This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/XDqlN_taZIdM6DdjER8uW1UFODI.roa File: XDqlN_taZIdM6DdjER8uW1UFODI.roa (raw, json) Hash identifier: 6ngdrJA/sMfopr75z6wriVhW2HqdoLfI0EofWQVGvGQ= Subject key identifier: 5C:3A:A5:37:FB:5A:64:87:4C:E8:37:63:11:1F:2E:5B:55:05:38:32 Certificate issuer: /CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336 Certificate serial: 019B797F1779C590E29A1CAA5566D1B88B3F Authority key identifier: 5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/XDqlN_taZIdM6DdjER8uW1UFODI.roa Signing time: Thu 01 Jan 2026 12:18:50 +0000 ROA not before: Thu 01 Jan 2026 12:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57829 IP address blocks: 178.22.96.0/21 maxlen: 21 185.81.12.0/22 maxlen: 22 185.81.14.0/23 maxlen: 23 2a00:ce60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:17:79:c5:90:e2:9a:1c:aa:55:66:d1:b8:8b:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336 Validity Not Before: Jan 1 12:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c3aa537fb5a64874ce83763111f2e5b55053832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3b:b4:34:f5:b3:0b:d0:90:e2:12:05:f8:50: 5f:68:08:d3:9f:df:e9:7c:38:ce:42:e0:9b:11:9d: 88:ce:10:89:21:ba:a5:c4:77:32:ae:af:77:4b:49: 5d:ae:9c:87:c1:41:e0:7c:9c:38:14:f9:bc:38:4d: 34:4b:fb:e7:f9:8d:08:c0:1b:1c:31:96:4e:10:c6: 99:ff:36:4a:30:59:a7:b2:f0:f0:13:51:13:c2:21: 1c:37:81:86:84:19:42:ed:97:e9:37:2d:52:11:e9: 1b:42:59:5d:bc:a8:ab:cd:04:ae:e8:92:cc:ff:10: c6:93:2c:24:03:e2:ea:53:1d:90:ec:7e:00:0b:88: 42:e8:37:f7:18:60:aa:f1:93:59:c1:2d:56:47:6b: 7b:4b:38:7b:b4:04:98:39:eb:4d:3f:9d:17:8d:b3: f6:18:c5:f8:03:94:36:ee:23:7d:fb:78:ca:0c:cd: ed:02:8e:8e:ca:fb:9a:e4:5c:a3:c1:0c:13:9c:e4: ec:0a:78:89:43:d7:a7:79:a6:13:44:4f:0a:f7:cb: ca:c7:78:21:5c:10:ba:de:e8:2b:59:e3:f7:34:4b: 74:3e:02:ce:79:16:ed:1a:2e:15:cc:61:15:f5:a0: ad:92:d9:53:82:c8:b9:bf:3a:4b:1a:fa:54:95:24: 5a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:3A:A5:37:FB:5A:64:87:4C:E8:37:63:11:1F:2E:5B:55:05:38:32 X509v3 Authority Key Identifier: keyid:5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/XDqlN_taZIdM6DdjER8uW1UFODI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.22.96.0/21 185.81.12.0/22 IPv6: 2a00:ce60::/32 Signature Algorithm: sha256WithRSAEncryption 0b:00:60:0a:2c:4d:f8:70:33:11:2b:64:f4:7d:21:fd:08:2c: 87:9b:52:67:fe:32:97:f2:fb:06:f4:08:fc:ca:8d:75:65:a0: a9:74:ba:f7:ff:e4:f0:f0:65:db:d5:60:3c:9c:0f:7c:9f:e5: ba:a3:e9:b7:0f:85:da:50:f8:70:5c:3c:d5:17:6a:fd:6a:b2: 37:91:3d:34:77:08:91:75:e2:40:f4:a1:80:48:c9:67:22:51: d5:f7:b5:9a:9c:70:06:f8:d9:17:99:7a:fb:2b:26:33:4f:9a: 75:0f:13:c8:36:9c:1a:04:41:f1:82:be:c1:11:10:51:e8:3b: ee:2b:b1:ce:eb:5d:46:0b:89:c1:55:18:cb:0d:f7:95:66:d5: d6:11:fb:4b:a2:e1:81:6a:1c:cd:88:6a:52:a0:9f:26:fb:74: 8c:47:d7:52:1e:5a:4c:b7:3f:1b:6e:62:b0:fb:b7:00:26:ed: 38:2b:f8:37:98:eb:af:eb:df:10:75:90:b2:92:b4:18:fd:eb: b4:26:76:3f:3f:dd:ed:8a:23:52:d6:4d:d3:91:e0:e1:82:2b: 42:09:42:71:3b:29:e0:94:59:61:fa:05:f6:d9:2a:17:ef:6d: ad:1b:95:26:e9:aa:80:41:34:a7:54:88:51:ff:3b:c4:7b:03: fe:c9:ae:4a -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5fxd5xZDimhyqVWbRuIs/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmOTlmZGUwZDYzYjExYjVjMmRkODE2YzBmOTNjMmVhNTgz NTAzMzYwHhcNMjYwMTAxMTIxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzNhYTUzN2ZiNWE2NDg3NGNlODM3NjMxMTFmMmU1YjU1MDUzODMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszu0NPWzC9CQ4hIF+FBfaAjTn9/p fDjOQuCbEZ2IzhCJIbqlxHcyrq93S0ldrpyHwUHgfJw4FPm8OE00S/vn+Y0IwBsc MZZOEMaZ/zZKMFmnsvDwE1ETwiEcN4GGhBlC7ZfpNy1SEekbQlldvKirzQSu6JLM /xDGkywkA+LqUx2Q7H4AC4hC6Df3GGCq8ZNZwS1WR2t7Szh7tASYOetNP50XjbP2 GMX4A5Q27iN9+3jKDM3tAo6Oyvua5FyjwQwTnOTsCniJQ9eneaYTRE8K98vKx3gh XBC63ugrWeP3NEt0PgLOeRbtGi4VzGEV9aCtktlTgsi5vzpLGvpUlSRatQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFFw6pTf7WmSHTOg3YxEfLltVBTgyMB8GA1UdIwQY MBaAFF+Z/eDWOxG1wt2BbA+TwupYNQM2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDVuOTROWTdFYlhDM1lGc0Q1UEM2bGcxQXpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9mMTE2ZDctODUxOS00OTI0LThkMWQt NGM3N2Q2MDVhZmVjLzEvWERxbE5fdGFaSWRNNkRkakVSOHVXMVVGT0RJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9mMTE2ZDctODUxOS00OTI0LThkMWQtNGM3N2Q2MDVhZmVj LzEvWDVuOTROWTdFYlhDM1lGc0Q1UEM2bGcxQXpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDshZgAwQC uVEMMA0EAgACMAcDBQAqAM5gMA0GCSqGSIb3DQEBCwUAA4IBAQALAGAKLE34cDMR K2T0fSH9CCyHm1Jn/jKX8vsG9Aj8yo11ZaCpdLr3/+Tw8GXb1WA8nA98n+W6o+m3 D4XaUPhwXDzVF2r9arI3kT00dwiRdeJA9KGASMlnIlHV97WanHAG+NkXmXr7KyYz T5p1DxPINpwaBEHxgr7BERBR6DvuK7HO611GC4nBVRjLDfeVZtXWEftLouGBahzN iGpSoJ8m+3SMR9dSHlpMtz8bbmKw+7cAJu04K/g3mOuv698QdZCykrQY/eu0JnY/ P93tiiNS1k3TkeDhgitCCUJxOynglFlh+gX22SoX722tG5Um6aqAQTSnVIhR/zvE ewP+ya5K -----END CERTIFICATE-----Generated at Mon Jan 26 14:17:28 2026 by rpki-client