This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/xEE6xqB7U2qU7v-vbVNDUw-0jHk.roa File: xEE6xqB7U2qU7v-vbVNDUw-0jHk.roa (raw, json) Hash identifier: l81cbgljLxJEOmCHiRfdvTZ8zxD8bx74QDpt+tnTEx8= Subject key identifier: C4:41:3A:C6:A0:7B:53:6A:94:EE:FF:AF:6D:53:43:53:0F:B4:8C:79 Certificate issuer: /CN=2793bde946ae936d3cacc136a5f3239edf2431f4 Certificate serial: 019B7E386C0C8891CAE526B635F7ED46A71A Authority key identifier: 27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/xEE6xqB7U2qU7v-vbVNDUw-0jHk.roa Signing time: Fri 02 Jan 2026 10:19:45 +0000 ROA not before: Fri 02 Jan 2026 10:19:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 91.188.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:6c:0c:88:91:ca:e5:26:b6:35:f7:ed:46:a7:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2793bde946ae936d3cacc136a5f3239edf2431f4 Validity Not Before: Jan 2 10:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4413ac6a07b536a94eeffaf6d5343530fb48c79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5b:b6:76:58:4e:38:97:fc:9a:0b:be:80:0e: 8a:21:2c:d8:ca:a1:97:32:d6:9a:13:c1:6f:dc:39: 5e:15:0c:19:bc:77:93:d5:35:c2:75:32:58:05:c6: 60:c4:c3:f4:8a:23:57:f2:cd:84:02:e7:40:50:61: 2d:67:b4:46:78:c6:5e:80:a0:4e:51:f7:14:48:50: cc:ad:9a:f0:bd:5e:25:c1:98:c8:7a:80:26:17:93: d8:f4:7d:72:62:8b:27:05:1b:49:ce:40:bb:3f:e7: a2:35:6e:78:43:23:b3:b5:9a:ea:61:7c:ea:e3:6b: 75:33:e7:9d:8c:e9:bd:b4:12:23:0b:d3:f4:b8:ed: ca:92:e6:18:8b:4e:10:e8:dd:eb:1e:d3:bb:58:c4: 0c:94:37:00:f7:64:c6:bd:df:f9:9b:a4:9d:ba:95: 82:2f:cf:69:ac:b6:de:f9:97:d2:e1:2e:1f:ec:f0: 95:ff:2f:6e:0a:10:d1:4b:5c:a8:9f:9f:4e:f3:8f: 9b:b9:48:8a:1e:be:9f:f2:fe:58:61:52:d2:7c:0c: 8f:d7:d0:4f:ea:db:34:9e:41:7e:ac:19:78:fe:f0: b8:a0:14:59:4e:0e:58:be:c4:f2:eb:21:84:3a:d9: ac:5f:45:79:64:fa:83:8e:0d:1b:35:99:a9:fd:78: da:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:41:3A:C6:A0:7B:53:6A:94:EE:FF:AF:6D:53:43:53:0F:B4:8C:79 X509v3 Authority Key Identifier: keyid:27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/xEE6xqB7U2qU7v-vbVNDUw-0jHk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.188.255.0/24 Signature Algorithm: sha256WithRSAEncryption 51:3d:1a:5a:6d:9a:39:b4:fc:c9:cb:f2:a0:27:8e:f5:c7:d0: 04:2b:0a:84:a0:e5:df:b3:f4:b5:6a:a6:6d:54:94:c8:13:aa: 60:2c:74:84:27:37:2c:b9:36:5a:97:d3:1c:03:fd:c0:34:f8: 40:ae:7a:d3:58:2b:0e:57:5c:a0:03:80:c2:7b:dc:54:4c:66: f1:cb:6a:f5:59:98:3b:e0:3a:05:4e:fe:38:37:e6:34:46:7a: b0:96:8e:67:31:1c:13:04:25:32:18:4a:3e:d2:b4:34:d0:bd: 41:2d:76:98:72:d9:b9:ef:3d:10:e1:17:2a:24:06:cb:ed:0e: 85:8f:94:61:00:df:17:6e:50:8a:9f:8e:a6:fa:2f:27:4e:9d: 94:96:ad:aa:ef:4c:95:63:77:f7:88:77:e9:f5:06:95:e0:31: fd:61:0b:83:87:01:e2:7f:bf:c4:38:d3:07:68:36:ab:3e:ef: 0e:44:ba:9f:d7:8c:fe:4d:f3:00:3f:e4:a5:04:a5:92:aa:ad: f9:1d:c4:88:c7:0e:df:72:e7:6c:8a:24:5e:3f:08:a8:12:38: 87:79:ca:c8:c8:86:ce:a1:dc:06:8a:c9:77:cd:81:57:f4:c3: cf:0c:56:99:5e:e0:5d:97:68:1c:0c:2f:1b:2d:5e:2a:56:2e: 82:8e:a0:e8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OGwMiJHK5Sa2NfftRqcaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OTNiZGU5NDZhZTkzNmQzY2FjYzEzNmE1ZjMyMzllZGYy NDMxZjQwHhcNMjYwMTAyMTAxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDQxM2FjNmEwN2I1MzZhOTRlZWZmYWY2ZDUzNDM1MzBmYjQ4Yzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVu2dlhOOJf8mgu+gA6KISzYyqGX MtaaE8Fv3DleFQwZvHeT1TXCdTJYBcZgxMP0iiNX8s2EAudAUGEtZ7RGeMZegKBO UfcUSFDMrZrwvV4lwZjIeoAmF5PY9H1yYosnBRtJzkC7P+eiNW54QyOztZrqYXzq 42t1M+edjOm9tBIjC9P0uO3KkuYYi04Q6N3rHtO7WMQMlDcA92TGvd/5m6SdupWC L89prLbe+ZfS4S4f7PCV/y9uChDRS1yon59O84+buUiKHr6f8v5YYVLSfAyP19BP 6ts0nkF+rBl4/vC4oBRZTg5YvsTy6yGEOtmsX0V5ZPqDjg0bNZmp/Xja4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMRBOsage1NqlO7/r21TQ1MPtIx5MB8GA1UdIwQY MBaAFCeTvelGrpNtPKzBNqXzI57fJDH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjVPOTZVYXVrMjA4ck1FMnBmTWpudDhrTWZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9iZjU4ZGEtYTlkMi00MjFhLWI0M2Et OTJjM2JmNzRhOTdiLzEveEVFNnhxQjdVMnFVN3YtdmJWTkRVdy0wakhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9iZjU4ZGEtYTlkMi00MjFhLWI0M2EtOTJjM2JmNzRhOTdi LzEvSjVPOTZVYXVrMjA4ck1FMnBmTWpudDhrTWZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW7z/MA0G CSqGSIb3DQEBCwUAA4IBAQBRPRpabZo5tPzJy/KgJ471x9AEKwqEoOXfs/S1aqZt VJTIE6pgLHSEJzcsuTZal9McA/3ANPhArnrTWCsOV1ygA4DCe9xUTGbxy2r1WZg7 4DoFTv44N+Y0Rnqwlo5nMRwTBCUyGEo+0rQ00L1BLXaYctm57z0Q4RcqJAbL7Q6F j5RhAN8XblCKn46m+i8nTp2Ulq2q70yVY3f3iHfp9QaV4DH9YQuDhwHif7/EONMH aDarPu8ORLqf14z+TfMAP+SlBKWSqq35HcSIxw7fcudsiiRePwioEjiHecrIyIbO odwGisl3zYFX9MPPDFaZXuBdl2gcDC8bLV4qVi6CjqDo -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:28 2026 by rpki-client