This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/_xvN7ReUQIzqK4Sppr9GkwYH7Ak.roa File: _xvN7ReUQIzqK4Sppr9GkwYH7Ak.roa (raw, json) Hash identifier: z0Os3sovtrghGxp59b0GlkVK3Sj5Dv11yuaHeKK8XCo= Subject key identifier: FF:1B:CD:ED:17:94:40:8C:EA:2B:84:A9:A6:BF:46:93:06:07:EC:09 Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B76EAB6763402FE3FCD481FE8CDAADA8D Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/_xvN7ReUQIzqK4Sppr9GkwYH7Ak.roa Signing time: Thu 01 Jan 2026 00:17:32 +0000 ROA not before: Thu 01 Jan 2026 00:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25693 IP address blocks: 5.253.38.0/24 maxlen: 24 45.15.143.0/24 maxlen: 24 45.92.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:b6:76:34:02:fe:3f:cd:48:1f:e8:cd:aa:da:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Jan 1 00:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff1bcded1794408cea2b84a9a6bf46930607ec09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:6c:5d:59:b3:d1:92:2a:d2:7a:40:07:7d:77: 78:48:74:8d:d7:76:f6:c0:e8:31:38:22:47:d9:ba: 93:c6:66:d5:fc:76:7a:13:35:d5:b0:ab:16:b2:be: 94:ee:33:8f:88:75:21:e7:af:52:bd:0f:46:f9:38: d6:79:fc:db:e0:de:9c:b4:b3:44:5c:4b:1d:61:33: 09:91:e5:dc:c4:1a:88:22:39:dd:2b:5d:19:31:79: 94:b6:e0:a4:bf:34:ce:b3:2f:51:8d:1c:17:39:d9: 99:02:da:e9:87:39:10:47:df:5d:68:18:34:4d:7a: 43:a5:e2:f8:c8:d6:30:3b:c4:78:2d:0e:95:cd:0b: 97:a8:e1:64:5f:1f:af:12:be:d9:c6:77:e7:45:21: a3:2d:dd:be:97:a2:6f:98:61:e0:e2:a0:77:ec:16: b6:df:02:11:d6:be:ef:52:f3:e7:19:a3:0a:9f:b7: 86:8f:e9:df:22:ed:84:e4:ec:08:06:bc:e3:a2:b8: ea:1c:33:ed:bd:35:e9:58:d2:e8:15:71:d1:3e:0f: af:f5:41:58:36:cf:a2:a1:71:f3:62:b6:88:65:e5: 0e:d6:9d:b8:f8:9e:94:e5:10:f0:c5:b2:e4:af:75: aa:d4:5c:3f:01:d0:52:23:c3:fb:44:e1:9d:59:66: 1b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:1B:CD:ED:17:94:40:8C:EA:2B:84:A9:A6:BF:46:93:06:07:EC:09 X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/_xvN7ReUQIzqK4Sppr9GkwYH7Ak.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.38.0/24 45.15.143.0/24 45.92.195.0/24 Signature Algorithm: sha256WithRSAEncryption 59:03:b2:14:cb:fe:16:f0:83:5c:8b:5a:94:2d:3c:8f:41:d0: 1b:f2:07:14:53:4b:1a:fe:c2:f9:8b:75:ce:3b:e6:4c:94:c5: d2:ed:0a:3f:11:f8:60:e6:45:b9:e2:42:90:eb:61:b2:69:c9: 03:c6:9a:66:0b:67:39:2c:d1:cf:52:8d:c1:55:f7:fd:a1:b0: c2:d1:9e:d3:99:43:38:60:be:4c:38:bc:48:fb:99:7d:35:86: 58:07:34:e1:d0:32:0a:83:8e:a2:46:59:20:55:a2:90:ea:65: 53:06:25:c4:55:06:d9:f6:6d:d0:a7:d7:03:4c:6c:5c:22:25: 50:f5:fd:8f:74:71:1d:29:96:c8:21:bb:f7:22:bd:ac:6a:3a: 1e:fc:97:55:4d:2f:96:ec:15:e2:16:be:2a:49:cb:10:18:30: 0c:08:30:04:f2:58:62:c6:07:26:01:a8:67:cc:19:11:1e:29: b9:16:ce:e8:69:5e:db:f8:d0:c6:d9:27:f0:9f:61:a4:d0:2e: 2b:16:37:cd:8d:15:30:8b:55:3e:96:4b:96:81:98:d9:36:05: 59:bc:46:06:36:0c:6f:17:5a:3e:98:1c:b7:20:3c:6b:61:9d: 13:de:b8:30:bb:0b:1b:26:88:b0:d0:af:58:b9:81:07:f4:27: b4:db:21:99 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt26rZ2NAL+P81IH+jNqtqNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjYwMTAxMDAxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjFiY2RlZDE3OTQ0MDhjZWEyYjg0YTlhNmJmNDY5MzA2MDdlYzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2xdWbPRkirSekAHfXd4SHSN13b2 wOgxOCJH2bqTxmbV/HZ6EzXVsKsWsr6U7jOPiHUh569SvQ9G+TjWefzb4N6ctLNE XEsdYTMJkeXcxBqIIjndK10ZMXmUtuCkvzTOsy9RjRwXOdmZAtrphzkQR99daBg0 TXpDpeL4yNYwO8R4LQ6VzQuXqOFkXx+vEr7ZxnfnRSGjLd2+l6JvmGHg4qB37Ba2 3wIR1r7vUvPnGaMKn7eGj+nfIu2E5OwIBrzjorjqHDPtvTXpWNLoFXHRPg+v9UFY Ns+ioXHzYraIZeUO1p24+J6U5RDwxbLkr3Wq1Fw/AdBSI8P7ROGdWWYbkwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFP8bze0XlECM6iuEqaa/RpMGB+wJMB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvX3h2TjdSZVVRSXpxSzRTcHByOUdrd1lIN0FrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABf0mAwQA LQ+PAwQALVzDMA0GCSqGSIb3DQEBCwUAA4IBAQBZA7IUy/4W8INci1qULTyPQdAb 8gcUU0sa/sL5i3XOO+ZMlMXS7Qo/Efhg5kW54kKQ62GyackDxppmC2c5LNHPUo3B Vff9obDC0Z7TmUM4YL5MOLxI+5l9NYZYBzTh0DIKg46iRlkgVaKQ6mVTBiXEVQbZ 9m3Qp9cDTGxcIiVQ9f2PdHEdKZbIIbv3Ir2sajoe/JdVTS+W7BXiFr4qScsQGDAM CDAE8lhixgcmAahnzBkRHim5Fs7oaV7b+NDG2Sfwn2Gk0C4rFjfNjRUwi1U+lkuW gZjZNgVZvEYGNgxvF1o+mBy3IDxrYZ0T3rgwuwsbJoiw0K9YuYEH9Ce02yGZ -----END CERTIFICATE-----Generated at Tue Jan 20 12:27:27 2026 by rpki-client