This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/XuSlumrwrkZbRH5BoN1dVcCYWOY.roa File: XuSlumrwrkZbRH5BoN1dVcCYWOY.roa (raw, json) Hash identifier: VIFbEGJSRhE0l9Itky/zbl7aHo5M6a4eOekzZMGZzxw= Subject key identifier: 5E:E4:A5:BA:6A:F0:AE:46:5B:44:7E:41:A0:DD:5D:55:C0:98:58:E6 Certificate issuer: /CN=479762e88d8f67fad4aa059a1b8b46fa4cc7a893 Certificate serial: 019B7B36240B836FCE2627C95B23763078F2 Authority key identifier: 47:97:62:E8:8D:8F:67:FA:D4:AA:05:9A:1B:8B:46:FA:4C:C7:A8:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R5di6I2PZ_rUqgWaG4tG-kzHqJM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/XuSlumrwrkZbRH5BoN1dVcCYWOY.roa Signing time: Thu 01 Jan 2026 20:18:24 +0000 ROA not before: Thu 01 Jan 2026 20:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212907 IP address blocks: 185.187.84.0/24 maxlen: 24 185.187.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.mft rsync://rpki.ripe.net/repository/DEFAULT/R5di6I2PZ_rUqgWaG4tG-kzHqJM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:24:0b:83:6f:ce:26:27:c9:5b:23:76:30:78:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=479762e88d8f67fad4aa059a1b8b46fa4cc7a893 Validity Not Before: Jan 1 20:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ee4a5ba6af0ae465b447e41a0dd5d55c09858e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:52:6a:eb:4f:f1:bd:e1:90:7b:ce:1f:75:6f: da:cc:19:f7:ec:7d:ef:8e:3c:3f:9b:96:7f:44:16: dc:01:d7:d7:60:47:69:af:57:c2:b2:87:7d:94:c2: 63:4d:5f:df:13:e8:88:38:4a:78:1e:01:65:d6:57: 74:21:64:6e:f5:de:e0:ef:70:69:9c:62:0f:8c:99: 7f:b1:de:fd:4a:9d:75:1f:af:99:0e:e0:18:1c:25: 9d:ef:80:06:c1:12:95:0f:81:84:6b:b0:2a:d9:02: 9c:69:62:57:b7:31:e7:1d:af:9e:1d:13:6e:ef:fb: cd:dc:c8:7f:1b:a9:41:45:cf:cd:02:c0:17:0f:54: a5:f4:15:c8:c8:a0:3e:28:66:7d:30:d6:23:d1:d7: e4:54:58:eb:52:50:ff:b5:fe:bf:6b:79:45:31:8e: 66:15:9e:04:b7:e9:02:4d:ca:d2:03:b2:4e:77:2e: 05:ed:06:36:c4:1e:9a:b0:22:45:81:3d:ea:33:63: 11:86:e1:c7:c1:2e:a8:0c:6a:d1:7a:d5:cc:65:39: d7:e5:c9:a8:88:64:7a:d9:67:54:14:3b:ae:61:97: 82:af:2e:77:9f:d6:9b:bb:e5:e6:46:14:a3:c4:ae: 1d:4f:28:d1:cf:a9:3c:bd:48:ba:74:57:25:19:94: 6d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:E4:A5:BA:6A:F0:AE:46:5B:44:7E:41:A0:DD:5D:55:C0:98:58:E6 X509v3 Authority Key Identifier: keyid:47:97:62:E8:8D:8F:67:FA:D4:AA:05:9A:1B:8B:46:FA:4C:C7:A8:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R5di6I2PZ_rUqgWaG4tG-kzHqJM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/XuSlumrwrkZbRH5BoN1dVcCYWOY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.187.84.0/23 Signature Algorithm: sha256WithRSAEncryption 20:4d:8a:f0:72:3b:e1:8d:e2:cd:af:c6:f1:c4:07:09:a6:dc: 15:f6:48:fb:56:2a:37:4a:f6:ad:05:98:ae:e7:54:64:38:32: e0:f6:14:71:04:97:e4:45:fe:0e:9e:c5:64:36:4f:13:0b:cc: 4a:d9:f9:84:00:db:53:e4:c7:ac:bc:f3:45:f1:b6:7e:54:6e: f5:80:c7:43:25:dc:e2:35:49:68:0b:af:b7:44:b7:c8:f9:7d: 6d:a4:93:43:af:32:8d:1d:e1:22:a9:28:06:b9:63:e5:a7:a0: 8d:ef:01:da:49:02:5b:4c:e5:ca:c7:3c:85:1a:03:77:7f:54: 81:f5:38:d9:27:5b:fa:30:31:d0:90:ad:a6:b2:da:2f:52:bc: c4:43:bb:a3:1d:ab:ae:40:3d:43:37:78:2e:ef:59:35:db:de: b1:00:59:c8:a6:3f:b9:66:03:6a:cd:cd:4c:63:96:90:bf:b7: 22:ec:0b:0c:c5:c6:a1:ed:d4:dc:82:d7:11:ec:cb:6d:49:86: 6a:af:35:29:92:17:90:54:4f:1f:42:d9:77:6d:be:a3:b3:e4: 99:99:19:34:e7:e2:7f:89:4e:fa:59:72:c7:a6:20:0f:f9:8f: 32:18:24:09:41:fe:db:55:b8:62:0b:92:cc:bc:9e:ac:04:8f: ba:80:45:80 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NiQLg2/OJifJWyN2MHjyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3OTc2MmU4OGQ4ZjY3ZmFkNGFhMDU5YTFiOGI0NmZhNGNj N2E4OTMwHhcNMjYwMTAxMjAxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZWU0YTViYTZhZjBhZTQ2NWI0NDdlNDFhMGRkNWQ1NWMwOTg1OGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFJq60/xveGQe84fdW/azBn37H3v jjw/m5Z/RBbcAdfXYEdpr1fCsod9lMJjTV/fE+iIOEp4HgFl1ld0IWRu9d7g73Bp nGIPjJl/sd79Sp11H6+ZDuAYHCWd74AGwRKVD4GEa7Aq2QKcaWJXtzHnHa+eHRNu 7/vN3Mh/G6lBRc/NAsAXD1Sl9BXIyKA+KGZ9MNYj0dfkVFjrUlD/tf6/a3lFMY5m FZ4Et+kCTcrSA7JOdy4F7QY2xB6asCJFgT3qM2MRhuHHwS6oDGrRetXMZTnX5cmo iGR62WdUFDuuYZeCry53n9abu+XmRhSjxK4dTyjRz6k8vUi6dFclGZRtrQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF7kpbpq8K5GW0R+QaDdXVXAmFjmMB8GA1UdIwQY MBaAFEeXYuiNj2f61KoFmhuLRvpMx6iTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjVkaTZJMlBaX3JVcWdXYUc0dEcta3pIcUpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8yYzVhZjItMDkzNy00ZjQwLTg4ZTAt MTEwNDg0MWQzNzRlLzEvWHVTbHVtcndya1piUkg1Qm9OMWRWY0NZV09ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS8yYzVhZjItMDkzNy00ZjQwLTg4ZTAtMTEwNDg0MWQzNzRl LzEvUjVkaTZJMlBaX3JVcWdXYUc0dEcta3pIcUpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBubtUMA0G CSqGSIb3DQEBCwUAA4IBAQAgTYrwcjvhjeLNr8bxxAcJptwV9kj7Vio3SvatBZiu 51RkODLg9hRxBJfkRf4OnsVkNk8TC8xK2fmEANtT5MesvPNF8bZ+VG71gMdDJdzi NUloC6+3RLfI+X1tpJNDrzKNHeEiqSgGuWPlp6CN7wHaSQJbTOXKxzyFGgN3f1SB 9TjZJ1v6MDHQkK2mstovUrzEQ7ujHauuQD1DN3gu71k1296xAFnIpj+5ZgNqzc1M Y5aQv7ci7AsMxcah7dTcgtcR7MttSYZqrzUpkheQVE8fQtl3bb6js+SZmRk05+J/ iU76WXLHpiAP+Y8yGCQJQf7bVbhiC5LMvJ6sBI+6gEWA -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:22 2026 by rpki-client