This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Xxo401mrzgdV9Ps0_uxPZ1gBGco.roa File: Xxo401mrzgdV9Ps0_uxPZ1gBGco.roa (raw, json) Hash identifier: PHpQ8fvCDLJieSqrmlvw8kbcbLlVWETeWocS6KUBmwo= Subject key identifier: 5F:1A:38:D3:59:AB:CE:07:55:F4:FB:34:FE:EC:4F:67:58:01:19:CA Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Certificate serial: 019B76EAEC1D3E983DA0D39B9655EEB98FBA Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Xxo401mrzgdV9Ps0_uxPZ1gBGco.roa Signing time: Thu 01 Jan 2026 00:17:45 +0000 ROA not before: Thu 01 Jan 2026 00:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42532 IP address blocks: 5.34.208.0/21 maxlen: 24 82.115.4.0/22 maxlen: 24 178.173.248.0/21 maxlen: 24 188.253.16.0/21 maxlen: 24 188.253.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:ec:1d:3e:98:3d:a0:d3:9b:96:55:ee:b9:8f:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Validity Not Before: Jan 1 00:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f1a38d359abce0755f4fb34feec4f67580119ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:09:4a:78:90:04:df:61:39:df:d1:d8:7e:e7: 52:91:0c:3c:f1:86:3d:df:04:9a:95:51:63:9a:f3: 0e:06:83:a0:6d:63:54:71:b2:79:db:b7:48:24:b1: c7:70:17:cc:18:23:2c:fb:a2:36:dd:c7:9a:16:d4: e7:fc:44:41:6c:d4:b2:b7:00:88:03:68:26:aa:e9: dd:60:71:83:ef:b8:9b:41:60:33:77:54:f8:cb:95: 90:a2:82:e0:1a:7e:a2:01:9c:05:d0:60:04:90:79: 65:2a:45:e2:b7:c4:74:e1:48:28:48:67:56:55:62: fc:6c:8a:da:ba:a8:b5:1b:71:ad:37:2f:92:6f:5c: e3:a5:ae:a0:af:05:f6:9f:4b:2e:64:68:a9:ec:32: ae:83:b5:d7:37:ca:49:d2:e7:24:9f:ef:24:0e:94: 87:d0:4a:03:05:a7:53:53:a0:78:ee:60:74:71:d5: 79:26:80:78:76:78:d5:6e:c2:a5:b9:73:11:73:39: f1:28:ba:f6:76:f1:5e:0e:79:33:8e:fc:2f:04:06: a9:7e:37:45:b1:87:38:44:3f:90:bf:db:45:b6:91: 69:0d:f2:55:2c:17:25:b1:04:5f:7a:4f:8d:55:90: 32:92:ab:cd:ec:5b:89:43:96:9b:65:81:ea:22:5f: de:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:1A:38:D3:59:AB:CE:07:55:F4:FB:34:FE:EC:4F:67:58:01:19:CA X509v3 Authority Key Identifier: keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Xxo401mrzgdV9Ps0_uxPZ1gBGco.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.34.208.0/21 82.115.4.0/22 178.173.248.0/21 188.253.16.0-188.253.27.255 Signature Algorithm: sha256WithRSAEncryption 2e:6a:be:28:ec:49:b0:a8:6d:44:c4:46:34:c4:22:3b:4e:d7: 72:88:92:21:01:1b:7d:3a:d9:73:1e:72:32:eb:57:de:51:37: b7:50:01:17:a7:94:82:ec:76:4d:29:4b:54:f8:a9:bf:cd:c3: 70:75:12:d8:80:b8:2f:a3:15:03:42:3d:24:93:3c:f8:b1:f5: 75:32:87:59:c7:53:87:de:4e:e2:a2:35:fd:86:53:18:64:fc: 3d:63:e8:e0:71:9c:67:bd:6a:2b:73:81:ee:9d:11:2a:37:27: 07:e1:90:43:c0:c3:fd:13:c2:7b:c8:ba:6b:05:9e:75:9c:4f: 56:bb:25:e7:d0:46:e2:ce:90:0d:0c:6a:af:7d:3b:3d:38:86: df:0e:93:9b:4c:b5:7a:d9:95:8a:58:5b:bd:14:44:d4:90:86: f7:e2:9c:e5:93:89:32:37:d3:e8:98:32:fb:08:56:83:25:be: b8:cd:e6:3c:96:55:71:84:00:e7:23:0a:04:3f:b7:cd:f8:45: 46:98:5e:ff:c7:4b:d0:03:06:49:4d:56:f6:44:27:50:82:21: 81:c6:ea:e7:ab:d4:10:fc:20:cb:d5:34:6d:b3:13:1e:44:5a: 61:a5:e4:97:ad:bb:29:ef:68:ae:bf:08:84:8d:d9:b3:b5:b9: f5:e7:70:ee -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt26uwdPpg9oNObllXuuY+6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2 NWE0NzgwHhcNMjYwMTAxMDAxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjFhMzhkMzU5YWJjZTA3NTVmNGZiMzRmZWVjNGY2NzU4MDExOWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQlKeJAE32E539HYfudSkQw88YY9 3wSalVFjmvMOBoOgbWNUcbJ527dIJLHHcBfMGCMs+6I23ceaFtTn/ERBbNSytwCI A2gmqundYHGD77ibQWAzd1T4y5WQooLgGn6iAZwF0GAEkHllKkXit8R04UgoSGdW VWL8bIrauqi1G3GtNy+Sb1zjpa6grwX2n0suZGip7DKug7XXN8pJ0uckn+8kDpSH 0EoDBadTU6B47mB0cdV5JoB4dnjVbsKluXMRcznxKLr2dvFeDnkzjvwvBAapfjdF sYc4RD+Qv9tFtpFpDfJVLBclsQRfek+NVZAykqvN7FuJQ5abZYHqIl/epQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFF8aONNZq84HVfT7NP7sT2dYARnKMB8GA1UdIwQY MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt ZmUwNjU5MTc2YTU2LzEvWHhvNDAxbXJ6Z2RWOVBzMF91eFBaMWdCR2NvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2 LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQDBSLQAwQC UnMEAwQDsq34MAwDBAS8/RADBAK8/RgwDQYJKoZIhvcNAQELBQADggEBAC5qvijs SbCobUTERjTEIjtO13KIkiEBG3062XMecjLrV95RN7dQARenlILsdk0pS1T4qb/N w3B1EtiAuC+jFQNCPSSTPPix9XUyh1nHU4feTuKiNf2GUxhk/D1j6OBxnGe9aitz ge6dESo3JwfhkEPAw/0TwnvIumsFnnWcT1a7JefQRuLOkA0Maq99Oz04ht8Ok5tM tXrZlYpYW70URNSQhvfinOWTiTI30+iYMvsIVoMlvrjN5jyWVXGEAOcjCgQ/t834 RUaYXv/HS9ADBklNVvZEJ1CCIYHG6uer1BD8IMvVNG2zEx5EWmGl5JetuynvaK6/ CISN2bO1ufXncO4= -----END CERTIFICATE-----Generated at Wed Jan 21 14:47:14 2026 by rpki-client