This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/X1C5Q3jf1-ZD6yYqJzqtK8cqHrc.roa File: X1C5Q3jf1-ZD6yYqJzqtK8cqHrc.roa (raw, json) Hash identifier: hB+YPktyMceC694vbXkG0rzfVIksJqPCOyiM62e3fn4= Subject key identifier: 5F:50:B9:43:78:DF:D7:E6:43:EB:26:2A:27:3A:AD:2B:C7:2A:1E:B7 Certificate issuer: /CN=e5805c5fe3450287dcde6ade0d9c9558ba615e32 Certificate serial: 019B79109AE989056C419BEE1A05B42A4BCE Authority key identifier: E5:80:5C:5F:E3:45:02:87:DC:DE:6A:DE:0D:9C:95:58:BA:61:5E:32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/X1C5Q3jf1-ZD6yYqJzqtK8cqHrc.roa Signing time: Thu 01 Jan 2026 10:18:09 +0000 ROA not before: Thu 01 Jan 2026 10:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48817 IP address blocks: 185.139.248.0/22 maxlen: 22 193.22.15.0/24 maxlen: 24 2a10:db40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:9a:e9:89:05:6c:41:9b:ee:1a:05:b4:2a:4b:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5805c5fe3450287dcde6ade0d9c9558ba615e32 Validity Not Before: Jan 1 10:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f50b94378dfd7e643eb262a273aad2bc72a1eb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:22:6e:43:c3:77:3a:a2:6e:5c:0c:b9:24:0e: 5e:04:88:dc:83:65:ce:e5:86:a2:d0:c6:ca:b7:79: a2:ac:36:c9:bf:f1:d6:fb:3a:50:de:93:c3:2b:27: f2:25:a8:5f:9b:c6:72:8d:68:60:57:a2:da:f9:44: 97:5d:f6:fd:60:df:18:e0:de:58:2d:1e:90:dc:4b: 7b:77:72:09:7f:5f:b0:06:a3:f8:80:40:c5:fb:a2: 2c:83:1f:75:db:48:04:29:c2:d5:a9:5e:d8:e1:d9: 1d:51:7f:0e:f0:3a:3c:e0:51:9c:ee:8d:da:c1:09: ad:56:31:b8:4e:65:c7:7e:3f:c6:54:0e:13:91:0d: 4b:92:7b:53:6e:3d:3c:4a:c2:d1:f9:a9:34:88:4d: 75:30:18:14:a8:b6:c6:5b:fd:8f:66:fb:48:ad:1e: 1f:67:3c:7f:f7:ac:a2:f3:85:79:e1:eb:f9:65:e5: 9a:5c:53:e2:85:c0:73:3b:f8:fb:e8:db:cd:0a:09: 6a:97:39:8d:99:e4:e2:ae:1a:54:f9:94:f0:17:f9: b0:b9:7d:45:e6:3d:8c:95:ab:ef:db:72:f5:51:ad: 12:1d:7a:e4:49:52:df:b3:34:37:86:3a:ed:6b:67: c3:39:7a:52:f3:7b:35:94:90:07:ad:6a:0f:18:df: e4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:50:B9:43:78:DF:D7:E6:43:EB:26:2A:27:3A:AD:2B:C7:2A:1E:B7 X509v3 Authority Key Identifier: keyid:E5:80:5C:5F:E3:45:02:87:DC:DE:6A:DE:0D:9C:95:58:BA:61:5E:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/X1C5Q3jf1-ZD6yYqJzqtK8cqHrc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.139.248.0/22 193.22.15.0/24 IPv6: 2a10:db40::/29 Signature Algorithm: sha256WithRSAEncryption a7:a7:b6:32:3d:c2:34:48:df:82:f4:25:83:19:91:76:02:c6: 1b:f9:9e:9e:48:14:55:14:3c:3c:bf:11:1b:0c:e9:d9:03:f2: 30:85:92:70:ca:08:92:a2:70:49:b2:4e:f3:7c:cf:cf:09:86: 1d:98:67:81:69:be:f9:4a:4c:c5:17:8e:e7:bd:02:be:a0:69: 67:3a:41:f5:a7:2d:b5:28:b7:c7:6a:53:58:d9:9d:01:a7:68: 9b:b2:3c:30:6f:ec:dc:28:10:9b:a4:88:2c:f1:69:57:4c:6e: 3c:ed:75:f9:5e:02:2f:0a:84:7e:dd:01:7a:85:e1:4d:bf:f5: 6f:3f:6b:9f:25:6b:34:3c:29:ba:7a:60:ee:b9:aa:50:07:05: 4a:55:16:03:8a:15:ef:a8:f0:af:37:db:0d:b1:57:46:95:3c: 40:20:15:01:26:87:6f:ea:a3:ad:d7:5a:85:76:62:38:4b:78: 1d:6f:74:68:5c:71:6e:cf:4f:47:0d:ab:71:72:b9:97:33:47: 7d:47:25:37:a9:c4:5b:0e:73:54:f5:c1:cc:c6:57:70:f9:fe: 52:89:29:ab:0c:39:4c:d1:08:d3:a2:ff:5f:9e:f5:42:25:e9: 60:30:ff:ed:1f:06:9b:a2:6b:d6:03:82:ef:35:07:56:80:4f: 18:f4:88:c8 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5EJrpiQVsQZvuGgW0KkvOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ODA1YzVmZTM0NTAyODdkY2RlNmFkZTBkOWM5NTU4YmE2 MTVlMzIwHhcNMjYwMTAxMTAxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjUwYjk0Mzc4ZGZkN2U2NDNlYjI2MmEyNzNhYWQyYmM3MmExZWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiJuQ8N3OqJuXAy5JA5eBIjcg2XO 5Yai0MbKt3mirDbJv/HW+zpQ3pPDKyfyJahfm8ZyjWhgV6La+USXXfb9YN8Y4N5Y LR6Q3Et7d3IJf1+wBqP4gEDF+6Isgx9120gEKcLVqV7Y4dkdUX8O8Do84FGc7o3a wQmtVjG4TmXHfj/GVA4TkQ1LkntTbj08SsLR+ak0iE11MBgUqLbGW/2PZvtIrR4f Zzx/96yi84V54ev5ZeWaXFPihcBzO/j76NvNCglqlzmNmeTirhpU+ZTwF/mwuX1F 5j2Mlavv23L1Ua0SHXrkSVLfszQ3hjrta2fDOXpS83s1lJAHrWoPGN/kpQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFF9QuUN439fmQ+smKic6rSvHKh63MB8GA1UdIwQY MBaAFOWAXF/jRQKH3N5q3g2clVi6YV4yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVlCY1gtTkZBb2ZjM21yZURaeVZXTHBoWGpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iNGRjM2MtZWNhYi00MzZkLWFjNTIt NTk1MzA3ZjQ3MTEwLzEvWDFDNVEzamYxLVpENnlZcUp6cXRLOGNxSHJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9iNGRjM2MtZWNhYi00MzZkLWFjNTItNTk1MzA3ZjQ3MTEw LzEvNVlCY1gtTkZBb2ZjM21yZURaeVZXTHBoWGpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuYv4AwQA wRYPMA0EAgACMAcDBQMqENtAMA0GCSqGSIb3DQEBCwUAA4IBAQCnp7YyPcI0SN+C 9CWDGZF2AsYb+Z6eSBRVFDw8vxEbDOnZA/IwhZJwygiSonBJsk7zfM/PCYYdmGeB ab75SkzFF47nvQK+oGlnOkH1py21KLfHalNY2Z0Bp2ibsjwwb+zcKBCbpIgs8WlX TG487XX5XgIvCoR+3QF6heFNv/VvP2ufJWs0PCm6emDuuapQBwVKVRYDihXvqPCv N9sNsVdGlTxAIBUBJodv6qOt11qFdmI4S3gdb3RoXHFuz09HDatxcrmXM0d9RyU3 qcRbDnNU9cHMxldw+f5SiSmrDDlM0QjTov9fnvVCJelgMP/tHwabomvWA4LvNQdW gE8Y9IjI -----END CERTIFICATE-----Generated at Tue Feb 10 01:33:53 2026 by rpki-client