This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/XlhDxzIhUvinzN4Wshw_Pb0yfKo.roa File: XlhDxzIhUvinzN4Wshw_Pb0yfKo.roa (raw, json) Hash identifier: lG2+m8ftby0SMpU+m+8zptGeDfMbsZpbhzdVyHzX6eM= Subject key identifier: 5E:58:43:C7:32:21:52:F8:A7:CC:DE:16:B2:1C:3F:3D:BD:32:7C:AA Certificate issuer: /CN=1395a3a8fc8dd34dd6f3c950c661f4b2127175a5 Certificate serial: 019B79ECFA62E3B38D688C03F6B7CD20989D Authority key identifier: 13:95:A3:A8:FC:8D:D3:4D:D6:F3:C9:50:C6:61:F4:B2:12:71:75:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E5WjqPyN003W88lQxmH0shJxdaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/XlhDxzIhUvinzN4Wshw_Pb0yfKo.roa Signing time: Thu 01 Jan 2026 14:18:52 +0000 ROA not before: Thu 01 Jan 2026 14:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58253 IP address blocks: 185.150.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.crl rsync://rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.mft rsync://rpki.ripe.net/repository/DEFAULT/E5WjqPyN003W88lQxmH0shJxdaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:fa:62:e3:b3:8d:68:8c:03:f6:b7:cd:20:98:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1395a3a8fc8dd34dd6f3c950c661f4b2127175a5 Validity Not Before: Jan 1 14:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e5843c7322152f8a7ccde16b21c3f3dbd327caa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b6:97:3a:44:83:a7:5c:98:58:bc:42:8f:77: 22:39:c9:9d:d4:42:1f:7e:01:20:ed:d2:72:3c:f3: a8:e3:4d:fa:a5:c3:df:2c:62:3f:3b:f7:22:42:5a: a8:db:ab:f6:97:45:d7:69:ab:7c:4d:e8:5e:49:d1: ce:37:a5:c7:47:2d:8a:f9:e8:4c:7b:d2:6c:33:f3: ec:f6:b9:5f:61:52:41:3f:31:09:a1:34:b4:6f:65: 07:82:00:d3:49:69:bb:52:39:9c:4b:15:8a:6c:4d: 59:af:bb:7b:fb:91:10:c2:b1:3b:5c:44:92:f9:ff: 00:c6:d3:17:04:98:fb:84:52:cc:8f:68:4e:ac:2b: cf:51:78:14:a6:9f:a7:6d:30:45:c1:e5:d0:3e:c1: bb:41:91:8d:eb:30:38:05:92:7d:42:25:29:ee:4b: c4:57:51:3a:dd:34:8d:d3:53:4f:8d:dd:31:d3:70: b9:fc:d4:ad:50:66:48:57:a2:e5:c7:21:e1:90:71: b0:ce:7c:50:8c:78:41:81:e5:3c:1e:95:1f:9e:ad: d3:74:ba:96:d2:f9:80:7e:4a:73:a5:a4:dd:f3:f3: f6:c1:bf:f8:16:bc:b6:31:35:ae:51:11:15:09:dd: 87:ff:54:d7:ed:58:e7:90:a7:1f:0e:0a:5b:be:8d: e1:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:58:43:C7:32:21:52:F8:A7:CC:DE:16:B2:1C:3F:3D:BD:32:7C:AA X509v3 Authority Key Identifier: keyid:13:95:A3:A8:FC:8D:D3:4D:D6:F3:C9:50:C6:61:F4:B2:12:71:75:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5WjqPyN003W88lQxmH0shJxdaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/XlhDxzIhUvinzN4Wshw_Pb0yfKo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.150.64.0/22 Signature Algorithm: sha256WithRSAEncryption 80:f0:da:ac:3f:6f:6d:93:b5:4a:71:34:f9:8c:e6:51:11:03: 72:61:1a:f8:2b:29:0f:83:4d:43:25:63:c3:bb:00:79:e8:8a: 02:34:eb:00:b3:5b:c8:09:c4:88:4c:ef:2a:7d:c2:0a:f3:a8: f0:bb:09:fe:f4:9e:75:e4:36:69:68:de:2a:7f:c7:59:a0:be: c7:86:7f:55:d7:b5:4b:b1:5d:f6:96:d1:af:b5:af:0d:f2:9a: f3:4a:07:15:50:ed:7a:e6:80:87:fb:b5:1f:ce:e7:6d:80:52: 70:95:27:70:dc:14:f5:48:92:46:50:a1:45:93:0c:63:c1:69: 3f:b0:98:24:92:04:7d:ef:80:2b:9f:f3:e6:d2:5d:1a:cb:fb: 6c:a8:20:dd:82:7c:08:70:ed:08:3e:35:bf:e9:20:f7:52:a1: 1a:3d:6f:c3:d3:a3:d3:5e:16:d4:f8:37:db:80:87:da:dd:df: 94:30:8b:3b:96:1e:51:e0:da:68:c1:04:87:77:26:4f:ea:5e: 05:ac:72:99:6b:de:9b:49:38:6e:0b:57:94:c3:d3:b5:61:68: db:5c:74:51:f0:9a:c1:aa:0e:16:5a:f5:ce:c9:8a:19:64:46: 29:30:22:72:95:da:45:b4:64:67:d0:94:ee:f6:00:7c:e9:cc: 00:6b:ea:8c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Ppi47ONaIwD9rfNIJidMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzOTVhM2E4ZmM4ZGQzNGRkNmYzYzk1MGM2NjFmNGIyMTI3 MTc1YTUwHhcNMjYwMTAxMTQxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTU4NDNjNzMyMjE1MmY4YTdjY2RlMTZiMjFjM2YzZGJkMzI3Y2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLaXOkSDp1yYWLxCj3ciOcmd1EIf fgEg7dJyPPOo4036pcPfLGI/O/ciQlqo26v2l0XXaat8TeheSdHON6XHRy2K+ehM e9JsM/Ps9rlfYVJBPzEJoTS0b2UHggDTSWm7UjmcSxWKbE1Zr7t7+5EQwrE7XESS +f8AxtMXBJj7hFLMj2hOrCvPUXgUpp+nbTBFweXQPsG7QZGN6zA4BZJ9QiUp7kvE V1E63TSN01NPjd0x03C5/NStUGZIV6LlxyHhkHGwznxQjHhBgeU8HpUfnq3TdLqW 0vmAfkpzpaTd8/P2wb/4Fry2MTWuUREVCd2H/1TX7VjnkKcfDgpbvo3hJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF5YQ8cyIVL4p8zeFrIcPz29MnyqMB8GA1UdIwQY MBaAFBOVo6j8jdNN1vPJUMZh9LIScXWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTVXanFQeU4wMDNXODhsUXhtSDBzaEp4ZGFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My81MmM0NDgtMWNiOS00YmViLThmYzIt ZjA0OGE5MjY2ZmNmLzEvWGxoRHh6SWhVdmluek40V3Nod19QYjB5ZktvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My81MmM0NDgtMWNiOS00YmViLThmYzItZjA0OGE5MjY2ZmNm LzEvRTVXanFQeU4wMDNXODhsUXhtSDBzaEp4ZGFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZZAMA0G CSqGSIb3DQEBCwUAA4IBAQCA8NqsP29tk7VKcTT5jOZREQNyYRr4KykPg01DJWPD uwB56IoCNOsAs1vICcSITO8qfcIK86jwuwn+9J515DZpaN4qf8dZoL7Hhn9V17VL sV32ltGvta8N8przSgcVUO165oCH+7UfzudtgFJwlSdw3BT1SJJGUKFFkwxjwWk/ sJgkkgR974Arn/Pm0l0ay/tsqCDdgnwIcO0IPjW/6SD3UqEaPW/D06PTXhbU+Dfb gIfa3d+UMIs7lh5R4NpowQSHdyZP6l4FrHKZa96bSThuC1eUw9O1YWjbXHRR8JrB qg4WWvXOyYoZZEYpMCJyldpFtGRn0JTu9gB86cwAa+qM -----END CERTIFICATE-----Generated at Mon Feb 9 22:24:21 2026 by rpki-client