This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/XJYCc-6BNqmVgSk-C1dqamCfuzU.roa File: XJYCc-6BNqmVgSk-C1dqamCfuzU.roa (raw, json) Hash identifier: ntK610t2h1EK7JKDX5CJpVZikKxubF7FACFn7N9zc7I= Subject key identifier: 5C:96:02:73:EE:81:36:A9:95:81:29:3E:0B:57:6A:6A:60:9F:BB:35 Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B76EADAA15A6DAA00830C11A6107A0BA6 Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/XJYCc-6BNqmVgSk-C1dqamCfuzU.roa Signing time: Thu 01 Jan 2026 00:17:41 +0000 ROA not before: Thu 01 Jan 2026 00:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215026 IP address blocks: 5.180.34.0/24 maxlen: 24 45.89.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:da:a1:5a:6d:aa:00:83:0c:11:a6:10:7a:0b:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Jan 1 00:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c960273ee8136a99581293e0b576a6a609fbb35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:89:40:15:c5:4a:e1:8b:6c:d6:eb:72:b5:c1: 89:01:f4:27:59:4c:75:a8:85:9c:0d:e1:32:b5:dd: 10:95:5d:9b:87:ec:84:6b:85:d3:4a:84:b7:e3:38: 74:9c:34:68:13:05:ed:4b:ba:6d:91:d7:6b:57:5a: 52:af:db:6f:d3:ce:81:7f:c9:9e:5a:9d:8d:56:90: 03:11:f1:be:cf:e4:ce:6a:52:f7:00:d0:7b:4d:d0: 82:5a:a4:e5:55:19:fb:4b:08:88:9c:58:63:ec:a3: cd:09:55:18:76:da:3d:a7:ac:d2:b4:b1:9d:45:04: c4:91:72:4f:2e:f9:ee:24:95:56:b1:54:50:d2:06: cb:f2:b1:12:04:b1:1b:0c:e1:30:db:af:3f:e7:39: 24:d8:50:dc:e9:7c:22:cd:4f:cf:b7:8f:4d:b8:65: 5c:75:fa:07:5a:9b:ec:79:eb:19:94:41:a9:e3:1d: 31:8a:b2:16:1a:94:af:5b:3b:c4:85:93:f1:ac:18: ea:2d:93:6a:74:c4:e2:96:15:1b:ac:75:e2:f1:d7: 00:b0:e1:c9:30:12:ce:a0:d6:2c:f2:1c:2f:fd:e8: 67:25:a9:6b:36:60:33:ed:71:6b:81:e2:75:8c:ee: dc:9c:d1:29:d5:d0:6b:4e:68:ca:9b:7a:c5:8b:82: 0c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:96:02:73:EE:81:36:A9:95:81:29:3E:0B:57:6A:6A:60:9F:BB:35 X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/XJYCc-6BNqmVgSk-C1dqamCfuzU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.34.0/24 45.89.99.0/24 Signature Algorithm: sha256WithRSAEncryption d6:ae:95:a6:79:61:a1:4b:10:1e:10:f5:c1:2a:a1:5b:75:e0: dc:42:0d:83:a6:82:af:f1:66:b5:d6:5d:7e:eb:90:5a:b1:8e: c3:56:31:e4:6a:41:5a:9f:42:39:b9:6a:36:44:c6:27:12:90: bd:06:36:fa:c0:92:a0:0a:ec:af:78:62:c5:2e:cd:fb:97:84: ce:27:be:3f:47:9e:20:40:f1:96:66:b8:23:00:ae:55:57:6c: 5b:50:55:15:81:9d:e5:5a:53:d8:b3:6d:0f:05:4c:a3:f3:62: ad:e4:fb:a0:96:32:43:03:f5:ba:05:ff:be:2f:0a:07:db:65: b7:9a:bd:32:d9:5f:24:04:1a:09:e3:1d:73:9d:44:7a:42:8e: 94:dd:9a:da:8a:8a:5e:31:bb:83:f8:1e:16:6f:63:64:58:8f: d7:92:67:93:21:5a:5e:34:7b:53:e1:d4:13:b1:fc:cd:f6:9a: d7:e7:54:96:7f:62:1d:25:a1:11:34:2b:42:ca:f9:3b:3a:9a: c7:22:84:63:ab:1d:a5:b8:45:12:11:49:c2:4e:69:c5:39:70: 7d:b9:da:d2:93:00:42:3e:24:d7:e6:e4:a5:f1:2d:c2:ac:1e: 10:39:3f:5d:33:ae:10:0e:56:f1:84:4b:31:3f:8d:b3:a9:39: 33:2f:c5:16 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt26tqhWm2qAIMMEaYQegumMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjYwMTAxMDAxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Yzk2MDI3M2VlODEzNmE5OTU4MTI5M2UwYjU3NmE2YTYwOWZiYjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYlAFcVK4Yts1utytcGJAfQnWUx1 qIWcDeEytd0QlV2bh+yEa4XTSoS34zh0nDRoEwXtS7ptkddrV1pSr9tv086Bf8me Wp2NVpADEfG+z+TOalL3ANB7TdCCWqTlVRn7SwiInFhj7KPNCVUYdto9p6zStLGd RQTEkXJPLvnuJJVWsVRQ0gbL8rESBLEbDOEw268/5zkk2FDc6XwizU/Pt49NuGVc dfoHWpvseesZlEGp4x0xirIWGpSvWzvEhZPxrBjqLZNqdMTilhUbrHXi8dcAsOHJ MBLOoNYs8hwv/ehnJalrNmAz7XFrgeJ1jO7cnNEp1dBrTmjKm3rFi4IM/wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFyWAnPugTaplYEpPgtXampgn7s1MB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvWEpZQ2MtNkJOcW1WZ1NrLUMxZHFhbUNmdXpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABbQiAwQA LVljMA0GCSqGSIb3DQEBCwUAA4IBAQDWrpWmeWGhSxAeEPXBKqFbdeDcQg2DpoKv 8Wa11l1+65BasY7DVjHkakFan0I5uWo2RMYnEpC9Bjb6wJKgCuyveGLFLs37l4TO J74/R54gQPGWZrgjAK5VV2xbUFUVgZ3lWlPYs20PBUyj82Kt5PugljJDA/W6Bf++ LwoH22W3mr0y2V8kBBoJ4x1znUR6Qo6U3ZraiopeMbuD+B4Wb2NkWI/XkmeTIVpe NHtT4dQTsfzN9prX51SWf2IdJaERNCtCyvk7OprHIoRjqx2luEUSEUnCTmnFOXB9 udrSkwBCPiTX5uSl8S3CrB4QOT9dM64QDlbxhEsxP42zqTkzL8UW -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:16 2026 by rpki-client