This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/1xbn_UMCw0INiad24Fz-EfLf1Gw.roa File: 1xbn_UMCw0INiad24Fz-EfLf1Gw.roa (raw, json) Hash identifier: SZrNeUwfQoqqElnDWbZPqxb5PbXGACF+9AzBOt+xfa8= Subject key identifier: D7:16:E7:FD:43:02:C3:42:0D:89:A7:76:E0:5C:FE:11:F2:DF:D4:6C Certificate issuer: /CN=62c66267943d413cdf760dc6850104c1c0fc1d65 Certificate serial: 019B7B35EA3ADB7CD8EB89569E87FF1CEC62 Authority key identifier: 62:C6:62:67:94:3D:41:3C:DF:76:0D:C6:85:01:04:C1:C0:FC:1D:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/1xbn_UMCw0INiad24Fz-EfLf1Gw.roa Signing time: Thu 01 Jan 2026 20:18:09 +0000 ROA not before: Thu 01 Jan 2026 20:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15598 IP address blocks: 89.31.140.0/24 maxlen: 24 89.31.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:ea:3a:db:7c:d8:eb:89:56:9e:87:ff:1c:ec:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62c66267943d413cdf760dc6850104c1c0fc1d65 Validity Not Before: Jan 1 20:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d716e7fd4302c3420d89a776e05cfe11f2dfd46c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b6:38:19:b9:f1:bf:44:30:b4:cf:e5:95:18: 61:3e:6c:bd:1e:86:94:7a:8f:44:93:da:67:8c:0d: 9f:ba:af:0c:d5:78:c1:91:f7:96:af:1d:a0:94:7d: 0e:f9:91:42:e8:50:64:6d:52:d0:78:90:c7:dd:1f: 49:97:2f:75:82:ae:f5:6b:1c:76:8b:ab:f4:df:5f: 24:d8:20:65:2f:4a:81:9f:c2:f1:6e:da:71:02:eb: 8a:bf:5d:84:4d:0d:fa:82:86:af:ec:65:08:29:bc: 63:f0:58:e2:bb:1e:b0:91:f5:bb:03:da:e9:a0:d3: 8a:51:eb:4f:c9:4b:9b:a1:b5:25:83:4f:ff:d7:84: 67:ca:ac:8c:49:b6:d8:77:62:de:94:98:30:a4:0f: fc:84:ec:58:16:95:a4:d5:f8:af:d4:53:55:c1:b0: 39:c2:f6:1c:25:d1:c4:71:00:d4:3a:69:f8:e7:f8: 4d:c2:c1:01:d2:84:6b:7a:16:c2:a8:ef:07:81:db: 39:ed:43:c2:e0:7b:af:24:68:25:d3:93:5e:3c:3c: 9a:8f:2b:c9:e1:5b:69:6b:bc:b1:4a:38:d1:54:38: 3a:0a:11:f0:9e:58:e2:71:c0:7b:ef:24:1d:0f:46: e4:1f:09:23:14:49:5c:88:3e:94:ef:fd:ff:84:65: e3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:16:E7:FD:43:02:C3:42:0D:89:A7:76:E0:5C:FE:11:F2:DF:D4:6C X509v3 Authority Key Identifier: keyid:62:C6:62:67:94:3D:41:3C:DF:76:0D:C6:85:01:04:C1:C0:FC:1D:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/1xbn_UMCw0INiad24Fz-EfLf1Gw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.31.140.0/24 89.31.143.0/24 Signature Algorithm: sha256WithRSAEncryption 13:7f:a6:78:f4:ba:c4:2c:c2:e8:73:a7:80:d3:e4:f5:b8:5b: 19:e0:9c:39:f9:3b:ac:16:5d:79:90:58:7a:74:bf:a9:78:f0: 16:33:46:41:0a:e9:69:38:8e:74:a2:5e:ae:e9:ff:47:6c:cc: cc:03:26:ed:10:fe:8d:d6:49:63:18:ee:f2:83:d1:f8:e9:a5: 1a:4b:4c:a3:10:23:a1:4c:cf:51:e4:5d:f0:3d:b9:6d:31:31: 80:df:fb:bc:49:e8:48:86:1e:a9:ee:a3:ac:8d:c5:fd:69:87: 7b:09:2e:7e:ee:1e:e3:18:a2:ca:8e:6b:22:91:34:af:f2:80: 1f:b7:be:7c:11:40:d7:66:16:db:fd:ba:1a:68:87:ca:3d:e2: 66:17:2c:65:94:2a:24:bb:73:25:5e:f6:e6:96:be:0b:78:3e: 17:a1:da:df:0f:2b:ca:2e:80:57:78:72:35:65:8a:e1:e4:61: ef:aa:50:fe:c2:4f:41:9a:ef:eb:9e:f0:d6:30:e7:4a:d9:72: e8:53:e6:f7:f1:de:f7:04:7d:78:9e:c7:e8:53:35:ae:c4:97: cd:71:41:c7:3a:dc:91:fa:e0:01:05:fb:56:27:76:05:6a:8b: 94:ee:7d:73:c2:d7:64:bf:be:a4:fd:da:19:93:8a:3c:e6:a4: 0e:68:3b:8f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7Neo623zY64lWnof/HOxiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyYzY2MjY3OTQzZDQxM2NkZjc2MGRjNjg1MDEwNGMxYzBm YzFkNjUwHhcNMjYwMTAxMjAxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzE2ZTdmZDQzMDJjMzQyMGQ4OWE3NzZlMDVjZmUxMWYyZGZkNDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7Y4Gbnxv0QwtM/llRhhPmy9HoaU eo9Ek9pnjA2fuq8M1XjBkfeWrx2glH0O+ZFC6FBkbVLQeJDH3R9Jly91gq71axx2 i6v0318k2CBlL0qBn8LxbtpxAuuKv12ETQ36goav7GUIKbxj8Fjiux6wkfW7A9rp oNOKUetPyUubobUlg0//14RnyqyMSbbYd2LelJgwpA/8hOxYFpWk1fiv1FNVwbA5 wvYcJdHEcQDUOmn45/hNwsEB0oRrehbCqO8Hgds57UPC4HuvJGgl05NePDyajyvJ 4Vtpa7yxSjjRVDg6ChHwnljiccB77yQdD0bkHwkjFElciD6U7/3/hGXjcwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNcW5/1DAsNCDYmnduBc/hHy39RsMB8GA1UdIwQY MBaAFGLGYmeUPUE833YNxoUBBMHA/B1lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXNaaVo1UTlRVHpmZGczR2hRRUV3Y0Q4SFdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81MGY0ZjctNDljYy00YzgyLTkzMjQt YTlkN2FkNDQyYjNiLzEvMXhibl9VTUN3MElOaWFkMjRGei1FZkxmMUd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81MGY0ZjctNDljYy00YzgyLTkzMjQtYTlkN2FkNDQyYjNi LzEvWXNaaVo1UTlRVHpmZGczR2hRRUV3Y0Q4SFdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWR+MAwQA WR+PMA0GCSqGSIb3DQEBCwUAA4IBAQATf6Z49LrELMLoc6eA0+T1uFsZ4Jw5+Tus Fl15kFh6dL+pePAWM0ZBCulpOI50ol6u6f9HbMzMAybtEP6N1kljGO7yg9H46aUa S0yjECOhTM9R5F3wPbltMTGA3/u8SehIhh6p7qOsjcX9aYd7CS5+7h7jGKLKjmsi kTSv8oAft758EUDXZhbb/boaaIfKPeJmFyxllCoku3MlXvbmlr4LeD4XodrfDyvK LoBXeHI1ZYrh5GHvqlD+wk9Bmu/rnvDWMOdK2XLoU+b38d73BH14nsfoUzWuxJfN cUHHOtyR+uABBftWJ3YFaouU7n1zwtdkv76k/doZk4o85qQOaDuP -----END CERTIFICATE-----Generated at Mon Jan 26 18:16:09 2026 by rpki-client