This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/55XgO8_Vwqnh0dBKWvVkuxHs6Ww.roa File: 55XgO8_Vwqnh0dBKWvVkuxHs6Ww.roa (raw, json) Hash identifier: Y8RrsYQy5lHgQUMkKZpotYnnwjRaHtFf6Zo8BbV2RP4= Subject key identifier: E7:95:E0:3B:CF:D5:C2:A9:E1:D1:D0:4A:5A:F5:64:BB:11:EC:E9:6C Certificate issuer: /CN=096bf7e6b32a5623f54bb9c737db8f814e93ad39 Certificate serial: 019B7E38D931F7707DB79B25ECA970025CA5 Authority key identifier: 09:6B:F7:E6:B3:2A:56:23:F5:4B:B9:C7:37:DB:8F:81:4E:93:AD:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/55XgO8_Vwqnh0dBKWvVkuxHs6Ww.roa Signing time: Fri 02 Jan 2026 10:20:13 +0000 ROA not before: Fri 02 Jan 2026 10:20:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25591 IP address blocks: 5.183.64.0/22 maxlen: 22 5.188.144.0/22 maxlen: 22 185.104.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:d9:31:f7:70:7d:b7:9b:25:ec:a9:70:02:5c:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=096bf7e6b32a5623f54bb9c737db8f814e93ad39 Validity Not Before: Jan 2 10:20:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e795e03bcfd5c2a9e1d1d04a5af564bb11ece96c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:31:06:38:e0:c2:12:89:29:b9:09:8f:d4:47: 33:1f:e9:f4:b2:c7:54:71:ce:c7:11:28:29:e0:a3: 07:a3:4c:5f:05:ad:67:03:ec:08:11:aa:b6:14:13: cf:5d:3e:ae:47:c1:9f:4c:f6:77:ba:f2:f5:67:fd: 08:97:07:3f:f7:25:b3:b7:6e:0d:aa:78:24:4c:e6: 1a:91:53:b3:c1:73:27:75:a5:51:9e:04:02:db:29: 17:ac:df:59:cd:f8:bb:85:f8:33:7b:64:74:4d:e5: ea:83:82:e6:14:41:d7:51:e6:2d:59:1e:46:d3:e5: 7b:20:b5:62:ff:1b:09:45:b9:33:dc:b3:fe:d8:f6: 09:9f:aa:51:4f:ff:3d:36:af:82:ee:fe:66:a4:32: 33:97:67:cf:b5:74:bd:c1:d1:11:2d:43:25:22:d3: fb:ed:02:ed:fb:db:19:31:73:39:6a:d1:73:d8:a2: b7:c0:e2:f5:87:74:5d:b4:99:c8:1b:cf:50:67:cc: d7:6a:d5:e9:b7:f9:09:3f:2f:1d:9c:c0:f6:d4:5c: f5:c2:99:48:cb:c1:5e:8f:a6:8d:24:d0:17:c5:4d: 85:9c:a0:fd:71:8e:3b:45:ff:a0:9f:f1:8f:38:c7: 07:bd:f3:27:fe:c4:be:f0:a0:36:84:fd:2c:5e:48: 64:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:95:E0:3B:CF:D5:C2:A9:E1:D1:D0:4A:5A:F5:64:BB:11:EC:E9:6C X509v3 Authority Key Identifier: keyid:09:6B:F7:E6:B3:2A:56:23:F5:4B:B9:C7:37:DB:8F:81:4E:93:AD:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/55XgO8_Vwqnh0dBKWvVkuxHs6Ww.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.183.64.0/22 5.188.144.0/22 185.104.4.0/22 Signature Algorithm: sha256WithRSAEncryption 6b:d0:eb:45:a8:2b:72:0d:c1:12:98:93:90:aa:ca:ea:bc:ec: e0:95:4c:da:8a:3b:cf:1e:c7:72:64:46:2d:fb:0a:93:c6:ff: 88:61:93:94:28:d7:cb:07:f6:72:ba:6c:b4:6b:31:af:b2:c0: aa:09:04:b4:72:3c:8b:d4:c2:7d:91:7a:7c:74:d3:72:38:09: 8f:18:a7:37:ed:47:af:b9:1d:a1:c4:73:99:e5:cb:77:3b:54: fe:80:5b:7d:f9:1f:df:17:e9:02:c3:a5:7b:26:10:15:cf:24: 3e:18:b5:e3:49:c9:99:77:37:ad:0a:98:a9:36:02:a9:04:ab: 40:fe:96:26:b8:aa:8f:72:c4:59:3d:67:35:eb:0e:1e:0a:06: 7d:40:a0:53:cc:c4:d5:7a:87:fb:56:ec:0e:23:90:49:7d:a3: 55:21:2c:ba:c3:46:c4:15:d9:90:72:4f:f8:11:9a:86:53:5a: d2:d8:d8:ac:7b:7b:17:1c:bf:84:70:5a:5d:cb:48:c5:6b:eb: 73:69:8e:70:3c:61:09:fa:7b:ff:12:3c:d1:83:08:f9:09:6e: 1c:d4:5e:96:4d:51:e2:1a:83:de:2e:e5:9f:f9:5c:ac:35:f4: a4:20:be:0a:e9:64:26:e0:e8:5b:f9:ad:a6:d7:1a:b4:f7:f5: e1:ca:d0:5f -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+ONkx93B9t5sl7KlwAlylMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NmJmN2U2YjMyYTU2MjNmNTRiYjljNzM3ZGI4ZjgxNGU5 M2FkMzkwHhcNMjYwMTAyMTAyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzk1ZTAzYmNmZDVjMmE5ZTFkMWQwNGE1YWY1NjRiYjExZWNlOTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zEGOODCEokpuQmP1EczH+n0ssdU cc7HESgp4KMHo0xfBa1nA+wIEaq2FBPPXT6uR8GfTPZ3uvL1Z/0Ilwc/9yWzt24N qngkTOYakVOzwXMndaVRngQC2ykXrN9Zzfi7hfgze2R0TeXqg4LmFEHXUeYtWR5G 0+V7ILVi/xsJRbkz3LP+2PYJn6pRT/89Nq+C7v5mpDIzl2fPtXS9wdERLUMlItP7 7QLt+9sZMXM5atFz2KK3wOL1h3RdtJnIG89QZ8zXatXpt/kJPy8dnMD21Fz1wplI y8Fej6aNJNAXxU2FnKD9cY47Rf+gn/GPOMcHvfMn/sS+8KA2hP0sXkhkEwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOeV4DvP1cKp4dHQSlr1ZLsR7OlsMB8GA1UdIwQY MBaAFAlr9+azKlYj9Uu5xzfbj4FOk605MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1d2MzVyTXFWaVAxUzduSE45dVBnVTZUclRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9iNTZiMDEtMjkyZi00YTFkLWJhYTIt YmNkNmFkYTFiOWRhLzEvNTVYZ084X1Z3cW5oMGRCS1d2Vmt1eEhzNld3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9iNTZiMDEtMjkyZi00YTFkLWJhYTItYmNkNmFkYTFiOWRh LzEvQ1d2MzVyTXFWaVAxUzduSE45dVBnVTZUclRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCBbdAAwQC BbyQAwQCuWgEMA0GCSqGSIb3DQEBCwUAA4IBAQBr0OtFqCtyDcESmJOQqsrqvOzg lUzaijvPHsdyZEYt+wqTxv+IYZOUKNfLB/Zyumy0azGvssCqCQS0cjyL1MJ9kXp8 dNNyOAmPGKc37UevuR2hxHOZ5ct3O1T+gFt9+R/fF+kCw6V7JhAVzyQ+GLXjScmZ dzetCpipNgKpBKtA/pYmuKqPcsRZPWc16w4eCgZ9QKBTzMTVeof7VuwOI5BJfaNV ISy6w0bEFdmQck/4EZqGU1rS2Nise3sXHL+EcFpdy0jFa+tzaY5wPGEJ+nv/EjzR gwj5CW4c1F6WTVHiGoPeLuWf+VysNfSkIL4K6WQm4Ohb+a2m1xq09/XhytBf -----END CERTIFICATE-----Generated at Tue Feb 10 02:54:50 2026 by rpki-client