This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/xEYU-K7wenXyYwuEUiZnmFrMZac.roa File: xEYU-K7wenXyYwuEUiZnmFrMZac.roa (raw, json) Hash identifier: gWNLlP9RhlookRQsci7JBvafArIbz1TL4llsI2fvdA0= Subject key identifier: C4:46:14:F8:AE:F0:7A:75:F2:63:0B:84:52:26:67:98:5A:CC:65:A7 Certificate issuer: /CN=720c6323cf730930a03b0e44607f6fedf527a8c4 Certificate serial: 019B78A3553F20C55B7A9EE9FF5D5AB10D88 Authority key identifier: 72:0C:63:23:CF:73:09:30:A0:3B:0E:44:60:7F:6F:ED:F5:27:A8:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgxjI89zCTCgOw5EYH9v7fUnqMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/xEYU-K7wenXyYwuEUiZnmFrMZac.roa Signing time: Thu 01 Jan 2026 08:18:48 +0000 ROA not before: Thu 01 Jan 2026 08:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5413 IP address blocks: 91.220.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/cgxjI89zCTCgOw5EYH9v7fUnqMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:55:3f:20:c5:5b:7a:9e:e9:ff:5d:5a:b1:0d:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=720c6323cf730930a03b0e44607f6fedf527a8c4 Validity Not Before: Jan 1 08:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c44614f8aef07a75f2630b84522667985acc65a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:7e:e9:7d:f8:5e:0e:68:6f:a9:44:2e:30:f5: 77:8e:5f:49:ce:34:7f:fd:dc:e9:28:ef:45:ab:e9: 35:8d:77:05:48:0e:02:8c:f9:8b:e5:58:b4:a9:09: 01:98:28:af:46:e8:d7:a3:d8:eb:d1:54:e6:be:36: 7c:07:82:dd:9a:c7:b9:d9:d1:07:a0:b1:d4:35:97: 25:a2:3a:3e:82:ab:34:be:3c:0d:8f:82:b7:e7:93: 71:62:4a:32:19:76:dc:e8:97:ae:22:e5:64:d1:9f: 7b:99:a2:4d:b3:32:2d:0d:24:1d:a8:2a:02:ec:6f: 43:99:30:88:8c:b2:9b:5b:13:18:62:e0:df:03:92: 00:1d:da:02:45:54:b9:df:75:da:87:1b:a9:e0:f0: 2d:5b:ad:5d:f5:90:1e:68:d1:7e:a2:88:e0:a3:c9: 83:7d:43:83:cf:9b:07:04:21:b9:89:5c:22:aa:d3: 5a:4b:d7:b1:b5:fd:ff:67:bb:d3:66:ba:74:1b:80: ad:66:25:74:cf:3e:2f:5e:53:11:da:66:b5:39:8f: f8:09:c5:a9:b4:e8:a2:db:5c:2b:52:ea:e1:da:98: f3:3a:b5:18:be:2c:de:31:d7:2d:37:c0:de:3b:57: 2f:27:5a:cb:b9:cb:fd:f3:dd:0a:ef:8b:04:e7:9d: eb:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:46:14:F8:AE:F0:7A:75:F2:63:0B:84:52:26:67:98:5A:CC:65:A7 X509v3 Authority Key Identifier: keyid:72:0C:63:23:CF:73:09:30:A0:3B:0E:44:60:7F:6F:ED:F5:27:A8:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgxjI89zCTCgOw5EYH9v7fUnqMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/xEYU-K7wenXyYwuEUiZnmFrMZac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.141.0/24 Signature Algorithm: sha256WithRSAEncryption 05:58:1a:f0:2c:51:44:dc:7b:95:91:93:31:32:7e:ea:ec:97: 8e:d7:ac:8d:93:24:44:96:86:9f:54:e5:17:d2:f7:3b:78:56: 3c:b8:9e:03:f9:93:e7:c0:fc:3b:98:11:8b:1d:98:70:5c:e1: 24:90:4d:b5:6d:24:c7:db:bb:f2:98:4c:db:14:e9:d5:de:8a: e3:e3:f8:74:44:12:68:1b:aa:a9:9d:f8:28:e5:ea:a6:14:23: 36:6c:f3:4a:36:9b:9b:06:86:8e:1e:cf:e9:0c:6e:8e:ed:f6: f7:49:f6:e0:63:fd:ee:be:28:9e:8d:61:a9:7b:a5:15:ff:11: 66:40:c6:71:f0:dc:dc:21:68:55:86:b2:92:ff:87:1b:3b:3d: 8c:3a:4d:83:fa:b4:db:c8:5f:86:e6:c3:6b:a0:8d:21:87:1f: bf:3e:41:13:8c:6f:8d:90:96:2b:5b:3c:3c:61:cd:0b:35:dd: c0:f0:97:70:37:7f:41:c6:35:e1:f2:09:f8:2f:94:4f:bb:b5: 43:10:76:7f:f8:d1:8b:97:64:b8:2f:70:b8:bc:82:5e:dd:de: 10:85:89:e4:66:47:8c:6c:45:26:25:2d:3d:d1:28:4a:38:21: f3:67:f0:9f:b8:12:35:3a:fa:f8:4e:16:fb:30:85:b6:50:6a: e6:2d:08:26 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o1U/IMVbep7p/11asQ2IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMGM2MzIzY2Y3MzA5MzBhMDNiMGU0NDYwN2Y2ZmVkZjUy N2E4YzQwHhcNMjYwMTAxMDgxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDQ2MTRmOGFlZjA3YTc1ZjI2MzBiODQ1MjI2Njc5ODVhY2M2NWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6H7pffheDmhvqUQuMPV3jl9JzjR/ /dzpKO9Fq+k1jXcFSA4CjPmL5Vi0qQkBmCivRujXo9jr0VTmvjZ8B4Ldmse52dEH oLHUNZclojo+gqs0vjwNj4K355NxYkoyGXbc6JeuIuVk0Z97maJNszItDSQdqCoC 7G9DmTCIjLKbWxMYYuDfA5IAHdoCRVS533Xahxup4PAtW61d9ZAeaNF+oojgo8mD fUODz5sHBCG5iVwiqtNaS9extf3/Z7vTZrp0G4CtZiV0zz4vXlMR2ma1OY/4CcWp tOii21wrUurh2pjzOrUYvizeMdctN8DeO1cvJ1rLucv9890K74sE553rxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMRGFPiu8Hp18mMLhFImZ5hazGWnMB8GA1UdIwQY MBaAFHIMYyPPcwkwoDsORGB/b+31J6jEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2d4akk4OXpDVENnT3c1RVlIOXY3ZlVucU1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hNmRhZTgtZDk4ZS00YWEwLWI0YWQt NDI4MWUzOGE5YmYyLzEveEVZVS1LN3dlblh5WXd1RVVpWm5tRnJNWmFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9hNmRhZTgtZDk4ZS00YWEwLWI0YWQtNDI4MWUzOGE5YmYy LzEvY2d4akk4OXpDVENnT3c1RVlIOXY3ZlVucU1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9yNMA0G CSqGSIb3DQEBCwUAA4IBAQAFWBrwLFFE3HuVkZMxMn7q7JeO16yNkyREloafVOUX 0vc7eFY8uJ4D+ZPnwPw7mBGLHZhwXOEkkE21bSTH27vymEzbFOnV3orj4/h0RBJo G6qpnfgo5eqmFCM2bPNKNpubBoaOHs/pDG6O7fb3SfbgY/3uviiejWGpe6UV/xFm QMZx8NzcIWhVhrKS/4cbOz2MOk2D+rTbyF+G5sNroI0hhx+/PkETjG+NkJYrWzw8 Yc0LNd3A8JdwN39BxjXh8gn4L5RPu7VDEHZ/+NGLl2S4L3C4vIJe3d4QhYnkZkeM bEUmJS090ShKOCHzZ/CfuBI1Ovr4Thb7MIW2UGrmLQgm -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:51 2026 by rpki-client