This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/XvWth5JnRTo0n6WWkbtF-kr40Bo.roa File: XvWth5JnRTo0n6WWkbtF-kr40Bo.roa (raw, json) Hash identifier: FcXBAVVeRl2iDfImKR5vQ2YlB5INy+hid9PG+FEh1dU= Subject key identifier: 5E:F5:AD:87:92:67:45:3A:34:9F:A5:96:91:BB:45:FA:4A:F8:D0:1A Certificate issuer: /CN=04b1e756edb1c3bd2f57669f582bf6a951b83f48 Certificate serial: 019B7A5B57814840EA34BB7351E763CBECDE Authority key identifier: 04:B1:E7:56:ED:B1:C3:BD:2F:57:66:9F:58:2B:F6:A9:51:B8:3F:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BLHnVu2xw70vV2afWCv2qVG4P0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/XvWth5JnRTo0n6WWkbtF-kr40Bo.roa Signing time: Thu 01 Jan 2026 16:19:25 +0000 ROA not before: Thu 01 Jan 2026 16:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 192.124.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BLHnVu2xw70vV2afWCv2qVG4P0g.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BLHnVu2xw70vV2afWCv2qVG4P0g.mft rsync://rpki.ripe.net/repository/DEFAULT/BLHnVu2xw70vV2afWCv2qVG4P0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:57:81:48:40:ea:34:bb:73:51:e7:63:cb:ec:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04b1e756edb1c3bd2f57669f582bf6a951b83f48 Validity Not Before: Jan 1 16:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ef5ad879267453a349fa59691bb45fa4af8d01a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d2:3e:8e:6b:72:0a:85:a8:ef:8f:ef:e8:97: 12:b3:48:fc:6e:46:ca:b0:31:8b:c9:9d:af:53:b7: 83:be:2e:18:e4:f3:66:53:6c:51:b4:3c:ba:76:b5: 28:11:d9:1c:03:95:22:ba:96:d2:37:68:03:cb:80: 76:0d:b8:bc:94:7e:55:f0:d1:d9:ec:a3:76:25:83: f8:33:d5:ee:12:8d:33:f6:4a:43:7d:ed:bd:89:58: b1:27:e8:b3:91:ac:56:2d:c1:95:33:0b:fb:ee:5e: f3:75:cd:cd:69:a9:4a:24:f7:6f:e8:c4:d1:81:93: 95:f2:5a:ca:57:df:b7:e3:46:7b:38:3e:d7:ee:73: 60:f3:bd:76:45:b3:9b:51:4f:53:fe:69:a5:48:8b: 68:bc:61:64:ee:7f:e6:7f:8c:ba:85:3d:32:c0:d5: d8:69:0b:d0:d6:5c:a7:c5:50:0c:ec:a8:45:0c:5c: 62:e5:c2:db:f5:ee:77:19:85:57:cc:e3:a0:6c:ec: db:88:8b:a6:ed:31:42:f7:16:f3:bd:1a:d3:56:25: 06:33:88:45:2b:b9:de:da:ad:3e:f8:fe:f8:e0:6e: 69:cb:1e:0d:2c:94:1c:eb:9a:7f:9a:ed:84:9f:5c: 03:f6:27:31:87:e7:c8:8e:8a:37:8a:36:fd:28:b2: ec:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:F5:AD:87:92:67:45:3A:34:9F:A5:96:91:BB:45:FA:4A:F8:D0:1A X509v3 Authority Key Identifier: keyid:04:B1:E7:56:ED:B1:C3:BD:2F:57:66:9F:58:2B:F6:A9:51:B8:3F:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLHnVu2xw70vV2afWCv2qVG4P0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/XvWth5JnRTo0n6WWkbtF-kr40Bo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BLHnVu2xw70vV2afWCv2qVG4P0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.124.245.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:38:da:44:27:39:af:e4:0c:38:c1:72:15:92:be:a6:4e:7c: 5d:b0:f5:6d:5b:a2:1a:89:d0:68:3c:1f:b5:af:d8:41:25:83: aa:00:e7:b8:7d:e3:73:13:a9:e4:70:2e:54:a6:2f:0c:f4:a9: 78:0f:bd:ee:28:89:a3:4a:fc:a4:69:bd:33:ee:5c:eb:eb:62: 40:91:02:5b:9e:8c:1e:b7:83:66:93:b8:77:c9:b8:46:b8:df: 5b:b0:4c:4e:34:99:40:18:a8:1c:25:ef:0c:25:5c:77:6f:b3: 4f:f1:7d:7e:fb:e8:f7:a2:26:d8:7c:58:cc:c6:6e:86:a9:10: c5:66:ba:ca:e1:38:71:7a:b0:f6:02:c5:03:a1:6d:fe:d7:52: 91:11:9a:00:33:3c:80:79:46:8b:1f:5c:6a:33:79:49:25:d3: 3d:63:c4:6a:be:bb:10:db:25:e7:0b:74:2f:8a:aa:25:2c:2b: a4:b5:2e:88:54:ee:72:b9:e3:dd:41:bb:9a:46:56:92:69:3f: 07:54:f0:a7:61:3c:c3:f8:83:3c:61:fd:f3:17:5a:a6:0d:e3: 98:1a:f9:9c:e7:5f:12:b4:87:ed:5a:58:da:5d:22:2c:4b:63: 06:13:47:ae:55:9b:1d:41:da:56:14:be:1e:dd:68:a2:30:64: 39:ec:8f:1f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W1eBSEDqNLtzUedjy+zeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0YjFlNzU2ZWRiMWMzYmQyZjU3NjY5ZjU4MmJmNmE5NTFi ODNmNDgwHhcNMjYwMTAxMTYxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZWY1YWQ4NzkyNjc0NTNhMzQ5ZmE1OTY5MWJiNDVmYTRhZjhkMDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptI+jmtyCoWo74/v6JcSs0j8bkbK sDGLyZ2vU7eDvi4Y5PNmU2xRtDy6drUoEdkcA5UiupbSN2gDy4B2Dbi8lH5V8NHZ 7KN2JYP4M9XuEo0z9kpDfe29iVixJ+izkaxWLcGVMwv77l7zdc3NaalKJPdv6MTR gZOV8lrKV9+340Z7OD7X7nNg8712RbObUU9T/mmlSItovGFk7n/mf4y6hT0ywNXY aQvQ1lynxVAM7KhFDFxi5cLb9e53GYVXzOOgbOzbiIum7TFC9xbzvRrTViUGM4hF K7ne2q0++P744G5pyx4NLJQc65p/mu2En1wD9icxh+fIjoo3ijb9KLLs3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF71rYeSZ0U6NJ+llpG7RfpK+NAaMB8GA1UdIwQY MBaAFASx51btscO9L1dmn1gr9qlRuD9IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkxIblZ1Mnh3NzB2VjJhZldDdjJxVkc0UDBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9hNWIzNjgtMzMxMy00MTMyLTk4OTct ZDAxNzk1N2VhMzllLzEvWHZXdGg1Sm5SVG8wbjZXV2tidEYta3I0MEJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9hNWIzNjgtMzMxMy00MTMyLTk4OTctZDAxNzk1N2VhMzll LzEvQkxIblZ1Mnh3NzB2VjJhZldDdjJxVkc0UDBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHz1MA0G CSqGSIb3DQEBCwUAA4IBAQB9ONpEJzmv5Aw4wXIVkr6mTnxdsPVtW6IaidBoPB+1 r9hBJYOqAOe4feNzE6nkcC5Upi8M9Kl4D73uKImjSvykab0z7lzr62JAkQJbnowe t4Nmk7h3ybhGuN9bsExONJlAGKgcJe8MJVx3b7NP8X1+++j3oibYfFjMxm6GqRDF ZrrK4ThxerD2AsUDoW3+11KREZoAMzyAeUaLH1xqM3lJJdM9Y8RqvrsQ2yXnC3Qv iqolLCuktS6IVO5yuePdQbuaRlaSaT8HVPCnYTzD+IM8Yf3zF1qmDeOYGvmc518S tIftWljaXSIsS2MGE0euVZsdQdpWFL4e3WiiMGQ57I8f -----END CERTIFICATE-----Generated at Tue Jan 27 11:26:45 2026 by rpki-client