This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/5XSP39vyiisFYJf4B5T-VwNJ5IA.roa File: 5XSP39vyiisFYJf4B5T-VwNJ5IA.roa (raw, json) Hash identifier: ICJ5PH7qwd6fl9aMECvqbI9whJgaeEeFoeUQ2thCItI= Subject key identifier: E5:74:8F:DF:DB:F2:8A:2B:05:60:97:F8:07:94:FE:57:03:49:E4:80 Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA7608ADF72A31643D630A21AEC0E8B Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/5XSP39vyiisFYJf4B5T-VwNJ5IA.roa Signing time: Fri 02 Jan 2026 12:20:57 +0000 ROA not before: Fri 02 Jan 2026 12:20:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16301 IP address blocks: 78.81.0.0/17 maxlen: 17 78.81.192.0/18 maxlen: 18 84.242.192.0/18 maxlen: 18 89.252.64.0/18 maxlen: 18 213.148.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:60:8a:df:72:a3:16:43:d6:30:a2:1a:ec:0e:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:20:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5748fdfdbf28a2b056097f80794fe570349e480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:31:bc:22:63:ca:26:9e:e6:74:78:32:22:ee: 56:cc:6d:43:68:5b:e9:33:87:72:c4:f6:b1:4f:bd: c3:a6:46:33:03:63:90:84:92:ae:b8:ee:2c:fc:9c: 1a:24:b8:54:2d:73:9f:33:c2:48:f8:48:ce:9f:1e: 0e:b8:53:89:d0:2c:11:57:e6:57:3f:a9:65:bc:c0: d8:39:a4:4f:50:e6:8b:75:0f:a7:7d:06:a0:d1:cb: 13:66:01:a9:66:5f:d4:fb:5f:38:b0:47:66:c5:c6: 6d:b8:ca:86:6e:55:dc:22:aa:e1:4f:e1:17:f7:36: 2b:45:c4:15:d6:06:da:2d:45:4c:7d:c5:71:c0:a9: c3:bc:d8:ba:a0:d6:e0:64:6d:b3:07:11:5c:76:43: f5:42:2a:91:5b:ba:78:e8:49:1a:87:68:7d:b7:de: dc:b2:08:27:87:a9:52:68:9f:21:a2:ed:2f:ef:19: 5d:89:e4:60:ab:1a:6e:8f:25:f1:b4:4d:f1:ef:c5: 7c:bf:c6:43:63:91:58:86:1a:6a:f5:2f:0b:bb:11: 51:27:ce:a9:f2:74:ed:fa:65:be:c2:4b:58:80:1f: d2:19:5f:b8:66:03:a9:6a:cb:0e:2e:71:c8:a2:9b: bb:f7:ac:8d:ce:9c:59:59:7d:3b:23:d6:c4:4a:05: 89:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:74:8F:DF:DB:F2:8A:2B:05:60:97:F8:07:94:FE:57:03:49:E4:80 X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/5XSP39vyiisFYJf4B5T-VwNJ5IA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.81.0.0/17 78.81.192.0/18 84.242.192.0/18 89.252.64.0/18 213.148.160.0/19 Signature Algorithm: sha256WithRSAEncryption 8d:6b:bb:c5:64:bb:76:48:cf:a4:9f:d7:33:55:43:90:af:cb: 2e:91:0b:db:30:33:72:d0:fe:bc:b5:2d:e3:f8:e2:16:c2:18: b4:aa:21:4a:98:a7:f4:7f:5a:be:f0:d7:88:ac:5b:9f:19:9c: a5:8e:b8:b4:80:90:d1:cc:a5:07:ff:cf:88:fa:7e:cf:74:6e: 56:36:95:6d:ba:3f:ff:12:2f:44:84:7c:3b:c4:17:46:da:fd: 68:0c:0e:f8:d3:41:aa:24:86:5f:dd:f7:63:ef:50:ca:fc:47: ba:cd:4f:b1:7a:79:9c:c0:72:a2:1b:6d:db:a9:c0:43:69:e3: 1d:53:03:dd:fe:48:8d:43:cc:d9:9a:0c:8b:c0:97:d2:13:4e: a9:75:23:c8:22:50:c6:f0:c2:9b:dc:57:ec:1e:f5:7c:3f:f2: 56:c1:13:a1:a3:38:59:89:85:fd:6a:f7:6f:3a:58:a1:e8:25: 57:21:ac:90:b7:e8:6a:a9:b5:36:a3:cd:c5:4e:06:be:35:0c: ec:33:42:10:2c:a8:81:81:b9:07:bd:ae:54:71:18:1f:fb:69: 4b:56:1e:74:c3:ae:1d:ee:7e:7e:3f:4e:b0:34:f1:c0:74:9f: 6b:19:e4:01:84:ee:d6:ac:08:20:cc:e6:81:17:0d:a8:34:b9: c9:f7:3a:f3 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt+p2CK33KjFkPWMKIa7A6LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMDU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTc0OGZkZmRiZjI4YTJiMDU2MDk3ZjgwNzk0ZmU1NzAzNDllNDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTG8ImPKJp7mdHgyIu5WzG1DaFvp M4dyxPaxT73DpkYzA2OQhJKuuO4s/JwaJLhULXOfM8JI+EjOnx4OuFOJ0CwRV+ZX P6llvMDYOaRPUOaLdQ+nfQag0csTZgGpZl/U+184sEdmxcZtuMqGblXcIqrhT+EX 9zYrRcQV1gbaLUVMfcVxwKnDvNi6oNbgZG2zBxFcdkP1QiqRW7p46Ekah2h9t97c sggnh6lSaJ8hou0v7xldieRgqxpujyXxtE3x78V8v8ZDY5FYhhpq9S8LuxFRJ86p 8nTt+mW+wktYgB/SGV+4ZgOpassOLnHIopu796yNzpxZWX07I9bESgWJMQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFOV0j9/b8oorBWCX+AeU/lcDSeSAMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvNVhTUDM5dnlpaXNGWUpmNEI1VC1Wd05KNUlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQHTlEAAwQG TlHAAwQGVPLAAwQGWfxAAwQF1ZSgMA0GCSqGSIb3DQEBCwUAA4IBAQCNa7vFZLt2 SM+kn9czVUOQr8sukQvbMDNy0P68tS3j+OIWwhi0qiFKmKf0f1q+8NeIrFufGZyl jri0gJDRzKUH/8+I+n7PdG5WNpVtuj//Ei9EhHw7xBdG2v1oDA7400GqJIZf3fdj 71DK/Ee6zU+xenmcwHKiG23bqcBDaeMdUwPd/kiNQ8zZmgyLwJfSE06pdSPIIlDG 8MKb3FfsHvV8P/JWwROhozhZiYX9avdvOlih6CVXIayQt+hqqbU2o83FTga+NQzs M0IQLKiBgbkHva5UcRgf+2lLVh50w64d7n5+P06wNPHAdJ9rGeQBhO7WrAggzOaB Fw2oNLnJ9zrz -----END CERTIFICATE-----Generated at Mon Jan 26 10:13:31 2026 by rpki-client