This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/nX-XyGaaTNjgiOfcU3tTU4Pz3Lc.roa File: nX-XyGaaTNjgiOfcU3tTU4Pz3Lc.roa (raw, json) Hash identifier: IB573lPQRdVbyJwU+WH+Cby6UU3ObEQSuXT0TN8PBEI= Subject key identifier: 9D:7F:97:C8:66:9A:4C:D8:E0:88:E7:DC:53:7B:53:53:83:F3:DC:B7 Certificate issuer: /CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2 Certificate serial: 019B7D5BE8F69E627E359E4FB74CAAC9657A Authority key identifier: 2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/nX-XyGaaTNjgiOfcU3tTU4Pz3Lc.roa Signing time: Fri 02 Jan 2026 06:18:53 +0000 ROA not before: Fri 02 Jan 2026 06:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31673 IP address blocks: 91.231.4.0/23 maxlen: 24 91.231.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:e8:f6:9e:62:7e:35:9e:4f:b7:4c:aa:c9:65:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2 Validity Not Before: Jan 2 06:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d7f97c8669a4cd8e088e7dc537b535383f3dcb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f2:8e:8c:15:ae:ef:10:2e:7b:c9:8e:97:cb: e4:ce:c5:f0:77:44:ce:72:07:d8:a8:d9:12:90:37: d6:a8:01:73:b4:18:72:c6:d6:b5:98:16:ab:e3:58: 76:21:d2:85:e1:be:3d:40:43:60:01:c8:56:f8:59: 76:db:32:78:5a:6f:48:50:1f:5c:a0:58:14:3a:04: 2d:d7:ad:42:d5:80:16:53:f0:de:36:1d:84:96:0b: 09:de:10:8f:4a:2e:6e:4d:c7:02:c6:79:ab:99:9d: 63:8b:41:fc:6d:bb:30:d7:69:49:52:ef:c3:cf:9e: 2b:94:c5:43:6c:f8:a9:17:2e:e0:b2:73:d9:a1:21: 4b:d7:3e:22:8c:5a:a9:24:5b:b9:cf:7b:16:8c:9b: 5e:52:a9:28:5e:eb:f5:17:9a:58:b6:50:e9:a6:94: 4b:2d:07:0a:96:2a:31:15:f2:75:13:d6:db:00:39: 01:92:7c:51:79:1d:13:9d:47:c6:36:7a:cb:09:7a: 5f:ce:0c:02:86:e1:43:8e:f4:d3:97:88:3b:9c:6f: 9a:4a:76:61:9f:f2:ea:e2:71:e6:2d:e4:a6:75:e6: f0:1b:3f:32:a2:df:57:d0:a2:bd:2f:e0:39:34:67: 23:08:14:54:3b:53:8f:8e:3e:8d:c8:14:92:57:4f: de:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:7F:97:C8:66:9A:4C:D8:E0:88:E7:DC:53:7B:53:53:83:F3:DC:B7 X509v3 Authority Key Identifier: keyid:2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/nX-XyGaaTNjgiOfcU3tTU4Pz3Lc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.231.4.0-91.231.6.255 Signature Algorithm: sha256WithRSAEncryption 1c:ae:4f:5e:a2:20:2b:08:fc:fc:4e:b3:1d:ec:46:50:a0:d9: 14:fc:72:15:25:ac:88:22:15:8a:cb:fd:5c:1f:22:ea:32:8d: 31:de:c2:1b:91:8f:3f:06:17:69:f0:e7:65:b6:9d:63:6b:99: fa:ee:05:6a:bb:19:4b:82:f1:97:a5:7a:89:93:12:a7:0e:55: 51:2a:5e:ae:1e:d3:f7:dd:61:8e:a5:81:22:04:86:73:d4:67: 7a:bd:22:cb:0b:98:08:3a:34:78:11:d0:26:67:65:20:2b:24: 8a:d3:5e:7b:44:dc:02:65:96:b7:93:30:5e:41:67:f3:d1:5b: 2c:f8:91:99:86:74:7b:44:b9:90:4e:bc:f1:10:a7:19:26:6f: 6d:83:78:30:db:ff:45:cb:c5:d4:9c:38:27:8c:db:cb:4d:66: 91:fb:27:6d:cf:dd:3e:f3:81:6c:98:a6:38:56:c0:a1:05:34: e5:b8:8f:59:1a:b3:52:29:41:c4:da:fa:60:be:07:af:00:23: 25:75:38:bb:27:e1:80:4e:68:ce:a7:f2:14:38:87:0f:6e:9c: 7c:77:02:8f:0f:ac:37:58:2d:69:2a:92:0a:19:f7:82:83:92: 6b:86:1d:61:2c:33:4a:b2:f8:9b:14:75:d1:9a:c3:f8:a1:fe: fb:c1:f4:ce -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt9W+j2nmJ+NZ5Pt0yqyWV6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlYmIzNjI0YjgyZjBlMWU1MzhiMDA5MTlmNDQyZDIwMGM3 ZTNjZDIwHhcNMjYwMTAyMDYxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDdmOTdjODY2OWE0Y2Q4ZTA4OGU3ZGM1MzdiNTM1MzgzZjNkY2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PKOjBWu7xAue8mOl8vkzsXwd0TO cgfYqNkSkDfWqAFztBhyxta1mBar41h2IdKF4b49QENgAchW+Fl22zJ4Wm9IUB9c oFgUOgQt161C1YAWU/DeNh2ElgsJ3hCPSi5uTccCxnmrmZ1ji0H8bbsw12lJUu/D z54rlMVDbPipFy7gsnPZoSFL1z4ijFqpJFu5z3sWjJteUqkoXuv1F5pYtlDpppRL LQcKlioxFfJ1E9bbADkBknxReR0TnUfGNnrLCXpfzgwChuFDjvTTl4g7nG+aSnZh n/Lq4nHmLeSmdebwGz8yot9X0KK9L+A5NGcjCBRUO1OPjj6NyBSSV0/eHwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFJ1/l8hmmkzY4Ijn3FN7U1OD89y3MB8GA1UdIwQY MBaAFC67NiS4Lw4eU4sAkZ9ELSAMfjzSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHJzMkpMZ3ZEaDVUaXdDUm4wUXRJQXgtUE5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC80OWJlZjEtNDAxYS00OGQyLTg3NDYt MjY3Mjc1ZTkyNTcwLzEvblgtWHlHYWFUTmpnaU9mY1UzdFRVNFB6M0xjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC80OWJlZjEtNDAxYS00OGQyLTg3NDYtMjY3Mjc1ZTkyNTcw LzEvTHJzMkpMZ3ZEaDVUaXdDUm4wUXRJQXgtUE5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJb5wQD BABb5wYwDQYJKoZIhvcNAQELBQADggEBAByuT16iICsI/PxOsx3sRlCg2RT8chUl rIgiFYrL/VwfIuoyjTHewhuRjz8GF2nw52W2nWNrmfruBWq7GUuC8ZeleomTEqcO VVEqXq4e0/fdYY6lgSIEhnPUZ3q9IssLmAg6NHgR0CZnZSArJIrTXntE3AJllreT MF5BZ/PRWyz4kZmGdHtEuZBOvPEQpxkmb22DeDDb/0XLxdScOCeM28tNZpH7J23P 3T7zgWyYpjhWwKEFNOW4j1kas1IpQcTa+mC+B68AIyV1OLsn4YBOaM6n8hQ4hw9u nHx3Ao8PrDdYLWkqkgoZ94KDkmuGHWEsM0qy+JsUddGaw/ih/vvB9M4= -----END CERTIFICATE-----Generated at Mon Jan 26 03:07:03 2026 by rpki-client