This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/XNKWPCMOPLauToaa-Vtz2zcauoc.roa File: XNKWPCMOPLauToaa-Vtz2zcauoc.roa (raw, json) Hash identifier: luJuVPoWx92bH75pBWbCMtwrgqr+Km6/eamqOW1HDZc= Subject key identifier: 5C:D2:96:3C:23:0E:3C:B6:AE:4E:86:9A:F9:5B:73:DB:37:1A:BA:87 Certificate issuer: /CN=9a233bbddfe438646f586f085e5df0d79bdfb9fc Certificate serial: 019B7B35AB0B3E07F494E846340AEDE40914 Authority key identifier: 9A:23:3B:BD:DF:E4:38:64:6F:58:6F:08:5E:5D:F0:D7:9B:DF:B9:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/XNKWPCMOPLauToaa-Vtz2zcauoc.roa Signing time: Thu 01 Jan 2026 20:17:53 +0000 ROA not before: Thu 01 Jan 2026 20:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63017 IP address blocks: 80.91.56.0/24 maxlen: 24 80.91.57.0/24 maxlen: 24 2a02:6000:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:ab:0b:3e:07:f4:94:e8:46:34:0a:ed:e4:09:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a233bbddfe438646f586f085e5df0d79bdfb9fc Validity Not Before: Jan 1 20:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5cd2963c230e3cb6ae4e869af95b73db371aba87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:64:46:e7:c1:1c:ef:a6:01:d6:7f:3b:9e:52: 53:fd:46:de:c1:ad:80:7e:c1:6a:a5:eb:e5:07:e8: 42:cb:7f:88:2f:68:07:ef:5e:c6:d6:cc:38:a1:6f: f8:23:c0:11:4b:a7:32:01:af:7d:a5:6a:03:77:7b: bd:d7:1d:86:d9:8f:b0:e7:7c:bf:5e:a8:63:2c:e7: 12:78:4f:a1:13:54:3d:ab:26:7f:81:31:b2:cd:10: f6:8d:38:17:e7:1e:3b:c8:2c:45:ac:1d:b4:5b:75: 6d:68:9d:50:e3:c9:dc:ad:98:7f:8a:9c:98:35:d8: 92:0b:ff:07:e8:60:7e:32:46:73:8f:e4:82:ad:a8: 0f:a0:87:3e:b0:7f:e5:f3:7a:12:91:d4:3b:bb:87: d9:14:2f:90:e1:af:79:d7:b6:fc:0c:ee:a3:67:fb: 87:67:1f:f7:be:cb:a9:55:c8:2e:c0:2c:c5:62:a6: 68:df:a5:34:9a:8c:bc:03:56:37:c6:23:62:56:61: 31:23:6c:d6:6c:31:62:bb:fa:94:1d:a3:a7:db:a5: ce:9c:b7:8a:82:88:c6:d9:4f:e6:af:52:11:0d:7d: 83:ea:bd:de:96:a4:ef:eb:16:72:4b:b8:68:f5:a8: 8d:a6:fe:4c:d4:a2:e1:0d:24:ac:b0:2b:b0:ec:35: 61:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:D2:96:3C:23:0E:3C:B6:AE:4E:86:9A:F9:5B:73:DB:37:1A:BA:87 X509v3 Authority Key Identifier: keyid:9A:23:3B:BD:DF:E4:38:64:6F:58:6F:08:5E:5D:F0:D7:9B:DF:B9:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/XNKWPCMOPLauToaa-Vtz2zcauoc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.91.56.0/23 IPv6: 2a02:6000:ffff::/48 Signature Algorithm: sha256WithRSAEncryption 3e:92:56:9c:f7:06:de:1b:dc:45:be:89:2c:cf:16:c4:d1:ce: 78:eb:d0:8c:c7:68:9d:7a:eb:74:68:5c:74:83:28:73:f8:15: 46:94:4c:50:6a:bc:cc:21:28:93:c7:1f:64:ac:82:84:6c:f7: fd:91:68:35:42:7f:03:ad:a7:59:f4:3f:15:4d:2f:ac:47:b5: 37:f0:54:00:60:5f:38:35:4a:ad:7d:be:90:81:0d:da:e7:1f: 60:e2:29:2c:e5:e0:13:09:4d:84:bb:43:aa:fd:b3:d3:ab:41: 9a:3f:73:92:8c:e9:d8:24:b3:e9:61:de:4a:25:f1:a6:79:6d: fb:99:f0:06:42:24:d1:80:09:1f:56:a8:28:0e:76:2a:c7:f1: d1:32:fb:31:8d:a9:be:ae:2c:51:43:38:59:de:22:c8:28:c1: c8:b7:95:4c:47:15:e8:34:08:68:35:65:33:b4:6e:f1:53:e6: 76:7c:de:21:96:e2:7c:52:20:de:eb:4f:1b:fe:42:a6:2a:24: 36:af:78:5e:08:04:84:b2:06:63:e1:ce:fe:aa:54:ac:0d:d0: 39:a7:46:85:f7:cf:fb:6a:3e:fc:c6:51:64:e1:90:77:09:ff: 48:32:2c:df:9d:58:c3:99:fc:86:32:4b:8c:06:de:86:85:a9: 25:ae:50:ae -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt7NasLPgf0lOhGNArt5AkUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMjMzYmJkZGZlNDM4NjQ2ZjU4NmYwODVlNWRmMGQ3OWJk ZmI5ZmMwHhcNMjYwMTAxMjAxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2QyOTYzYzIzMGUzY2I2YWU0ZTg2OWFmOTViNzNkYjM3MWFiYTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmRG58Ec76YB1n87nlJT/Ubewa2A fsFqpevlB+hCy3+IL2gH717G1sw4oW/4I8ARS6cyAa99pWoDd3u91x2G2Y+w53y/ XqhjLOcSeE+hE1Q9qyZ/gTGyzRD2jTgX5x47yCxFrB20W3VtaJ1Q48ncrZh/ipyY NdiSC/8H6GB+MkZzj+SCragPoIc+sH/l83oSkdQ7u4fZFC+Q4a9517b8DO6jZ/uH Zx/3vsupVcguwCzFYqZo36U0moy8A1Y3xiNiVmExI2zWbDFiu/qUHaOn26XOnLeK gojG2U/mr1IRDX2D6r3elqTv6xZyS7ho9aiNpv5M1KLhDSSssCuw7DVhFwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFFzSljwjDjy2rk6Gmvlbc9s3GrqHMB8GA1UdIwQY MBaAFJojO73f5Dhkb1hvCF5d8Neb37n8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWlNN3ZkX2tPR1J2V0c4SVhsM3cxNXZmdWZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hNTE4OGQtYTBhZC00NTNjLWJhODIt Mzg3OWJkNzAzOTQ2LzEvWE5LV1BDTU9QTGF1VG9hYS1WdHoyemNhdW9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9hNTE4OGQtYTBhZC00NTNjLWJhODItMzg3OWJkNzAzOTQ2 LzEvbWlNN3ZkX2tPR1J2V0c4SVhsM3cxNXZmdWZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBUFs4MA8E AgACMAkDBwAqAmAA//8wDQYJKoZIhvcNAQELBQADggEBAD6SVpz3Bt4b3EW+iSzP FsTRznjr0IzHaJ1663RoXHSDKHP4FUaUTFBqvMwhKJPHH2SsgoRs9/2RaDVCfwOt p1n0PxVNL6xHtTfwVABgXzg1Sq19vpCBDdrnH2DiKSzl4BMJTYS7Q6r9s9OrQZo/ c5KM6dgks+lh3kol8aZ5bfuZ8AZCJNGACR9WqCgOdirH8dEy+zGNqb6uLFFDOFne Isgowci3lUxHFeg0CGg1ZTO0bvFT5nZ83iGW4nxSIN7rTxv+QqYqJDaveF4IBISy BmPhzv6qVKwN0DmnRoX3z/tqPvzGUWThkHcJ/0gyLN+dWMOZ/IYyS4wG3oaFqSWu UK4= -----END CERTIFICATE-----Generated at Sun Jan 25 18:08:05 2026 by rpki-client