This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/XPyrFETzbIf4UTMJJTPgIXwXkgo.roa File: XPyrFETzbIf4UTMJJTPgIXwXkgo.roa (raw, json) Hash identifier: rpIh/S9npo0EEK8J2sqDjrTLl9P72OOEfi3A9r/XVnw= Subject key identifier: 5C:FC:AB:14:44:F3:6C:87:F8:51:33:09:25:33:E0:21:7C:17:92:0A Certificate issuer: /CN=c092d8d5511b19ece456960f23bfa886ee1d570b Certificate serial: 019B7AC7C10F80DD9D81A9EABE4FD90BAE35 Authority key identifier: C0:92:D8:D5:51:1B:19:EC:E4:56:96:0F:23:BF:A8:86:EE:1D:57:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wJLY1VEbGezkVpYPI7-ohu4dVws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/XPyrFETzbIf4UTMJJTPgIXwXkgo.roa Signing time: Thu 01 Jan 2026 18:17:49 +0000 ROA not before: Thu 01 Jan 2026 18:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58322 IP address blocks: 91.106.32.0/22 maxlen: 22 91.106.32.0/23 maxlen: 23 91.106.32.0/24 maxlen: 24 91.106.33.0/24 maxlen: 24 91.106.34.0/23 maxlen: 23 91.106.34.0/24 maxlen: 24 91.106.35.0/24 maxlen: 24 91.106.40.0/21 maxlen: 21 91.106.40.0/22 maxlen: 22 91.106.40.0/23 maxlen: 23 91.106.40.0/24 maxlen: 24 91.106.41.0/24 maxlen: 24 91.106.42.0/23 maxlen: 23 91.106.42.0/24 maxlen: 24 91.106.43.0/24 maxlen: 24 91.106.44.0/22 maxlen: 22 91.106.44.0/23 maxlen: 23 91.106.44.0/24 maxlen: 24 91.106.45.0/24 maxlen: 24 91.106.46.0/23 maxlen: 23 91.106.46.0/24 maxlen: 24 91.106.47.0/24 maxlen: 24 91.106.48.0/24 maxlen: 24 91.106.50.0/24 maxlen: 24 91.106.51.0/24 maxlen: 24 109.61.4.0/22 maxlen: 22 109.61.4.0/23 maxlen: 23 109.61.4.0/24 maxlen: 24 109.61.5.0/24 maxlen: 24 109.61.6.0/23 maxlen: 23 109.61.6.0/24 maxlen: 24 109.61.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.crl rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.mft rsync://rpki.ripe.net/repository/DEFAULT/wJLY1VEbGezkVpYPI7-ohu4dVws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:c1:0f:80:dd:9d:81:a9:ea:be:4f:d9:0b:ae:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c092d8d5511b19ece456960f23bfa886ee1d570b Validity Not Before: Jan 1 18:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5cfcab1444f36c87f85133092533e0217c17920a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:58:a8:fd:75:6e:5b:50:90:72:3c:66:ff:5b: c7:90:8a:68:8e:6f:50:7a:33:fa:bb:10:de:de:38: 93:f9:d2:bc:8a:27:11:59:90:04:cd:fe:29:25:8c: 98:31:84:62:47:4c:2a:ef:b4:f8:65:c0:ec:2f:6c: ee:d0:66:af:4e:68:55:66:b8:8f:42:0d:b2:4c:d6: aa:1e:45:fd:f0:e7:a5:4c:5f:cb:af:32:7d:3c:96: e2:65:74:ba:19:5d:83:d9:bd:c6:4a:fa:96:7c:b3: 85:bb:b9:c1:5b:e5:0e:81:86:75:f9:19:17:ae:99: 81:86:12:63:23:aa:00:4b:54:a4:07:49:23:d5:55: 77:39:d5:58:39:6d:3e:23:53:b6:14:db:66:bf:a8: 76:f8:dc:1e:58:e6:83:18:c4:f4:d2:fb:64:49:e9: d8:bb:39:89:92:42:48:49:9a:74:17:61:8e:5a:c4: ea:3a:8d:76:16:fc:44:c3:8c:77:91:36:c5:31:5b: 6f:28:48:fa:b3:ed:74:9e:86:b5:ad:12:0f:34:9a: e5:96:96:10:94:78:39:9f:b2:2e:13:4b:7d:50:79: 2b:e9:77:1e:21:92:2c:73:8c:eb:3a:53:83:f6:5d: 19:fd:09:20:69:cc:0a:d5:21:a2:b9:c6:cc:54:c1: c7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:FC:AB:14:44:F3:6C:87:F8:51:33:09:25:33:E0:21:7C:17:92:0A X509v3 Authority Key Identifier: keyid:C0:92:D8:D5:51:1B:19:EC:E4:56:96:0F:23:BF:A8:86:EE:1D:57:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJLY1VEbGezkVpYPI7-ohu4dVws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/XPyrFETzbIf4UTMJJTPgIXwXkgo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.106.32.0/22 91.106.40.0-91.106.48.255 91.106.50.0/23 109.61.4.0/22 Signature Algorithm: sha256WithRSAEncryption 9e:b1:68:d5:7e:2e:27:06:f6:17:24:64:bd:ee:c6:af:2d:cd: 71:f4:1f:2b:b9:f5:12:1e:89:3d:b9:0b:6b:ee:3d:32:72:54: 54:2d:12:de:cd:37:35:57:7b:1a:7d:c8:fe:1e:10:f6:87:f6: 2e:81:65:97:a8:c2:28:2a:f8:92:ba:12:e9:ba:c6:75:e0:72: 87:48:1b:e7:e1:80:35:f2:0f:a7:58:85:df:c6:89:3c:8f:3d: d0:3c:b5:1e:87:3b:79:9b:9e:94:09:8e:b2:c1:4b:d5:a9:01: 23:7b:da:43:94:66:69:ee:8d:8b:11:d4:bc:35:c6:81:26:9e: 0d:64:99:90:5b:c8:fb:72:5e:51:11:14:19:a6:e8:d2:45:db: 14:e3:eb:77:af:8a:ed:f2:04:26:69:9e:2c:ca:ae:d6:12:52: 0b:1d:cd:46:21:e5:45:47:0c:77:90:f0:34:a2:bc:60:b5:91: f9:33:ea:ea:be:16:28:2c:d6:68:c9:17:46:95:53:10:30:89: 21:e3:b9:e6:58:6b:a5:52:c9:aa:5a:fc:5e:ca:0c:e5:ef:34: 8d:b8:25:50:b7:3f:22:21:ff:84:20:12:cd:15:89:f0:da:03: 76:84:2d:bf:49:00:6a:c6:14:b3:4e:a1:4a:86:23:14:fb:5d: 2b:64:3f:b2 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt6x8EPgN2dganqvk/ZC641MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwOTJkOGQ1NTExYjE5ZWNlNDU2OTYwZjIzYmZhODg2ZWUx ZDU3MGIwHhcNMjYwMTAxMTgxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2ZjYWIxNDQ0ZjM2Yzg3Zjg1MTMzMDkyNTMzZTAyMTdjMTc5MjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lio/XVuW1CQcjxm/1vHkIpojm9Q ejP6uxDe3jiT+dK8iicRWZAEzf4pJYyYMYRiR0wq77T4ZcDsL2zu0GavTmhVZriP Qg2yTNaqHkX98OelTF/LrzJ9PJbiZXS6GV2D2b3GSvqWfLOFu7nBW+UOgYZ1+RkX rpmBhhJjI6oAS1SkB0kj1VV3OdVYOW0+I1O2FNtmv6h2+NweWOaDGMT00vtkSenY uzmJkkJISZp0F2GOWsTqOo12FvxEw4x3kTbFMVtvKEj6s+10noa1rRIPNJrllpYQ lHg5n7IuE0t9UHkr6XceIZIsc4zrOlOD9l0Z/QkgacwK1SGiucbMVMHH3QIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFFz8qxRE82yH+FEzCSUz4CF8F5IKMB8GA1UdIwQY MBaAFMCS2NVRGxns5FaWDyO/qIbuHVcLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0pMWTFWRWJHZXprVnBZUEk3LW9odTRkVndzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9kNDMwZDktZDIxNC00MWMwLThlNTEt MjY3YTE2YjQ2MjlmLzEvWFB5ckZFVHpiSWY0VVRNSkpUUGdJWHdYa2dvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9kNDMwZDktZDIxNC00MWMwLThlNTEtMjY3YTE2YjQ2Mjlm LzEvd0pMWTFWRWJHZXprVnBZUEk3LW9odTRkVndzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQCW2ogMAwD BANbaigDBABbajADBAFbajIDBAJtPQQwDQYJKoZIhvcNAQELBQADggEBAJ6xaNV+ LicG9hckZL3uxq8tzXH0Hyu59RIeiT25C2vuPTJyVFQtEt7NNzVXexp9yP4eEPaH 9i6BZZeowigq+JK6Eum6xnXgcodIG+fhgDXyD6dYhd/GiTyPPdA8tR6HO3mbnpQJ jrLBS9WpASN72kOUZmnujYsR1Lw1xoEmng1kmZBbyPtyXlERFBmm6NJF2xTj63ev iu3yBCZpnizKrtYSUgsdzUYh5UVHDHeQ8DSivGC1kfkz6uq+Figs1mjJF0aVUxAw iSHjueZYa6VSyapa/F7KDOXvNI24JVC3PyIh/4QgEs0VifDaA3aELb9JAGrGFLNO oUqGIxT7XStkP7I= -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:31 2026 by rpki-client