This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/X0LNnZh_zA1JruTsm1BTGzpgxgI.roa File: X0LNnZh_zA1JruTsm1BTGzpgxgI.roa (raw, json) Hash identifier: bbY9kDefslrSJOAVec3/5z33iFHF4a4duJ420QtZ6Qs= Subject key identifier: 5F:42:CD:9D:98:7F:CC:0D:49:AE:E4:EC:9B:50:53:1B:3A:60:C6:02 Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10 Certificate serial: 019B7F84EED4CED21633613161F1A4AE3CD4 Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/X0LNnZh_zA1JruTsm1BTGzpgxgI.roa Signing time: Fri 02 Jan 2026 16:22:56 +0000 ROA not before: Fri 02 Jan 2026 16:22:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212683 IP address blocks: 5.182.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:ee:d4:ce:d2:16:33:61:31:61:f1:a4:ae:3c:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10 Validity Not Before: Jan 2 16:22:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f42cd9d987fcc0d49aee4ec9b50531b3a60c602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:2c:34:9f:7b:93:6a:65:f0:93:7e:27:f4:78: 89:2f:f5:72:ec:41:55:4f:24:82:cc:1b:82:23:e7: 94:f1:e4:e2:a2:eb:05:5e:95:e0:15:a1:07:91:01: 48:03:f7:f4:d6:1d:38:52:62:78:05:f0:50:6c:c0: f3:a2:f6:2c:14:12:d7:62:54:f0:e2:0c:bb:b1:b6: 9b:af:64:d9:36:31:ac:a4:4c:78:c8:b1:f3:da:e9: 42:16:ca:b9:ad:4d:14:7e:b2:37:e9:ff:16:dc:21: 0f:20:e7:6d:67:1a:e6:24:22:3c:a5:51:e2:2d:ce: 2c:31:43:20:ab:96:89:bb:4e:e9:f4:5a:21:7b:7c: 3e:44:ae:60:0a:ea:63:cd:39:1e:aa:b3:ae:70:6e: c0:29:0a:c7:10:f3:bc:d6:bf:12:07:1e:91:7c:d3: 0f:a5:99:31:a7:2a:8c:98:3e:94:c3:56:21:f3:09: f6:1e:db:b5:f7:ef:0a:cf:5d:ee:ff:e7:e5:d0:bd: ff:78:78:4d:56:37:be:3d:86:b0:7a:7c:f5:f2:25: 14:12:34:7e:54:10:8f:15:6c:6b:d4:be:ab:46:4b: 26:cd:21:7a:e6:e4:ec:6a:5c:7a:3c:1d:b5:82:03: 51:f2:a0:59:50:34:2e:7d:60:39:87:cc:0b:b7:26: f0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:42:CD:9D:98:7F:CC:0D:49:AE:E4:EC:9B:50:53:1B:3A:60:C6:02 X509v3 Authority Key Identifier: keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/X0LNnZh_zA1JruTsm1BTGzpgxgI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.115.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:c4:dc:3e:34:82:b5:1d:5f:e7:c6:90:ea:a9:1a:91:a8:38: d2:fb:0f:36:88:d4:5d:e6:f9:44:4c:84:ac:fb:df:64:df:75: cb:e8:0b:55:35:20:03:26:da:a2:92:db:c7:46:4b:b6:17:c4: c2:6f:31:07:98:69:ab:c9:9b:4f:38:32:42:6f:43:0e:97:02: 05:16:18:bf:aa:55:ac:35:ba:6f:d2:8c:bf:73:ca:aa:44:a0: 56:49:4e:33:48:ce:a8:1f:9a:a8:18:7d:63:dd:42:c6:f5:7f: f4:fe:d1:c0:83:12:51:e0:16:d3:3f:ff:c0:35:73:22:94:ac: ed:96:e1:08:87:3f:d6:57:a4:b8:00:0d:ea:1d:87:4a:81:35: 32:02:30:94:02:1a:2c:fc:6f:4c:cc:fe:5e:ac:22:44:25:b2: d7:9e:f4:b0:6f:d6:69:66:52:7b:d1:79:a3:e6:05:cb:89:82: 37:7c:52:a6:0b:97:0c:3b:bc:9f:b4:d6:01:27:1e:2f:94:13: f9:e5:77:86:f3:18:ce:ad:a6:54:54:2e:8e:db:b0:fb:fe:d7: 9b:7b:85:16:6d:bf:e0:90:b7:b9:3d:c2:d3:40:46:41:d1:73: dd:1a:b3:19:ea:ca:1c:21:6d:9b:45:4c:bb:75:58:29:d2:19: ab:9b:b5:39 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hO7UztIWM2ExYfGkrjzUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx MWRhMTAwHhcNMjYwMTAyMTYyMjU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjQyY2Q5ZDk4N2ZjYzBkNDlhZWU0ZWM5YjUwNTMxYjNhNjBjNjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyw0n3uTamXwk34n9HiJL/Vy7EFV TySCzBuCI+eU8eTiousFXpXgFaEHkQFIA/f01h04UmJ4BfBQbMDzovYsFBLXYlTw 4gy7sbabr2TZNjGspEx4yLHz2ulCFsq5rU0UfrI36f8W3CEPIOdtZxrmJCI8pVHi Lc4sMUMgq5aJu07p9Fohe3w+RK5gCupjzTkeqrOucG7AKQrHEPO81r8SBx6RfNMP pZkxpyqMmD6Uw1Yh8wn2Htu19+8Kz13u/+fl0L3/eHhNVje+PYawenz18iUUEjR+ VBCPFWxr1L6rRksmzSF65uTsalx6PB21ggNR8qBZUDQufWA5h8wLtybwSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF9CzZ2Yf8wNSa7k7JtQUxs6YMYCMB8GA1UdIwQY MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt N2U0ZDZmNmY2ZTY2LzEvWDBMTm5aaF96QTFKcnVUc20xQlRHenBneGdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2 LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbZzMA0G CSqGSIb3DQEBCwUAA4IBAQAuxNw+NIK1HV/nxpDqqRqRqDjS+w82iNRd5vlETISs +99k33XL6AtVNSADJtqiktvHRku2F8TCbzEHmGmryZtPODJCb0MOlwIFFhi/qlWs Nbpv0oy/c8qqRKBWSU4zSM6oH5qoGH1j3ULG9X/0/tHAgxJR4BbTP//ANXMilKzt luEIhz/WV6S4AA3qHYdKgTUyAjCUAhos/G9MzP5erCJEJbLXnvSwb9ZpZlJ70Xmj 5gXLiYI3fFKmC5cMO7yftNYBJx4vlBP55XeG8xjOraZUVC6O27D7/tebe4UWbb/g kLe5PcLTQEZB0XPdGrMZ6socIW2bRUy7dVgp0hmrm7U5 -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:58 2026 by rpki-client