This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/XAJ4y4vCfoUX6YkHgNFSElorTlI.roa File: XAJ4y4vCfoUX6YkHgNFSElorTlI.roa (raw, json) Hash identifier: umjfBMJi5nL3QbJXt5uwfy+GZK3OPSRY00tGrVG+j6o= Subject key identifier: 5C:02:78:CB:8B:C2:7E:85:17:E9:89:07:80:D1:52:12:5A:2B:4E:52 Certificate issuer: /CN=7c67ee3de881562eea7df2e3232cdb32b54fe037 Certificate serial: 019B7834DFF1E85945812438557BD4CA0E83 Authority key identifier: 7C:67:EE:3D:E8:81:56:2E:EA:7D:F2:E3:23:2C:DB:32:B5:4F:E0:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGfuPeiBVi7qffLjIyzbMrVP4Dc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/XAJ4y4vCfoUX6YkHgNFSElorTlI.roa Signing time: Thu 01 Jan 2026 06:18:09 +0000 ROA not before: Thu 01 Jan 2026 06:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50490 IP address blocks: 178.21.90.0/23 maxlen: 23 178.21.92.0/22 maxlen: 22 2a00:1f9f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.crl rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.mft rsync://rpki.ripe.net/repository/DEFAULT/fGfuPeiBVi7qffLjIyzbMrVP4Dc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:df:f1:e8:59:45:81:24:38:55:7b:d4:ca:0e:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c67ee3de881562eea7df2e3232cdb32b54fe037 Validity Not Before: Jan 1 06:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c0278cb8bc27e8517e9890780d152125a2b4e52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:03:84:1a:4c:5c:42:20:fa:c5:51:11:0e:ea: 08:21:57:7a:3a:f8:ee:b9:5e:8b:53:9e:ee:59:db: 49:7b:0b:f9:fc:f6:bb:48:97:97:9e:41:92:da:94: be:31:7d:cf:ac:37:15:f3:e7:bf:14:9f:11:1c:fb: 7f:ca:da:c5:12:a7:71:9f:5d:33:40:ca:d1:b5:7c: 2d:82:37:44:62:de:12:c2:f2:eb:06:ec:35:38:1a: d9:fd:3e:e2:b2:54:dc:e8:c7:42:c5:c8:84:c2:79: 4a:50:37:40:22:bd:98:90:75:3f:16:16:a2:d5:7c: 8f:90:0d:b5:ba:48:12:46:1a:24:2b:02:57:38:69: b4:29:4b:3a:63:97:e4:2a:40:05:bc:a5:7f:82:7b: bf:57:99:60:11:8f:a0:88:03:bd:f4:0a:52:05:32: 04:5a:0c:35:c8:3b:a4:ad:80:c7:fe:85:90:43:0a: 8d:e6:2d:69:f0:27:75:70:d5:13:26:ac:c2:84:8b: 9c:0d:64:47:20:bd:60:32:73:4a:a2:4d:bc:f3:7f: dd:ef:14:fa:c7:9e:7e:1b:33:4e:ac:44:c7:81:ba: 62:7d:73:1d:a2:40:1f:83:08:3a:c8:b8:d2:ca:64: ad:b3:47:4c:cd:d8:a4:af:ad:04:be:b7:21:6e:b9: 9c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:02:78:CB:8B:C2:7E:85:17:E9:89:07:80:D1:52:12:5A:2B:4E:52 X509v3 Authority Key Identifier: keyid:7C:67:EE:3D:E8:81:56:2E:EA:7D:F2:E3:23:2C:DB:32:B5:4F:E0:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGfuPeiBVi7qffLjIyzbMrVP4Dc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/XAJ4y4vCfoUX6YkHgNFSElorTlI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.21.90.0-178.21.95.255 IPv6: 2a00:1f9f::/32 Signature Algorithm: sha256WithRSAEncryption b1:6b:2d:d3:ad:e7:5a:4e:35:a3:38:31:0d:bd:8b:43:c5:25: 3c:f1:ce:06:9e:da:96:c5:fd:21:df:0f:25:6d:ca:00:d9:20: 85:89:b5:c5:da:7b:55:24:0b:e3:65:2e:5d:9a:c4:d0:85:5a: fb:b2:19:5e:20:11:20:c6:eb:60:4b:d5:99:3d:59:51:dc:a2: b7:a9:77:a6:e3:23:79:92:fa:4a:e7:bc:3a:21:c6:02:ca:ce: b1:2b:74:52:9f:a3:d6:32:c1:6f:9f:e8:fc:9e:4e:69:25:3d: 9f:d9:40:44:2a:f7:a7:5c:13:4f:66:df:80:6a:0a:b3:c1:a7: b1:b2:69:83:28:84:44:91:60:9a:47:3b:f6:be:6b:11:34:53: 0c:d9:ae:2d:4e:02:78:82:16:7e:2f:7f:7e:c8:50:a9:95:28: 7e:51:91:f1:34:e0:18:1c:a2:be:4f:46:7a:ef:f2:7f:3f:8c: b9:62:98:6d:7c:e8:34:59:31:ac:86:2e:14:7a:e2:e2:0a:33: 75:17:d1:ab:29:dc:70:62:55:dd:73:d2:8a:01:7c:94:40:14: 93:ba:2a:c9:e2:81:6f:ac:05:6d:2b:1e:0c:2f:c1:1c:33:11: 30:26:95:61:2f:2a:98:7a:f8:3e:31:c4:7f:89:bf:5d:96:44: 65:7d:fb:7e -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt4NN/x6FlFgSQ4VXvUyg6DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjNjdlZTNkZTg4MTU2MmVlYTdkZjJlMzIzMmNkYjMyYjU0 ZmUwMzcwHhcNMjYwMTAxMDYxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzAyNzhjYjhiYzI3ZTg1MTdlOTg5MDc4MGQxNTIxMjVhMmI0ZTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngOEGkxcQiD6xVERDuoIIVd6Ovju uV6LU57uWdtJewv5/Pa7SJeXnkGS2pS+MX3PrDcV8+e/FJ8RHPt/ytrFEqdxn10z QMrRtXwtgjdEYt4SwvLrBuw1OBrZ/T7islTc6MdCxciEwnlKUDdAIr2YkHU/Fhai 1XyPkA21ukgSRhokKwJXOGm0KUs6Y5fkKkAFvKV/gnu/V5lgEY+giAO99ApSBTIE Wgw1yDukrYDH/oWQQwqN5i1p8Cd1cNUTJqzChIucDWRHIL1gMnNKok2883/d7xT6 x55+GzNOrETHgbpifXMdokAfgwg6yLjSymSts0dMzdikr60EvrchbrmcOQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFFwCeMuLwn6FF+mJB4DRUhJaK05SMB8GA1UdIwQY MBaAFHxn7j3ogVYu6n3y4yMs2zK1T+A3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkdmdVBlaUJWaTdxZmZMakl5emJNclZQNERjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81ZmFiNzUtNWYzNS00NjRkLTlmMGQt M2VkMmVjZWI0ZjZjLzEvWEFKNHk0dkNmb1VYNllrSGdORlNFbG9yVGxJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81ZmFiNzUtNWYzNS00NjRkLTlmMGQtM2VkMmVjZWI0ZjZj LzEvZkdmdVBlaUJWaTdxZmZMakl5emJNclZQNERjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBAGyFVoD BAWyFUAwDQQCAAIwBwMFACoAH58wDQYJKoZIhvcNAQELBQADggEBALFrLdOt51pO NaM4MQ29i0PFJTzxzgae2pbF/SHfDyVtygDZIIWJtcXae1UkC+NlLl2axNCFWvuy GV4gESDG62BL1Zk9WVHcorepd6bjI3mS+krnvDohxgLKzrErdFKfo9YywW+f6Pye TmklPZ/ZQEQq96dcE09m34BqCrPBp7GyaYMohESRYJpHO/a+axE0UwzZri1OAniC Fn4vf37IUKmVKH5RkfE04Bgcor5PRnrv8n8/jLlimG186DRZMayGLhR64uIKM3UX 0asp3HBiVd1z0ooBfJRAFJO6KsnigW+sBW0rHgwvwRwzETAmlWEvKph6+D4xxH+J v12WRGV9+34= -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:24 2026 by rpki-client