This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/n_XEvDYqTMYmcDklyEEQZAapP4U.roa File: n_XEvDYqTMYmcDklyEEQZAapP4U.roa (raw, json) Hash identifier: FRPCi8BHfC2b2LCmr4vX6DGUlH6IkNK9297U+Ab7+bo= Subject key identifier: 9F:F5:C4:BC:36:2A:4C:C6:26:70:39:25:C8:41:10:64:06:A9:3F:85 Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98 Certificate serial: 019B7E38C74273868CA54E8C05E665EDDF46 Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/n_XEvDYqTMYmcDklyEEQZAapP4U.roa Signing time: Fri 02 Jan 2026 10:20:08 +0000 ROA not before: Fri 02 Jan 2026 10:20:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214025 IP address blocks: 5.56.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 19:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:c7:42:73:86:8c:a5:4e:8c:05:e6:65:ed:df:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98 Validity Not Before: Jan 2 10:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ff5c4bc362a4cc626703925c841106406a93f85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c1:60:31:08:9f:ee:a1:bc:ce:0c:cc:d6:d9: 61:24:ce:6f:bc:91:49:78:91:9e:1c:2b:3a:69:a3: f5:26:b7:46:42:9b:31:47:e2:df:09:b0:57:14:34: 33:3e:49:e9:09:38:d1:b5:90:e4:bb:d0:6d:13:3a: fa:13:6b:71:03:66:e7:6e:a0:53:31:60:3d:84:ee: 0d:05:d0:db:07:85:81:f1:a1:79:f4:7a:18:7f:80: ae:c5:c0:92:c3:53:8f:d9:28:c5:c4:1f:ef:a4:92: 8f:05:f8:04:6a:72:71:59:7f:3c:f7:93:5c:1e:9f: 13:96:0f:1d:6e:66:67:51:0a:6e:5b:00:cd:c7:0b: 6c:00:2b:c8:42:dc:b1:a7:2e:fe:78:a0:c1:2e:d2: 16:4d:05:d7:f3:5a:0e:4a:02:d3:5e:0c:76:77:09: 44:67:ed:f8:a0:6b:46:17:de:3f:99:b9:2b:1b:c8: 7e:0b:9d:3f:48:a7:1b:61:b9:78:3d:f9:5a:e3:7f: ae:63:ff:a8:21:e9:ce:20:e9:d5:99:4b:85:22:08: 44:f3:23:ca:2e:09:a2:68:aa:54:84:1f:34:5e:8d: a6:b8:5f:9d:9a:63:66:61:f6:55:20:ea:f1:2f:92: b1:a2:42:23:d5:9e:0d:e9:4e:03:86:fc:fb:df:aa: 74:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F5:C4:BC:36:2A:4C:C6:26:70:39:25:C8:41:10:64:06:A9:3F:85 X509v3 Authority Key Identifier: keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/n_XEvDYqTMYmcDklyEEQZAapP4U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.56.26.0/24 Signature Algorithm: sha256WithRSAEncryption 95:8d:87:75:bb:a4:5a:75:1c:87:3b:0a:fe:af:b4:f1:59:b6: c1:93:b4:1e:e7:b4:0e:16:00:22:30:87:47:db:4e:a3:fd:a4: 07:12:66:3d:5e:8e:f2:67:95:c4:f2:77:fb:12:c5:3d:b9:e8: 4a:dd:0b:0f:67:ee:b1:58:47:78:7d:54:20:c3:b8:46:7d:c8: e7:d9:80:46:03:31:d9:46:ab:0d:52:bc:5f:67:43:66:6b:8b: ac:4a:45:ff:8a:37:e8:41:df:28:39:da:32:d0:ff:08:06:a0: 28:74:99:7c:61:72:4b:6e:ed:bb:06:88:47:98:8b:28:d3:c3: 8d:c1:74:55:5d:b0:30:b6:94:56:28:e3:0f:d2:aa:2c:76:a5: 55:e4:1a:41:22:54:2b:f7:b5:89:6e:69:e7:9b:c7:7f:e0:f8: 4f:6d:d6:20:ea:39:4e:f7:18:4e:99:72:71:8d:7c:b6:81:81: a1:72:18:db:6a:ba:b6:24:0e:46:0e:43:c2:bc:72:30:83:3c: 4e:d3:c3:7e:ec:d7:4b:fe:48:b0:db:22:71:fd:4b:37:ec:44: 7d:45:68:ed:dd:f8:26:d5:1d:ff:71:83:66:d1:7a:d3:a8:6e: bd:22:64:e0:30:33:e2:bb:09:71:b2:99:44:06:14:68:fc:f0: 0d:9b:78:5b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OMdCc4aMpU6MBeZl7d9GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMzQ5YWYyYWYxMTEzNjFiMjlmY2ZlZjJlMDQzZDViZTc1 ZTNmOTgwHhcNMjYwMTAyMTAyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZmY1YzRiYzM2MmE0Y2M2MjY3MDM5MjVjODQxMTA2NDA2YTkzZjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28FgMQif7qG8zgzM1tlhJM5vvJFJ eJGeHCs6aaP1JrdGQpsxR+LfCbBXFDQzPknpCTjRtZDku9BtEzr6E2txA2bnbqBT MWA9hO4NBdDbB4WB8aF59HoYf4CuxcCSw1OP2SjFxB/vpJKPBfgEanJxWX8895Nc Hp8Tlg8dbmZnUQpuWwDNxwtsACvIQtyxpy7+eKDBLtIWTQXX81oOSgLTXgx2dwlE Z+34oGtGF94/mbkrG8h+C50/SKcbYbl4Pfla43+uY/+oIenOIOnVmUuFIghE8yPK LgmiaKpUhB80Xo2muF+dmmNmYfZVIOrxL5KxokIj1Z4N6U4Dhvz736p00wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ/1xLw2KkzGJnA5JchBEGQGqT+FMB8GA1UdIwQY MBaAFOs0mvKvERNhsp/P7y4EPVvnXj+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgt OWNkNjYyYmM4MzIwLzEvbl9YRXZEWXFUTVltY0RrbHlFRVFaQWFwUDRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgtOWNkNjYyYmM4MzIw LzEvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABTgaMA0G CSqGSIb3DQEBCwUAA4IBAQCVjYd1u6RadRyHOwr+r7TxWbbBk7Qe57QOFgAiMIdH 206j/aQHEmY9Xo7yZ5XE8nf7EsU9uehK3QsPZ+6xWEd4fVQgw7hGfcjn2YBGAzHZ RqsNUrxfZ0Nma4usSkX/ijfoQd8oOdoy0P8IBqAodJl8YXJLbu27BohHmIso08ON wXRVXbAwtpRWKOMP0qosdqVV5BpBIlQr97WJbmnnm8d/4PhPbdYg6jlO9xhOmXJx jXy2gYGhchjbarq2JA5GDkPCvHIwgzxO08N+7NdL/kiw2yJx/Us37ER9RWjt3fgm 1R3/cYNm0XrTqG69ImTgMDPiuwlxsplEBhRo/PANm3hb -----END CERTIFICATE-----Generated at Mon Jan 19 05:22:00 2026 by rpki-client