This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/x50nfPWrcxkZfg31dDtVSDNo-l0.roa File: x50nfPWrcxkZfg31dDtVSDNo-l0.roa (raw, json) Hash identifier: Zf8Bocjkzb8ajAA1WIwAKEh12BnqmBQgyIDI1yF5zzM= Subject key identifier: C7:9D:27:7C:F5:AB:73:19:19:7E:0D:F5:74:3B:55:48:33:68:FA:5D Certificate issuer: /CN=ffe70693454bc33485dec69d219d0502654ac04a Certificate serial: 019B7AC942ADA57341AD130FE84E70C2C746 Authority key identifier: FF:E7:06:93:45:4B:C3:34:85:DE:C6:9D:21:9D:05:02:65:4A:C0:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/x50nfPWrcxkZfg31dDtVSDNo-l0.roa Signing time: Thu 01 Jan 2026 18:19:28 +0000 ROA not before: Thu 01 Jan 2026 18:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205847 IP address blocks: 5.181.56.0/24 maxlen: 24 5.181.57.0/24 maxlen: 24 5.181.58.0/23 maxlen: 23 5.181.58.0/24 maxlen: 24 5.181.59.0/24 maxlen: 24 91.223.67.0/24 maxlen: 24 2a0c:a740:100::/48 maxlen: 48 2a0c:a741::/38 maxlen: 38 2a0c:a741:1000::/38 maxlen: 38 2a0c:a741:2000::/38 maxlen: 38 2a0c:a741:2400::/38 maxlen: 38 2a0c:a741:3000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:42:ad:a5:73:41:ad:13:0f:e8:4e:70:c2:c7:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffe70693454bc33485dec69d219d0502654ac04a Validity Not Before: Jan 1 18:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c79d277cf5ab7319197e0df5743b55483368fa5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:68:fe:3d:1b:74:e5:1e:c1:9b:9a:03:68:1c: ef:27:34:95:ac:2b:0e:99:2d:40:2f:73:ff:dd:1e: 8b:b5:71:76:68:cd:3e:5c:7f:f4:d3:94:6b:e3:8c: 8e:44:6b:de:d3:84:7f:e2:75:f6:fa:0a:ed:0e:89: fd:13:75:14:b3:db:7d:2a:86:2d:38:7f:0b:86:b8: 89:3e:4c:4a:fb:35:ad:e9:68:e8:c3:04:9c:f2:f0: f4:a7:31:67:fd:c8:32:59:46:a0:18:52:90:bc:63: ef:dd:fb:ab:b7:91:72:f3:18:5c:92:6a:a4:1f:ae: d6:09:b9:80:38:84:b3:e4:32:69:51:db:3a:fa:74: 2f:39:a9:28:ab:00:8d:7f:7b:35:ad:b2:22:46:9c: 81:fa:9f:20:78:df:2c:df:01:f1:cc:b0:62:a9:93: 75:94:19:cb:25:65:04:d8:ce:e4:ad:e6:0c:db:e8: a0:c9:0a:9d:91:e1:23:b2:0f:7d:f1:76:64:7f:63: 5d:33:64:77:0a:cb:eb:7f:0b:6f:1c:24:9b:a0:64: e2:6b:18:8b:e1:45:60:9d:02:a3:22:21:9e:67:06: e4:c7:d0:94:d9:51:20:80:7e:36:e5:63:ff:0e:17: f0:78:de:ed:dd:ab:a8:0d:64:90:24:32:50:75:54: 94:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:9D:27:7C:F5:AB:73:19:19:7E:0D:F5:74:3B:55:48:33:68:FA:5D X509v3 Authority Key Identifier: keyid:FF:E7:06:93:45:4B:C3:34:85:DE:C6:9D:21:9D:05:02:65:4A:C0:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/x50nfPWrcxkZfg31dDtVSDNo-l0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.56.0/22 91.223.67.0/24 IPv6: 2a0c:a740:100::/48 2a0c:a741::/38 2a0c:a741:1000::/38 2a0c:a741:2000::/37 2a0c:a741:3000::/38 Signature Algorithm: sha256WithRSAEncryption 4e:b4:59:9d:fa:a6:11:3c:22:bb:73:45:16:6f:9c:30:49:38: a5:2b:6b:97:ad:67:f3:0c:17:9e:f1:ae:dd:20:5e:5f:d5:ca: 6c:69:64:ff:5c:6f:88:e0:0d:76:61:e1:d1:74:3a:4e:72:a3: a8:5b:52:e2:c1:7b:d2:53:ab:bf:16:55:4f:5f:72:3d:fd:82: df:62:70:62:f9:87:63:c9:ee:1b:0a:a3:84:82:fd:28:43:62: 19:b9:2b:b9:2c:1b:a2:30:c4:eb:dc:2e:b6:b5:57:fc:e1:05: fc:ad:e6:4e:0c:2d:3c:3d:ac:b3:ef:18:4e:2d:33:d1:14:3e: fd:0f:5a:bc:b5:72:e5:c4:61:cf:e0:21:10:35:e6:bf:e1:53: 7d:8c:11:bd:c9:14:b1:cf:7a:32:1c:18:38:36:42:a7:7d:2e: 30:7e:2a:b4:55:ad:29:38:e7:6b:6c:ba:b7:6c:6a:e8:06:e4: 0d:eb:a5:1b:4b:3c:40:4e:58:2d:47:87:2b:57:bc:e6:c2:30: c0:ee:cc:83:8d:9a:a2:99:5f:06:52:1e:e4:49:b9:7f:f5:1a: 12:7d:3a:2f:6f:1c:f8:5b:82:97:ce:57:75:86:ec:db:e3:99: 64:60:95:2b:4d:0c:da:c1:82:dc:8e:23:23:aa:b3:df:4e:7d: 0f:7b:0a:9d -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgISAZt6yUKtpXNBrRMP6E5wwsdGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZTcwNjkzNDU0YmMzMzQ4NWRlYzY5ZDIxOWQwNTAyNjU0 YWMwNGEwHhcNMjYwMTAxMTgxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzlkMjc3Y2Y1YWI3MzE5MTk3ZTBkZjU3NDNiNTU0ODMzNjhmYTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5mj+PRt05R7Bm5oDaBzvJzSVrCsO mS1AL3P/3R6LtXF2aM0+XH/005Rr44yORGve04R/4nX2+grtDon9E3UUs9t9KoYt OH8LhriJPkxK+zWt6WjowwSc8vD0pzFn/cgyWUagGFKQvGPv3furt5Fy8xhckmqk H67WCbmAOISz5DJpUds6+nQvOakoqwCNf3s1rbIiRpyB+p8geN8s3wHxzLBiqZN1 lBnLJWUE2M7kreYM2+igyQqdkeEjsg998XZkf2NdM2R3CsvrfwtvHCSboGTiaxiL 4UVgnQKjIiGeZwbkx9CU2VEggH425WP/DhfweN7t3auoDWSQJDJQdVSURwIDAQAB o4ICQDCCAjwwHQYDVR0OBBYEFMedJ3z1q3MZGX4N9XQ7VUgzaPpdMB8GA1UdIwQY MBaAFP/nBpNFS8M0hd7GnSGdBQJlSsBKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXy1jR2swVkx3elNGM3NhZElaMEZBbVZLd0VvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8wM2U0ZjctMTBmMy00MTE0LWExZTUt MzUwMjY1OGFlNmY1LzEveDUwbmZQV3JjeGtaZmczMWREdFZTRE5vLWwwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC8wM2U0ZjctMTBmMy00MTE0LWExZTUtMzUwMjY1OGFlNmY1 LzEvXy1jR2swVkx3elNGM3NhZElaMEZBbVZLd0VvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFYGCCsGAQUFBwEHAQH/BEcwRTASBAIAATAMAwQCBbU4AwQA W99DMC8EAgACMCkDBwAqDKdAAQADBgIqDKdBAAMGAioMp0EQAwYDKgynQSADBgIq DKdBMDANBgkqhkiG9w0BAQsFAAOCAQEATrRZnfqmETwiu3NFFm+cMEk4pStrl61n 8wwXnvGu3SBeX9XKbGlk/1xviOANdmHh0XQ6TnKjqFtS4sF70lOrvxZVT19yPf2C 32JwYvmHY8nuGwqjhIL9KENiGbkruSwbojDE69wutrVX/OEF/K3mTgwtPD2ss+8Y Ti0z0RQ+/Q9avLVy5cRhz+AhEDXmv+FTfYwRvckUsc96MhwYODZCp30uMH4qtFWt KTjna2y6t2xq6AbkDeulG0s8QE5YLUeHK1e85sIwwO7Mg42aoplfBlIe5Em5f/Ua En06L28c+FuCl85XdYbs2+OZZGCVK00M2sGC3I4jI6qz3059D3sKnQ== -----END CERTIFICATE-----Generated at Tue Jan 27 08:48:13 2026 by rpki-client