This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/XuqQTM0aF54a9hx-ueF2HWLrabk.roa File: XuqQTM0aF54a9hx-ueF2HWLrabk.roa (raw, json) Hash identifier: wN4KP+y77ZPZCCM7VwS+2LrXtEFFZe4vww8wUUDTHBM= Subject key identifier: 5E:EA:90:4C:CD:1A:17:9E:1A:F6:1C:7E:B9:E1:76:1D:62:EB:69:B9 Certificate issuer: /CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2 Certificate serial: 019B7D5BE99A429B82BFC221F3D59BC8351B Authority key identifier: 2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/XuqQTM0aF54a9hx-ueF2HWLrabk.roa Signing time: Fri 02 Jan 2026 06:18:54 +0000 ROA not before: Fri 02 Jan 2026 06:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205185 IP address blocks: 91.231.4.0/23 maxlen: 24 91.231.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:e9:9a:42:9b:82:bf:c2:21:f3:d5:9b:c8:35:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2 Validity Not Before: Jan 2 06:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5eea904ccd1a179e1af61c7eb9e1761d62eb69b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:04:56:c8:59:1a:ae:f8:d1:e6:7f:c1:70:d4: 8e:bd:60:80:c2:81:9e:38:50:b5:f7:62:3d:60:e9: 18:f2:2a:46:ea:7f:73:9e:bf:5a:bf:e1:a3:99:7f: 82:b7:74:0d:56:65:9a:5e:c7:a9:54:c8:8f:9f:43: 98:ee:0a:34:88:e9:e1:5c:ea:22:02:0c:0d:3f:cc: 94:df:8e:09:cf:a7:a4:2a:84:5e:df:47:c3:98:91: fb:ad:8a:c2:bd:59:41:8e:06:89:64:5f:79:83:cd: f6:f9:c3:c2:9e:7c:e0:7d:9c:33:2e:4b:52:f5:9c: 01:20:46:9f:15:86:b5:ce:fe:85:ac:b9:8c:b7:3e: 25:e1:90:ab:5f:c3:94:a1:2a:05:fe:48:47:c9:97: 06:27:9f:2f:b1:2d:cd:ec:7b:c5:dc:d6:95:ba:85: 00:ae:48:76:e4:e0:a2:ae:b9:b4:c4:49:0f:63:e1: 35:33:06:94:1c:bc:dc:81:52:64:6f:09:35:a9:fe: 62:9b:b1:95:ee:8e:ed:68:8a:66:c2:da:f4:04:dc: 8d:f5:73:46:35:c4:cb:60:1c:9c:68:41:8c:e4:7c: a7:a9:f6:ca:80:c9:ac:e3:20:db:17:ec:c5:e6:b0: 3d:8c:8f:3a:26:9f:83:9a:b8:0e:2d:10:bd:c9:98: a0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:EA:90:4C:CD:1A:17:9E:1A:F6:1C:7E:B9:E1:76:1D:62:EB:69:B9 X509v3 Authority Key Identifier: keyid:2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/XuqQTM0aF54a9hx-ueF2HWLrabk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.231.4.0-91.231.6.255 Signature Algorithm: sha256WithRSAEncryption 70:6e:2f:9e:ae:86:a3:71:f8:3c:b2:09:f6:7e:a5:70:35:5a: 0b:8f:07:79:b1:68:d3:56:12:27:aa:9c:fe:ea:2a:4c:46:a0: b7:5d:39:d2:ef:70:b2:58:cd:79:b2:4a:78:68:1f:ec:90:03: 80:d9:21:1f:3d:96:5f:ba:63:66:cb:8f:5b:c2:4f:f7:73:ee: 0d:86:7a:a5:4c:c7:46:d5:74:6b:82:39:83:91:bf:5d:46:f3: 81:89:f6:8d:c1:38:f7:ad:c1:fd:3d:2a:f5:88:91:37:40:0e: 86:48:b3:af:35:d2:b9:5a:aa:c5:16:3e:ac:e3:50:0e:2b:1c: 1e:27:8c:a6:bc:75:5b:b0:6d:24:00:f4:7a:e5:a0:e8:16:e7: 91:95:8f:0e:e5:ab:2c:c9:30:ab:56:b6:bc:f5:18:e6:19:35: 86:f0:3f:2e:e0:f4:7d:e0:e8:e1:0f:07:4d:c4:5f:d9:c5:5d: b0:20:23:9c:75:89:45:c8:fb:4e:ff:29:22:4b:8d:09:a9:93: f6:fe:08:df:c3:4c:2e:ac:33:95:1e:4c:11:a7:6a:7b:57:c3: 2a:b4:21:ac:dd:39:97:da:33:6a:1f:bf:75:1f:c3:b6:25:af: 18:f5:66:30:48:56:df:de:44:14:b5:5b:5b:0a:8c:2e:70:50: f8:cd:07:05 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt9W+maQpuCv8Ih89WbyDUbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlYmIzNjI0YjgyZjBlMWU1MzhiMDA5MTlmNDQyZDIwMGM3 ZTNjZDIwHhcNMjYwMTAyMDYxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZWVhOTA0Y2NkMWExNzllMWFmNjFjN2ViOWUxNzYxZDYyZWI2OWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQRWyFkarvjR5n/BcNSOvWCAwoGe OFC192I9YOkY8ipG6n9znr9av+GjmX+Ct3QNVmWaXsepVMiPn0OY7go0iOnhXOoi AgwNP8yU344Jz6ekKoRe30fDmJH7rYrCvVlBjgaJZF95g832+cPCnnzgfZwzLktS 9ZwBIEafFYa1zv6FrLmMtz4l4ZCrX8OUoSoF/khHyZcGJ58vsS3N7HvF3NaVuoUA rkh25OCirrm0xEkPY+E1MwaUHLzcgVJkbwk1qf5im7GV7o7taIpmwtr0BNyN9XNG NcTLYBycaEGM5HynqfbKgMms4yDbF+zF5rA9jI86Jp+DmrgOLRC9yZigywIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFF7qkEzNGheeGvYcfrnhdh1i62m5MB8GA1UdIwQY MBaAFC67NiS4Lw4eU4sAkZ9ELSAMfjzSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHJzMkpMZ3ZEaDVUaXdDUm4wUXRJQXgtUE5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC80OWJlZjEtNDAxYS00OGQyLTg3NDYt MjY3Mjc1ZTkyNTcwLzEvWHVxUVRNMGFGNTRhOWh4LXVlRjJIV0xyYWJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC80OWJlZjEtNDAxYS00OGQyLTg3NDYtMjY3Mjc1ZTkyNTcw LzEvTHJzMkpMZ3ZEaDVUaXdDUm4wUXRJQXgtUE5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJb5wQD BABb5wYwDQYJKoZIhvcNAQELBQADggEBAHBuL56uhqNx+DyyCfZ+pXA1WguPB3mx aNNWEieqnP7qKkxGoLddOdLvcLJYzXmySnhoH+yQA4DZIR89ll+6Y2bLj1vCT/dz 7g2GeqVMx0bVdGuCOYORv11G84GJ9o3BOPetwf09KvWIkTdADoZIs6810rlaqsUW PqzjUA4rHB4njKa8dVuwbSQA9HrloOgW55GVjw7lqyzJMKtWtrz1GOYZNYbwPy7g 9H3g6OEPB03EX9nFXbAgI5x1iUXI+07/KSJLjQmpk/b+CN/DTC6sM5UeTBGnantX wyq0IazdOZfaM2ofv3Ufw7Ylrxj1ZjBIVt/eRBS1W1sKjC5wUPjNBwU= -----END CERTIFICATE-----Generated at Mon Jan 26 09:29:43 2026 by rpki-client