This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/XK4jmQahuth1ksHKvfSKZHw4O4k.roa File: XK4jmQahuth1ksHKvfSKZHw4O4k.roa (raw, json) Hash identifier: HOS4Mo0lMShnRJy+eymXqqXP6xNK5jIv2ocZGo8DAM8= Subject key identifier: 5C:AE:23:99:06:A1:BA:D8:75:92:C1:CA:BD:F4:8A:64:7C:38:3B:89 Certificate issuer: /CN=b5e9a780130b7c52b010fd7138bf0b723be207c3 Certificate serial: 019B7FF29AF4C700CBE8B32989EED58F2016 Authority key identifier: B5:E9:A7:80:13:0B:7C:52:B0:10:FD:71:38:BF:0B:72:3B:E2:07:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/temngBMLfFKwEP1xOL8LcjviB8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/XK4jmQahuth1ksHKvfSKZHw4O4k.roa Signing time: Fri 02 Jan 2026 18:22:44 +0000 ROA not before: Fri 02 Jan 2026 18:22:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215249 IP address blocks: 185.108.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.crl rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.mft rsync://rpki.ripe.net/repository/DEFAULT/temngBMLfFKwEP1xOL8LcjviB8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:9a:f4:c7:00:cb:e8:b3:29:89:ee:d5:8f:20:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5e9a780130b7c52b010fd7138bf0b723be207c3 Validity Not Before: Jan 2 18:22:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5cae239906a1bad87592c1cabdf48a647c383b89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3d:ba:7c:48:30:20:91:0e:f8:99:c1:79:c5: 86:83:0a:34:e5:f3:52:fc:a0:d6:5f:57:0e:17:10: 63:7e:a7:b8:b6:c0:1e:26:9f:f4:3d:58:58:34:27: 1a:d1:36:fe:e5:2c:79:23:1c:34:67:22:9e:bc:ee: 66:4d:5c:11:5d:a8:b6:a1:39:97:50:7e:4f:66:12: ff:ae:26:a5:95:72:fb:91:79:9c:86:23:86:d9:b3: 65:69:f8:91:47:e7:91:bc:65:22:79:d2:85:56:77: ba:8a:13:b7:c2:3a:91:3e:aa:a4:54:12:a2:5b:1d: ad:bc:d8:bf:75:9e:63:45:37:5e:3c:e6:ab:9b:a9: 38:7f:9c:57:62:2e:27:51:b1:7f:d4:32:c1:c1:dd: 00:03:60:11:6d:8c:da:d3:db:7a:ac:7f:dd:87:a1: 30:24:2e:1e:b8:41:5c:25:a3:c3:ee:ea:90:b8:52: 16:e0:8a:db:f2:14:42:91:d7:b4:26:dc:83:85:16: a2:1d:fe:db:30:5e:74:c7:5c:27:b6:03:09:b1:f7: 40:97:9b:30:48:31:1c:78:85:a4:c4:da:46:e4:b3: 90:fd:82:83:0b:39:79:3f:03:f6:4d:3b:8c:88:21: 2a:eb:71:96:e6:65:fb:fa:6b:64:d6:11:85:21:5c: 18:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:AE:23:99:06:A1:BA:D8:75:92:C1:CA:BD:F4:8A:64:7C:38:3B:89 X509v3 Authority Key Identifier: keyid:B5:E9:A7:80:13:0B:7C:52:B0:10:FD:71:38:BF:0B:72:3B:E2:07:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/temngBMLfFKwEP1xOL8LcjviB8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/XK4jmQahuth1ksHKvfSKZHw4O4k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.108.124.0/24 Signature Algorithm: sha256WithRSAEncryption 54:71:8e:a7:0a:6f:f9:8b:1e:85:dd:b9:8e:91:0a:50:0b:4e: ad:aa:74:c3:b5:a4:84:1d:9f:2b:b7:08:67:07:f6:0c:7c:28: d6:75:dd:68:1f:c4:45:19:48:46:37:ce:0d:25:b6:14:b8:ec: 9f:f2:8e:5d:34:36:bd:aa:a7:43:64:4e:55:e7:de:2d:6e:81: 24:dd:24:51:a7:87:6d:f1:0f:f0:3e:8c:07:91:a8:1d:9a:9b: 1e:7d:fb:cf:fe:1c:e8:72:2b:91:97:d6:17:7e:f5:7e:04:1d: e4:85:f8:36:2e:93:ce:b1:29:c8:9a:63:1d:5a:12:1d:95:3e: fd:8f:3a:15:fe:e8:10:f4:54:fd:0e:93:33:22:8d:1e:5e:af: 6d:85:a8:17:a2:26:b0:f3:c7:9b:5e:24:b4:ba:ef:29:8a:f2: 99:67:b6:b5:22:2e:64:9f:81:be:1d:5c:3e:e6:d8:cd:f9:1b: 74:d6:7d:6a:0e:7b:95:4e:ac:69:d2:5c:3d:fd:44:1b:4e:b1: d9:f1:c5:29:93:5d:5f:2a:65:a5:ef:24:48:69:81:11:b7:6c: 2b:c4:f1:f1:4f:57:f7:17:64:0b:62:12:d1:74:65:9f:c6:15: 24:f6:77:ef:a5:8e:41:fb:49:f8:6b:99:0f:d1:dc:db:de:97: c9:0f:ae:49 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8pr0xwDL6LMpie7VjyAWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1ZTlhNzgwMTMwYjdjNTJiMDEwZmQ3MTM4YmYwYjcyM2Jl MjA3YzMwHhcNMjYwMTAyMTgyMjQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2FlMjM5OTA2YTFiYWQ4NzU5MmMxY2FiZGY0OGE2NDdjMzgzYjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArT26fEgwIJEO+JnBecWGgwo05fNS /KDWX1cOFxBjfqe4tsAeJp/0PVhYNCca0Tb+5Sx5Ixw0ZyKevO5mTVwRXai2oTmX UH5PZhL/riallXL7kXmchiOG2bNlafiRR+eRvGUiedKFVne6ihO3wjqRPqqkVBKi Wx2tvNi/dZ5jRTdePOarm6k4f5xXYi4nUbF/1DLBwd0AA2ARbYza09t6rH/dh6Ew JC4euEFcJaPD7uqQuFIW4Irb8hRCkde0JtyDhRaiHf7bMF50x1wntgMJsfdAl5sw SDEceIWkxNpG5LOQ/YKDCzl5PwP2TTuMiCEq63GW5mX7+mtk1hGFIVwYzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFyuI5kGobrYdZLByr30imR8ODuJMB8GA1UdIwQY MBaAFLXpp4ATC3xSsBD9cTi/C3I74gfDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGVtbmdCTUxmRkt3RVAxeE9MOExjanZpQjhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8zYjAwMDktZjE1Mi00ZDljLWFmOTYt YTVlNWQwMDg0NzAxLzEvWEs0am1RYWh1dGgxa3NIS3ZmU0taSHc0TzRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My8zYjAwMDktZjE1Mi00ZDljLWFmOTYtYTVlNWQwMDg0NzAx LzEvdGVtbmdCTUxmRkt3RVAxeE9MOExjanZpQjhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWx8MA0G CSqGSIb3DQEBCwUAA4IBAQBUcY6nCm/5ix6F3bmOkQpQC06tqnTDtaSEHZ8rtwhn B/YMfCjWdd1oH8RFGUhGN84NJbYUuOyf8o5dNDa9qqdDZE5V594tboEk3SRRp4dt 8Q/wPowHkagdmpseffvP/hzociuRl9YXfvV+BB3khfg2LpPOsSnImmMdWhIdlT79 jzoV/ugQ9FT9DpMzIo0eXq9thagXoiaw88ebXiS0uu8pivKZZ7a1Ii5kn4G+HVw+ 5tjN+Rt01n1qDnuVTqxp0lw9/UQbTrHZ8cUpk11fKmWl7yRIaYERt2wrxPHxT1f3 F2QLYhLRdGWfxhUk9nfvpY5B+0n4a5kP0dzb3pfJD65J -----END CERTIFICATE-----Generated at Tue Feb 10 04:16:44 2026 by rpki-client