55:92:16:F8:0A:84:9E:59:97 X509v3 Authority Key Identifier: keyid:7C:16:E9:D5:7E:FD:AC:D3:F7:BC:7E:98:49:6B:71:9F:AD:C5:AE:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBbp1X79rNP3vH6YSWtxn63Frkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/Xu5BQ7LrXCR8lJBVkhb4CoSeWZc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.154.2.0/24 185.240.72.0/22 193.35.80.0/22 IPv6: 2a07:2680::/29 2a0c:7580::/29 2a0d:6140::/29 Signature Algorithm: sha256WithRSAEncryption 43:25:de:36:b9:8d:bb:0a:50:a7:75:6c:97:15:db:ea:ce:6f: f8:bb:16:51:11:e4:f6:6c:c0:75:69:0b:44:64:72:12:be:e8: 6e:3d:b7:4f:25:91:8d:4e:d9:07:d6:9d:cf:f4:81:96:07:60: e0:ac:f5:aa:8d:e4:34:50:06:b7:ae:5f:17:46:2a:1a:a9:95: 79:8d:a4:38:b0:c7:36:21:fa:f4:01:02:d8:61:40:a8:5f:b5: 32:41:46:07:8b:12:c2:05:36:a0:8d:ec:05:77:bb:bf:ba:97: c6:41:76:d8:fb:22:3c:f2:1a:7b:1f:a0:00:7c:71:43:99:4e: 39:b6:31:be:2e:22:f9:a5:28:6b:cc:ba:d2:ac:12:1f:8f:e0: b3:2b:ce:b7:fe:b1:64:f1:57:8b:04:20:8f:d0:a3:3a:ef:c5: 12:ad:80:03:e5:e8:b2:b1:fb:8a:d0:2e:b7:68:f1:3e:d9:d6: 9d:25:97:fc:67:d2:3e:23:b7:e0:57:ad:3b:8b:d4:45:c4:22: 46:73:88:0f:b0:32:1a:b9:0d:0f:f9:56:e8:46:ab:84:03:e9: 49:2b:1a:bc:8f:59:2a:c3:df:cf:97:f3:e2:83:72:47:d4:67: 0c:14:27:04:c0:7e:18:28:ea:d2:07:37:28:f0:26:be:b8:7b: 9d:99:49:19 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZt5ELTHCL51pbcKN1GPbZGaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjMTZlOWQ1N2VmZGFjZDNmN2JjN2U5ODQ5NmI3MTlmYWRj NWFlNDgwHhcNMjYwMTAxMTAxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZWVlNDE0M2IyZWI1YzI0N2M5NDkwNTU5MjE2ZjgwYTg0OWU1OTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNsc/gag6E9a3uhMSXpPOKk/EJ31 8pyxNh3N8h0lYFIZlVGlgUt6567V9aE2g1xfMirJAzgX3QXwGuyc1jaTyaA6qmny 7/Xo5UNY8BlH4ONqinIhEdpf7NWRPfY5jAuF6Qf7C62xdhcixc28PgokE0sQdp0L Yd2qTvqLcTsviHvQrpThr9tUFg5Mv9J6mxa5Em8s9eMn2CIc61K5PTp/Cv4TFM7F oFx1RPIsvTuIol2n3dNC4BctfC01ku4s+OTrZQi+aLwA1re+wSC1jcv//kbgBHNX f20RjDF6cxJEu6GcPVCRbqjwTZXcMPY17dJX6jG+ImbND6rK0iL7AAeF5wIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFF7uQUOy61wkfJSQVZIW+AqEnlmXMB8GA1UdIwQY MBaAFHwW6dV+/azT97x+mElrcZ+txa5IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkJicDFYNzlyTlAzdkg2WVNXdHhuNjNGcmtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9mMTk3ZDAtYTU0MC00ODgyLWE2N2Et YjhhMjMyZWZmMmY2LzEvWHU1QlE3THJYQ1I4bEpCVmtoYjRDb1NlV1pjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9mMTk3ZDAtYTU0MC00ODgyLWE2N2EtYjhhMjMyZWZmMmY2 LzEvZkJicDFYNzlyTlAzdkg2WVNXdHhuNjNGcmtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAYBAIAATASAwQAXpoCAwQC ufBIAwQCwSNQMBsEAgACMBUDBQMqByaAAwUDKgx1gAMFAyoNYUAwDQYJKoZIhvcN AQELBQADggEBAEMl3ja5jbsKUKd1bJcV2+rOb/i7FlER5PZswHVpC0RkchK+6G49 t08lkY1O2QfWnc/0gZYHYOCs9aqN5DRQBreuXxdGKhqplXmNpDiwxzYh+vQBAthh QKhftTJBRgeLEsIFNqCN7AV3u7+6l8ZBdtj7IjzyGnsfoAB8cUOZTjm2Mb4uIvml KGvMutKsEh+P4LMrzrf+sWTxV4sEII/QozrvxRKtgAPl6LKx+4rQLrdo8T7Z1p0l l/xn0j4jt+BXrTuL1EXEIkZziA+wMhq5DQ/5VuhGq4QD6UkrGryPWSrD38+X8+KD ckfUZwwUJwTAfhgo6tIHNyjwJr64e52ZSRk= -----END CERTIFICATE-----Generated at Tue Feb 10 03:02:10 2026 by rpki-client