This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/FQX8W6iD9DoiShzCKW9C2HmGZ2U.roa File: FQX8W6iD9DoiShzCKW9C2HmGZ2U.roa (raw, json) Hash identifier: UfYxk6hDu8dTwH7ejfJQD2c6gNzMV9u2bWb8a8AYgkE= Subject key identifier: 15:05:FC:5B:A8:83:F4:3A:22:4A:1C:C2:29:6F:42:D8:79:86:67:65 Certificate issuer: /CN=5c75114adc2cf8edea505957e79e89044266c24e Certificate serial: 019B78A2EE9251FAF45A423C35C87A1CFD70 Authority key identifier: 5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/FQX8W6iD9DoiShzCKW9C2HmGZ2U.roa Signing time: Thu 01 Jan 2026 08:18:22 +0000 ROA not before: Thu 01 Jan 2026 08:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197988 IP address blocks: 46.28.200.0/21 maxlen: 24 95.183.48.0/20 maxlen: 20 95.183.58.0/24 maxlen: 24 2a0c:2240::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 17:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:ee:92:51:fa:f4:5a:42:3c:35:c8:7a:1c:fd:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c75114adc2cf8edea505957e79e89044266c24e Validity Not Before: Jan 1 08:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1505fc5ba883f43a224a1cc2296f42d879866765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d1:df:43:56:fd:11:5d:01:a1:09:0e:f0:29: 65:c7:33:6d:37:de:55:a7:b9:64:be:46:d0:25:db: 7a:c4:b4:a8:10:97:6c:c4:fe:5d:48:d7:07:78:7a: 25:c7:ee:ea:70:29:76:1c:5b:79:76:2f:f3:61:1b: 6e:86:fd:0d:bf:bc:7a:35:7a:a3:1b:24:a9:90:02: 53:24:a8:59:d6:72:06:b9:71:cf:64:06:75:c0:f7: af:6d:6f:cd:38:c7:55:52:cc:f4:c2:59:e5:c0:00: 0e:30:c7:90:28:92:1a:d5:ce:e1:32:82:e1:01:fa: 17:cb:e6:ee:4e:56:b7:f3:09:46:84:de:a6:7a:79: 6e:72:fd:0e:fc:51:cb:e9:58:57:5b:ed:b4:35:d2: dd:36:ea:f8:71:53:53:3f:25:ca:f6:ad:78:41:c6: b6:52:1f:5e:ed:6d:24:c0:eb:b6:6b:22:b3:ec:1c: d4:d6:a5:1a:38:35:68:c9:11:12:44:f7:44:34:e5: 99:78:26:b7:71:3a:4f:9c:35:8d:61:82:64:ef:de: 39:0c:ef:81:8d:1c:b9:b2:e2:de:93:d6:8a:38:a1: dd:ea:8b:30:95:97:cd:28:c6:9a:f0:30:7b:1c:3c: 9f:75:80:ad:f7:92:e1:e9:23:c2:3d:11:60:49:e6: 45:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:05:FC:5B:A8:83:F4:3A:22:4A:1C:C2:29:6F:42:D8:79:86:67:65 X509v3 Authority Key Identifier: keyid:5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/FQX8W6iD9DoiShzCKW9C2HmGZ2U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.28.200.0/21 95.183.48.0/20 IPv6: 2a0c:2240::/48 Signature Algorithm: sha256WithRSAEncryption 44:b9:e1:51:8e:c3:32:c9:68:5f:0a:b8:d6:44:c6:13:bb:d0: 1a:a6:40:f3:bb:2d:37:33:df:de:a1:ed:f3:ab:27:85:0d:70: 55:f1:bc:12:dc:2e:25:0e:0d:6e:d6:cd:fd:66:8e:cf:5d:71: e1:60:5f:9a:d6:d1:26:b5:12:b9:2a:45:0b:59:b7:8c:2d:dd: 60:39:3a:1e:b0:ef:3f:0e:1e:e6:6a:11:9a:79:f8:10:5b:3f: f9:ed:fe:79:96:12:71:73:6a:00:91:4c:1e:c9:91:95:b0:9b: 0b:d2:fa:af:36:31:e0:16:ff:c0:ab:a9:1d:59:df:7f:4f:6b: 90:02:8c:e1:6e:0e:86:47:1e:23:07:20:6c:d2:f1:97:fc:a0: be:f7:6e:70:38:c1:14:aa:4b:95:8a:e2:71:5f:a9:d5:f6:39: a8:53:3b:ce:11:c4:66:ea:0f:0c:3b:33:97:c7:c0:f7:d3:25: 92:a0:2f:45:14:ef:56:10:25:06:41:72:4c:01:0c:db:33:21: fb:37:79:aa:66:39:1b:f2:65:30:96:8d:05:1b:1e:81:98:99: 4d:67:b8:cb:90:2f:fa:f5:0c:f3:20:42:bb:36:a4:e8:bd:ad: fd:03:15:b5:12:75:f0:a0:e3:6f:0c:b3:37:9f:d1:13:16:bd: 0b:c0:1d:94 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt4ou6SUfr0WkI8Nch6HP1wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNzUxMTRhZGMyY2Y4ZWRlYTUwNTk1N2U3OWU4OTA0NDI2 NmMyNGUwHhcNMjYwMTAxMDgxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTA1ZmM1YmE4ODNmNDNhMjI0YTFjYzIyOTZmNDJkODc5ODY2NzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttHfQ1b9EV0BoQkO8CllxzNtN95V p7lkvkbQJdt6xLSoEJdsxP5dSNcHeHolx+7qcCl2HFt5di/zYRtuhv0Nv7x6NXqj GySpkAJTJKhZ1nIGuXHPZAZ1wPevbW/NOMdVUsz0wlnlwAAOMMeQKJIa1c7hMoLh AfoXy+buTla38wlGhN6menlucv0O/FHL6VhXW+20NdLdNur4cVNTPyXK9q14Qca2 Uh9e7W0kwOu2ayKz7BzU1qUaODVoyRESRPdENOWZeCa3cTpPnDWNYYJk7945DO+B jRy5suLek9aKOKHd6oswlZfNKMaa8DB7HDyfdYCt95Lh6SPCPRFgSeZF0QIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFBUF/Fuog/Q6IkocwilvQth5hmdlMB8GA1UdIwQY MBaAFFx1EUrcLPjt6lBZV+eeiQRCZsJOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEhVUlN0d3MtTzNxVUZsWDU1NkpCRUptd2s0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jNjk3MDQtZGI3MS00YjFkLWI4YWMt YzVkYzA5NGRmOWM0LzEvRlFYOFc2aUQ5RG9pU2h6Q0tXOUMySG1HWjJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9jNjk3MDQtZGI3MS00YjFkLWI4YWMtYzVkYzA5NGRmOWM0 LzEvWEhVUlN0d3MtTzNxVUZsWDU1NkpCRUptd2s0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQDLhzIAwQE X7cwMA8EAgACMAkDBwAqDCJAAAAwDQYJKoZIhvcNAQELBQADggEBAES54VGOwzLJ aF8KuNZExhO70BqmQPO7LTcz396h7fOrJ4UNcFXxvBLcLiUODW7Wzf1mjs9dceFg X5rW0Sa1ErkqRQtZt4wt3WA5Oh6w7z8OHuZqEZp5+BBbP/nt/nmWEnFzagCRTB7J kZWwmwvS+q82MeAW/8CrqR1Z339Pa5ACjOFuDoZHHiMHIGzS8Zf8oL73bnA4wRSq S5WK4nFfqdX2OahTO84RxGbqDww7M5fHwPfTJZKgL0UU71YQJQZBckwBDNszIfs3 eapmORvyZTCWjQUbHoGYmU1nuMuQL/r1DPMgQrs2pOi9rf0DFbUSdfCg428Mszef 0RMWvQvAHZQ= -----END CERTIFICATE-----Generated at Wed Feb 4 03:45:17 2026 by rpki-client