This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/_5CTbNuX6fLN7jDqdj1oQp0kARc.roa File: _5CTbNuX6fLN7jDqdj1oQp0kARc.roa (raw, json) Hash identifier: Ha0LgykvjQP+9qGPn28IFIuJ0yQRLEpHe1bDMbGiuiE= Subject key identifier: FF:90:93:6C:DB:97:E9:F2:CD:EE:30:EA:76:3D:68:42:9D:24:01:17 Certificate issuer: /CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba Certificate serial: 019B7B36AB73DB042E84C7D847B31FA3DA42 Authority key identifier: 5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/_5CTbNuX6fLN7jDqdj1oQp0kARc.roa Signing time: Thu 01 Jan 2026 20:18:59 +0000 ROA not before: Thu 01 Jan 2026 20:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 4766 IP address blocks: 45.92.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:ab:73:db:04:2e:84:c7:d8:47:b3:1f:a3:da:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba Validity Not Before: Jan 1 20:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff90936cdb97e9f2cdee30ea763d68429d240117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:eb:2f:93:8f:1d:0e:31:b6:46:b0:f9:d3:1e: a6:a0:10:cc:7d:40:b2:2d:52:53:89:24:61:37:48: 2d:43:6b:8e:d2:08:fe:0d:74:2f:92:ca:13:b8:cf: ea:61:6d:30:b7:e2:44:e7:dd:55:41:9a:56:de:f3: 33:12:39:35:b3:22:8b:ad:06:c4:25:31:30:5f:59: d6:e4:b9:b0:db:fa:b2:00:02:ca:3a:b0:41:bc:37: b2:08:93:7e:cd:73:3a:24:5f:38:1e:f7:c8:79:76: 2d:18:97:4e:c1:f5:76:5d:ed:41:53:98:83:6f:1e: 15:34:a6:e3:8e:47:b8:1a:77:33:d5:32:29:ce:d0: 74:cd:59:a8:ef:e3:be:f5:5a:c9:f3:35:ce:9c:dd: 43:2b:8d:1b:fe:37:f9:0b:22:45:10:4c:09:a1:b6: a6:5f:c2:de:10:78:f8:bd:cf:0d:fe:41:14:d2:9f: 65:59:6b:3e:73:c3:39:35:b4:4c:d1:f8:5c:ef:28: c5:3e:c9:b2:f2:6f:51:b6:1d:eb:ad:80:ec:13:09: ce:19:e3:7e:c2:16:f5:02:c8:92:66:e4:9e:87:f3: 3b:5a:2a:da:96:45:04:11:38:4b:36:c5:bb:95:8e: 90:4a:c6:43:58:54:02:cc:8e:85:00:53:02:d2:f6: 2d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:90:93:6C:DB:97:E9:F2:CD:EE:30:EA:76:3D:68:42:9D:24:01:17 X509v3 Authority Key Identifier: keyid:5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/_5CTbNuX6fLN7jDqdj1oQp0kARc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.92.104.0/22 Signature Algorithm: sha256WithRSAEncryption 20:7a:88:2f:0b:2e:18:3c:68:a0:1c:c0:35:e9:15:89:91:0a: 69:25:b9:99:03:9c:0d:dc:3d:ef:95:81:3e:f6:9b:5c:bf:2a: f0:e8:77:e8:19:a5:3a:6f:bf:49:7c:d3:ad:0a:e8:b3:f2:43: 59:c5:a1:8a:a3:18:07:cb:4a:b7:5b:84:56:fb:7a:3f:70:6e: b8:9e:96:85:9f:cb:81:72:ed:80:b3:02:ce:a4:e2:cf:15:bc: 65:07:7b:2b:e8:2b:61:5b:a2:f7:cd:af:6e:72:e4:42:ea:c1: 7c:7e:91:9a:14:7e:c0:74:5d:6d:39:99:3b:94:6c:79:56:d1: ce:c5:3e:a7:af:62:ec:6e:67:5a:12:1a:c4:b7:f7:53:c7:21: eb:7a:df:ae:a8:de:c6:0d:11:72:2a:a6:e4:80:25:7d:c6:70: a2:81:25:a2:4e:1f:d7:65:8d:c9:57:81:d0:28:89:b2:03:16: a7:5f:1f:95:11:6c:4e:b1:6b:fc:d0:15:52:55:7f:b7:be:35: c1:a7:ed:2b:b8:52:cd:4f:41:ea:40:62:43:bf:0c:43:e4:28: 69:38:cd:ee:b2:96:33:1d:d4:5f:6d:45:da:b9:46:b9:8b:bb: bd:d1:10:32:f9:9a:09:16:5b:3d:3f:b7:13:cd:3b:45:88:95: 96:30:5c:35 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nqtz2wQuhMfYR7Mfo9pCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZjMxYWZjMzZjYjY5NTUwMDdmZTk3ZWQ0YTVlMzE4NWQy MjcxYmEwHhcNMjYwMTAxMjAxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjkwOTM2Y2RiOTdlOWYyY2RlZTMwZWE3NjNkNjg0MjlkMjQwMTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmusvk48dDjG2RrD50x6moBDMfUCy LVJTiSRhN0gtQ2uO0gj+DXQvksoTuM/qYW0wt+JE591VQZpW3vMzEjk1syKLrQbE JTEwX1nW5Lmw2/qyAALKOrBBvDeyCJN+zXM6JF84HvfIeXYtGJdOwfV2Xe1BU5iD bx4VNKbjjke4Gncz1TIpztB0zVmo7+O+9VrJ8zXOnN1DK40b/jf5CyJFEEwJobam X8LeEHj4vc8N/kEU0p9lWWs+c8M5NbRM0fhc7yjFPsmy8m9Rth3rrYDsEwnOGeN+ whb1AsiSZuSeh/M7WiralkUEEThLNsW7lY6QSsZDWFQCzI6FAFMC0vYtfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP+Qk2zbl+nyze4w6nY9aEKdJAEXMB8GA1UdIwQY MBaAFFzzGvw2y2lVAH/pftSl4xhdInG6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFBNYV9EYkxhVlVBZi1sLTFLWGpHRjBpY2JvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80NThlYzMtMDQ1MS00ZTQxLTlhMzQt NzM2ZDEyODg4Y2E4LzEvXzVDVGJOdVg2ZkxON2pEcWRqMW9RcDBrQVJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy80NThlYzMtMDQ1MS00ZTQxLTlhMzQtNzM2ZDEyODg4Y2E4 LzEvWFBNYV9EYkxhVlVBZi1sLTFLWGpHRjBpY2JvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVxoMA0G CSqGSIb3DQEBCwUAA4IBAQAgeogvCy4YPGigHMA16RWJkQppJbmZA5wN3D3vlYE+ 9ptcvyrw6HfoGaU6b79JfNOtCuiz8kNZxaGKoxgHy0q3W4RW+3o/cG64npaFn8uB cu2AswLOpOLPFbxlB3sr6CthW6L3za9ucuRC6sF8fpGaFH7AdF1tOZk7lGx5VtHO xT6nr2LsbmdaEhrEt/dTxyHret+uqN7GDRFyKqbkgCV9xnCigSWiTh/XZY3JV4HQ KImyAxanXx+VEWxOsWv80BVSVX+3vjXBp+0ruFLNT0HqQGJDvwxD5ChpOM3uspYz HdRfbUXauUa5i7u90RAy+ZoJFls9P7cTzTtFiJWWMFw1 -----END CERTIFICATE-----Generated at Fri Jan 2 19:23:38 2026 by rpki-client