This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Xtb1j3n-CW_d7Kspqrdi4iHb1sE.roa File: Xtb1j3n-CW_d7Kspqrdi4iHb1sE.roa (raw, json) Hash identifier: kc8VVWy8KILpLrF2YrlttI9Lu9XmpyWkvsg0zpMRPMs= Subject key identifier: 5E:D6:F5:8F:79:FE:09:6F:DD:EC:AB:29:AA:B7:62:E2:21:DB:D6:C1 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019BDEF1B9A45A809A2708FFFA82E1A08DF6 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Xtb1j3n-CW_d7Kspqrdi4iHb1sE.roa Signing time: Wed 21 Jan 2026 05:05:42 +0000 ROA not before: Wed 21 Jan 2026 05:05:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215039 IP address blocks: 77.90.5.0/24 maxlen: 24 77.90.14.0/24 maxlen: 24 77.90.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:de:f1:b9:a4:5a:80:9a:27:08:ff:fa:82:e1:a0:8d:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 21 05:05:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ed6f58f79fe096fddecab29aab762e221dbd6c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7a:aa:09:69:29:4d:dc:47:1c:50:22:54:c5: e2:61:d2:47:02:e7:bc:da:03:22:b1:15:33:f5:ba: 76:61:12:32:c3:ec:0e:15:cf:d5:ff:57:91:b3:d3: af:d7:5b:3f:47:31:21:ad:e5:1f:b6:aa:c1:5b:25: 28:0a:76:bd:75:75:1b:9e:67:a5:bf:9e:aa:c3:18: 83:21:a0:d3:be:21:b6:d8:c3:43:69:99:cc:1b:99: 42:7d:6b:dc:96:b4:b1:52:e3:d6:6f:83:b2:eb:fb: 1a:02:11:8f:10:84:e0:8b:fd:46:a7:ab:62:b0:1f: a1:23:cd:a0:4d:9f:c0:06:a4:47:76:1c:42:92:5f: 13:80:41:6a:fb:da:70:54:d3:24:05:fb:71:d9:e2: dc:f7:c3:a7:2d:1f:49:05:59:28:07:a8:88:22:ba: 59:a7:3a:b9:e7:fa:98:e2:80:3a:3c:d6:8e:63:c2: 09:9f:3c:8f:02:6d:b3:96:5a:f2:c6:77:bd:56:ad: 3e:24:d9:03:5a:d7:fa:95:20:63:2b:f7:b8:da:8f: be:ea:59:54:23:b9:a8:c3:14:38:c6:cf:2f:d9:c2: bd:4c:de:3c:02:4e:3c:e9:75:dc:49:10:e4:ab:56: 3a:1c:75:54:a2:29:84:12:84:96:88:58:a4:64:67: 73:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:D6:F5:8F:79:FE:09:6F:DD:EC:AB:29:AA:B7:62:E2:21:DB:D6:C1 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Xtb1j3n-CW_d7Kspqrdi4iHb1sE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.90.5.0/24 77.90.14.0/24 77.90.53.0/24 Signature Algorithm: sha256WithRSAEncryption 65:5c:63:44:b3:c6:d7:d7:27:4a:4d:55:d6:06:2b:ca:96:38: fd:1d:86:8b:75:c4:8b:7d:33:8b:12:c8:dc:a8:c5:d1:6f:8c: 35:4e:2d:e9:18:1b:cc:74:aa:4f:67:30:c6:49:26:56:cf:d1: 13:be:f8:1f:10:b5:85:0b:41:96:27:07:31:a6:44:02:c5:b3: 6d:8e:28:df:b9:1e:05:24:10:5c:c7:52:ad:c2:a4:72:29:9f: bc:37:2a:01:de:d0:c6:40:19:a8:4a:39:56:bd:f7:08:71:1f: 0b:90:fc:f2:79:7a:2c:03:e7:c0:6b:57:15:89:17:8f:26:2e: 51:d7:8b:35:03:47:5a:fc:6e:e3:94:d4:78:47:a0:22:82:54: 39:4c:f8:09:46:dd:24:4b:0d:19:a6:54:10:45:da:26:c2:8a: 35:70:90:2e:ba:b1:1b:38:ec:d3:9e:57:85:1c:d2:cf:97:61: 54:17:95:d8:a2:0f:04:0b:79:f4:0e:d6:3e:ca:a9:76:7a:ac: 36:51:b3:51:0b:14:7c:53:9c:a0:10:d1:81:27:f5:e6:12:35: a6:6e:4a:43:f2:34:f6:8f:58:c4:84:59:f6:59:73:4e:94:7d: 48:ad:17:6b:f5:e8:8e:2a:bb:31:19:1c:8a:81:f4:7c:d8:51: f5:ca:d4:e1 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZve8bmkWoCaJwj/+oLhoI32MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTIxMDUwNTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZWQ2ZjU4Zjc5ZmUwOTZmZGRlY2FiMjlhYWI3NjJlMjIxZGJkNmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXqqCWkpTdxHHFAiVMXiYdJHAue8 2gMisRUz9bp2YRIyw+wOFc/V/1eRs9Ov11s/RzEhreUftqrBWyUoCna9dXUbnmel v56qwxiDIaDTviG22MNDaZnMG5lCfWvclrSxUuPWb4Oy6/saAhGPEITgi/1Gp6ti sB+hI82gTZ/ABqRHdhxCkl8TgEFq+9pwVNMkBftx2eLc98OnLR9JBVkoB6iIIrpZ pzq55/qY4oA6PNaOY8IJnzyPAm2zllryxne9Vq0+JNkDWtf6lSBjK/e42o++6llU I7mowxQ4xs8v2cK9TN48Ak486XXcSRDkq1Y6HHVUoimEEoSWiFikZGdzDQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFF7W9Y95/glv3eyrKaq3YuIh29bBMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvWHRiMWozbi1DV19kN0tzcHFyZGk0aUhiMXNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATVoFAwQA TVoOAwQATVo1MA0GCSqGSIb3DQEBCwUAA4IBAQBlXGNEs8bX1ydKTVXWBivKljj9 HYaLdcSLfTOLEsjcqMXRb4w1Ti3pGBvMdKpPZzDGSSZWz9ETvvgfELWFC0GWJwcx pkQCxbNtjijfuR4FJBBcx1KtwqRyKZ+8NyoB3tDGQBmoSjlWvfcIcR8LkPzyeXos A+fAa1cViRePJi5R14s1A0da/G7jlNR4R6AiglQ5TPgJRt0kSw0ZplQQRdomwoo1 cJAuurEbOOzTnleFHNLPl2FUF5XYog8EC3n0DtY+yql2eqw2UbNRCxR8U5ygENGB J/XmEjWmbkpD8jT2j1jEhFn2WXNOlH1IrRdr9eiOKrsxGRyKgfR82FH1ytTh -----END CERTIFICATE-----Generated at Sun Jan 25 07:08:25 2026 by rpki-client