This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/X5WWdppiY7JJr37qDKwj5JdaTjI.roa File: X5WWdppiY7JJr37qDKwj5JdaTjI.roa (raw, json) Hash identifier: xiNSuleQ0NlI0WKaAabH62MPndoRrs2GmTcWxQsT+E8= Subject key identifier: 5F:95:96:76:9A:62:63:B2:49:AF:7E:EA:0C:AC:23:E4:97:5A:4E:32 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F8455B8D90D1ECC26BC7285DF6331DA Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/X5WWdppiY7JJr37qDKwj5JdaTjI.roa Signing time: Fri 02 Jan 2026 16:22:17 +0000 ROA not before: Fri 02 Jan 2026 16:22:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19793 IP address blocks: 217.60.144.0/22 maxlen: 24 217.60.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:55:b8:d9:0d:1e:cc:26:bc:72:85:df:63:31:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f9596769a6263b249af7eea0cac23e4975a4e32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c6:65:b4:32:31:06:9e:9e:41:b7:b7:e5:44: 56:a8:ae:d0:35:4f:e7:c2:6f:ed:36:22:c3:34:1f: 07:8e:51:c1:9e:4c:89:df:c0:cb:e1:e9:96:b7:0c: c4:12:83:0f:0a:28:54:3e:21:a0:11:10:0a:c2:f3: a7:5d:a7:0b:f3:b5:36:2c:f5:b1:b3:e7:fd:a1:ff: 62:10:57:35:e6:74:31:58:0b:4a:4e:ae:94:f0:e1: db:e0:2a:5d:f1:6e:2a:82:e7:a3:24:d9:15:70:19: 73:8c:2d:5d:59:b6:93:ce:e7:03:8d:e6:33:ef:69: 82:aa:de:9e:aa:46:20:8a:0d:a3:ab:df:da:dd:f1: f3:f5:50:5b:b4:4a:b8:7f:8e:9b:fb:c0:d1:c4:4d: e9:67:5e:7b:af:91:a1:85:59:a2:e0:2a:f7:61:8b: 19:e1:58:88:32:3f:51:de:c8:f5:fe:a5:9f:b6:30: 4f:2d:a3:97:41:ec:e3:a2:e6:dc:08:8a:a2:09:ba: a2:74:68:1f:0b:e5:41:a8:e8:9e:fb:fe:18:2c:b4: 12:ff:d9:91:ea:e4:bc:e7:2a:cc:c2:67:e3:34:57: c8:65:af:ab:a3:ef:d8:95:f5:a9:db:b5:e6:22:eb: 6e:dc:89:36:b6:9c:26:d1:6e:8c:5c:51:90:ec:1e: 90:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:95:96:76:9A:62:63:B2:49:AF:7E:EA:0C:AC:23:E4:97:5A:4E:32 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/X5WWdppiY7JJr37qDKwj5JdaTjI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.60.144.0/21 Signature Algorithm: sha256WithRSAEncryption 95:4a:6c:af:29:1a:3e:60:0f:c2:96:73:df:6e:c7:16:2e:a3: 09:17:ba:43:8b:af:4b:19:ef:46:48:e0:d1:91:3f:61:08:aa: e2:b2:c2:69:af:5b:86:ff:53:c1:27:93:71:f3:a7:fe:67:15: 61:3c:c2:24:b4:e8:81:80:0b:fb:cb:f8:71:0e:7a:9b:0c:4e: e5:3f:b5:6c:57:d7:00:5e:16:79:fa:eb:02:7f:f5:7e:fc:5e: 58:dd:9b:49:f4:70:01:c8:2d:de:e2:2f:9f:bd:47:f4:e5:07: d6:a6:3b:31:35:c0:95:1b:fa:60:5a:1c:c0:e3:73:e9:ac:0e: 82:ac:e2:e0:84:b9:49:98:46:2e:35:62:9f:08:55:81:52:95: 18:fa:c9:15:4f:bc:64:79:b3:9d:7b:9f:b0:34:88:cc:bd:61: b9:97:9c:6a:fa:da:a2:85:81:52:79:2e:55:cb:31:fa:ca:56: 79:5e:2f:89:66:18:18:d0:08:66:ed:b0:27:41:50:24:f0:bb: fb:7f:6c:ee:3d:cc:3a:c0:cb:ba:af:53:ac:65:1d:ba:4d:85: 1d:f7:48:17:b4:70:f0:c8:b1:e0:19:71:ef:14:fa:d7:2e:eb: 2b:8d:f2:75:e8:be:86:ed:42:90:ab:0a:fc:d0:2a:0f:13:f7: 32:e9:a0:81 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hFW42Q0ezCa8coXfYzHaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Zjk1OTY3NjlhNjI2M2IyNDlhZjdlZWEwY2FjMjNlNDk3NWE0ZTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcZltDIxBp6eQbe35URWqK7QNU/n wm/tNiLDNB8HjlHBnkyJ38DL4emWtwzEEoMPCihUPiGgERAKwvOnXacL87U2LPWx s+f9of9iEFc15nQxWAtKTq6U8OHb4Cpd8W4qguejJNkVcBlzjC1dWbaTzucDjeYz 72mCqt6eqkYgig2jq9/a3fHz9VBbtEq4f46b+8DRxE3pZ157r5GhhVmi4Cr3YYsZ 4ViIMj9R3sj1/qWftjBPLaOXQezjoubcCIqiCbqidGgfC+VBqOie+/4YLLQS/9mR 6uS85yrMwmfjNFfIZa+ro+/YlfWp27XmIutu3Ik2tpwm0W6MXFGQ7B6QYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF+VlnaaYmOySa9+6gysI+SXWk4yMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvWDVXV2RwcGlZN0pKcjM3cURLd2o1SmRhVGpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2TyQMA0G CSqGSIb3DQEBCwUAA4IBAQCVSmyvKRo+YA/ClnPfbscWLqMJF7pDi69LGe9GSODR kT9hCKrissJpr1uG/1PBJ5Nx86f+ZxVhPMIktOiBgAv7y/hxDnqbDE7lP7VsV9cA XhZ5+usCf/V+/F5Y3ZtJ9HAByC3e4i+fvUf05QfWpjsxNcCVG/pgWhzA43PprA6C rOLghLlJmEYuNWKfCFWBUpUY+skVT7xkebOde5+wNIjMvWG5l5xq+tqihYFSeS5V yzH6ylZ5Xi+JZhgY0Ahm7bAnQVAk8Lv7f2zuPcw6wMu6r1OsZR26TYUd90gXtHDw yLHgGXHvFPrXLusrjfJ16L6G7UKQqwr80CoPE/cy6aCB -----END CERTIFICATE-----Generated at Mon Jan 5 14:35:05 2026 by rpki-client