This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/Xm1NyxAzrsVfmOit8GLDJIUr3T4.roa File: Xm1NyxAzrsVfmOit8GLDJIUr3T4.roa (raw, json) Hash identifier: FBeGZgtFYVn2jU+qekRgjUacFdjECcP1nPbLiXskECw= Subject key identifier: 5E:6D:4D:CB:10:33:AE:C5:5F:98:E8:AD:F0:62:C3:24:85:2B:DD:3E Certificate issuer: /CN=0ef80cc9e8b445a07feecac0afc59e42dc710263 Certificate serial: 019B7B36EAA06A0F4168E6BDABF5C37582FA Authority key identifier: 0E:F8:0C:C9:E8:B4:45:A0:7F:EE:CA:C0:AF:C5:9E:42:DC:71:02:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvgMyei0RaB_7srAr8WeQtxxAmM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/Xm1NyxAzrsVfmOit8GLDJIUr3T4.roa Signing time: Thu 01 Jan 2026 20:19:15 +0000 ROA not before: Thu 01 Jan 2026 20:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57801 IP address blocks: 91.212.112.0/24 maxlen: 24 194.0.45.0/24 maxlen: 24 2001:678:70::/48 maxlen: 48 2001:678:90::/48 maxlen: 48 2001:678:9c::/48 maxlen: 48 2001:67c:26d4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.mft rsync://rpki.ripe.net/repository/DEFAULT/DvgMyei0RaB_7srAr8WeQtxxAmM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:ea:a0:6a:0f:41:68:e6:bd:ab:f5:c3:75:82:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ef80cc9e8b445a07feecac0afc59e42dc710263 Validity Not Before: Jan 1 20:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e6d4dcb1033aec55f98e8adf062c324852bdd3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fb:f0:47:f3:96:9a:eb:d7:5a:95:e8:39:34: b9:97:30:58:90:2d:2f:b2:8b:df:7e:a7:de:dc:b0: 5f:84:fb:af:39:64:f4:33:14:41:f1:1b:76:1f:11: 7e:17:ec:f5:a4:b1:84:43:f8:3c:7e:e1:4b:ab:f3: f5:c7:e3:34:ae:81:1a:76:c0:ba:b5:ff:0d:19:56: d7:70:cf:1e:f3:98:62:27:cb:0e:cd:2b:9e:05:5e: cd:a8:69:d2:3c:11:71:c7:d2:b6:c5:61:88:a9:4f: bf:2a:cf:1c:fd:a6:10:e9:54:93:dd:f0:9e:32:a3: 20:76:45:a8:b4:5c:83:9e:38:4b:6c:39:e3:73:e6: a9:80:e9:66:1a:af:dc:92:2c:8e:c9:35:c6:5e:2c: 91:f1:70:49:31:00:d3:04:6d:11:74:06:c8:07:d8: ed:5e:d1:80:0a:40:47:85:8f:e5:2d:bf:94:5b:a2: 6f:15:d2:ab:ff:ee:0a:84:80:7c:6f:56:28:d0:d4: 51:ba:20:1b:d0:18:42:3a:18:9a:eb:9d:f7:75:d1: 80:03:d7:e9:fc:77:71:88:44:1c:1f:7d:c5:67:0f: 50:94:31:96:90:13:ab:cf:eb:00:5b:51:43:c5:68: 8c:2e:ae:03:7b:5a:1b:fa:90:73:92:7e:59:72:ac: b7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:6D:4D:CB:10:33:AE:C5:5F:98:E8:AD:F0:62:C3:24:85:2B:DD:3E X509v3 Authority Key Identifier: keyid:0E:F8:0C:C9:E8:B4:45:A0:7F:EE:CA:C0:AF:C5:9E:42:DC:71:02:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvgMyei0RaB_7srAr8WeQtxxAmM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/Xm1NyxAzrsVfmOit8GLDJIUr3T4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.112.0/24 194.0.45.0/24 IPv6: 2001:678:70::/48 2001:678:90::/48 2001:678:9c::/48 2001:67c:26d4::/48 Signature Algorithm: sha256WithRSAEncryption 98:df:da:6d:e4:61:00:0c:1c:9a:2c:50:5b:87:5e:b6:ef:73: b6:3d:99:fb:8a:d4:0b:36:d9:06:56:a5:b5:98:3b:04:3e:b5: ef:4f:ef:5a:85:4d:1b:aa:35:00:ad:47:79:6b:2c:9a:86:7e: 4b:66:05:dc:5d:82:34:fd:e9:87:64:c2:a6:9e:3a:7d:24:29: ba:00:ab:a2:a1:a0:25:ce:b4:f7:1e:ef:ac:b7:29:59:3b:03: ae:1f:b2:da:5f:2d:b3:a2:e7:b3:32:bb:d4:a3:b0:d7:8f:46: 6d:c7:ff:4b:a8:12:71:a1:3d:a3:a2:34:4f:80:04:6d:6f:01: 20:fa:89:c1:dd:a5:b5:21:bd:fb:37:51:c6:97:bc:e0:15:dd: 0e:d8:b9:24:52:d8:43:f2:85:c9:6f:6b:fb:be:fa:39:9a:84: 79:0b:4f:00:77:a6:1d:33:6b:a9:1c:15:14:48:c0:65:11:42: 43:ee:19:0a:8e:26:45:cb:98:c1:e2:42:04:5f:ea:45:9d:e4: b8:65:2b:6c:79:7b:04:d1:27:8e:35:71:8a:ab:4e:98:35:af: c6:c9:3a:41:77:d3:cf:3e:66:af:e2:e1:bd:9d:41:82:47:1f: 3b:d1:f3:a0:2a:89:7f:cc:fd:8a:12:c0:d5:24:b1:ff:a3:71: 78:7f:62:11 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgISAZt7Nuqgag9BaOa9q/XDdYL6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZjgwY2M5ZThiNDQ1YTA3ZmVlY2FjMGFmYzU5ZTQyZGM3 MTAyNjMwHhcNMjYwMTAxMjAxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTZkNGRjYjEwMzNhZWM1NWY5OGU4YWRmMDYyYzMyNDg1MmJkZDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfvwR/OWmuvXWpXoOTS5lzBYkC0v sovffqfe3LBfhPuvOWT0MxRB8Rt2HxF+F+z1pLGEQ/g8fuFLq/P1x+M0roEadsC6 tf8NGVbXcM8e85hiJ8sOzSueBV7NqGnSPBFxx9K2xWGIqU+/Ks8c/aYQ6VST3fCe MqMgdkWotFyDnjhLbDnjc+apgOlmGq/ckiyOyTXGXiyR8XBJMQDTBG0RdAbIB9jt XtGACkBHhY/lLb+UW6JvFdKr/+4KhIB8b1Yo0NRRuiAb0BhCOhia6533ddGAA9fp /HdxiEQcH33FZw9QlDGWkBOrz+sAW1FDxWiMLq4De1ob+pBzkn5Zcqy3KQIDAQAB o4ICOzCCAjcwHQYDVR0OBBYEFF5tTcsQM67FX5jorfBiwySFK90+MB8GA1UdIwQY MBaAFA74DMnotEWgf+7KwK/FnkLccQJjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHZnTXllaTBSYUJfN3NyQXI4V2VRdHh4QW1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8wODZiZGEtYTQ2NC00NGQ4LThkMWIt ODY2ZTVkNGM2ZWRiLzEvWG0xTnl4QXpyc1ZmbU9pdDhHTERKSVVyM1Q0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi8wODZiZGEtYTQ2NC00NGQ4LThkMWItODY2ZTVkNGM2ZWRi LzEvRHZnTXllaTBSYUJfN3NyQXI4V2VRdHh4QW1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDASBAIAATAMAwQAW9RwAwQA wgAtMCoEAgACMCQDBwAgAQZ4AHADBwAgAQZ4AJADBwAgAQZ4AJwDBwAgAQZ8JtQw DQYJKoZIhvcNAQELBQADggEBAJjf2m3kYQAMHJosUFuHXrbvc7Y9mfuK1As22QZW pbWYOwQ+te9P71qFTRuqNQCtR3lrLJqGfktmBdxdgjT96YdkwqaeOn0kKboAq6Kh oCXOtPce76y3KVk7A64fstpfLbOi57Myu9SjsNePRm3H/0uoEnGhPaOiNE+ABG1v ASD6icHdpbUhvfs3UcaXvOAV3Q7YuSRS2EPyhclva/u++jmahHkLTwB3ph0za6kc FRRIwGURQkPuGQqOJkXLmMHiQgRf6kWd5LhlK2x5ewTRJ441cYqrTpg1r8bJOkF3 088+Zq/i4b2dQYJHHzvR86AqiX/M/YoSwNUksf+jcXh/YhE= -----END CERTIFICATE-----Generated at Mon Jan 26 15:00:42 2026 by rpki-client