This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X6Ge5pTJM2TQvpxoovtE1H9eUeA.roa File: X6Ge5pTJM2TQvpxoovtE1H9eUeA.roa (raw, json) Hash identifier: f5V2NLGb6EKAPQor95L+ViYAFY7a+iuaMDNRzXJ+gZU= Subject key identifier: 5F:A1:9E:E6:94:C9:33:64:D0:BE:9C:68:A2:FB:44:D4:7F:5E:51:E0 Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094 Certificate serial: 019B44E09D4D7C770F7377ADAEFD2107D1B0 Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X6Ge5pTJM2TQvpxoovtE1H9eUeA.roa Signing time: Mon 22 Dec 2025 07:05:29 +0000 ROA not before: Mon 22 Dec 2025 07:05:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 29226 IP address blocks: 130.49.143.0/24 maxlen: 24 130.49.146.0/24 maxlen: 24 130.49.153.0/24 maxlen: 24 155.212.245.0/24 maxlen: 24 155.212.246.0/24 maxlen: 24 155.212.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 10:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:e0:9d:4d:7c:77:0f:73:77:ad:ae:fd:21:07:d1:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094 Validity Not Before: Dec 22 07:05:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5fa19ee694c93364d0be9c68a2fb44d47f5e51e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:26:34:1f:87:12:80:aa:6e:5d:75:a7:e0:1b: 01:09:60:da:69:6d:d6:aa:de:2f:16:27:ea:d1:cb: f5:3c:4a:fe:9f:29:5f:ce:e1:3e:8f:b5:5d:2e:27: f0:26:a6:4f:48:04:f3:0b:52:9d:bd:2e:c3:6c:aa: 77:05:ee:4d:5f:20:bc:9e:df:66:21:b7:90:d6:63: 6f:26:de:fd:7d:c4:49:48:b4:f9:c7:cc:a5:a5:32: c1:fb:0b:bb:d0:a0:b8:d5:9d:32:18:33:09:36:08: 01:a9:8e:43:79:00:e5:a3:75:87:5e:94:94:8e:fb: 65:84:80:c3:2f:de:16:0e:b7:4f:7b:44:96:59:42: 16:23:a5:5d:a2:49:7a:07:2e:d5:02:17:17:c4:45: de:23:bf:4c:c7:48:d8:38:86:6f:a4:82:d2:bb:4a: 2b:4e:5b:4b:83:95:c5:5b:bb:34:94:70:69:18:40: cb:35:18:eb:91:ec:81:e8:c0:ef:27:64:ac:5a:34: 39:6f:2b:b8:76:b1:0f:3e:ae:f8:74:ab:4a:2c:d2: 57:8a:0d:cc:b5:6c:99:67:7a:59:29:ff:fe:29:fc: 24:8e:72:ea:fe:d6:1c:84:04:d2:9b:ab:f3:dc:3b: 89:78:79:ef:02:b8:b0:45:11:3b:ea:ca:45:93:04: 40:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:A1:9E:E6:94:C9:33:64:D0:BE:9C:68:A2:FB:44:D4:7F:5E:51:E0 X509v3 Authority Key Identifier: keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X6Ge5pTJM2TQvpxoovtE1H9eUeA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.49.143.0/24 130.49.146.0/24 130.49.153.0/24 155.212.245.0-155.212.247.255 Signature Algorithm: sha256WithRSAEncryption 62:8e:06:c8:88:ae:f4:2d:e9:ce:47:be:4c:5f:72:b6:c3:96: 6e:24:97:e6:e5:f9:f2:18:19:87:2f:c0:2c:10:85:2e:03:0a: f7:91:7b:f3:cb:55:1a:eb:8b:c1:fa:1f:a3:8e:ef:03:cc:f9: a2:4c:e4:61:22:7c:8c:5d:83:90:36:28:ca:46:aa:60:f4:42: ae:f9:15:0a:d4:08:b2:0d:71:e5:94:8a:15:ec:8b:b8:ca:24: d4:28:85:f0:a3:36:27:74:08:5c:48:82:c2:61:cc:00:6f:cf: 68:ad:5e:85:31:12:bf:0b:de:f6:2e:4e:0c:db:00:a8:9b:78: 21:8f:0b:f3:89:0b:d3:7f:50:ea:bc:93:30:f9:89:71:17:18: b0:6e:d4:4a:df:ad:0b:2c:e3:36:86:b9:19:de:f0:5c:43:03: 07:64:54:7c:15:32:71:1c:11:ba:d0:18:c6:1f:db:02:43:bb: eb:5d:66:75:e1:b5:28:3d:12:b3:5e:94:1b:0e:aa:2a:c7:36: 44:da:ba:d7:95:e3:e5:29:6c:b3:cf:b7:df:ad:25:f3:a4:e8: 54:c9:37:4b:40:d2:c0:d6:39:5b:e3:f5:12:c5:06:db:35:f7: ca:b9:52:d3:de:c3:7c:54:a8:34:b3:5e:86:5b:45:15:71:83: 5a:6c:65:9b -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZtE4J1NfHcPc3etrv0hB9GwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYmU2NWFlMjNmMjA3ZmE2OTUyNTVmNTVhOTA3YWMxNjA4 YmUwOTQwHhcNMjUxMjIyMDcwNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmExOWVlNjk0YzkzMzY0ZDBiZTljNjhhMmZiNDRkNDdmNWU1MWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiY0H4cSgKpuXXWn4BsBCWDaaW3W qt4vFifq0cv1PEr+nylfzuE+j7VdLifwJqZPSATzC1KdvS7DbKp3Be5NXyC8nt9m IbeQ1mNvJt79fcRJSLT5x8ylpTLB+wu70KC41Z0yGDMJNggBqY5DeQDlo3WHXpSU jvtlhIDDL94WDrdPe0SWWUIWI6Vdokl6By7VAhcXxEXeI79Mx0jYOIZvpILSu0or TltLg5XFW7s0lHBpGEDLNRjrkeyB6MDvJ2SsWjQ5byu4drEPPq74dKtKLNJXig3M tWyZZ3pZKf/+KfwkjnLq/tYchATSm6vz3DuJeHnvAriwRRE76spFkwRAYwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFF+hnuaUyTNk0L6caKL7RNR/XlHgMB8GA1UdIwQY MBaAFF++Za4j8gf6aVJV9VqQesFgi+CUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDc1bHJpUHlCX3BwVWxYMVdwQjZ3V0NMNEpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9mNDMxOWYtM2RmYi00MmVhLWJhOTUt NDkyYWIzNzI2ODlkLzEvWDZHZTVwVEpNMlRRdnB4b292dEUxSDllVWVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9mNDMxOWYtM2RmYi00MmVhLWJhOTUtNDkyYWIzNzI2ODlk LzEvWDc1bHJpUHlCX3BwVWxYMVdwQjZ3V0NMNEpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAgjGPAwQA gjGSAwQAgjGZMAwDBACb1PUDBAOb1PAwDQYJKoZIhvcNAQELBQADggEBAGKOBsiI rvQt6c5HvkxfcrbDlm4kl+bl+fIYGYcvwCwQhS4DCveRe/PLVRrri8H6H6OO7wPM +aJM5GEifIxdg5A2KMpGqmD0Qq75FQrUCLINceWUihXsi7jKJNQohfCjNid0CFxI gsJhzABvz2itXoUxEr8L3vYuTgzbAKibeCGPC/OJC9N/UOq8kzD5iXEXGLBu1Erf rQss4zaGuRne8FxDAwdkVHwVMnEcEbrQGMYf2wJDu+tdZnXhtSg9ErNelBsOqirH NkTauteV4+UpbLPPt9+tJfOk6FTJN0tA0sDWOVvj9RLFBts198q5UtPew3xUqDSz XoZbRRVxg1psZZs= -----END CERTIFICATE-----Generated at Thu Jan 1 19:26:50 2026 by rpki-client