This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/x59UxU_los7Hl1SUMoPUdMaubzU.roa File: x59UxU_los7Hl1SUMoPUdMaubzU.roa (raw, json) Hash identifier: feBONM6ExLV2d5rAGWqq5VdULpcbX2Y0286qupSvhIw= Subject key identifier: C7:9F:54:C5:4F:E5:A2:CE:C7:97:54:94:32:83:D4:74:C6:AE:6F:35 Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b Certificate serial: 019B7CED862BFE7B1950AA0530C66524397F Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/x59UxU_los7Hl1SUMoPUdMaubzU.roa Signing time: Fri 02 Jan 2026 04:18:19 +0000 ROA not before: Fri 02 Jan 2026 04:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60168 IP address blocks: 5.32.128.0/24 maxlen: 24 5.32.129.0/24 maxlen: 24 5.32.130.0/24 maxlen: 24 5.32.131.0/24 maxlen: 24 151.237.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:86:2b:fe:7b:19:50:aa:05:30:c6:65:24:39:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b Validity Not Before: Jan 2 04:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c79f54c54fe5a2cec79754943283d474c6ae6f35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e7:9f:f4:85:a5:ec:3f:46:bd:3d:b5:86:41: 92:10:37:04:ec:88:66:04:a2:7a:0d:83:e8:a0:91: 13:be:db:24:4f:28:db:bc:83:a0:74:0c:47:05:17: 98:db:3d:92:4a:ac:6b:d3:62:29:16:78:bd:cc:83: df:6f:ac:10:d6:e9:ba:38:84:ba:83:6f:0a:fe:81: 96:72:7f:b2:9c:2a:12:64:d0:e9:84:04:20:3a:04: e6:57:d5:21:90:21:6b:7e:9d:81:dc:b5:d5:10:67: 7c:48:94:a1:a5:b5:29:3d:29:86:07:67:39:6b:9b: 24:5d:0b:e4:98:6a:55:54:5f:26:93:b5:00:e8:21: ec:d7:0c:b8:06:53:48:cf:dd:b0:6d:59:00:cd:dc: 19:56:c3:b7:b4:f8:d8:86:5d:a5:01:6c:14:b9:ba: ef:e4:71:24:dd:f5:bc:7f:c5:8b:0b:97:b7:79:c0: 90:4d:85:1d:99:1c:bd:95:09:0d:ce:4f:b5:e1:d6: c8:a9:79:36:4a:c2:2e:0f:3f:b7:cb:57:f6:33:4b: dc:28:f0:6e:25:aa:85:e0:64:49:08:2d:49:74:4a: a1:2f:c4:4e:4d:8f:18:aa:d3:d2:c8:3c:b9:97:e0: e1:54:f1:19:ab:ba:91:47:4a:b0:48:dc:1f:e0:96: d4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:9F:54:C5:4F:E5:A2:CE:C7:97:54:94:32:83:D4:74:C6:AE:6F:35 X509v3 Authority Key Identifier: keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/x59UxU_los7Hl1SUMoPUdMaubzU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.32.128.0/22 151.237.136.0/23 Signature Algorithm: sha256WithRSAEncryption db:69:54:fb:ea:e3:35:2b:cb:14:80:6e:16:ad:2a:6e:70:b8: a2:8b:3f:25:85:cc:81:2c:57:5f:59:4b:a9:e6:ae:a0:77:bb: 39:29:93:4b:42:b5:bf:17:f3:2e:c2:82:68:ea:6a:32:d8:21: 2b:a5:f5:82:36:e3:e8:b2:2b:37:28:7d:ae:aa:4c:66:7c:3e: dc:91:0d:ee:61:2d:21:c6:fd:d0:2c:ec:30:6a:3c:0b:e5:80: 43:49:72:c6:20:c3:17:68:f6:0f:cb:2a:92:a5:fc:da:a3:c0: 7f:e7:17:f5:fe:88:49:2e:61:75:a5:a0:42:64:7b:9a:3e:17: e5:9b:c0:57:84:62:ab:d3:9e:76:5e:82:aa:fc:e7:05:9d:fe: bb:27:03:8b:7e:a7:f7:aa:3f:03:29:a6:0d:20:86:62:12:14: bf:5c:3e:6b:3a:2a:1c:42:e5:7d:35:e4:d9:49:fa:1c:28:89: 58:41:04:d3:62:df:54:57:be:b7:6c:42:67:e0:f6:07:a6:e4: 43:03:20:5e:9e:40:97:10:6c:4d:76:aa:a7:48:5a:35:87:e0: 53:22:db:ee:07:ac:0d:28:85:d9:81:1f:44:a1:7a:c7:63:e3: 9c:2c:03:51:cc:5d:b0:7e:8d:b5:43:6f:a0:55:67:1e:63:34: 37:68:f1:81 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87YYr/nsZUKoFMMZlJDl/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl NGQxMWIwHhcNMjYwMTAyMDQxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzlmNTRjNTRmZTVhMmNlYzc5NzU0OTQzMjgzZDQ3NGM2YWU2ZjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOef9IWl7D9GvT21hkGSEDcE7Ihm BKJ6DYPooJETvtskTyjbvIOgdAxHBReY2z2SSqxr02IpFni9zIPfb6wQ1um6OIS6 g28K/oGWcn+ynCoSZNDphAQgOgTmV9UhkCFrfp2B3LXVEGd8SJShpbUpPSmGB2c5 a5skXQvkmGpVVF8mk7UA6CHs1wy4BlNIz92wbVkAzdwZVsO3tPjYhl2lAWwUubrv 5HEk3fW8f8WLC5e3ecCQTYUdmRy9lQkNzk+14dbIqXk2SsIuDz+3y1f2M0vcKPBu JaqF4GRJCC1JdEqhL8ROTY8YqtPSyDy5l+DhVPEZq7qRR0qwSNwf4JbULwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMefVMVP5aLOx5dUlDKD1HTGrm81MB8GA1UdIwQY MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt YTk3YzBkYzBhNzQ5LzEveDU5VXhVX2xvczdIbDFTVU1vUFVkTWF1YnpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5 LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCBSCAAwQB l+2IMA0GCSqGSIb3DQEBCwUAA4IBAQDbaVT76uM1K8sUgG4WrSpucLiiiz8lhcyB LFdfWUup5q6gd7s5KZNLQrW/F/MuwoJo6moy2CErpfWCNuPosis3KH2uqkxmfD7c kQ3uYS0hxv3QLOwwajwL5YBDSXLGIMMXaPYPyyqSpfzao8B/5xf1/ohJLmF1paBC ZHuaPhflm8BXhGKr0552XoKq/OcFnf67JwOLfqf3qj8DKaYNIIZiEhS/XD5rOioc QuV9NeTZSfocKIlYQQTTYt9UV763bEJn4PYHpuRDAyBenkCXEGxNdqqnSFo1h+BT ItvuB6wNKIXZgR9EoXrHY+OcLANRzF2wfo21Q2+gVWceYzQ3aPGB -----END CERTIFICATE-----Generated at Mon Jan 19 17:48:10 2026 by rpki-client