This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/s5_XzwQfnjREeGyxGEXKHTbuCec.roa File: s5_XzwQfnjREeGyxGEXKHTbuCec.roa (raw, json) Hash identifier: f2LNPZwtscDHDTcGq3OeJusAQETPe2+DG2C2X0YawWI= Subject key identifier: B3:9F:D7:CF:04:1F:9E:34:44:78:6C:B1:18:45:CA:1D:36:EE:09:E7 Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d Certificate serial: 019B77C6F5C13AEE80A484D6278C55933D6A Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/s5_XzwQfnjREeGyxGEXKHTbuCec.roa Signing time: Thu 01 Jan 2026 04:18:06 +0000 ROA not before: Thu 01 Jan 2026 04:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 54903 IP address blocks: 95.164.118.0/24 maxlen: 24 95.164.128.0/21 maxlen: 21 95.164.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:f5:c1:3a:ee:80:a4:84:d6:27:8c:55:93:3d:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6991c56f11a7171c6153239769f557beba10182d Validity Not Before: Jan 1 04:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b39fd7cf041f9e3444786cb11845ca1d36ee09e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e9:7b:67:79:51:6a:36:0d:7a:36:b4:ad:9b: e6:2c:3e:01:95:b4:40:e7:7d:e1:79:65:f0:e4:f3: 0b:4b:ba:ee:bf:d5:da:1f:b1:1e:c6:2c:65:b5:06: 25:f0:a2:80:da:5f:5e:40:4d:00:e2:50:4c:ea:23: d5:cb:eb:72:95:23:f7:be:1a:0c:af:8c:e1:1d:f6: ac:1e:61:05:09:63:89:9e:38:70:6e:a2:30:6a:3a: a7:36:fb:a4:6f:dd:d2:d6:1e:29:fb:d0:c1:4e:dd: df:eb:74:00:73:31:0d:74:32:ad:57:10:59:f7:ea: 72:45:4b:8d:32:8c:ea:bd:78:11:5b:2a:76:11:7a: 01:65:bf:61:0f:7c:13:6b:52:d6:62:8e:48:d3:42: 43:ca:98:24:fa:1d:15:3b:b8:07:91:39:24:3a:06: 4a:41:d1:96:28:40:89:ea:cc:d1:96:40:56:50:1d: 06:e2:79:b5:ce:72:11:94:32:94:3c:57:13:42:31: a6:dc:37:9e:6b:a2:33:af:8b:c9:17:fe:b3:9c:f8: 5c:bd:04:5c:7e:51:7d:fb:80:c9:24:74:4b:f6:4c: d4:aa:f9:74:1e:e2:0f:71:25:71:2b:46:03:04:dd: c6:5b:15:00:7b:9e:9a:3e:87:32:aa:9a:6a:35:51: a3:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:9F:D7:CF:04:1F:9E:34:44:78:6C:B1:18:45:CA:1D:36:EE:09:E7 X509v3 Authority Key Identifier: keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/s5_XzwQfnjREeGyxGEXKHTbuCec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.164.118.0/24 95.164.128.0/20 Signature Algorithm: sha256WithRSAEncryption 62:e0:a9:63:98:a3:0f:62:5f:10:e9:86:bb:36:38:00:49:ef: 29:5b:98:0d:64:d9:27:75:50:8d:ec:84:fe:a8:f2:19:b6:a6: e1:46:fb:38:76:d8:79:be:6d:27:d1:c8:da:f1:83:e9:4e:7d: 92:7e:eb:fb:78:46:13:14:4d:43:87:03:45:75:a0:9e:ec:13: 71:7c:aa:05:9f:f9:b2:08:9b:a3:de:4e:64:79:dc:98:13:0f: 63:7c:a4:6e:22:6e:0e:24:6f:f7:c8:00:ea:14:dc:27:e5:df: 23:37:b6:36:81:34:73:5f:17:ac:36:8f:15:be:d4:6e:52:6b: 38:4a:04:40:55:7f:b4:ea:e7:a8:54:84:9a:44:b9:61:af:c3: 80:40:91:25:98:2d:19:91:31:40:d3:c4:cf:05:4e:75:35:cf: cf:2d:7b:27:32:1d:c7:64:0f:a5:56:ff:f4:1c:ad:8d:8e:4c: df:40:41:4b:75:3c:f6:b4:8c:08:d3:0b:08:89:23:8a:08:bd: df:de:e7:4e:2e:e4:19:2c:49:6c:e9:67:ab:3e:ba:5b:e2:49: f8:30:03:90:01:44:4a:f5:1d:43:cd:19:d9:7a:ff:51:9a:78: 21:0c:d9:9b:8c:ea:8b:30:22:7d:58:4d:5f:0e:5a:0f:9b:02: cd:fd:94:c7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xvXBOu6ApITWJ4xVkz1qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OTFjNTZmMTFhNzE3MWM2MTUzMjM5NzY5ZjU1N2JlYmEx MDE4MmQwHhcNMjYwMTAxMDQxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzlmZDdjZjA0MWY5ZTM0NDQ3ODZjYjExODQ1Y2ExZDM2ZWUwOWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtel7Z3lRajYNeja0rZvmLD4BlbRA 533heWXw5PMLS7ruv9XaH7EexixltQYl8KKA2l9eQE0A4lBM6iPVy+tylSP3vhoM r4zhHfasHmEFCWOJnjhwbqIwajqnNvukb93S1h4p+9DBTt3f63QAczENdDKtVxBZ 9+pyRUuNMozqvXgRWyp2EXoBZb9hD3wTa1LWYo5I00JDypgk+h0VO7gHkTkkOgZK QdGWKECJ6szRlkBWUB0G4nm1znIRlDKUPFcTQjGm3Deea6Izr4vJF/6znPhcvQRc flF9+4DJJHRL9kzUqvl0HuIPcSVxK0YDBN3GWxUAe56aPocyqppqNVGjSwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLOf188EH540RHhssRhFyh027gnnMB8GA1UdIwQY MBaAFGmRxW8RpxccYVMjl2n1V766EBgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYt NjVkMTU2NzM0MGZkLzEvczVfWHp3UWZualJFZUd5eEdFWEtIVGJ1Q2VjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYtNjVkMTU2NzM0MGZk LzEvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAX6R2AwQE X6SAMA0GCSqGSIb3DQEBCwUAA4IBAQBi4KljmKMPYl8Q6Ya7NjgASe8pW5gNZNkn dVCN7IT+qPIZtqbhRvs4dth5vm0n0cja8YPpTn2Sfuv7eEYTFE1DhwNFdaCe7BNx fKoFn/myCJuj3k5kedyYEw9jfKRuIm4OJG/3yADqFNwn5d8jN7Y2gTRzXxesNo8V vtRuUms4SgRAVX+06ueoVISaRLlhr8OAQJElmC0ZkTFA08TPBU51Nc/PLXsnMh3H ZA+lVv/0HK2NjkzfQEFLdTz2tIwI0wsIiSOKCL3f3udOLuQZLEls6WerPrpb4kn4 MAOQAURK9R1DzRnZev9RmnghDNmbjOqLMCJ9WE1fDloPmwLN/ZTH -----END CERTIFICATE-----Generated at Wed Jan 21 12:45:32 2026 by rpki-client