This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/xPy6Z0VLNJ1rPqJ_X8MFCj4AMpk.roa File: xPy6Z0VLNJ1rPqJ_X8MFCj4AMpk.roa (raw, json) Hash identifier: Bb2qIqxu7gzASrbXBCAeaJtrIuYqnsstxMEsjaiRExs= Subject key identifier: C4:FC:BA:67:45:4B:34:9D:6B:3E:A2:7F:5F:C3:05:0A:3E:00:32:99 Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Certificate serial: 019B79ECC4AB5EC2BE297712B34C89C8A300 Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/xPy6Z0VLNJ1rPqJ_X8MFCj4AMpk.roa Signing time: Thu 01 Jan 2026 14:18:38 +0000 ROA not before: Thu 01 Jan 2026 14:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205430 IP address blocks: 91.106.28.0/24 maxlen: 24 94.240.41.0/24 maxlen: 24 94.240.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:c4:ab:5e:c2:be:29:77:12:b3:4c:89:c8:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Validity Not Before: Jan 1 14:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4fcba67454b349d6b3ea27f5fc3050a3e003299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:91:d9:08:7b:72:15:c7:99:1b:83:d9:5c:f5: 9a:18:c6:10:d6:a5:50:e1:14:1e:f4:79:02:0b:81: 3d:11:b0:9d:cd:a6:de:32:96:a2:f6:a8:f5:27:99: 5a:89:a4:36:99:d4:b4:cc:3b:63:ea:11:55:3d:9b: ba:9c:bb:6e:9a:92:be:22:05:d0:76:b9:34:fd:35: ef:0e:6b:99:0c:aa:07:0b:aa:71:eb:0c:34:d3:c1: 76:ce:f8:2f:a7:bd:5a:d2:6c:b7:90:5b:5b:6a:8f: 9f:a7:c0:f3:32:e6:ed:f1:64:ba:35:78:dd:0f:50: 6c:83:1a:1d:d6:ce:4e:40:e4:34:68:08:9f:98:ad: 83:ed:0f:24:86:8f:aa:32:73:f2:ce:06:70:88:92: b1:e5:68:34:52:3f:85:71:6f:0d:a6:6b:4f:72:be: 3c:d0:b9:db:70:17:37:c5:4b:13:3b:87:38:41:e7: f4:ef:25:77:8f:fa:a6:44:f5:b0:85:f6:5d:35:d3: 7a:3c:6f:44:d4:05:b9:69:73:e6:44:ae:70:71:15: 10:d0:ee:07:03:b9:4d:eb:ba:1c:dd:19:19:ba:c1: 98:be:48:9d:18:fb:ac:16:ca:16:4d:fe:2b:9c:a1: 5c:f9:8b:bd:9b:24:a3:54:cb:bd:27:c2:77:62:b6: 6f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:FC:BA:67:45:4B:34:9D:6B:3E:A2:7F:5F:C3:05:0A:3E:00:32:99 X509v3 Authority Key Identifier: keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/xPy6Z0VLNJ1rPqJ_X8MFCj4AMpk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.106.28.0/24 94.240.41.0/24 94.240.43.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:09:21:d7:23:6c:f7:8a:c3:c3:d2:6f:b3:3a:f0:5a:7f:a7: 5c:25:e9:4f:95:38:dc:b3:c2:72:d7:a7:87:c3:66:0d:85:89: 14:0b:f3:c4:d0:3d:a3:f4:18:89:28:d3:ad:96:2e:c1:b4:26: 8b:ed:34:23:73:5c:13:6a:e2:17:65:1e:f4:a9:94:14:35:69: 27:89:5f:e2:9d:06:05:df:60:68:91:27:32:c2:2b:32:64:79: 44:6d:9f:c5:85:d4:c5:b5:dc:39:40:71:de:67:2e:33:08:15: 82:4d:a7:ab:fe:dd:da:9f:5d:f0:f0:d3:a3:09:a6:7a:07:ac: 43:86:31:ba:99:e2:b3:1d:7f:fc:d5:bc:47:4e:6b:44:f3:fa: 67:37:d7:50:39:2c:72:ec:a5:a7:d3:ce:e3:05:b9:a7:bd:a3: 70:a6:1a:6c:f5:d6:b7:77:4c:38:e9:28:70:c4:e9:0a:68:8b: ff:47:cc:e3:46:f3:b3:82:a3:a6:53:43:46:e1:bc:c8:0f:cc: 2f:6d:4f:0d:e2:b7:65:a7:52:78:e7:94:3d:98:be:06:09:ae: 0e:7c:55:7e:2d:3b:3b:b1:72:be:6a:3d:96:d9:b5:af:b7:53: b2:d0:80:5a:bb:c4:13:d0:fe:ed:23:53:4f:1c:8b:99:fc:d5: 7e:05:3a:08 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt57MSrXsK+KXcSs0yJyKMAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl NTQ2YTQwHhcNMjYwMTAxMTQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNGZjYmE2NzQ1NGIzNDlkNmIzZWEyN2Y1ZmMzMDUwYTNlMDAzMjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5HZCHtyFceZG4PZXPWaGMYQ1qVQ 4RQe9HkCC4E9EbCdzabeMpai9qj1J5laiaQ2mdS0zDtj6hFVPZu6nLtumpK+IgXQ drk0/TXvDmuZDKoHC6px6ww008F2zvgvp71a0my3kFtbao+fp8DzMubt8WS6NXjd D1Bsgxod1s5OQOQ0aAifmK2D7Q8kho+qMnPyzgZwiJKx5Wg0Uj+FcW8NpmtPcr48 0LnbcBc3xUsTO4c4Qef07yV3j/qmRPWwhfZdNdN6PG9E1AW5aXPmRK5wcRUQ0O4H A7lN67oc3RkZusGYvkidGPusFsoWTf4rnKFc+Yu9mySjVMu9J8J3YrZvGwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMT8umdFSzSdaz6if1/DBQo+ADKZMB8GA1UdIwQY MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt MjMwNDllNGQyZjEyLzEveFB5NlowVkxOSjFyUHFKX1g4TUZDajRBTXBrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODItMjMwNDllNGQyZjEy LzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW2ocAwQA XvApAwQAXvArMA0GCSqGSIb3DQEBCwUAA4IBAQANCSHXI2z3isPD0m+zOvBaf6dc JelPlTjcs8Jy16eHw2YNhYkUC/PE0D2j9BiJKNOtli7BtCaL7TQjc1wTauIXZR70 qZQUNWkniV/inQYF32BokScywisyZHlEbZ/FhdTFtdw5QHHeZy4zCBWCTaer/t3a n13w8NOjCaZ6B6xDhjG6meKzHX/81bxHTmtE8/pnN9dQOSxy7KWn087jBbmnvaNw phps9da3d0w46ShwxOkKaIv/R8zjRvOzgqOmU0NG4bzID8wvbU8N4rdlp1J455Q9 mL4GCa4OfFV+LTs7sXK+aj2W2bWvt1Oy0IBau8QT0P7tI1NPHIuZ/NV+BToI -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:42 2026 by rpki-client