This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/xprcFFAPJjG3UElyOhAJ6E9gXpA.roa File: xprcFFAPJjG3UElyOhAJ6E9gXpA.roa (raw, json) Hash identifier: o5pGWYnDSMF3mxP8sdDWWibluTFKuj51TiZS9rC+X/s= Subject key identifier: C6:9A:DC:14:50:0F:26:31:B7:50:49:72:3A:10:09:E8:4F:60:5E:90 Certificate issuer: /CN=62beaa57c67aeb5bafd99793ab4846850a796c28 Certificate serial: 019B7D5AC22005201AAD1C17E0D1631C0575 Authority key identifier: 62:BE:AA:57:C6:7A:EB:5B:AF:D9:97:93:AB:48:46:85:0A:79:6C:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/xprcFFAPJjG3UElyOhAJ6E9gXpA.roa Signing time: Fri 02 Jan 2026 06:17:38 +0000 ROA not before: Fri 02 Jan 2026 06:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52209 IP address blocks: 91.239.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:c2:20:05:20:1a:ad:1c:17:e0:d1:63:1c:05:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62beaa57c67aeb5bafd99793ab4846850a796c28 Validity Not Before: Jan 2 06:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c69adc14500f2631b75049723a1009e84f605e90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6d:43:43:4a:45:14:3f:b6:14:b7:5b:ae:0b: c7:c8:5d:c5:0f:29:be:49:1b:fe:c1:23:e0:c5:d4: 69:f2:6f:54:01:c7:40:b9:40:46:e0:91:30:10:e7: 22:d1:1c:e3:ba:af:35:06:f9:74:1c:70:d6:50:45: 57:5c:97:ee:fa:57:f2:c5:8c:19:c7:d6:07:54:1e: be:f3:c0:f1:91:6c:c7:6d:95:22:ed:0a:8f:69:fe: 9a:2d:76:39:40:57:af:d0:a8:77:ea:23:04:18:00: 9d:19:6b:6f:28:a3:4c:72:0e:95:0c:e2:61:b6:49: 29:d6:1c:b9:d4:0a:5a:55:9b:f8:75:5c:5c:01:5a: 5c:43:3e:ee:8c:41:50:03:0e:f8:fd:96:f3:12:ff: df:2a:90:b6:4b:42:d5:35:a5:f2:a4:44:3f:02:0c: 37:10:e2:6f:2c:df:f6:a9:b0:12:f8:f1:71:06:3a: 73:e2:39:43:6a:7f:02:f0:94:54:fb:c6:20:c1:36: 1d:0c:e4:fc:65:be:a6:4e:6c:92:67:1e:53:9d:92: 5c:d4:63:e3:6e:43:5c:dc:95:6b:8f:f3:24:e8:c2: 9a:d7:71:33:6d:f5:96:3a:2b:00:3a:ac:93:91:30: 35:f2:c1:4e:a9:eb:ba:21:26:44:4b:1b:17:a1:2c: 38:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:9A:DC:14:50:0F:26:31:B7:50:49:72:3A:10:09:E8:4F:60:5E:90 X509v3 Authority Key Identifier: keyid:62:BE:AA:57:C6:7A:EB:5B:AF:D9:97:93:AB:48:46:85:0A:79:6C:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/xprcFFAPJjG3UElyOhAJ6E9gXpA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.189.0/24 Signature Algorithm: sha256WithRSAEncryption 59:27:4f:72:79:75:17:c4:77:68:fa:25:13:65:4b:93:d2:5e: b8:8a:3f:3d:39:cc:1a:f1:af:a6:95:18:25:c7:42:b2:2f:40: f9:88:a9:d2:f9:02:22:b1:93:25:58:a2:ce:fa:e5:b4:1d:1a: f6:7c:d2:fe:cf:6a:84:1e:ff:52:ba:f7:98:f1:ec:9d:d6:bb: 40:95:66:6d:92:19:97:07:29:3b:91:11:b4:14:be:cb:b5:47: 01:63:ea:ea:88:ba:4b:81:4d:ed:31:e4:e6:3b:a4:49:f7:1e: d0:4e:1e:30:69:3b:d4:29:89:1f:bc:94:3d:59:f8:10:89:7a: 1e:18:76:05:64:ff:86:9f:e5:64:78:52:b8:3d:a5:62:df:11: 3f:89:9e:86:50:6c:7e:34:ce:56:b6:cf:d9:90:fc:0e:f7:95: 61:82:d0:71:c9:4b:30:62:9d:83:16:61:04:eb:a2:4c:c5:69: 11:30:8c:c5:18:bd:98:3c:19:35:84:ef:3b:4f:1d:56:68:2a: c8:16:83:d4:8e:fa:8e:02:9d:15:fb:27:d2:48:13:ec:08:cd: 65:39:3d:0c:16:41:32:59:d2:3f:b2:f8:e2:c4:d3:d8:ba:e3: cb:40:75:5b:52:13:a5:e5:9b:b8:c1:8e:75:1f:9f:65:d5:9c: c0:89:bb:d2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WsIgBSAarRwX4NFjHAV1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyYmVhYTU3YzY3YWViNWJhZmQ5OTc5M2FiNDg0Njg1MGE3 OTZjMjgwHhcNMjYwMTAyMDYxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjlhZGMxNDUwMGYyNjMxYjc1MDQ5NzIzYTEwMDllODRmNjA1ZTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnm1DQ0pFFD+2FLdbrgvHyF3FDym+ SRv+wSPgxdRp8m9UAcdAuUBG4JEwEOci0Rzjuq81Bvl0HHDWUEVXXJfu+lfyxYwZ x9YHVB6+88DxkWzHbZUi7QqPaf6aLXY5QFev0Kh36iMEGACdGWtvKKNMcg6VDOJh tkkp1hy51ApaVZv4dVxcAVpcQz7ujEFQAw74/ZbzEv/fKpC2S0LVNaXypEQ/Agw3 EOJvLN/2qbAS+PFxBjpz4jlDan8C8JRU+8YgwTYdDOT8Zb6mTmySZx5TnZJc1GPj bkNc3JVrj/Mk6MKa13EzbfWWOisAOqyTkTA18sFOqeu6ISZESxsXoSw4uQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMaa3BRQDyYxt1BJcjoQCehPYF6QMB8GA1UdIwQY MBaAFGK+qlfGeutbr9mXk6tIRoUKeWwoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXI2cVY4WjY2MXV2MlplVHEwaEdoUXA1YkNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8yMjU4MWUtZmU4Yy00ZmI4LTk1ODUt OTg4MGYwNGRiOTRhLzEveHByY0ZGQVBKakczVUVseU9oQUo2RTlnWHBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy8yMjU4MWUtZmU4Yy00ZmI4LTk1ODUtOTg4MGYwNGRiOTRh LzEvWXI2cVY4WjY2MXV2MlplVHEwaEdoUXA1YkNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW++9MA0G CSqGSIb3DQEBCwUAA4IBAQBZJ09yeXUXxHdo+iUTZUuT0l64ij89Ocwa8a+mlRgl x0KyL0D5iKnS+QIisZMlWKLO+uW0HRr2fNL+z2qEHv9SuveY8eyd1rtAlWZtkhmX Byk7kRG0FL7LtUcBY+rqiLpLgU3tMeTmO6RJ9x7QTh4waTvUKYkfvJQ9WfgQiXoe GHYFZP+Gn+VkeFK4PaVi3xE/iZ6GUGx+NM5Wts/ZkPwO95VhgtBxyUswYp2DFmEE 66JMxWkRMIzFGL2YPBk1hO87Tx1WaCrIFoPUjvqOAp0V+yfSSBPsCM1lOT0MFkEy WdI/svjixNPYuuPLQHVbUhOl5Zu4wY51H59l1ZzAibvS -----END CERTIFICATE-----Generated at Sun Jan 25 23:03:40 2026 by rpki-client