This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/xrEslglVuEnnQ0vF9Dsq9qhfjps.roa File: xrEslglVuEnnQ0vF9Dsq9qhfjps.roa (raw, json) Hash identifier: Qjzp64QTM1xn969UZDkr+b0btpansANNv6kwoq7jiQo= Subject key identifier: C6:B1:2C:96:09:55:B8:49:E7:43:4B:C5:F4:3B:2A:F6:A8:5F:8E:9B Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5 Certificate serial: 019B76EBA9D726CDCB2F1504474C0A80FE4D Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/xrEslglVuEnnQ0vF9Dsq9qhfjps.roa Signing time: Thu 01 Jan 2026 00:18:34 +0000 ROA not before: Thu 01 Jan 2026 00:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206717 IP address blocks: 93.109.217.0/24 maxlen: 24 213.7.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:a9:d7:26:cd:cb:2f:15:04:47:4c:0a:80:fe:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5 Validity Not Before: Jan 1 00:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6b12c960955b849e7434bc5f43b2af6a85f8e9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e6:dc:51:7a:70:d9:4f:d9:73:ed:d6:64:bb: 2f:93:1f:da:c0:e2:eb:bd:37:f7:38:60:fa:4a:88: 30:28:b5:3b:a8:f8:82:66:32:1b:73:ab:7d:67:8d: 5b:20:49:9a:c3:7e:07:d5:72:82:0f:a5:9f:ac:d3: 56:79:3a:a9:4c:11:91:d5:03:52:6e:d4:ab:1e:b7: 42:4b:df:2f:af:4c:bf:2d:8d:e2:c7:1c:20:b6:e8: 14:83:79:0a:6c:8d:4d:63:d5:12:13:2e:37:10:7c: 26:5b:fb:21:93:3f:0e:33:8c:74:5b:b8:a7:70:3e: a7:f7:b6:e1:11:5e:8b:bb:89:c4:b5:e7:b7:41:d7: 58:70:a7:e1:4e:f7:a2:1a:cb:2e:26:d0:66:f0:fc: 3f:c7:99:72:e9:c0:e8:cc:79:7c:09:45:02:16:0e: 78:f9:1b:52:9d:d5:60:f8:44:4d:d6:93:5e:9e:74: ac:25:10:bb:99:02:0c:82:cb:d6:41:cf:87:49:61: 37:ef:f7:df:05:47:fd:2d:17:09:56:3b:a3:05:ad: 69:22:fe:e5:3b:27:dc:63:05:6c:e5:57:99:46:fc: b2:7a:48:20:b8:14:4d:fd:5c:95:f7:aa:9c:ce:e2: 04:31:9e:8f:b4:dd:dd:22:ef:66:17:e2:83:f1:6c: c6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:B1:2C:96:09:55:B8:49:E7:43:4B:C5:F4:3B:2A:F6:A8:5F:8E:9B X509v3 Authority Key Identifier: keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/xrEslglVuEnnQ0vF9Dsq9qhfjps.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.109.217.0/24 213.7.209.0/24 Signature Algorithm: sha256WithRSAEncryption 40:6d:04:5d:7b:0e:c4:5e:74:ba:fb:19:8c:21:72:db:d9:6c: 83:04:5f:aa:8c:2c:ca:48:0f:12:65:e8:57:94:98:2d:52:ff: 26:ef:13:70:4c:db:c7:95:dc:de:92:6b:39:0d:6e:d1:e6:6c: d4:53:cb:62:29:1d:c9:18:f4:eb:49:2f:44:b4:c8:8d:0b:67: e1:84:f2:15:17:cd:5e:11:1b:a4:8f:e6:a9:1e:c8:68:f2:b3: fe:f6:56:71:67:e3:33:16:59:1e:fd:eb:5d:13:8d:fa:72:8e: d4:30:70:75:ad:f0:83:70:9d:9a:f0:02:8c:f6:d8:74:d9:92: 57:79:53:a2:6d:a5:f8:96:b4:04:e2:ab:c9:e6:00:53:01:8e: 03:eb:41:c2:e6:5b:54:4a:83:04:ba:aa:20:e1:11:3b:24:b1: 55:95:c2:2c:4b:ba:d1:dd:95:0a:0b:fb:1f:87:d5:cd:a4:71: 67:a4:df:c8:06:a3:61:a3:bc:12:4b:c2:d1:cb:c2:49:70:1c: b9:33:3f:eb:a8:e3:a4:96:af:f5:5f:43:2c:1b:73:08:32:09: e2:f2:76:fb:ca:e5:26:ee:07:0e:02:94:a6:51:c5:f7:6a:cc: d5:ef:28:46:a7:e5:14:93:ed:a4:5d:ec:dc:b3:3b:df:ec:c7: 11:71:68:57 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt266nXJs3LLxUER0wKgP5NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MTFhYmM0YzA0NjhhYjI4OTFlYWFjYWRiYTBkYzAzNzc5 MzZmZDUwHhcNMjYwMTAxMDAxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmIxMmM5NjA5NTViODQ5ZTc0MzRiYzVmNDNiMmFmNmE4NWY4ZTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwubcUXpw2U/Zc+3WZLsvkx/awOLr vTf3OGD6SogwKLU7qPiCZjIbc6t9Z41bIEmaw34H1XKCD6WfrNNWeTqpTBGR1QNS btSrHrdCS98vr0y/LY3ixxwgtugUg3kKbI1NY9USEy43EHwmW/shkz8OM4x0W7in cD6n97bhEV6Lu4nEtee3QddYcKfhTveiGssuJtBm8Pw/x5ly6cDozHl8CUUCFg54 +RtSndVg+ERN1pNennSsJRC7mQIMgsvWQc+HSWE37/ffBUf9LRcJVjujBa1pIv7l OyfcYwVs5VeZRvyyekgguBRN/VyV96qczuIEMZ6PtN3dIu9mF+KD8WzGWQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMaxLJYJVbhJ50NLxfQ7KvaoX46bMB8GA1UdIwQY MBaAFNQRq8TARoqyiR6qytug3AN3k2/VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUJHcnhNQkdpcktKSHFySzI2RGNBM2VUYjlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTIt YjBmNGI5YzM3ZTQ5LzEveHJFc2xnbFZ1RW5uUTB2RjlEc3E5cWhmanBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTItYjBmNGI5YzM3ZTQ5 LzEvMUJHcnhNQkdpcktKSHFySzI2RGNBM2VUYjlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXW3ZAwQA 1QfRMA0GCSqGSIb3DQEBCwUAA4IBAQBAbQRdew7EXnS6+xmMIXLb2WyDBF+qjCzK SA8SZehXlJgtUv8m7xNwTNvHldzekms5DW7R5mzUU8tiKR3JGPTrSS9EtMiNC2fh hPIVF81eERukj+apHsho8rP+9lZxZ+MzFlke/etdE436co7UMHB1rfCDcJ2a8AKM 9th02ZJXeVOibaX4lrQE4qvJ5gBTAY4D60HC5ltUSoMEuqog4RE7JLFVlcIsS7rR 3ZUKC/sfh9XNpHFnpN/IBqNho7wSS8LRy8JJcBy5Mz/rqOOklq/1X0MsG3MIMgni 8nb7yuUm7gcOApSmUcX3aszV7yhGp+UUk+2kXezcszvf7McRcWhX -----END CERTIFICATE-----Generated at Sun Jan 25 15:15:12 2026 by rpki-client