This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/xth3SgaYG73nXmBzt5a_zS7YmPE.roa File: xth3SgaYG73nXmBzt5a_zS7YmPE.roa (raw, json) Hash identifier: UPhg5p0PVUeMrIrZDkSLdMR4fuwy++NIiwWlcyibl/Y= Subject key identifier: C6:D8:77:4A:06:98:1B:BD:E7:5E:60:73:B7:96:BF:CD:2E:D8:98:F1 Certificate issuer: /CN=710ec5fa68cf99ee3dbbd1949e82044503a1df72 Certificate serial: 019B797EE7C1BCC7C25D51306FE9C5BC85BD Authority key identifier: 71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/xth3SgaYG73nXmBzt5a_zS7YmPE.roa Signing time: Thu 01 Jan 2026 12:18:38 +0000 ROA not before: Thu 01 Jan 2026 12:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3330 IP address blocks: 91.209.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:e7:c1:bc:c7:c2:5d:51:30:6f:e9:c5:bc:85:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=710ec5fa68cf99ee3dbbd1949e82044503a1df72 Validity Not Before: Jan 1 12:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6d8774a06981bbde75e6073b796bfcd2ed898f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:06:f9:cc:3a:83:52:6c:aa:eb:d4:c3:78:1c: 71:a5:47:e8:92:b7:17:e0:bd:d9:49:09:3b:8d:1e: 5c:45:0c:aa:d6:00:d4:34:82:2f:b4:a4:8b:2d:52: a8:25:9c:fd:26:9a:1d:73:fc:31:38:e1:95:58:b4: 22:c2:65:dc:0f:2b:fd:03:5a:49:35:2a:dc:a3:bd: 6b:a4:01:74:a9:c3:92:19:97:1c:0e:07:1f:a6:44: 9d:b1:79:a6:6d:c9:f1:36:9f:b9:b7:d7:66:c5:a6: 2d:18:13:5b:b1:de:d9:11:8b:a8:de:d6:ea:24:60: 33:39:ec:e5:0a:38:f5:c5:af:a9:f0:31:05:27:86: 65:bf:f7:2d:db:66:85:40:a3:41:a3:34:72:dd:e4: da:15:3a:a2:40:6c:67:e9:ed:b0:97:5e:d0:14:af: f4:1a:34:3e:eb:f0:e5:29:78:f6:c7:44:0f:3e:f0: b6:eb:a3:9c:0d:11:3e:31:81:b4:6b:df:1c:f5:64: 69:7f:88:0c:5e:e2:63:ae:50:02:f1:5f:84:8e:93: d5:80:0a:78:5a:ad:4f:7a:bf:ac:06:9b:db:05:cb: 93:d9:85:9d:f2:dd:00:89:52:ef:2a:fc:3a:be:43: 2a:b2:74:7f:35:6e:7b:64:d0:0e:1c:ff:d8:e1:3c: 9f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D8:77:4A:06:98:1B:BD:E7:5E:60:73:B7:96:BF:CD:2E:D8:98:F1 X509v3 Authority Key Identifier: keyid:71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/xth3SgaYG73nXmBzt5a_zS7YmPE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.33.0/24 Signature Algorithm: sha256WithRSAEncryption 54:32:0d:de:27:fd:97:58:ca:8f:af:f4:ab:99:03:06:78:0d: 28:f8:ab:f0:0c:af:76:60:13:f3:a7:3f:1b:55:3a:d1:1e:5d: d2:3e:ca:4f:e3:40:c8:48:21:f9:f8:8b:5c:0b:b9:dd:fd:d8: 92:34:25:40:f3:d3:df:04:e6:a9:4d:7d:ea:07:78:73:d8:2c: ae:8e:ab:31:35:60:f6:4f:07:69:66:c0:2b:01:bb:d3:39:c7: 1e:86:8e:e9:a6:3b:08:b6:82:d7:53:27:45:48:3a:a6:8d:39: 6f:b9:8b:51:2a:e7:01:12:d2:6d:54:0d:f8:f0:f1:4e:d2:cb: 5f:d5:af:3a:46:39:57:6b:ab:ea:82:e2:68:a3:9b:9f:ab:26: 0e:8f:e6:e6:5a:70:2a:32:f1:be:64:a8:43:ca:19:f4:c0:06: c0:85:4a:7c:1b:ae:ce:41:00:46:48:f2:a9:ec:41:b8:b7:d2: 41:e7:80:99:58:5a:c3:f3:ff:9c:97:76:94:e8:46:47:7c:cb: a9:e5:01:42:38:7d:86:e6:f3:ff:b9:ac:68:a2:ca:81:36:f3: fc:ab:e9:02:22:28:c6:19:66:de:1b:49:fc:9f:83:4b:5f:73: 00:a5:62:ea:bf:6b:b3:b5:ac:d8:43:c4:cb:7a:b8:ac:66:86: 8d:cd:b9:9d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fufBvMfCXVEwb+nFvIW9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMGVjNWZhNjhjZjk5ZWUzZGJiZDE5NDllODIwNDQ1MDNh MWRmNzIwHhcNMjYwMTAxMTIxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmQ4Nzc0YTA2OTgxYmJkZTc1ZTYwNzNiNzk2YmZjZDJlZDg5OGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygb5zDqDUmyq69TDeBxxpUfokrcX 4L3ZSQk7jR5cRQyq1gDUNIIvtKSLLVKoJZz9Jpodc/wxOOGVWLQiwmXcDyv9A1pJ NSrco71rpAF0qcOSGZccDgcfpkSdsXmmbcnxNp+5t9dmxaYtGBNbsd7ZEYuo3tbq JGAzOezlCjj1xa+p8DEFJ4Zlv/ct22aFQKNBozRy3eTaFTqiQGxn6e2wl17QFK/0 GjQ+6/DlKXj2x0QPPvC266OcDRE+MYG0a98c9WRpf4gMXuJjrlAC8V+EjpPVgAp4 Wq1Per+sBpvbBcuT2YWd8t0AiVLvKvw6vkMqsnR/NW57ZNAOHP/Y4TyfFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMbYd0oGmBu9515gc7eWv80u2JjxMB8GA1UdIwQY MBaAFHEOxfpoz5nuPbvRlJ6CBEUDod9yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1E3Ri1talBtZTQ5dTlHVW5vSUVSUU9oMzNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9lMzVkZDAtMzAxYy00YjlmLWE4ODct OTI3MjJlNGFiMDQ1LzEveHRoM1NnYVlHNzNuWG1CenQ1YV96UzdZbVBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9lMzVkZDAtMzAxYy00YjlmLWE4ODctOTI3MjJlNGFiMDQ1 LzEvY1E3Ri1talBtZTQ5dTlHVW5vSUVSUU9oMzNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9EhMA0G CSqGSIb3DQEBCwUAA4IBAQBUMg3eJ/2XWMqPr/SrmQMGeA0o+KvwDK92YBPzpz8b VTrRHl3SPspP40DISCH5+ItcC7nd/diSNCVA89PfBOapTX3qB3hz2CyujqsxNWD2 TwdpZsArAbvTOcceho7ppjsItoLXUydFSDqmjTlvuYtRKucBEtJtVA348PFO0stf 1a86RjlXa6vqguJoo5ufqyYOj+bmWnAqMvG+ZKhDyhn0wAbAhUp8G67OQQBGSPKp 7EG4t9JB54CZWFrD8/+cl3aU6EZHfMup5QFCOH2G5vP/uaxoosqBNvP8q+kCIijG GWbeG0n8n4NLX3MApWLqv2uztazYQ8TLerisZoaNzbmd -----END CERTIFICATE-----Generated at Tue Jan 27 03:54:02 2026 by rpki-client