This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/xw5sNJdg-fAA5SZxyPcNG8RXerQ.roa File: xw5sNJdg-fAA5SZxyPcNG8RXerQ.roa (raw, json) Hash identifier: 7HX82PhpHs162aszA/TYYhyOoOkbbZJvRNVbtyXVetE= Subject key identifier: C7:0E:6C:34:97:60:F9:F0:00:E5:26:71:C8:F7:0D:1B:C4:57:7A:B4 Certificate issuer: /CN=4da84d247ce37cdccf06e1571d226a2b85677bcd Certificate serial: 019B7DCB138D4171DA7C8C739513CAAA9B34 Authority key identifier: 4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/xw5sNJdg-fAA5SZxyPcNG8RXerQ.roa Signing time: Fri 02 Jan 2026 08:20:19 +0000 ROA not before: Fri 02 Jan 2026 08:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207709 IP address blocks: 185.174.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 11:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:13:8d:41:71:da:7c:8c:73:95:13:ca:aa:9b:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4da84d247ce37cdccf06e1571d226a2b85677bcd Validity Not Before: Jan 2 08:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c70e6c349760f9f000e52671c8f70d1bc4577ab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:01:a8:ab:a3:24:3d:dd:52:29:c9:1e:4b:5d: e5:b0:dc:48:ad:54:a9:5b:12:00:ef:c9:d0:73:93: 66:b7:f1:aa:d7:a4:28:3b:9a:95:f0:d5:5e:1c:39: b7:62:ec:09:c4:86:10:dc:4f:b9:bc:2f:04:fa:a9: 96:6d:a5:6a:1f:e6:97:e7:ac:d7:fa:02:a3:23:c2: 39:41:d2:fe:19:9c:8d:78:60:e0:3f:f7:04:36:89: db:8e:0d:0f:23:06:a9:65:0e:91:a4:29:16:d8:01: ef:a4:d0:1a:a3:89:64:4f:56:06:dd:d5:cc:4e:e4: 18:95:78:3c:26:66:46:bd:2e:a7:7d:bc:f7:7d:f5: 9e:e4:6c:78:2a:c3:25:bc:b8:37:83:c6:ad:55:3d: 33:7d:6c:3f:c5:d7:17:af:4c:42:8a:d1:ca:f5:6a: 66:e7:34:39:87:7e:56:af:d2:00:f1:67:a7:df:fd: 10:c3:bb:d1:27:76:4e:99:70:b6:8c:c6:28:12:94: f3:99:c5:15:53:9c:b8:c1:26:63:8e:ab:3d:2f:20: d2:d9:92:27:23:4b:d6:18:40:dd:e1:0c:f1:ae:9d: cc:3f:1f:5c:e4:87:41:cf:9b:95:b2:68:2f:6d:e8: f4:0c:24:81:ef:a4:97:ff:d9:e4:ce:29:98:fa:5d: 28:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:0E:6C:34:97:60:F9:F0:00:E5:26:71:C8:F7:0D:1B:C4:57:7A:B4 X509v3 Authority Key Identifier: keyid:4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/xw5sNJdg-fAA5SZxyPcNG8RXerQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.174.69.0/24 Signature Algorithm: sha256WithRSAEncryption a1:93:26:a8:8b:10:34:a7:5a:84:74:28:86:13:89:c9:18:f6: bb:31:65:70:53:5b:53:91:5c:e5:c6:44:98:7b:66:5d:1e:a8: 39:d9:9f:ed:45:9f:8d:e1:25:a6:a5:ae:07:ff:1c:b3:22:c6: 64:58:60:1e:ef:de:19:cc:a3:eb:7d:5a:3d:71:3c:df:54:68: 51:25:a6:f4:e4:54:5b:3b:90:28:e7:5d:0b:1a:ef:f4:c5:64: 39:a2:3c:25:3a:c1:9d:cb:54:6c:2c:9d:3b:cf:08:e7:ae:77: fc:30:f5:96:5d:59:fa:64:ca:e7:03:5d:27:50:cc:67:92:d5: a9:09:12:cb:9a:f1:83:8c:b6:08:42:6e:47:a0:ed:4e:ae:fe: a8:e1:d2:5f:72:62:81:19:7d:27:49:e0:27:49:e9:7e:a7:94: 4a:48:b9:35:72:57:e1:a8:4e:02:0b:51:b8:d9:fe:35:ab:4d: 77:07:b2:af:44:39:85:54:f8:be:80:42:9c:06:dd:a3:a1:06: 9b:ad:f9:b7:91:9a:e9:06:9b:cb:c4:f4:b5:31:d8:f6:59:7a: 0f:70:36:af:51:c3:76:33:5a:c9:c9:11:4e:2f:a8:6f:67:50: 89:95:98:f3:73:d0:78:e6:ff:3c:62:55:ce:1e:ba:67:c7:6c: 56:d6:ae:18 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yxONQXHafIxzlRPKqps0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkYTg0ZDI0N2NlMzdjZGNjZjA2ZTE1NzFkMjI2YTJiODU2 NzdiY2QwHhcNMjYwMTAyMDgyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzBlNmMzNDk3NjBmOWYwMDBlNTI2NzFjOGY3MGQxYmM0NTc3YWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAGoq6MkPd1SKckeS13lsNxIrVSp WxIA78nQc5Nmt/Gq16QoO5qV8NVeHDm3YuwJxIYQ3E+5vC8E+qmWbaVqH+aX56zX +gKjI8I5QdL+GZyNeGDgP/cENonbjg0PIwapZQ6RpCkW2AHvpNAao4lkT1YG3dXM TuQYlXg8JmZGvS6nfbz3ffWe5Gx4KsMlvLg3g8atVT0zfWw/xdcXr0xCitHK9Wpm 5zQ5h35Wr9IA8Wen3/0Qw7vRJ3ZOmXC2jMYoEpTzmcUVU5y4wSZjjqs9LyDS2ZIn I0vWGEDd4Qzxrp3MPx9c5IdBz5uVsmgvbej0DCSB76SX/9nkzimY+l0ocQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMcObDSXYPnwAOUmccj3DRvEV3q0MB8GA1UdIwQY MBaAFE2oTSR843zczwbhVx0iaiuFZ3vNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8yMTBmYmItYWE2ZS00OWM5LTkxOGIt NTU1OGE4YjUzZTNkLzEveHc1c05KZGctZkFBNVNaeHlQY05HOFJYZXJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8yMTBmYmItYWE2ZS00OWM5LTkxOGItNTU1OGE4YjUzZTNk LzEvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAua5FMA0G CSqGSIb3DQEBCwUAA4IBAQChkyaoixA0p1qEdCiGE4nJGPa7MWVwU1tTkVzlxkSY e2ZdHqg52Z/tRZ+N4SWmpa4H/xyzIsZkWGAe794ZzKPrfVo9cTzfVGhRJab05FRb O5Ao510LGu/0xWQ5ojwlOsGdy1RsLJ07zwjnrnf8MPWWXVn6ZMrnA10nUMxnktWp CRLLmvGDjLYIQm5HoO1Orv6o4dJfcmKBGX0nSeAnSel+p5RKSLk1clfhqE4CC1G4 2f41q013B7KvRDmFVPi+gEKcBt2joQabrfm3kZrpBpvLxPS1Mdj2WXoPcDavUcN2 M1rJyRFOL6hvZ1CJlZjzc9B45v88YlXOHrpnx2xW1q4Y -----END CERTIFICATE-----Generated at Wed Jan 21 19:01:57 2026 by rpki-client