This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XAYcuxsajA5hLrmscRs4oynzyUg.roa File: XAYcuxsajA5hLrmscRs4oynzyUg.roa (raw, json) Hash identifier: AvPY1r1vk0ST8v3sz0+K9LIFAxv9kmWL/J2CaIlXu0s= Subject key identifier: 5C:06:1C:BB:1B:1A:8C:0E:61:2E:B9:AC:71:1B:38:A3:29:F3:C9:48 Certificate issuer: /CN=5cfe8d72526e4e73a3b57d9360f3a51beb59a45f Certificate serial: 019B77C6D1EA54697E5F551528A56794D4F2 Authority key identifier: 5C:FE:8D:72:52:6E:4E:73:A3:B5:7D:93:60:F3:A5:1B:EB:59:A4:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XAYcuxsajA5hLrmscRs4oynzyUg.roa Signing time: Thu 01 Jan 2026 04:17:57 +0000 ROA not before: Thu 01 Jan 2026 04:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206894 IP address blocks: 45.89.132.0/22 maxlen: 22 45.89.132.0/24 maxlen: 24 185.38.88.0/22 maxlen: 22 185.192.104.0/22 maxlen: 22 185.215.96.0/22 maxlen: 22 185.219.192.0/22 maxlen: 22 193.142.154.0/23 maxlen: 23 2a0a:2bc0::/32 maxlen: 32 2a0b:a840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:d1:ea:54:69:7e:5f:55:15:28:a5:67:94:d4:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cfe8d72526e4e73a3b57d9360f3a51beb59a45f Validity Not Before: Jan 1 04:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c061cbb1b1a8c0e612eb9ac711b38a329f3c948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:a4:28:55:63:0f:75:1d:7c:3d:0f:66:87:08: 71:ad:1b:8a:02:1a:fe:ed:8f:64:aa:9b:76:0a:b3: b7:8c:7d:47:9d:16:07:7c:f2:49:87:22:9c:db:c2: 0c:24:de:5c:3c:38:d3:0a:a5:bc:0b:40:ae:33:0f: 94:f5:6b:a5:db:6d:2e:83:2f:eb:91:f8:98:9b:89: b9:99:51:59:fd:1a:9f:46:01:8f:1f:4b:56:c4:fe: 60:c1:89:92:a4:11:90:d9:63:05:12:fb:5e:79:3f: e5:c0:77:f9:c0:31:31:ae:77:9a:86:0f:b8:97:6c: f9:92:c8:3d:d9:6b:34:04:40:de:10:e9:b3:8d:0e: 5d:14:76:40:8b:66:cd:95:33:a3:54:dd:79:a2:cc: b1:00:26:3e:64:02:21:5f:cb:15:8b:0f:22:d7:db: a5:06:64:6d:a8:78:c8:91:86:a7:4b:6a:1c:d8:80: e8:f3:d9:96:1e:0c:40:70:85:6d:8a:bc:f4:66:b7: 2a:4d:89:1f:01:8f:c6:15:cb:e4:9c:46:4d:24:f6: 76:f6:da:04:95:6a:87:2d:e7:a9:0c:1f:41:58:55: 65:c3:72:0b:80:ea:04:ce:5e:71:1e:1c:fc:f5:1f: a2:f1:4d:49:b2:44:be:9f:45:cd:fe:0f:20:76:57: b4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:06:1C:BB:1B:1A:8C:0E:61:2E:B9:AC:71:1B:38:A3:29:F3:C9:48 X509v3 Authority Key Identifier: keyid:5C:FE:8D:72:52:6E:4E:73:A3:B5:7D:93:60:F3:A5:1B:EB:59:A4:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XAYcuxsajA5hLrmscRs4oynzyUg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.89.132.0/22 185.38.88.0/22 185.192.104.0/22 185.215.96.0/22 185.219.192.0/22 193.142.154.0/23 IPv6: 2a0a:2bc0::/32 2a0b:a840::/32 Signature Algorithm: sha256WithRSAEncryption 36:98:7f:ce:1c:b3:aa:1c:34:a6:4f:c6:b9:52:9a:8b:84:f0: b1:bd:fb:e3:03:87:4a:b2:f0:b8:2f:f2:a6:00:d7:70:e1:ee: 2a:1d:f3:e6:70:bc:94:43:79:93:3b:62:fd:3e:79:cb:5f:1c: c3:0a:8b:d9:20:d5:e9:63:7f:04:0d:69:ca:32:ac:ee:a2:e9: 15:0c:5c:26:e3:79:57:2b:22:5f:73:4d:94:fc:e8:65:6b:e7: 26:6b:bf:18:ed:d2:27:0f:f2:9c:bb:e6:78:89:c1:24:07:0e: 95:45:32:02:a8:66:c2:23:0e:87:c3:e3:8b:e3:97:65:e8:4c: e8:19:f1:3e:69:6c:b0:a9:a5:e0:b9:15:85:73:8a:62:db:97: 4e:cd:5c:e7:bc:c9:f7:50:6b:63:0d:96:1a:a7:96:bf:3c:19: 47:18:56:f0:18:d3:4a:bf:66:82:99:6c:7d:75:d2:bb:a7:38: d6:b5:1e:10:43:c1:19:e8:fd:f9:fd:fa:8e:c3:ac:c0:f8:10: 6c:50:d7:5d:78:ef:db:b6:ea:64:27:e6:58:47:c6:7a:b6:d2: 1c:7e:05:93:d0:c2:31:68:50:4c:10:59:15:8f:28:cf:cf:28: e7:04:0d:03:22:d9:b6:5b:17:3f:15:cd:6b:32:de:62:90:5d: 41:f8:29:1c -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgISAZt3xtHqVGl+X1UVKKVnlNTyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZmU4ZDcyNTI2ZTRlNzNhM2I1N2Q5MzYwZjNhNTFiZWI1 OWE0NWYwHhcNMjYwMTAxMDQxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzA2MWNiYjFiMWE4YzBlNjEyZWI5YWM3MTFiMzhhMzI5ZjNjOTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9KQoVWMPdR18PQ9mhwhxrRuKAhr+ 7Y9kqpt2CrO3jH1HnRYHfPJJhyKc28IMJN5cPDjTCqW8C0CuMw+U9Wul220ugy/r kfiYm4m5mVFZ/RqfRgGPH0tWxP5gwYmSpBGQ2WMFEvteeT/lwHf5wDExrneahg+4 l2z5ksg92Ws0BEDeEOmzjQ5dFHZAi2bNlTOjVN15osyxACY+ZAIhX8sViw8i19ul BmRtqHjIkYanS2oc2IDo89mWHgxAcIVtirz0ZrcqTYkfAY/GFcvknEZNJPZ29toE lWqHLeepDB9BWFVlw3ILgOoEzl5xHhz89R+i8U1JskS+n0XN/g8gdle0ywIDAQAB o4ICPTCCAjkwHQYDVR0OBBYEFFwGHLsbGowOYS65rHEbOKMp88lIMB8GA1UdIwQY MBaAFFz+jXJSbk5zo7V9k2DzpRvrWaRfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFA2TmNsSnVUbk9qdFgyVFlQT2xHLXRacEY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84NGJmNTQtMDljMy00MzI0LWExMWMt ZTRkZGZhMzJlNTJlLzEvWEFZY3V4c2FqQTVoTHJtc2NSczRveW56eVVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC84NGJmNTQtMDljMy00MzI0LWExMWMtZTRkZGZhMzJlNTJl LzEvWFA2TmNsSnVUbk9qdFgyVFlQT2xHLXRacEY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjAqBAIAATAkAwQCLVmEAwQC uSZYAwQCucBoAwQCuddgAwQCudvAAwQBwY6aMBQEAgACMA4DBQAqCivAAwUAKguo QDANBgkqhkiG9w0BAQsFAAOCAQEANph/zhyzqhw0pk/GuVKai4Twsb374wOHSrLw uC/ypgDXcOHuKh3z5nC8lEN5kzti/T55y18cwwqL2SDV6WN/BA1pyjKs7qLpFQxc JuN5VysiX3NNlPzoZWvnJmu/GO3SJw/ynLvmeInBJAcOlUUyAqhmwiMOh8Pji+OX ZehM6BnxPmlssKml4LkVhXOKYtuXTs1c57zJ91BrYw2WGqeWvzwZRxhW8BjTSr9m gplsfXXSu6c41rUeEEPBGej9+f36jsOswPgQbFDXXXjv27bqZCfmWEfGerbSHH4F k9DCMWhQTBBZFY8oz88o5wQNAyLZtlsXPxXNazLeYpBdQfgpHA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:59:27 2026 by rpki-client