This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Xd5SOmtqvTtJcy4D07I-WWuMkdg.roa File: Xd5SOmtqvTtJcy4D07I-WWuMkdg.roa (raw, json) Hash identifier: 2VPeHMi7O7SJk8HB/KMmXeQWZvqEff8FEOfrcokjwTk= Subject key identifier: 5D:DE:52:3A:6B:6A:BD:3B:49:73:2E:03:D3:B2:3E:59:6B:8C:91:D8 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AA4EB453885E0B671DD90AB375267 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Xd5SOmtqvTtJcy4D07I-WWuMkdg.roa Signing time: Thu 01 Jan 2026 16:18:39 +0000 ROA not before: Thu 01 Jan 2026 16:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47583 IP address blocks: 37.98.151.0/24 maxlen: 24 109.176.196.0/24 maxlen: 24 109.176.197.0/24 maxlen: 24 109.176.198.0/24 maxlen: 24 109.176.199.0/24 maxlen: 24 212.38.94.0/24 maxlen: 24 212.38.95.0/24 maxlen: 24 213.130.144.0/24 maxlen: 24 213.130.145.0/24 maxlen: 24 213.130.146.0/24 maxlen: 24 213.130.147.0/24 maxlen: 24 213.210.13.0/24 maxlen: 24 213.210.20.0/24 maxlen: 24 213.210.21.0/24 maxlen: 24 213.210.36.0/24 maxlen: 24 213.210.37.0/24 maxlen: 24 213.210.57.0/24 maxlen: 24 213.218.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:a4:eb:45:38:85:e0:b6:71:dd:90:ab:37:52:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5dde523a6b6abd3b49732e03d3b23e596b8c91d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:38:a2:0c:65:7e:38:db:0e:7d:f3:30:ea:f8: f6:f0:87:38:38:f9:1f:86:06:db:2f:d5:fe:e8:bf: 9a:de:c6:b8:90:f5:52:63:a5:22:a9:fe:13:7a:6d: 76:79:46:2b:79:bb:14:84:22:b1:0a:46:60:2b:ce: 49:48:5d:fe:5b:a2:2b:88:46:fb:a9:4f:72:0e:4e: 4c:3c:2f:bb:2a:98:8d:37:9b:97:eb:e9:cd:03:99: 6a:bf:08:1a:a9:fc:13:14:82:1a:4b:67:4f:74:30: 3b:cf:1e:50:5e:8f:06:07:79:49:7c:97:a7:1d:0b: f6:92:15:53:97:3d:85:5e:e1:12:23:c3:48:53:7c: a3:16:84:8f:0a:f8:e0:ee:d4:0f:2c:11:29:48:16: ae:e6:9f:ec:45:ce:6b:3c:54:dc:49:4b:63:d3:58: 69:af:34:c2:38:33:9d:5c:77:d9:ae:60:a3:7a:84: 40:ba:2c:0c:1a:db:7c:8b:ff:9b:f2:bb:f0:99:af: 99:4c:33:37:c4:20:61:4b:c0:2f:cb:7a:e4:0d:02: f2:a7:27:76:46:7a:c8:8e:a5:c1:35:c3:1c:de:ca: 46:a7:8e:69:35:0a:21:73:c4:c3:bc:1c:29:ae:f6: 99:b8:01:16:83:41:75:dd:41:a1:22:69:1f:84:77: da:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:DE:52:3A:6B:6A:BD:3B:49:73:2E:03:D3:B2:3E:59:6B:8C:91:D8 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Xd5SOmtqvTtJcy4D07I-WWuMkdg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.98.151.0/24 109.176.196.0/22 212.38.94.0/23 213.130.144.0/22 213.210.13.0/24 213.210.20.0/23 213.210.36.0/23 213.210.57.0/24 213.218.240.0/24 Signature Algorithm: sha256WithRSAEncryption 54:04:3d:c5:cd:51:f1:62:30:c7:44:2d:76:3b:c6:bb:22:07: f8:f7:dd:73:41:9c:29:d7:44:90:d8:28:bc:be:ba:2c:26:93: 37:b1:2f:ad:cc:5c:fd:20:6b:b3:a0:30:0a:f3:f8:5e:ed:1d: a2:5b:c2:81:97:2f:ce:22:bf:b0:03:96:e3:7b:7a:68:b1:5b: 5e:2b:f1:bd:a0:dc:c3:26:45:ff:c5:b9:99:2b:28:11:c8:49: 93:9b:f4:81:89:33:16:3e:65:13:1f:38:8b:f3:50:fc:bc:65: f2:4c:1c:78:06:ef:0c:ad:12:bb:67:97:73:8c:b3:5c:54:97: 02:bc:56:36:57:8a:f1:86:9d:b9:d8:7e:04:3c:34:53:84:95: b6:49:22:0f:db:1a:3c:84:d3:ef:d3:29:38:52:a8:2a:ee:b1: 80:d1:af:67:9c:0e:31:6f:d2:35:aa:cc:73:05:ac:ca:ae:80: 63:3b:fc:c2:cd:c5:ca:74:2a:a1:dc:06:1d:66:5f:5b:95:d3: f0:e1:e0:f1:24:fd:fb:fe:f1:e3:48:47:65:6b:51:d5:1b:9b: 28:87:44:5d:8a:a2:47:d6:f4:0d:7e:99:a9:a3:84:85:b9:ee: 20:6e:46:08:5e:91:dc:2f:14:57:7b:a5:b3:89:de:e6:f6:16: 61:bb:22:1a -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt6WqTrRTiF4LZx3ZCrN1JnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZGRlNTIzYTZiNmFiZDNiNDk3MzJlMDNkM2IyM2U1OTZiOGM5MWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8jiiDGV+ONsOffMw6vj28Ic4OPkf hgbbL9X+6L+a3sa4kPVSY6Uiqf4Tem12eUYrebsUhCKxCkZgK85JSF3+W6IriEb7 qU9yDk5MPC+7KpiNN5uX6+nNA5lqvwgaqfwTFIIaS2dPdDA7zx5QXo8GB3lJfJen HQv2khVTlz2FXuESI8NIU3yjFoSPCvjg7tQPLBEpSBau5p/sRc5rPFTcSUtj01hp rzTCODOdXHfZrmCjeoRAuiwMGtt8i/+b8rvwma+ZTDM3xCBhS8Avy3rkDQLypyd2 RnrIjqXBNcMc3spGp45pNQohc8TDvBwprvaZuAEWg0F13UGhImkfhHfaiQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFF3eUjprar07SXMuA9OyPllrjJHYMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvWGQ1U09tdHF2VHRKY3k0RDA3SS1XV3VNa2RnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAJWKXAwQC bbDEAwQB1CZeAwQC1YKQAwQA1dINAwQB1dIUAwQB1dIkAwQA1dI5AwQA1drwMA0G CSqGSIb3DQEBCwUAA4IBAQBUBD3FzVHxYjDHRC12O8a7Igf4991zQZwp10SQ2Ci8 vrosJpM3sS+tzFz9IGuzoDAK8/he7R2iW8KBly/OIr+wA5bje3posVteK/G9oNzD JkX/xbmZKygRyEmTm/SBiTMWPmUTHziL81D8vGXyTBx4Bu8MrRK7Z5dzjLNcVJcC vFY2V4rxhp252H4EPDRThJW2SSIP2xo8hNPv0yk4Uqgq7rGA0a9nnA4xb9I1qsxz BazKroBjO/zCzcXKdCqh3AYdZl9bldPw4eDxJP37/vHjSEdla1HVG5soh0RdiqJH 1vQNfpmpo4SFue4gbkYIXpHcLxRXe6Wzid7m9hZhuyIa -----END CERTIFICATE-----Generated at Mon Jan 19 23:20:57 2026 by rpki-client