This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0218cf-d1a8-4725-ba96-5265a723f8d4/1/X3UiWxsuopLjW8D5Eyiwbm37HQY.roa File: X3UiWxsuopLjW8D5Eyiwbm37HQY.roa (raw, json) Hash identifier: Q3169LVxcsHnw3dv8XlF287F846gPxPc9BPbTpP3QVM= Subject key identifier: 5F:75:22:5B:1B:2E:A2:92:E3:5B:C0:F9:13:28:B0:6E:6D:FB:1D:06 Certificate issuer: /CN=826eb7d74fa1071597fa3339fbf8831c2e95b2c7 Certificate serial: 019B7A5B98FE478EC623C7439A8F94DC4751 Authority key identifier: 82:6E:B7:D7:4F:A1:07:15:97:FA:33:39:FB:F8:83:1C:2E:95:B2:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gm6310-hBxWX-jM5-_iDHC6Vssc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0218cf-d1a8-4725-ba96-5265a723f8d4/1/X3UiWxsuopLjW8D5Eyiwbm37HQY.roa Signing time: Thu 01 Jan 2026 16:19:41 +0000 ROA not before: Thu 01 Jan 2026 16:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39022 IP address blocks: 195.66.134.0/23 maxlen: 23 2001:67c:2464::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0218cf-d1a8-4725-ba96-5265a723f8d4/1/gm6310-hBxWX-jM5-_iDHC6Vssc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0218cf-d1a8-4725-ba96-5265a723f8d4/1/gm6310-hBxWX-jM5-_iDHC6Vssc.mft rsync://rpki.ripe.net/repository/DEFAULT/gm6310-hBxWX-jM5-_iDHC6Vssc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:98:fe:47:8e:c6:23:c7:43:9a:8f:94:dc:47:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=826eb7d74fa1071597fa3339fbf8831c2e95b2c7 Validity Not Before: Jan 1 16:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f75225b1b2ea292e35bc0f91328b06e6dfb1d06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9c:e7:79:2b:b7:6d:b6:a9:d0:e1:aa:7e:14: a5:6c:17:3a:c1:b1:fa:49:55:35:d9:20:e2:ac:6d: b6:b9:36:46:d9:43:71:83:f3:3d:08:d5:78:35:af: bc:0d:01:e6:39:67:32:ad:da:cc:9e:de:17:01:06: a5:28:a0:74:1d:93:33:3a:f6:e0:3a:3a:0e:80:0e: 2b:1b:f6:da:bb:86:f5:c0:98:5f:fc:7c:e4:28:f1: 97:6a:62:64:52:a9:e0:46:99:d3:b0:f5:98:88:27: e7:f6:ea:97:0f:bb:95:9b:62:0c:28:a0:e9:2b:7c: 44:da:e0:85:b5:82:c3:4e:8e:71:59:f8:82:d1:fb: d3:4d:62:52:ec:e4:82:c0:f7:a6:c6:ae:40:9c:23: 36:da:25:a6:3e:98:44:da:40:53:52:e3:88:7b:57: be:89:da:92:ab:8e:4f:2e:99:44:cd:d6:da:f1:87: 57:26:a2:4f:6b:a4:b5:d2:1c:c9:17:3d:7d:41:fd: 08:e9:12:29:7d:7d:b5:cc:fc:6f:db:12:be:14:ec: a5:8f:8b:f1:9d:01:bf:03:b5:6b:c0:02:18:73:86: cf:24:f6:8f:be:5d:21:0e:e6:0d:d6:49:e4:0a:7b: f8:5f:d3:52:79:4e:b2:c4:fe:4e:96:f4:25:b0:23: ff:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:75:22:5B:1B:2E:A2:92:E3:5B:C0:F9:13:28:B0:6E:6D:FB:1D:06 X509v3 Authority Key Identifier: keyid:82:6E:B7:D7:4F:A1:07:15:97:FA:33:39:FB:F8:83:1C:2E:95:B2:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gm6310-hBxWX-jM5-_iDHC6Vssc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0218cf-d1a8-4725-ba96-5265a723f8d4/1/X3UiWxsuopLjW8D5Eyiwbm37HQY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0218cf-d1a8-4725-ba96-5265a723f8d4/1/gm6310-hBxWX-jM5-_iDHC6Vssc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.66.134.0/23 IPv6: 2001:67c:2464::/48 Signature Algorithm: sha256WithRSAEncryption e7:62:60:e4:f0:fc:b6:43:a8:bc:e6:97:ab:ca:42:a6:20:e7: a3:4f:0e:20:f2:72:f3:9a:20:2a:28:bb:e6:47:4e:7c:a7:42: 16:19:34:6a:fc:b0:f0:e9:cf:cf:1d:a6:7e:c9:ce:54:a9:a2: 19:e8:2a:7f:a5:81:dd:0c:d7:fb:46:14:0b:c9:23:f5:7a:7d: a4:02:8e:37:8e:54:10:8e:26:79:8b:ac:1f:25:bb:d0:bc:dd: ad:d4:9e:e1:6a:1e:3d:ff:f5:43:de:b0:51:97:a7:8e:32:70: 9a:29:2f:9b:69:61:18:66:81:ec:30:5f:3a:1c:a5:79:ac:c0: 8b:9c:4c:de:22:98:e2:48:a5:62:81:a6:06:af:a8:fc:c7:1f: d9:3f:3f:96:75:28:0b:13:6b:e6:4a:bb:8b:b7:78:a1:31:b1: 7c:76:d7:02:3a:5a:58:d8:49:3e:7a:b3:3c:78:6d:b7:61:65: 5c:cd:a8:e0:02:47:26:09:dc:e8:48:bc:0a:78:e8:b2:a4:c3: 82:9b:af:f7:a2:7c:03:a4:1d:be:7c:30:4d:2b:11:45:05:3b: 1d:86:d3:84:7a:54:0d:a0:d9:16:ed:0d:69:39:28:d2:0e:fa: d5:eb:d2:09:4b:1a:d1:b0:81:a2:9e:09:8e:b0:12:6d:9e:d0: ba:bc:bc:f9 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6W5j+R47GI8dDmo+U3EdRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNmViN2Q3NGZhMTA3MTU5N2ZhMzMzOWZiZjg4MzFjMmU5 NWIyYzcwHhcNMjYwMTAxMTYxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Zjc1MjI1YjFiMmVhMjkyZTM1YmMwZjkxMzI4YjA2ZTZkZmIxZDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJzneSu3bbap0OGqfhSlbBc6wbH6 SVU12SDirG22uTZG2UNxg/M9CNV4Na+8DQHmOWcyrdrMnt4XAQalKKB0HZMzOvbg OjoOgA4rG/bau4b1wJhf/HzkKPGXamJkUqngRpnTsPWYiCfn9uqXD7uVm2IMKKDp K3xE2uCFtYLDTo5xWfiC0fvTTWJS7OSCwPemxq5AnCM22iWmPphE2kBTUuOIe1e+ idqSq45PLplEzdba8YdXJqJPa6S10hzJFz19Qf0I6RIpfX21zPxv2xK+FOylj4vx nQG/A7VrwAIYc4bPJPaPvl0hDuYN1knkCnv4X9NSeU6yxP5OlvQlsCP/rwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFF91IlsbLqKS41vA+RMosG5t+x0GMB8GA1UdIwQY MBaAFIJut9dPoQcVl/ozOfv4gxwulbLHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ202MzEwLWhCeFdYLWpNNS1faURIQzZWc3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wMjE4Y2YtZDFhOC00NzI1LWJhOTYt NTI2NWE3MjNmOGQ0LzEvWDNVaVd4c3VvcExqVzhENUV5aXdibTM3SFFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wMjE4Y2YtZDFhOC00NzI1LWJhOTYtNTI2NWE3MjNmOGQ0 LzEvZ202MzEwLWhCeFdYLWpNNS1faURIQzZWc3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBw0KGMA8E AgACMAkDBwAgAQZ8JGQwDQYJKoZIhvcNAQELBQADggEBAOdiYOTw/LZDqLzml6vK QqYg56NPDiDycvOaICoou+ZHTnynQhYZNGr8sPDpz88dpn7JzlSpohnoKn+lgd0M 1/tGFAvJI/V6faQCjjeOVBCOJnmLrB8lu9C83a3UnuFqHj3/9UPesFGXp44ycJop L5tpYRhmgewwXzocpXmswIucTN4imOJIpWKBpgavqPzHH9k/P5Z1KAsTa+ZKu4u3 eKExsXx21wI6WljYST56szx4bbdhZVzNqOACRyYJ3OhIvAp46LKkw4Kbr/eifAOk Hb58ME0rEUUFOx2G04R6VA2g2RbtDWk5KNIO+tXr0glLGtGwgaKeCY6wEm2e0Lq8 vPk= -----END CERTIFICATE-----Generated at Mon Feb 9 22:23:14 2026 by rpki-client