This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/xweu5qCO47VIbmMKNVD40EQTVOU.roa File: xweu5qCO47VIbmMKNVD40EQTVOU.roa (raw, json) Hash identifier: 2Ggr+oJ9NSlt1DGrtrpkA0zHBUc5XOHY+zg99GvfTiw= Subject key identifier: C7:07:AE:E6:A0:8E:E3:B5:48:6E:63:0A:35:50:F8:D0:44:13:54:E5 Certificate issuer: /CN=5dd1398976b2f487725bc13d7faebed3e16d82c9 Certificate serial: 019B77C689E1EA7729872FA63CE36F129560 Authority key identifier: 5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/xweu5qCO47VIbmMKNVD40EQTVOU.roa Signing time: Thu 01 Jan 2026 04:17:38 +0000 ROA not before: Thu 01 Jan 2026 04:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 395793 IP address blocks: 45.91.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:89:e1:ea:77:29:87:2f:a6:3c:e3:6f:12:95:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd1398976b2f487725bc13d7faebed3e16d82c9 Validity Not Before: Jan 1 04:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c707aee6a08ee3b5486e630a3550f8d0441354e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e7:67:34:da:a0:29:49:d5:bc:d6:a8:ab:8f: 0c:8a:0f:17:1d:ac:6b:60:ab:cf:e8:7c:f6:a5:79: 18:d6:1f:f4:91:9a:1f:e1:1d:19:14:3a:a4:1b:ea: eb:fb:43:f1:fa:8f:f8:90:44:22:72:4b:c3:5e:3c: de:ad:d9:e4:cf:3e:98:c8:4f:4b:ba:bc:82:8c:26: 3b:b5:a3:24:cc:36:96:8c:ef:15:b9:bd:b9:2a:b1: dc:90:41:4e:0a:e3:32:c0:f8:5e:9b:c2:3f:2d:2b: 95:f3:2a:b2:6a:86:e6:42:ea:6e:1a:be:a6:38:e8: e6:d4:47:a2:62:cd:7b:aa:c5:0c:58:4c:c9:f7:9d: b4:18:30:4c:cd:37:4c:e9:d4:83:a2:38:2b:55:5b: 03:cc:c4:8d:76:84:1a:8c:f1:2c:bf:b1:05:cb:d8: 56:bd:ea:39:c6:1f:6c:98:e3:b3:25:0e:0d:9c:61: 38:26:fc:04:1b:63:92:71:0d:4d:a9:ef:79:fa:4a: bd:93:48:df:63:c6:33:3d:f2:2a:bc:c6:d3:fe:7f: 5a:01:67:5c:50:98:c4:95:79:36:3f:57:f8:0b:71: 68:2c:66:8a:f1:f6:d1:a1:c0:ac:a7:38:a6:7e:5f: 6b:8d:28:dd:be:5d:1a:ed:1c:4a:96:80:05:89:f3: e0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:07:AE:E6:A0:8E:E3:B5:48:6E:63:0A:35:50:F8:D0:44:13:54:E5 X509v3 Authority Key Identifier: keyid:5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/xweu5qCO47VIbmMKNVD40EQTVOU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.198.0/23 Signature Algorithm: sha256WithRSAEncryption 35:1b:c2:2d:0f:a5:5d:5f:cc:33:2e:9d:03:01:1c:15:7e:e6: ba:7c:80:5e:4d:e6:f7:8c:69:70:6a:2b:19:87:7f:18:2e:e1: 3b:19:5a:58:1e:e9:f5:ae:89:13:e3:50:03:9f:a2:5a:65:54: 34:b7:ff:69:0e:1d:44:be:d5:cb:06:cd:48:cd:74:f6:45:ad: 63:f6:e3:63:d9:bb:70:f4:19:b0:d7:cd:f2:28:8a:82:40:84: 23:3c:66:af:55:63:c8:86:0f:f0:95:ff:ab:a0:35:38:fa:db: ce:88:99:26:c5:34:09:d3:fa:0a:83:3e:92:66:7c:c8:cc:33: 81:c2:5c:fd:80:34:b0:cd:5c:35:e7:1e:9c:42:de:be:58:ca: 7a:81:5d:59:70:58:db:eb:10:a4:fa:67:89:11:6e:ac:a9:a7: 25:3c:29:cf:36:31:97:57:9e:47:5f:5a:aa:b9:ea:65:2e:06: 79:60:bb:df:21:af:fb:41:c9:11:6e:2d:0e:48:49:51:ee:b2: a9:d1:60:6d:5d:9d:ef:07:a7:da:0c:72:7a:54:54:24:39:f9: a0:30:03:01:c8:be:17:09:80:7e:db:bf:b1:17:89:93:bb:f4: fa:11:d2:18:70:f9:d3:3e:67:fe:9b:f9:43:e2:38:da:4a:46: 97:24:8f:37 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xonh6ncphy+mPONvEpVgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDEzOTg5NzZiMmY0ODc3MjViYzEzZDdmYWViZWQzZTE2 ZDgyYzkwHhcNMjYwMTAxMDQxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzA3YWVlNmEwOGVlM2I1NDg2ZTYzMGEzNTUwZjhkMDQ0MTM1NGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnednNNqgKUnVvNaoq48Mig8XHaxr YKvP6Hz2pXkY1h/0kZof4R0ZFDqkG+rr+0Px+o/4kEQickvDXjzerdnkzz6YyE9L uryCjCY7taMkzDaWjO8Vub25KrHckEFOCuMywPhem8I/LSuV8yqyaobmQupuGr6m OOjm1EeiYs17qsUMWEzJ9520GDBMzTdM6dSDojgrVVsDzMSNdoQajPEsv7EFy9hW veo5xh9smOOzJQ4NnGE4JvwEG2OScQ1Nqe95+kq9k0jfY8YzPfIqvMbT/n9aAWdc UJjElXk2P1f4C3FoLGaK8fbRocCspzimfl9rjSjdvl0a7RxKloAFifPgcQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMcHruagjuO1SG5jCjVQ+NBEE1TlMB8GA1UdIwQY MBaAFF3ROYl2svSHclvBPX+uvtPhbYLJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRFNWlYYXk5SWR5VzhFOWY2Ni0wLUZ0Z3NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zZTgxMDAtOTg4ZC00ODNlLWJjODYt NjAwODEwNjM0ODc4LzEveHdldTVxQ080N1ZJYm1NS05WRDQwRVFUVk9VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8zZTgxMDAtOTg4ZC00ODNlLWJjODYtNjAwODEwNjM0ODc4 LzEvWGRFNWlYYXk5SWR5VzhFOWY2Ni0wLUZ0Z3NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLVvGMA0G CSqGSIb3DQEBCwUAA4IBAQA1G8ItD6VdX8wzLp0DARwVfua6fIBeTeb3jGlwaisZ h38YLuE7GVpYHun1rokT41ADn6JaZVQ0t/9pDh1EvtXLBs1IzXT2Ra1j9uNj2btw 9Bmw183yKIqCQIQjPGavVWPIhg/wlf+roDU4+tvOiJkmxTQJ0/oKgz6SZnzIzDOB wlz9gDSwzVw15x6cQt6+WMp6gV1ZcFjb6xCk+meJEW6sqaclPCnPNjGXV55HX1qq ueplLgZ5YLvfIa/7QckRbi0OSElR7rKp0WBtXZ3vB6faDHJ6VFQkOfmgMAMByL4X CYB+27+xF4mTu/T6EdIYcPnTPmf+m/lD4jjaSkaXJI83 -----END CERTIFICATE-----Generated at Sun Jan 18 04:10:31 2026 by rpki-client