This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/X7eK9U4PlRZQI-Mybd4-wYNS5Bc.roa File: X7eK9U4PlRZQI-Mybd4-wYNS5Bc.roa (raw, json) Hash identifier: vCZNrQKnlEPBX/vu4m7xI1KpR04Prr3wUQp8NNxZ4c8= Subject key identifier: 5F:B7:8A:F5:4E:0F:95:16:50:23:E3:32:6D:DE:3E:C1:83:52:E4:17 Certificate issuer: /CN=1d4e959200aea8fb929158b73e8c0e69a88dc5e9 Certificate serial: 019B7E389B2A44603BE4D4E8210405FE2A08 Authority key identifier: 1D:4E:95:92:00:AE:A8:FB:92:91:58:B7:3E:8C:0E:69:A8:8D:C5:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/X7eK9U4PlRZQI-Mybd4-wYNS5Bc.roa Signing time: Fri 02 Jan 2026 10:19:57 +0000 ROA not before: Fri 02 Jan 2026 10:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62275 IP address blocks: 5.62.72.0/21 maxlen: 24 185.40.212.0/22 maxlen: 24 185.221.72.0/22 maxlen: 24 185.234.112.0/24 maxlen: 24 193.254.12.0/22 maxlen: 24 2a01:ab40::/29 maxlen: 48 2a04:8640::/29 maxlen: 29 2a0c:8000::/29 maxlen: 29 2a0c:e2c0::/29 maxlen: 29 2a10:acc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.crl rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:9b:2a:44:60:3b:e4:d4:e8:21:04:05:fe:2a:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d4e959200aea8fb929158b73e8c0e69a88dc5e9 Validity Not Before: Jan 2 10:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5fb78af54e0f95165023e3326dde3ec18352e417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5e:31:b7:90:bf:79:10:62:26:dc:4b:70:00: 8c:5d:60:a8:65:7d:87:f2:4c:04:db:72:bf:68:2f: 10:f8:9e:c3:ef:5d:1d:29:81:f0:9c:dc:c5:29:fd: b7:76:6f:fc:af:25:8c:a5:f5:68:4c:83:52:47:f0: 7c:33:a7:dd:5a:40:ae:8a:f7:fd:15:22:23:40:df: b8:1f:5b:24:bc:01:71:b9:92:1d:96:12:4e:f0:60: 33:74:d4:cd:37:63:af:79:f6:cb:e4:54:58:e9:eb: f4:8c:27:d0:77:5d:7d:e9:90:7d:86:59:e1:88:c1: 55:6c:60:4c:59:9e:4a:f2:cb:99:0d:81:9f:32:ea: 66:2c:3e:8a:09:c1:63:5d:94:38:d9:66:a2:17:58: 53:50:df:52:67:a0:96:2f:5d:a7:3c:74:83:8f:e5: ca:79:36:9f:c6:c2:c0:e7:a2:72:c6:32:5f:c7:9b: 4c:3f:e0:4f:8c:40:29:d8:6c:36:a2:a5:59:02:34: cd:89:2c:c9:04:3a:53:2b:60:28:5a:eb:b1:60:ba: 6a:4a:50:ae:c9:64:57:36:c6:cb:8b:2b:e9:91:2a: 97:92:a7:7e:fa:1b:00:9e:7d:57:73:a9:85:d6:35: 5a:ba:a5:f4:4b:10:d8:5c:96:bd:37:7f:87:3d:78: 78:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:B7:8A:F5:4E:0F:95:16:50:23:E3:32:6D:DE:3E:C1:83:52:E4:17 X509v3 Authority Key Identifier: keyid:1D:4E:95:92:00:AE:A8:FB:92:91:58:B7:3E:8C:0E:69:A8:8D:C5:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/X7eK9U4PlRZQI-Mybd4-wYNS5Bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.62.72.0/21 185.40.212.0/22 185.221.72.0/22 185.234.112.0/24 193.254.12.0/22 IPv6: 2a01:ab40::/29 2a04:8640::/29 2a0c:8000::/29 2a0c:e2c0::/29 2a10:acc0::/29 Signature Algorithm: sha256WithRSAEncryption 42:11:f7:42:f2:9d:80:7c:35:7a:6d:a9:c4:f5:73:47:39:b9: 2d:c4:9c:af:2b:88:89:e6:0b:58:de:68:9a:0c:c0:83:86:1c: e7:4b:a8:42:12:80:73:13:7c:ee:f9:12:03:b2:7b:37:dc:ee: 4a:c7:e7:e6:9b:06:d6:4a:98:38:4c:12:19:99:ca:a2:02:a9: 00:2d:81:c4:06:81:a8:59:ad:31:f1:c9:3e:dc:61:32:78:43: df:63:37:ff:ec:e1:41:8f:2f:c9:30:9d:8e:0a:76:2c:57:57: df:4d:75:9e:5d:55:68:e1:43:49:af:42:bf:c4:e7:ed:e1:50: 1e:c6:70:bd:b9:df:c8:df:a6:e3:ef:a3:d0:7d:5f:0e:43:f5: 1f:39:ba:60:5a:fe:30:12:20:37:bc:1b:b7:66:e9:75:ac:21: 57:bc:07:66:97:20:8c:51:24:83:f8:a0:92:b3:24:bd:0e:47: fe:0c:3d:dd:ed:6d:06:b8:6e:2c:13:57:26:09:9f:14:85:8e: d0:03:ec:6c:38:4c:a2:08:f7:a9:ea:a0:c0:ef:a2:36:6c:d3: b8:96:27:a4:6a:37:dd:9b:87:ce:e7:0a:cd:f5:3f:a5:2c:53: 1f:dc:d1:c5:9c:f2:94:ec:f4:15:06:b0:bc:60:79:cb:6b:ac: ae:f6:62:3b -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgISAZt+OJsqRGA75NToIQQF/ioIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNGU5NTkyMDBhZWE4ZmI5MjkxNThiNzNlOGMwZTY5YTg4 ZGM1ZTkwHhcNMjYwMTAyMTAxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmI3OGFmNTRlMGY5NTE2NTAyM2UzMzI2ZGRlM2VjMTgzNTJlNDE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq14xt5C/eRBiJtxLcACMXWCoZX2H 8kwE23K/aC8Q+J7D710dKYHwnNzFKf23dm/8ryWMpfVoTINSR/B8M6fdWkCuivf9 FSIjQN+4H1skvAFxuZIdlhJO8GAzdNTNN2OvefbL5FRY6ev0jCfQd1196ZB9hlnh iMFVbGBMWZ5K8suZDYGfMupmLD6KCcFjXZQ42WaiF1hTUN9SZ6CWL12nPHSDj+XK eTafxsLA56JyxjJfx5tMP+BPjEAp2Gw2oqVZAjTNiSzJBDpTK2AoWuuxYLpqSlCu yWRXNsbLiyvpkSqXkqd++hsAnn1Xc6mF1jVauqX0SxDYXJa9N3+HPXh44QIDAQAB o4ICTDCCAkgwHQYDVR0OBBYEFF+3ivVOD5UWUCPjMm3ePsGDUuQXMB8GA1UdIwQY MBaAFB1OlZIArqj7kpFYtz6MDmmojcXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFU2VmtnQ3VxUHVTa1ZpM1Bvd09hYWlOeGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wNGQzNjQtNTYwZi00YjM2LThmMmEt MmI1MzZjZjdiODI1LzEvWDdlSzlVNFBsUlpRSS1NeWJkNC13WU5TNUJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8wNGQzNjQtNTYwZi00YjM2LThmMmEtMmI1MzZjZjdiODI1 LzEvSFU2VmtnQ3VxUHVTa1ZpM1Bvd09hYWlOeGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGIGCCsGAQUFBwEHAQH/BFMwUTAkBAIAATAeAwQDBT5IAwQC uSjUAwQCud1IAwQAuepwAwQCwf4MMCkEAgACMCMDBQMqAatAAwUDKgSGQAMFAyoM gAADBQMqDOLAAwUDKhCswDANBgkqhkiG9w0BAQsFAAOCAQEAQhH3QvKdgHw1em2p xPVzRzm5LcScryuIieYLWN5omgzAg4Yc50uoQhKAcxN87vkSA7J7N9zuSsfn5psG 1kqYOEwSGZnKogKpAC2BxAaBqFmtMfHJPtxhMnhD32M3/+zhQY8vyTCdjgp2LFdX 3011nl1VaOFDSa9Cv8Tn7eFQHsZwvbnfyN+m4++j0H1fDkP1Hzm6YFr+MBIgN7wb t2bpdawhV7wHZpcgjFEkg/igkrMkvQ5H/gw93e1tBrhuLBNXJgmfFIWO0APsbDhM ogj3qeqgwO+iNmzTuJYnpGo33ZuHzucKzfU/pSxTH9zRxZzylOz0FQawvGB5y2us rvZiOw== -----END CERTIFICATE-----Generated at Tue Feb 10 04:27:44 2026 by rpki-client