This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e5f5f8-1ca1-4234-9a3c-ecceeee110a4/1/xX0KGIvLQes55K6JPglZPPnxQiA.roa File: xX0KGIvLQes55K6JPglZPPnxQiA.roa (raw, json) Hash identifier: XeKa8aHFKZ1r7SOoTQMHPVlkjUA/yur8nQajCi/GwGA= Subject key identifier: C5:7D:0A:18:8B:CB:41:EB:39:E4:AE:89:3E:09:59:3C:F9:F1:42:20 Certificate issuer: /CN=cae069b663ee25fd13559101dac1d5032b9fd66e Certificate serial: 019B78343DFCF570131B4F3FDCC74D32259B Authority key identifier: CA:E0:69:B6:63:EE:25:FD:13:55:91:01:DA:C1:D5:03:2B:9F:D6:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yuBptmPuJf0TVZEB2sHVAyuf1m4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e5f5f8-1ca1-4234-9a3c-ecceeee110a4/1/xX0KGIvLQes55K6JPglZPPnxQiA.roa Signing time: Thu 01 Jan 2026 06:17:28 +0000 ROA not before: Thu 01 Jan 2026 06:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56346 IP address blocks: 185.131.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/e5f5f8-1ca1-4234-9a3c-ecceeee110a4/1/yuBptmPuJf0TVZEB2sHVAyuf1m4.crl rsync://rpki.ripe.net/repository/DEFAULT/71/e5f5f8-1ca1-4234-9a3c-ecceeee110a4/1/yuBptmPuJf0TVZEB2sHVAyuf1m4.mft rsync://rpki.ripe.net/repository/DEFAULT/yuBptmPuJf0TVZEB2sHVAyuf1m4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:3d:fc:f5:70:13:1b:4f:3f:dc:c7:4d:32:25:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cae069b663ee25fd13559101dac1d5032b9fd66e Validity Not Before: Jan 1 06:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c57d0a188bcb41eb39e4ae893e09593cf9f14220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6e:91:d5:50:bd:24:ed:11:d3:45:c1:43:88: 95:68:ab:89:bf:6e:f6:e6:06:b8:9b:5b:35:25:61: c5:02:53:b9:97:6c:e7:f1:62:f8:5b:34:76:07:6a: d7:52:a0:3d:c8:8f:e8:c7:cc:54:62:75:39:d3:c3: 03:30:3d:99:8c:b0:f8:70:2c:d8:47:fd:b9:43:3b: 84:18:39:07:8d:45:9c:71:99:32:67:79:af:f7:ca: be:75:26:a5:96:c4:0f:36:50:47:80:dc:43:9a:a8: c1:5a:c6:28:c0:cd:e6:0e:9d:58:d9:8b:2b:ef:f5: 55:40:97:86:5c:be:0b:f4:12:3d:45:6a:3f:ec:0c: 12:28:3d:42:c6:11:94:3f:69:7d:a1:9c:30:47:6e: 08:a6:20:f8:9e:3d:b1:0b:79:8a:5c:96:89:7a:95: e5:ee:c0:f0:a6:90:c5:f7:47:61:26:5c:e7:f4:36: 43:5f:e5:4d:6c:6d:dd:e1:b1:ac:0d:99:eb:ad:65: ca:27:b9:f2:84:c4:f6:f0:23:f3:f0:df:da:a4:44: fd:d1:28:5a:89:fb:67:0b:ca:ad:bb:c8:6f:15:2a: 24:09:4b:84:fb:a9:a8:0b:f8:db:40:7d:97:89:13: e7:9b:11:5b:db:f5:08:f1:77:71:bc:30:cf:5c:5e: 10:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:7D:0A:18:8B:CB:41:EB:39:E4:AE:89:3E:09:59:3C:F9:F1:42:20 X509v3 Authority Key Identifier: keyid:CA:E0:69:B6:63:EE:25:FD:13:55:91:01:DA:C1:D5:03:2B:9F:D6:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuBptmPuJf0TVZEB2sHVAyuf1m4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e5f5f8-1ca1-4234-9a3c-ecceeee110a4/1/xX0KGIvLQes55K6JPglZPPnxQiA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e5f5f8-1ca1-4234-9a3c-ecceeee110a4/1/yuBptmPuJf0TVZEB2sHVAyuf1m4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.131.252.0/22 Signature Algorithm: sha256WithRSAEncryption 69:7a:f6:4a:66:21:4e:96:c5:22:29:1f:28:48:3f:62:74:28: 03:29:03:73:6c:8b:e5:0d:42:23:77:2a:ab:95:0b:50:cb:65: 99:cc:04:f3:77:bd:ab:05:17:90:50:15:c3:d1:a1:c3:2b:b2: 24:35:6f:2d:77:52:59:67:1d:d7:e0:67:bb:8c:f5:33:a4:42: ce:a7:1d:b6:7b:21:53:5c:c4:48:6b:36:d8:e4:49:43:65:64: ce:0c:dd:4f:6c:1b:35:22:43:1d:8e:08:20:60:81:7f:98:76: ce:4a:1a:29:88:1a:65:cf:35:bb:01:6e:41:d2:e1:5f:03:9f: de:cb:3f:27:f0:0f:41:d3:1b:1e:27:f1:05:79:b9:48:96:35: d7:f1:ad:e9:f5:06:ae:cf:5d:fb:34:07:e9:9b:fe:42:e2:5f: 6f:42:4f:79:26:da:bb:f1:73:2b:bd:3b:6e:28:8a:2b:db:bb: 50:d6:71:86:64:1f:d3:f1:2f:54:43:6d:3b:13:78:07:30:b4: a7:22:e6:ba:43:40:91:4e:8f:59:72:dc:5c:c0:7f:52:9e:97: 81:d7:a7:bf:ea:3a:87:5a:de:c4:8c:30:8b:a5:24:f1:80:53: 39:a2:f9:5b:46:ce:40:a5:b1:a4:f2:9c:71:0c:7a:6e:a6:f5: fc:94:b5:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ND389XATG08/3MdNMiWbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhZTA2OWI2NjNlZTI1ZmQxMzU1OTEwMWRhYzFkNTAzMmI5 ZmQ2NmUwHhcNMjYwMTAxMDYxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTdkMGExODhiY2I0MWViMzllNGFlODkzZTA5NTkzY2Y5ZjE0MjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApG6R1VC9JO0R00XBQ4iVaKuJv272 5ga4m1s1JWHFAlO5l2zn8WL4WzR2B2rXUqA9yI/ox8xUYnU508MDMD2ZjLD4cCzY R/25QzuEGDkHjUWccZkyZ3mv98q+dSallsQPNlBHgNxDmqjBWsYowM3mDp1Y2Ysr 7/VVQJeGXL4L9BI9RWo/7AwSKD1CxhGUP2l9oZwwR24IpiD4nj2xC3mKXJaJepXl 7sDwppDF90dhJlzn9DZDX+VNbG3d4bGsDZnrrWXKJ7nyhMT28CPz8N/apET90Sha iftnC8qtu8hvFSokCUuE+6moC/jbQH2XiRPnmxFb2/UI8XdxvDDPXF4QTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMV9ChiLy0HrOeSuiT4JWTz58UIgMB8GA1UdIwQY MBaAFMrgabZj7iX9E1WRAdrB1QMrn9ZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXVCcHRtUHVKZjBUVlpFQjJzSFZBeXVmMW00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9lNWY1ZjgtMWNhMS00MjM0LTlhM2Mt ZWNjZWVlZTExMGE0LzEveFgwS0dJdkxRZXM1NUs2SlBnbFpQUG54UWlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9lNWY1ZjgtMWNhMS00MjM0LTlhM2MtZWNjZWVlZTExMGE0 LzEveXVCcHRtUHVKZjBUVlpFQjJzSFZBeXVmMW00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYP8MA0G CSqGSIb3DQEBCwUAA4IBAQBpevZKZiFOlsUiKR8oSD9idCgDKQNzbIvlDUIjdyqr lQtQy2WZzATzd72rBReQUBXD0aHDK7IkNW8td1JZZx3X4Ge7jPUzpELOpx22eyFT XMRIazbY5ElDZWTODN1PbBs1IkMdjgggYIF/mHbOShopiBplzzW7AW5B0uFfA5/e yz8n8A9B0xseJ/EFeblIljXX8a3p9Qauz137NAfpm/5C4l9vQk95Jtq78XMrvTtu KIor27tQ1nGGZB/T8S9UQ207E3gHMLSnIua6Q0CRTo9ZctxcwH9SnpeB16e/6jqH Wt7EjDCLpSTxgFM5ovlbRs5ApbGk8pxxDHpupvX8lLWs -----END CERTIFICATE-----Generated at Tue Feb 10 04:26:50 2026 by rpki-client