This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/_XeETx4mh6Plm0BK-RBuP2zSujs.roa File: _XeETx4mh6Plm0BK-RBuP2zSujs.roa (raw, json) Hash identifier: xDOylPin64Mcz52VO00yVSOPCA3wH6/qSwl1hwhbWC4= Subject key identifier: FD:77:84:4F:1E:26:87:A3:E5:9B:40:4A:F9:10:6E:3F:6C:D2:BA:3B Certificate issuer: /CN=68455a3939bacbaa5918c7edd5464e11ba1c8cdd Certificate serial: 019B7EA6E792BA309FAAAA529A84BD65040C Authority key identifier: 68:45:5A:39:39:BA:CB:AA:59:18:C7:ED:D5:46:4E:11:BA:1C:8C:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/_XeETx4mh6Plm0BK-RBuP2zSujs.roa Signing time: Fri 02 Jan 2026 12:20:26 +0000 ROA not before: Fri 02 Jan 2026 12:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61400 IP address blocks: 91.230.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:e7:92:ba:30:9f:aa:aa:52:9a:84:bd:65:04:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68455a3939bacbaa5918c7edd5464e11ba1c8cdd Validity Not Before: Jan 2 12:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd77844f1e2687a3e59b404af9106e3f6cd2ba3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:97:61:fc:2d:35:b1:8d:9e:44:db:cf:47:96: 38:44:c7:90:f7:db:de:2e:8b:a0:25:ed:be:86:cd: bc:a5:bf:77:f3:b3:46:51:d8:9d:8d:9a:54:6e:1e: 04:c1:9d:14:18:5e:0b:3f:a7:0d:e2:9e:e3:56:a3: 3f:88:db:f7:72:5d:33:e7:46:4d:77:14:33:73:13: e5:33:8a:df:36:d9:ea:9e:aa:27:49:2c:92:44:89: 48:77:3f:5a:f5:38:b4:2f:9b:2b:24:87:f3:50:99: 17:9d:3d:b9:f8:62:71:f2:2c:e4:55:da:1e:a9:b5: b6:5c:85:d6:63:ab:ec:de:59:ec:d3:c6:3e:58:a4: 58:63:fb:98:69:62:f4:c0:ef:d8:ac:0e:69:fb:e8: ec:a2:4d:3c:63:43:44:a6:b1:12:35:e6:0f:41:86: 6c:4f:bf:47:83:e1:07:c5:ea:f0:d6:c2:a0:ae:f4: aa:f9:4d:53:71:65:04:1a:c2:2f:2e:6c:71:c1:0f: 0b:38:ff:3f:ab:f3:1e:e2:6b:d1:37:1a:34:52:09: 0d:2d:4b:08:e6:13:dc:1f:7d:5d:2c:40:ce:ae:09: 5d:37:37:e9:a3:60:a6:57:0b:17:2d:4f:5c:b2:f1: c1:78:8d:80:8e:b8:57:f2:d7:4d:f3:53:9c:6f:a9: 29:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:77:84:4F:1E:26:87:A3:E5:9B:40:4A:F9:10:6E:3F:6C:D2:BA:3B X509v3 Authority Key Identifier: keyid:68:45:5A:39:39:BA:CB:AA:59:18:C7:ED:D5:46:4E:11:BA:1C:8C:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/_XeETx4mh6Plm0BK-RBuP2zSujs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.230.94.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:46:72:ec:89:95:53:c3:46:73:9b:6f:3d:ce:00:13:7d:b4: 12:34:ed:53:dd:5c:bc:55:23:43:52:b2:56:30:9b:b9:84:fb: fa:ec:94:57:b4:a9:ff:6b:48:ce:82:52:38:b9:ad:8a:57:cd: 6d:b3:0c:c1:76:2f:15:bf:9a:bc:33:ed:d0:81:cf:89:c4:32: 0b:88:44:e8:46:96:c2:e9:d9:63:6a:54:60:6b:97:20:d4:fc: 2d:5e:68:ac:66:5c:92:12:aa:1a:89:0f:3d:d3:0e:6b:41:ea: c3:52:a3:55:71:a6:d8:cc:9e:11:6b:3e:c5:04:77:b1:e5:69: 53:b8:1f:ae:6f:c2:22:eb:c1:c0:99:12:84:ea:2c:57:d4:e2: e6:b4:e0:a1:94:23:b6:e6:8a:9e:91:e5:34:3b:41:cd:36:67: 4c:f4:6a:49:db:cc:f2:29:28:08:0e:f7:49:20:89:e7:11:37: 98:9c:af:61:c8:f4:c7:c9:18:0a:ed:a5:4c:cf:bf:62:3d:f3: 7c:fa:ad:f5:4d:b7:13:97:a9:9f:3b:11:81:4c:4d:dc:66:c5: ca:4b:59:bd:3e:0c:ac:45:96:6e:be:87:71:76:2e:84:7e:06: 04:c7:9b:f6:fa:88:7a:dd:7c:ab:02:d4:7f:2d:1f:9d:33:9a: 08:7a:3e:e8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pueSujCfqqpSmoS9ZQQMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4NDU1YTM5MzliYWNiYWE1OTE4YzdlZGQ1NDY0ZTExYmEx YzhjZGQwHhcNMjYwMTAyMTIyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDc3ODQ0ZjFlMjY4N2EzZTU5YjQwNGFmOTEwNmUzZjZjZDJiYTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+pdh/C01sY2eRNvPR5Y4RMeQ99ve LougJe2+hs28pb9387NGUdidjZpUbh4EwZ0UGF4LP6cN4p7jVqM/iNv3cl0z50ZN dxQzcxPlM4rfNtnqnqonSSySRIlIdz9a9Ti0L5srJIfzUJkXnT25+GJx8izkVdoe qbW2XIXWY6vs3lns08Y+WKRYY/uYaWL0wO/YrA5p++jsok08Y0NEprESNeYPQYZs T79Hg+EHxerw1sKgrvSq+U1TcWUEGsIvLmxxwQ8LOP8/q/Me4mvRNxo0UgkNLUsI 5hPcH31dLEDOrgldNzfpo2CmVwsXLU9csvHBeI2AjrhX8tdN81Ocb6kpwQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP13hE8eJoej5ZtASvkQbj9s0ro7MB8GA1UdIwQY MBaAFGhFWjk5usuqWRjH7dVGThG6HIzdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUVWYU9UbTZ5NnBaR01mdDFVWk9FYm9jak4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8zOTBlODAtMzIxNC00YWM1LWJiNTAt YTI2Y2I2NDI5NDg2LzEvX1hlRVR4NG1oNlBsbTBCSy1SQnVQMnpTdWpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8zOTBlODAtMzIxNC00YWM1LWJiNTAtYTI2Y2I2NDI5NDg2 LzEvYUVWYU9UbTZ5NnBaR01mdDFVWk9FYm9jak4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+ZeMA0G CSqGSIb3DQEBCwUAA4IBAQB+RnLsiZVTw0Zzm289zgATfbQSNO1T3Vy8VSNDUrJW MJu5hPv67JRXtKn/a0jOglI4ua2KV81tswzBdi8Vv5q8M+3Qgc+JxDILiEToRpbC 6dljalRga5cg1PwtXmisZlySEqoaiQ890w5rQerDUqNVcabYzJ4Raz7FBHex5WlT uB+ub8Ii68HAmRKE6ixX1OLmtOChlCO25oqekeU0O0HNNmdM9GpJ28zyKSgIDvdJ IInnETeYnK9hyPTHyRgK7aVMz79iPfN8+q31TbcTl6mfOxGBTE3cZsXKS1m9Pgys RZZuvodxdi6EfgYEx5v2+oh63XyrAtR/LR+dM5oIej7o -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:58 2026 by rpki-client