This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/X_ToRWHY2cWSKfb50-DFaa8o0oM.roa File: X_ToRWHY2cWSKfb50-DFaa8o0oM.roa (raw, json) Hash identifier: SzgSGTl4m6DpdjK/TPbLIKkkCLRq126cbU6uLGRTydk= Subject key identifier: 5F:F4:E8:45:61:D8:D9:C5:92:29:F6:F9:D3:E0:C5:69:AF:28:D2:83 Certificate issuer: /CN=479762e88d8f67fad4aa059a1b8b46fa4cc7a893 Certificate serial: 019B7B362386ADD407FDBFE740D0BC11352E Authority key identifier: 47:97:62:E8:8D:8F:67:FA:D4:AA:05:9A:1B:8B:46:FA:4C:C7:A8:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R5di6I2PZ_rUqgWaG4tG-kzHqJM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/X_ToRWHY2cWSKfb50-DFaa8o0oM.roa Signing time: Thu 01 Jan 2026 20:18:24 +0000 ROA not before: Thu 01 Jan 2026 20:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60014 IP address blocks: 78.31.232.0/22 maxlen: 22 185.119.240.0/22 maxlen: 22 193.106.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.mft rsync://rpki.ripe.net/repository/DEFAULT/R5di6I2PZ_rUqgWaG4tG-kzHqJM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:23:86:ad:d4:07:fd:bf:e7:40:d0:bc:11:35:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=479762e88d8f67fad4aa059a1b8b46fa4cc7a893 Validity Not Before: Jan 1 20:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ff4e84561d8d9c59229f6f9d3e0c569af28d283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4e:7c:a6:62:fc:d7:83:40:93:4c:cd:de:33: 68:79:3e:a9:9c:94:72:68:13:4d:7a:9e:25:b7:de: e5:5b:d8:f2:65:5f:8f:93:86:e6:c6:e9:d9:4e:cd: 3c:07:5e:a6:80:da:7b:0f:d4:70:95:7b:3d:1e:2d: 10:90:af:2e:1a:82:cc:24:98:70:6e:55:6b:36:41: 10:9c:3e:35:19:9f:13:4b:db:7d:da:20:97:4b:16: 3d:f2:ad:d6:cb:32:b2:d6:57:16:63:64:cd:5a:71: 46:18:b7:b2:6c:21:65:fb:f4:d1:d3:9f:96:14:3a: 58:86:9c:7d:fe:77:d7:98:4c:69:fc:2e:36:73:79: d4:d9:cc:c3:1e:3a:b1:8e:ad:5e:5d:a6:1e:cc:f2: a6:8d:84:fc:34:cf:e1:53:ae:54:00:55:d2:40:ee: da:3e:4a:28:7a:24:1c:b7:12:ec:4a:b7:f1:d5:d8: ce:23:cd:5e:a6:95:be:f6:88:2a:7d:7e:fb:9b:6b: 4b:20:8f:34:de:2b:3c:2b:de:a6:67:7e:ca:5f:78: d7:6c:89:07:ec:f4:b2:5c:c9:67:89:82:86:f3:d5: b9:0e:9a:47:c6:a8:6f:e2:f0:e9:b2:a5:a9:fd:71: 9a:4d:c2:ef:db:ed:55:c7:df:8b:ff:66:ae:0d:4e: ac:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F4:E8:45:61:D8:D9:C5:92:29:F6:F9:D3:E0:C5:69:AF:28:D2:83 X509v3 Authority Key Identifier: keyid:47:97:62:E8:8D:8F:67:FA:D4:AA:05:9A:1B:8B:46:FA:4C:C7:A8:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R5di6I2PZ_rUqgWaG4tG-kzHqJM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/X_ToRWHY2cWSKfb50-DFaa8o0oM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.31.232.0/22 185.119.240.0/22 193.106.190.0/24 Signature Algorithm: sha256WithRSAEncryption 50:b7:1c:9b:38:ed:19:08:97:09:ff:d0:9a:ec:24:6a:7f:b1: 01:34:7f:ba:80:35:69:6b:5e:67:16:04:d6:49:35:7c:91:99: 04:62:bd:d3:8c:03:d7:fe:80:f5:15:d7:aa:07:dd:e7:de:f0: e6:a9:93:26:a2:b5:bd:f8:60:91:5c:01:0d:40:da:3b:33:52: c7:be:80:f8:65:21:76:5c:c4:1b:53:ac:7e:13:6c:b6:c7:d6: a9:bb:86:aa:c2:44:24:50:ec:df:a0:14:85:6f:53:95:25:1e: 99:07:7b:c9:c3:28:b9:f9:c7:dd:bc:f6:e1:4b:4d:17:56:ac: cc:7a:0d:93:5f:c7:d6:1a:19:75:09:89:6f:fd:7d:d9:3d:54: ba:dc:a9:84:4c:8e:b0:1d:8b:25:8e:99:14:b6:c9:36:6f:9c: eb:08:17:72:76:c7:a7:ae:a4:5b:7c:5d:53:b9:77:6a:64:f4: 81:f6:3c:ef:e5:ed:67:4a:d8:71:cd:2f:ec:88:c9:db:5e:f3: 6f:a0:42:58:9a:4c:0b:63:3b:41:b8:0d:ad:25:d8:cb:b8:d1: a3:44:a0:84:4d:c9:26:6a:5d:a3:81:10:2a:4e:57:7f:75:1e: c0:96:c1:6f:a1:1c:3f:81:06:85:fb:f5:f4:db:48:db:d8:06: 64:be:c3:12 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7NiOGrdQH/b/nQNC8ETUuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3OTc2MmU4OGQ4ZjY3ZmFkNGFhMDU5YTFiOGI0NmZhNGNj N2E4OTMwHhcNMjYwMTAxMjAxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmY0ZTg0NTYxZDhkOWM1OTIyOWY2ZjlkM2UwYzU2OWFmMjhkMjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjE58pmL814NAk0zN3jNoeT6pnJRy aBNNep4lt97lW9jyZV+Pk4bmxunZTs08B16mgNp7D9RwlXs9Hi0QkK8uGoLMJJhw blVrNkEQnD41GZ8TS9t92iCXSxY98q3WyzKy1lcWY2TNWnFGGLeybCFl+/TR05+W FDpYhpx9/nfXmExp/C42c3nU2czDHjqxjq1eXaYezPKmjYT8NM/hU65UAFXSQO7a PkooeiQctxLsSrfx1djOI81eppW+9ogqfX77m2tLII803is8K96mZ37KX3jXbIkH 7PSyXMlniYKG89W5DppHxqhv4vDpsqWp/XGaTcLv2+1Vx9+L/2auDU6sjQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFF/06EVh2NnFkin2+dPgxWmvKNKDMB8GA1UdIwQY MBaAFEeXYuiNj2f61KoFmhuLRvpMx6iTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjVkaTZJMlBaX3JVcWdXYUc0dEcta3pIcUpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8yYzVhZjItMDkzNy00ZjQwLTg4ZTAt MTEwNDg0MWQzNzRlLzEvWF9Ub1JXSFkyY1dTS2ZiNTAtREZhYThvMG9NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS8yYzVhZjItMDkzNy00ZjQwLTg4ZTAtMTEwNDg0MWQzNzRl LzEvUjVkaTZJMlBaX3JVcWdXYUc0dEcta3pIcUpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCTh/oAwQC uXfwAwQAwWq+MA0GCSqGSIb3DQEBCwUAA4IBAQBQtxybOO0ZCJcJ/9Ca7CRqf7EB NH+6gDVpa15nFgTWSTV8kZkEYr3TjAPX/oD1FdeqB93n3vDmqZMmorW9+GCRXAEN QNo7M1LHvoD4ZSF2XMQbU6x+E2y2x9apu4aqwkQkUOzfoBSFb1OVJR6ZB3vJwyi5 +cfdvPbhS00XVqzMeg2TX8fWGhl1CYlv/X3ZPVS63KmETI6wHYsljpkUtsk2b5zr CBdydsenrqRbfF1TuXdqZPSB9jzv5e1nSthxzS/siMnbXvNvoEJYmkwLYztBuA2t JdjLuNGjRKCETckmal2jgRAqTld/dR7AlsFvoRw/gQaF+/X020jb2AZkvsMS -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:45 2026 by rpki-client