This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/xo3gR3-KM6S_Zel79WurR5Cgqhw.roa File: xo3gR3-KM6S_Zel79WurR5Cgqhw.roa (raw, json) Hash identifier: Dhbvi9g1SOEv1jJ9w629oy4OgTHWzucQiL6zYBKcTBc= Subject key identifier: C6:8D:E0:47:7F:8A:33:A4:BF:65:E9:7B:F5:6B:AB:47:90:A0:AA:1C Certificate issuer: /CN=38bc794c5fbaac632a7ffb43db14f739cd53b2c4 Certificate serial: 019B7AC824FD29E0E49506A902575AC489A3 Authority key identifier: 38:BC:79:4C:5F:BA:AC:63:2A:7F:FB:43:DB:14:F7:39:CD:53:B2:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/xo3gR3-KM6S_Zel79WurR5Cgqhw.roa Signing time: Thu 01 Jan 2026 18:18:15 +0000 ROA not before: Thu 01 Jan 2026 18:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35617 IP address blocks: 5.133.96.0/22 maxlen: 24 91.214.60.0/22 maxlen: 24 185.97.120.0/22 maxlen: 24 2a06:5c0::/29 maxlen: 32 2a09:6e00::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 06:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:24:fd:29:e0:e4:95:06:a9:02:57:5a:c4:89:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38bc794c5fbaac632a7ffb43db14f739cd53b2c4 Validity Not Before: Jan 1 18:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c68de0477f8a33a4bf65e97bf56bab4790a0aa1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:69:0e:9e:34:e9:e8:bf:e3:c9:12:7e:26:8e: bc:21:df:d6:f1:ce:ea:90:a1:37:58:a5:51:1e:9b: 75:e1:59:5e:82:ea:b8:8c:69:d7:73:d7:28:f6:4f: 87:4d:70:61:6f:3f:ca:4f:c9:21:3d:cb:29:b2:b7: cc:99:60:57:7c:25:41:31:22:88:57:a6:76:08:05: 79:b2:c7:0a:0a:14:24:bc:68:8c:19:90:ee:95:53: df:b2:7b:d0:62:99:2b:9b:3b:bb:9a:03:72:1e:02: 38:1a:57:c4:69:24:d3:5d:c7:36:35:ff:e9:e2:3d: 39:ae:c6:d6:ed:05:5c:2b:cf:66:01:42:2a:24:a8: e7:26:ca:0f:16:4b:14:b0:e3:34:58:5b:c2:06:d0: db:d9:57:6d:48:d5:d0:84:5f:0b:dd:8e:64:39:e4: 47:61:a5:2b:60:d1:a4:37:43:2d:b9:57:ef:c3:87: 16:39:9b:5f:1f:74:4d:f9:d1:25:c5:86:d1:69:2d: db:0b:02:55:9e:ed:c3:d5:69:63:72:98:4a:2a:b9: 30:ab:59:19:e8:de:6c:6a:ae:6f:45:6a:b4:07:51: 13:1f:ac:49:7b:30:8a:79:e3:fc:8d:5e:a4:f4:6f: c3:de:ce:a2:a7:08:19:cd:5f:c9:94:91:c5:d0:2c: a3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:8D:E0:47:7F:8A:33:A4:BF:65:E9:7B:F5:6B:AB:47:90:A0:AA:1C X509v3 Authority Key Identifier: keyid:38:BC:79:4C:5F:BA:AC:63:2A:7F:FB:43:DB:14:F7:39:CD:53:B2:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/xo3gR3-KM6S_Zel79WurR5Cgqhw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.133.96.0/22 91.214.60.0/22 185.97.120.0/22 IPv6: 2a06:5c0::/29 2a09:6e00::/29 Signature Algorithm: sha256WithRSAEncryption 20:b3:74:57:2f:5e:d1:1a:7d:c5:5f:43:79:58:c3:58:f3:70: 64:78:9e:53:df:8f:a6:67:d2:80:e1:4d:6a:92:a5:4e:c2:1d: d2:a3:14:90:f1:3f:bf:6a:e5:5c:98:e5:83:f7:ef:8d:f7:70: 33:0d:09:fe:5d:dc:92:66:fc:d5:26:bb:aa:af:54:ff:43:78: 22:f6:9b:83:5c:a0:85:d0:e3:14:2b:81:8d:ec:3a:8a:0f:3e: 5d:ac:80:9a:8d:d5:79:5a:04:93:97:1d:23:da:2a:67:88:00: fb:ed:aa:bd:da:1e:24:9a:ab:14:65:fd:f0:69:0c:2b:82:06: 10:1a:9a:43:f4:b6:1a:60:e8:45:c3:bb:f1:dd:ca:87:70:78: da:ea:2a:43:49:cb:8f:91:a0:d3:5d:b9:03:ac:67:08:17:f1: a7:8e:79:90:67:4b:2d:30:17:94:94:a8:04:a7:ab:e2:55:ee: 04:94:24:e4:54:1b:69:b0:db:ee:32:59:a9:cd:7b:39:78:17: 17:3a:38:e9:3a:c9:57:49:bb:54:eb:cd:98:6a:30:84:16:57: 3d:4d:cb:38:14:0b:43:dd:91:d8:1f:8a:39:b1:22:ad:81:67: b2:e1:2a:0c:2c:1b:91:df:08:67:ec:c0:33:4b:56:cd:cb:f9: 3f:67:7a:77 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt6yCT9KeDklQapAldaxImjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YmM3OTRjNWZiYWFjNjMyYTdmZmI0M2RiMTRmNzM5Y2Q1 M2IyYzQwHhcNMjYwMTAxMTgxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjhkZTA0NzdmOGEzM2E0YmY2NWU5N2JmNTZiYWI0NzkwYTBhYTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2kOnjTp6L/jyRJ+Jo68Id/W8c7q kKE3WKVRHpt14Vleguq4jGnXc9co9k+HTXBhbz/KT8khPcspsrfMmWBXfCVBMSKI V6Z2CAV5sscKChQkvGiMGZDulVPfsnvQYpkrmzu7mgNyHgI4GlfEaSTTXcc2Nf/p 4j05rsbW7QVcK89mAUIqJKjnJsoPFksUsOM0WFvCBtDb2VdtSNXQhF8L3Y5kOeRH YaUrYNGkN0MtuVfvw4cWOZtfH3RN+dElxYbRaS3bCwJVnu3D1WljcphKKrkwq1kZ 6N5saq5vRWq0B1ETH6xJezCKeeP8jV6k9G/D3s6ipwgZzV/JlJHF0CyjlwIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFMaN4Ed/ijOkv2Xpe/Vrq0eQoKocMB8GA1UdIwQY MBaAFDi8eUxfuqxjKn/7Q9sU9znNU7LEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0x4NVRGLTZyR01xZl90RDJ4VDNPYzFUc3NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8xYTNkOTgtYzE0Zi00ZDA2LWE0NjYt ZDk4NTM5NGUzYzEwLzEveG8zZ1IzLUtNNlNfWmVsNzlXdXJSNUNncWh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi8xYTNkOTgtYzE0Zi00ZDA2LWE0NjYtZDk4NTM5NGUzYzEw LzEvT0x4NVRGLTZyR01xZl90RDJ4VDNPYzFUc3NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAYBAIAATASAwQCBYVgAwQC W9Y8AwQCuWF4MBQEAgACMA4DBQMqBgXAAwUDKgluADANBgkqhkiG9w0BAQsFAAOC AQEAILN0Vy9e0Rp9xV9DeVjDWPNwZHieU9+PpmfSgOFNapKlTsId0qMUkPE/v2rl XJjlg/fvjfdwMw0J/l3ckmb81Sa7qq9U/0N4Ivabg1yghdDjFCuBjew6ig8+XayA mo3VeVoEk5cdI9oqZ4gA++2qvdoeJJqrFGX98GkMK4IGEBqaQ/S2GmDoRcO78d3K h3B42uoqQ0nLj5Gg0125A6xnCBfxp455kGdLLTAXlJSoBKer4lXuBJQk5FQbabDb 7jJZqc17OXgXFzo46TrJV0m7VOvNmGowhBZXPU3LOBQLQ92R2B+KObEirYFnsuEq DCwbkd8IZ+zAM0tWzcv5P2d6dw== -----END CERTIFICATE-----Generated at Tue Jan 27 16:39:31 2026 by rpki-client