This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/X5SBtcQkBk-r1YSIkJ6h_u4r5c0.roa File: X5SBtcQkBk-r1YSIkJ6h_u4r5c0.roa (raw, json) Hash identifier: WCGcN3I+HFWgQchuI1CposGX3iq6Q7uEeLbWfrOVY6k= Subject key identifier: 5F:94:81:B5:C4:24:06:4F:AB:D5:84:88:90:9E:A1:FE:EE:2B:E5:CD Certificate issuer: /CN=304e59a223f4bcb823492fb1096c3a82310c03da Certificate serial: 019B77C6C05DAF00F69F71F38F405EFDD962 Authority key identifier: 30:4E:59:A2:23:F4:BC:B8:23:49:2F:B1:09:6C:3A:82:31:0C:03:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/X5SBtcQkBk-r1YSIkJ6h_u4r5c0.roa Signing time: Thu 01 Jan 2026 04:17:52 +0000 ROA not before: Thu 01 Jan 2026 04:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12307 IP address blocks: 185.119.104.0/24 maxlen: 24 185.119.107.0/24 maxlen: 24 2a06:8a00::/29 maxlen: 29 2a06:8a00::/32 maxlen: 32 2a06:8a07::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.crl rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.mft rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 07:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:c0:5d:af:00:f6:9f:71:f3:8f:40:5e:fd:d9:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=304e59a223f4bcb823492fb1096c3a82310c03da Validity Not Before: Jan 1 04:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f9481b5c424064fabd58488909ea1feee2be5cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8f:28:bc:92:97:1e:b0:60:49:61:4e:a9:d2: f4:e9:f6:e0:9b:8d:d4:42:07:ac:7a:2d:d0:5a:7f: 36:98:28:2f:4f:c4:92:41:64:f9:aa:6c:fd:92:ec: 6e:70:87:f5:19:59:e3:5b:31:55:51:72:d2:6a:fb: a3:fb:65:2f:2b:ea:df:89:33:32:46:4c:20:cd:6c: c3:93:34:5c:47:97:9f:cb:ae:f5:13:09:58:59:dd: 0b:4e:59:6c:8b:b0:a9:13:55:58:b0:65:ba:ee:4e: 91:f6:93:8e:79:31:2a:cc:ba:97:59:91:5a:04:17: f8:f0:c9:8a:1f:76:69:a2:83:cd:fc:d0:7f:de:62: 86:9a:dd:51:47:45:2f:41:01:3c:5a:00:aa:89:8d: dd:76:32:f8:b8:d1:5d:dd:b7:54:d9:d8:dd:04:82: ef:68:f3:94:1e:42:78:ff:de:a7:8f:f7:d5:38:53: b2:5d:91:3c:35:18:67:1d:4b:b2:66:4f:19:42:a0: 19:fe:45:e7:0c:c5:65:e1:ec:00:64:ef:ac:db:1d: 12:f0:3d:cc:f7:bc:4b:dc:51:05:aa:33:9b:2b:7d: fa:a2:e6:3c:66:89:75:b9:99:b2:da:8d:ad:af:52: 82:1e:6c:a1:39:b1:b7:9c:5a:6f:ce:31:3a:9c:3a: a3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:94:81:B5:C4:24:06:4F:AB:D5:84:88:90:9E:A1:FE:EE:2B:E5:CD X509v3 Authority Key Identifier: keyid:30:4E:59:A2:23:F4:BC:B8:23:49:2F:B1:09:6C:3A:82:31:0C:03:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/X5SBtcQkBk-r1YSIkJ6h_u4r5c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.119.104.0/24 185.119.107.0/24 IPv6: 2a06:8a00::/29 Signature Algorithm: sha256WithRSAEncryption 2b:d8:4f:66:d9:77:31:e3:cb:71:c5:a1:a9:71:b9:be:cb:63: dd:6b:d0:82:74:da:54:af:98:81:2d:ff:38:bf:d8:8d:c0:28: 9a:67:be:64:fa:2c:7f:8a:4b:32:c6:62:3a:7d:51:cd:b8:0d: b7:e0:1d:dc:67:4a:53:5c:62:89:d0:36:5e:38:82:38:94:34: 2c:3a:f4:69:bd:16:b4:0f:99:ce:fa:54:4b:0c:64:2d:0b:c3: 09:cf:87:ca:d6:be:8e:a6:b8:80:c9:f5:98:3f:60:0a:13:c8: 05:99:ae:cc:a0:35:69:ce:bd:21:34:3a:f2:4d:ec:c4:92:c7: 9f:c8:1a:d0:59:ed:4d:36:c9:c7:ff:f5:b4:0c:47:8a:57:fc: ed:17:0c:6f:5f:11:87:f2:18:ca:f7:f8:e3:19:58:55:f3:2e: 17:1c:bb:b0:41:d6:87:76:62:c6:b3:05:de:d8:53:b3:37:b8: 37:1d:9a:7d:8a:48:30:c5:62:96:e1:7c:39:b0:dd:97:96:90: 02:ab:55:a4:bb:1b:94:56:12:79:a2:29:fe:76:2c:1a:28:30: 95:b4:84:57:68:99:ee:ec:4c:ee:99:bb:3d:11:0d:99:bc:fb: 84:97:0a:9c:e8:97:00:04:16:9f:dd:3d:f5:c4:1a:12:c3:e8: 05:bc:71:8c -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt3xsBdrwD2n3Hzj0Be/dliMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNGU1OWEyMjNmNGJjYjgyMzQ5MmZiMTA5NmMzYTgyMzEw YzAzZGEwHhcNMjYwMTAxMDQxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Zjk0ODFiNWM0MjQwNjRmYWJkNTg0ODg5MDllYTFmZWVlMmJlNWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr48ovJKXHrBgSWFOqdL06fbgm43U Qgesei3QWn82mCgvT8SSQWT5qmz9kuxucIf1GVnjWzFVUXLSavuj+2UvK+rfiTMy RkwgzWzDkzRcR5efy671EwlYWd0LTllsi7CpE1VYsGW67k6R9pOOeTEqzLqXWZFa BBf48MmKH3ZpooPN/NB/3mKGmt1RR0UvQQE8WgCqiY3ddjL4uNFd3bdU2djdBILv aPOUHkJ4/96nj/fVOFOyXZE8NRhnHUuyZk8ZQqAZ/kXnDMVl4ewAZO+s2x0S8D3M 97xL3FEFqjObK336ouY8Zol1uZmy2o2tr1KCHmyhObG3nFpvzjE6nDqjcQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFF+UgbXEJAZPq9WEiJCeof7uK+XNMB8GA1UdIwQY MBaAFDBOWaIj9Ly4I0kvsQlsOoIxDAPaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUU1Wm9pUDB2TGdqU1MteENXdzZnakVNQTlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9mNTM2Y2QtOTQzZi00NTU0LTlmMTct MzQ0Y2M1MDJmMWJkLzEvWDVTQnRjUWtCay1yMVlTSWtKNmhfdTRyNWMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9mNTM2Y2QtOTQzZi00NTU0LTlmMTctMzQ0Y2M1MDJmMWJk LzEvTUU1Wm9pUDB2TGdqU1MteENXdzZnakVNQTlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAuXdoAwQA uXdrMA0EAgACMAcDBQMqBooAMA0GCSqGSIb3DQEBCwUAA4IBAQAr2E9m2Xcx48tx xaGpcbm+y2Pda9CCdNpUr5iBLf84v9iNwCiaZ75k+ix/iksyxmI6fVHNuA234B3c Z0pTXGKJ0DZeOII4lDQsOvRpvRa0D5nO+lRLDGQtC8MJz4fK1r6OpriAyfWYP2AK E8gFma7MoDVpzr0hNDryTezEksefyBrQWe1NNsnH//W0DEeKV/ztFwxvXxGH8hjK 9/jjGVhV8y4XHLuwQdaHdmLGswXe2FOzN7g3HZp9ikgwxWKW4Xw5sN2XlpACq1Wk uxuUVhJ5oin+diwaKDCVtIRXaJnu7Ezumbs9EQ2ZvPuElwqc6JcABBaf3T31xBoS w+gFvHGM -----END CERTIFICATE-----Generated at Tue Feb 10 11:34:56 2026 by rpki-client