This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/sXfD3GZEDhtnNXynD7Nankbaowk.roa File: sXfD3GZEDhtnNXynD7Nankbaowk.roa (raw, json) Hash identifier: YcBK9LcuHzUfe+SoI1z9LJ0sH4FuDfMNMwbWld9O/UI= Subject key identifier: B1:77:C3:DC:66:44:0E:1B:67:35:7C:A7:0F:B3:5A:9E:46:DA:A3:09 Certificate issuer: /CN=af88fde6fadbb6b2c1db6fe41f829d1f2015be0b Certificate serial: 019B7C11281CDB3F48F675BF14056924CB09 Authority key identifier: AF:88:FD:E6:FA:DB:B6:B2:C1:DB:6F:E4:1F:82:9D:1F:20:15:BE:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/sXfD3GZEDhtnNXynD7Nankbaowk.roa Signing time: Fri 02 Jan 2026 00:17:37 +0000 ROA not before: Fri 02 Jan 2026 00:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205282 IP address blocks: 5.181.161.0/24 maxlen: 24 194.48.203.0/24 maxlen: 24 213.130.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.crl rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:28:1c:db:3f:48:f6:75:bf:14:05:69:24:cb:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af88fde6fadbb6b2c1db6fe41f829d1f2015be0b Validity Not Before: Jan 2 00:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b177c3dc66440e1b67357ca70fb35a9e46daa309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:15:57:8b:bc:59:6d:ec:16:b3:82:d2:28:b0: 11:91:44:71:f3:6c:5e:82:c3:0e:6e:5e:73:8d:64: f7:da:17:7b:d5:d0:aa:43:0d:90:48:68:ad:d1:fd: e1:50:8f:07:fc:3f:46:c7:7e:ef:cf:35:48:38:7e: e9:4f:f0:8a:4b:22:c3:ff:0c:3d:d5:b2:a2:ee:06: 75:18:b1:9e:3a:84:18:2d:6f:6b:00:c6:0a:44:00: d0:8b:14:55:2f:35:9b:57:cd:4f:c7:46:73:24:12: 88:c5:91:5f:83:ba:04:b8:a7:93:f0:de:34:4b:3a: 36:91:0f:72:c0:4d:69:b9:be:60:3d:d1:72:79:c8: 8b:3c:de:52:a6:21:54:57:42:19:88:29:b6:30:9e: 07:ab:c3:5b:e4:6c:0b:d2:6f:ad:e1:0a:37:1f:4f: 7e:1b:d9:1e:13:3f:8a:af:02:a2:3f:bf:fe:ed:99: 60:f6:79:14:57:ee:56:97:0b:a1:93:83:23:7c:f4: 22:64:81:a3:0a:10:e3:b4:75:cf:57:f6:ac:af:c2: 5f:f3:a2:fd:7c:59:37:9c:de:ef:93:32:49:4c:9d: 75:d7:85:eb:67:03:4c:ae:35:8c:eb:70:a0:77:68: 48:e6:90:c3:62:6b:f9:4a:f4:44:38:cb:91:8d:d2: 85:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:77:C3:DC:66:44:0E:1B:67:35:7C:A7:0F:B3:5A:9E:46:DA:A3:09 X509v3 Authority Key Identifier: keyid:AF:88:FD:E6:FA:DB:B6:B2:C1:DB:6F:E4:1F:82:9D:1F:20:15:BE:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/sXfD3GZEDhtnNXynD7Nankbaowk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.161.0/24 194.48.203.0/24 213.130.74.0/24 Signature Algorithm: sha256WithRSAEncryption 87:1c:3a:fc:97:7c:a8:a7:04:fa:e7:05:10:a6:b6:2d:75:fe: f7:0d:ab:f8:90:98:e4:3e:3e:f1:47:95:0f:bd:08:97:af:e1: 4f:88:60:79:2c:8b:13:7e:3b:cc:d5:4f:6a:76:00:02:43:ac: 6b:1b:9d:e1:c4:7b:69:d5:91:35:83:10:86:01:85:5f:5b:83: 26:c0:49:31:52:09:e5:46:15:0d:7c:42:08:23:9c:ca:14:32: eb:62:19:ef:33:0d:9d:8f:a9:a8:db:d6:98:38:04:a8:3f:b1: e6:06:7e:31:de:ca:ae:59:5f:19:41:97:bb:88:e3:8a:9c:37: 0c:a0:6f:e4:cf:3e:8f:27:1d:f5:71:05:56:a2:92:9a:83:c2: 82:4d:e4:fe:48:4c:89:d3:03:11:0a:6d:a2:ac:1f:22:f6:0a: 31:3c:10:c7:82:8e:e2:3d:b6:66:a1:8c:1e:39:54:96:08:38: 78:d3:e0:ed:29:e7:eb:05:06:ac:d7:3b:f8:88:94:fb:91:b2: 5a:63:8b:49:42:49:18:46:a6:25:6a:35:27:2c:a3:ac:8f:64: c8:d9:06:bc:8a:18:e6:16:25:c8:47:ab:47:17:0b:46:5c:28: 9f:5e:27:32:85:fd:f8:e6:fd:92:e0:65:fd:f3:ff:89:b6:58: 6e:bb:b2:8b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8ESgc2z9I9nW/FAVpJMsJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmODhmZGU2ZmFkYmI2YjJjMWRiNmZlNDFmODI5ZDFmMjAx NWJlMGIwHhcNMjYwMTAyMDAxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTc3YzNkYzY2NDQwZTFiNjczNTdjYTcwZmIzNWE5ZTQ2ZGFhMzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xVXi7xZbewWs4LSKLARkURx82xe gsMObl5zjWT32hd71dCqQw2QSGit0f3hUI8H/D9Gx37vzzVIOH7pT/CKSyLD/ww9 1bKi7gZ1GLGeOoQYLW9rAMYKRADQixRVLzWbV81Px0ZzJBKIxZFfg7oEuKeT8N40 Szo2kQ9ywE1pub5gPdFyeciLPN5SpiFUV0IZiCm2MJ4Hq8Nb5GwL0m+t4Qo3H09+ G9keEz+KrwKiP7/+7Zlg9nkUV+5Wlwuhk4MjfPQiZIGjChDjtHXPV/asr8Jf86L9 fFk3nN7vkzJJTJ1114XrZwNMrjWM63Cgd2hI5pDDYmv5SvREOMuRjdKF7QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLF3w9xmRA4bZzV8pw+zWp5G2qMJMB8GA1UdIwQY MBaAFK+I/eb627aywdtv5B+CnR8gFb4LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjRqOTV2cmJ0ckxCMjJfa0g0S2RIeUFWdmdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9mZDU5NmEtM2Y1NC00ZTA2LTg2MjAt NmUwZDIxM2Y0ODRhLzEvc1hmRDNHWkVEaHRuTlh5bkQ3TmFua2Jhb3drLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9mZDU5NmEtM2Y1NC00ZTA2LTg2MjAtNmUwZDIxM2Y0ODRh LzEvcjRqOTV2cmJ0ckxCMjJfa0g0S2RIeUFWdmdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABbWhAwQA wjDLAwQA1YJKMA0GCSqGSIb3DQEBCwUAA4IBAQCHHDr8l3yopwT65wUQprYtdf73 Dav4kJjkPj7xR5UPvQiXr+FPiGB5LIsTfjvM1U9qdgACQ6xrG53hxHtp1ZE1gxCG AYVfW4MmwEkxUgnlRhUNfEIII5zKFDLrYhnvMw2dj6mo29aYOASoP7HmBn4x3squ WV8ZQZe7iOOKnDcMoG/kzz6PJx31cQVWopKag8KCTeT+SEyJ0wMRCm2irB8i9gox PBDHgo7iPbZmoYweOVSWCDh40+DtKefrBQas1zv4iJT7kbJaY4tJQkkYRqYlajUn LKOsj2TI2Qa8ihjmFiXIR6tHFwtGXCifXicyhf345v2S4GX98/+Jtlhuu7KL -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:06 2026 by rpki-client