This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/X1AMpALcXqAbWZTLQdVQDPCOaVQ.roa File: X1AMpALcXqAbWZTLQdVQDPCOaVQ.roa (raw, json) Hash identifier: SigMHPmGWyXozax3MHPbaNs+MpPR14/hwXpyD5vkCnc= Subject key identifier: 5F:50:0C:A4:02:DC:5E:A0:1B:59:94:CB:41:D5:50:0C:F0:8E:69:54 Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528 Certificate serial: 019B7834436B93AD14B7B7D612F920413816 Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/X1AMpALcXqAbWZTLQdVQDPCOaVQ.roa Signing time: Thu 01 Jan 2026 06:17:29 +0000 ROA not before: Thu 01 Jan 2026 06:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47147 IP address blocks: 144.208.208.0/22 maxlen: 32 213.227.190.0/24 maxlen: 32 2a00:11c0:47::/48 maxlen: 48 2a00:11c0:48::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.mft rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:43:6b:93:ad:14:b7:b7:d6:12:f9:20:41:38:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528 Validity Not Before: Jan 1 06:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f500ca402dc5ea01b5994cb41d5500cf08e6954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7a:05:4c:0b:de:e2:fa:9e:5b:b9:5e:46:19: b3:ad:02:ab:5d:e1:5b:30:65:d0:29:03:62:f0:5e: 60:0e:5c:46:e5:5b:a6:01:59:a7:26:2d:ea:af:ad: 8e:1a:9d:d6:d1:e4:e4:72:be:f0:4e:66:d1:c2:79: b9:e5:70:f1:8d:29:f1:a5:5a:33:91:8f:fb:20:3e: 9a:c3:21:3c:75:97:50:4a:4c:7e:ee:fe:7d:96:33: 75:8d:b6:53:03:bf:d8:db:d0:52:d4:2f:22:fe:f8: 18:fc:46:56:39:b8:e0:e0:15:3c:a7:f5:91:db:7c: c3:7d:a2:ef:99:18:f1:14:67:2c:f9:3d:40:7c:34: 58:0f:5d:18:3b:04:95:c3:1a:65:06:66:f4:6f:29: a9:0f:64:9f:09:9b:9d:b1:a3:6f:56:f3:6b:1d:3e: bd:20:fa:32:3f:27:33:25:82:91:d4:62:50:76:68: e5:7d:75:47:ce:f1:96:d9:b9:d1:d4:9f:7c:85:ed: e9:3f:19:b3:52:a8:85:2a:4a:32:5d:6f:12:ab:9f: cc:2b:a7:b2:b7:30:b2:4f:b2:09:f5:c2:85:e5:20: ce:b1:06:54:60:07:f7:be:98:15:22:e2:b4:3f:1d: 7a:f5:b8:a5:8c:6f:5d:50:5e:d9:9d:8b:db:a2:0c: 32:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:50:0C:A4:02:DC:5E:A0:1B:59:94:CB:41:D5:50:0C:F0:8E:69:54 X509v3 Authority Key Identifier: keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/X1AMpALcXqAbWZTLQdVQDPCOaVQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.208.208.0/22 213.227.190.0/24 IPv6: 2a00:11c0:47::-2a00:11c0:48:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 61:df:84:58:f8:bc:65:35:e2:1f:e9:6a:5d:7d:9e:75:18:b0: 34:d3:2b:3f:75:d9:15:ff:90:ea:c5:29:17:ec:c3:fd:e7:fa: 0b:4e:62:18:39:37:fd:e4:07:58:7d:59:5b:c4:d2:fb:ee:89: fe:2a:3b:1d:70:c6:ec:ee:e2:d1:c3:3f:65:ef:07:ca:9c:2e: 2f:63:42:d3:49:d5:44:db:8d:ba:b4:35:e3:bc:52:b0:cf:2a: 8d:e2:59:74:f7:01:73:5d:74:fb:3a:c1:59:4f:d3:f3:2d:4d: d3:9f:94:83:52:6a:8c:21:c9:6c:42:d8:77:f6:ab:9a:f7:be: 32:be:4b:a7:0d:ad:8b:1b:2b:0f:53:60:ab:a6:f9:17:16:db: 36:12:b6:69:72:c6:68:52:49:bd:22:8c:ee:53:c2:06:83:99: a3:50:9e:2f:dd:b0:47:0e:75:c7:a5:ad:e0:c4:0e:1c:a7:29: fd:54:31:46:51:d7:98:c5:75:33:44:7d:43:eb:93:56:50:2f: 5f:24:e4:cc:84:27:56:3a:42:08:64:b7:b8:ea:c3:c2:c2:9c: 00:ee:51:32:b7:15:bc:0d:0a:c4:74:4d:42:f3:1c:e6:9e:71: 12:e6:2f:dd:6d:a4:5c:c1:97:c9:1a:c1:82:1c:98:99:56:78: 9d:27:8a:06 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt4NENrk60Ut7fWEvkgQTgWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MzlhZmViYWNlODk5YThlZTBiYjRmOGJiNDQ3NWZlMjQ3 YTE1MjgwHhcNMjYwMTAxMDYxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjUwMGNhNDAyZGM1ZWEwMWI1OTk0Y2I0MWQ1NTAwY2YwOGU2OTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHoFTAve4vqeW7leRhmzrQKrXeFb MGXQKQNi8F5gDlxG5VumAVmnJi3qr62OGp3W0eTkcr7wTmbRwnm55XDxjSnxpVoz kY/7ID6awyE8dZdQSkx+7v59ljN1jbZTA7/Y29BS1C8i/vgY/EZWObjg4BU8p/WR 23zDfaLvmRjxFGcs+T1AfDRYD10YOwSVwxplBmb0bympD2SfCZudsaNvVvNrHT69 IPoyPyczJYKR1GJQdmjlfXVHzvGW2bnR1J98he3pPxmzUqiFKkoyXW8Sq5/MK6ey tzCyT7IJ9cKF5SDOsQZUYAf3vpgVIuK0Px169biljG9dUF7ZnYvbogwy9wIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFF9QDKQC3F6gG1mUy0HVUAzwjmlUMB8GA1UdIwQY MBaAFKU5r+us6Jmo7gu0+LtEdf4kehUoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFRtdjY2em9tYWp1QzdUNHUwUjFfaVI2RlNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85OGM0ZWUtMmY1OS00NWE3LWFkYjYt NzQxMzk1OTEzMTJlLzEvWDFBTXBBTGNYcUFiV1pUTFFkVlFEUENPYVZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS85OGM0ZWUtMmY1OS00NWE3LWFkYjYtNzQxMzk1OTEzMTJl LzEvcFRtdjY2em9tYWp1QzdUNHUwUjFfaVI2RlNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDASBAIAATAMAwQCkNDQAwQA 1eO+MBoEAgACMBQwEgMHACoAEcAARwMHACoAEcAASDANBgkqhkiG9w0BAQsFAAOC AQEAYd+EWPi8ZTXiH+lqXX2edRiwNNMrP3XZFf+Q6sUpF+zD/ef6C05iGDk3/eQH WH1ZW8TS++6J/io7HXDG7O7i0cM/Ze8HypwuL2NC00nVRNuNurQ147xSsM8qjeJZ dPcBc110+zrBWU/T8y1N05+Ug1JqjCHJbELYd/armve+Mr5Lpw2tixsrD1Ngq6b5 FxbbNhK2aXLGaFJJvSKM7lPCBoOZo1CeL92wRw51x6Wt4MQOHKcp/VQxRlHXmMV1 M0R9Q+uTVlAvXyTkzIQnVjpCCGS3uOrDwsKcAO5RMrcVvA0KxHRNQvMc5p5xEuYv 3W2kXMGXyRrBghyYmVZ4nSeKBg== -----END CERTIFICATE-----Generated at Mon Jan 26 11:04:20 2026 by rpki-client