This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/xF6DSfpWjHY3DSnY4quSmS7ktcA.roa File: xF6DSfpWjHY3DSnY4quSmS7ktcA.roa (raw, json) Hash identifier: odbQ9fjuabZiW5G2VLqBK8Bk/nuyTPF9z/+wCBqDPfc= Subject key identifier: C4:5E:83:49:FA:56:8C:76:37:0D:29:D8:E2:AB:92:99:2E:E4:B5:C0 Certificate issuer: /CN=c04db7623241d7e6678fc25751fa4e0b6665186b Certificate serial: 019B7B36CC5C9020298669988107CAEBFD9D Authority key identifier: C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/xF6DSfpWjHY3DSnY4quSmS7ktcA.roa Signing time: Thu 01 Jan 2026 20:19:07 +0000 ROA not before: Thu 01 Jan 2026 20:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48810 IP address blocks: 91.238.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:cc:5c:90:20:29:86:69:98:81:07:ca:eb:fd:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c04db7623241d7e6678fc25751fa4e0b6665186b Validity Not Before: Jan 1 20:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c45e8349fa568c76370d29d8e2ab92992ee4b5c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:58:57:8e:ec:95:9d:a5:76:a6:30:02:a3:9c: 88:1b:01:ef:5a:0a:69:9b:3d:8d:2e:30:49:39:f1: 83:8d:45:8d:85:6c:52:65:9d:e8:77:62:e3:50:c8: 19:b1:0d:12:0a:a5:c8:8d:4f:be:c1:47:21:03:82: 2a:4f:f6:f0:5a:1d:b7:a7:b6:8c:e0:9e:3a:3a:3a: 1c:99:84:0e:b7:ca:b2:33:8f:02:16:5f:2f:33:4c: f5:4d:18:7c:cc:52:7c:87:b5:3f:b6:ad:85:b5:cc: 18:50:47:e7:e9:15:ff:77:7f:bd:c3:cc:cb:20:60: 48:5a:cb:61:e7:04:11:27:95:66:f0:29:3d:93:55: 56:b0:91:95:32:a2:70:f6:ed:8b:52:fd:ba:58:60: ec:09:d7:c1:8d:49:b9:0d:4d:38:7e:49:d1:fd:48: 92:9b:7b:b1:b6:88:c4:4b:0d:c4:c4:77:f9:6c:9b: 67:0e:70:0c:a2:cd:bf:c8:09:16:16:01:d7:35:b5: 89:73:ae:ad:58:53:81:4c:25:82:d1:1e:8e:b8:29: 19:9e:3f:a0:cf:40:b4:0e:d6:31:a4:d8:3e:85:1e: ef:fb:2e:e1:02:5b:7b:df:3d:e3:5d:51:ea:d7:a5: aa:ae:a7:ba:1f:fd:04:da:ed:b6:93:bb:72:45:70: b6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:5E:83:49:FA:56:8C:76:37:0D:29:D8:E2:AB:92:99:2E:E4:B5:C0 X509v3 Authority Key Identifier: keyid:C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/xF6DSfpWjHY3DSnY4quSmS7ktcA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.238.37.0/24 Signature Algorithm: sha256WithRSAEncryption 05:c1:52:53:55:cb:fa:9a:a4:6f:b4:80:1c:30:9b:5e:fb:9e: a6:9d:03:e9:29:dc:32:b0:23:7c:69:9e:3c:6e:e8:89:84:2b: f6:a1:fc:07:25:84:86:b7:f1:74:56:05:b7:0d:72:5c:12:ba: a9:16:b9:28:44:cf:1d:77:9f:95:6d:93:37:9b:f2:98:e2:bf: 71:2e:c0:4b:a3:6b:a1:eb:4c:32:d2:78:28:2d:93:03:09:d9: ad:49:d0:46:da:4e:57:7b:77:fc:1f:5c:f1:bc:5f:ca:7a:74: 2b:01:62:5b:b1:16:7f:3b:d7:44:2d:8a:77:d0:c3:f5:2b:54: 2e:28:83:e7:8e:f0:79:27:2a:7f:df:e9:a0:89:34:6c:21:fc: 33:80:9c:fc:38:a0:ff:9a:fc:fd:54:8b:46:89:9b:f5:13:d0: 98:5f:37:96:ed:63:65:a7:53:b9:ea:10:a1:92:0d:f1:32:df: 13:34:48:ba:b1:87:54:97:1a:4f:a4:2b:7d:69:d1:1a:d1:27: 13:5c:92:88:6d:32:01:2e:cf:21:7f:80:6d:f8:20:c0:12:96: 1a:69:64:ae:25:ea:25:95:f8:15:3b:3c:9e:16:6e:9d:61:ce: c4:69:1a:81:a7:71:be:43:a9:2a:f6:29:cd:a4:dd:5f:f6:ff: 5c:e1:c6:9d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NsxckCAphmmYgQfK6/2dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwNGRiNzYyMzI0MWQ3ZTY2NzhmYzI1NzUxZmE0ZTBiNjY2 NTE4NmIwHhcNMjYwMTAxMjAxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDVlODM0OWZhNTY4Yzc2MzcwZDI5ZDhlMmFiOTI5OTJlZTRiNWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11hXjuyVnaV2pjACo5yIGwHvWgpp mz2NLjBJOfGDjUWNhWxSZZ3od2LjUMgZsQ0SCqXIjU++wUchA4IqT/bwWh23p7aM 4J46OjocmYQOt8qyM48CFl8vM0z1TRh8zFJ8h7U/tq2FtcwYUEfn6RX/d3+9w8zL IGBIWsth5wQRJ5Vm8Ck9k1VWsJGVMqJw9u2LUv26WGDsCdfBjUm5DU04fknR/UiS m3uxtojESw3ExHf5bJtnDnAMos2/yAkWFgHXNbWJc66tWFOBTCWC0R6OuCkZnj+g z0C0DtYxpNg+hR7v+y7hAlt73z3jXVHq16Wqrqe6H/0E2u22k7tyRXC2YQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMReg0n6Vox2Nw0p2OKrkpku5LXAMB8GA1UdIwQY MBaAFMBNt2IyQdfmZ4/CV1H6TgtmZRhrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0UyM1lqSkIxLVpuajhKWFVmcE9DMlpsR0dzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC82ZTg3NGUtNzNmZS00ZGJiLWI3NGMt MDQyM2YyNjNmMmNiLzEveEY2RFNmcFdqSFkzRFNuWTRxdVNtUzdrdGNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC82ZTg3NGUtNzNmZS00ZGJiLWI3NGMtMDQyM2YyNjNmMmNi LzEvd0UyM1lqSkIxLVpuajhKWFVmcE9DMlpsR0dzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+4lMA0G CSqGSIb3DQEBCwUAA4IBAQAFwVJTVcv6mqRvtIAcMJte+56mnQPpKdwysCN8aZ48 buiJhCv2ofwHJYSGt/F0VgW3DXJcErqpFrkoRM8dd5+VbZM3m/KY4r9xLsBLo2uh 60wy0ngoLZMDCdmtSdBG2k5Xe3f8H1zxvF/KenQrAWJbsRZ/O9dELYp30MP1K1Qu KIPnjvB5Jyp/3+mgiTRsIfwzgJz8OKD/mvz9VItGiZv1E9CYXzeW7WNlp1O56hCh kg3xMt8TNEi6sYdUlxpPpCt9adEa0ScTXJKIbTIBLs8hf4Bt+CDAEpYaaWSuJeol lfgVOzyeFm6dYc7EaRqBp3G+Q6kq9inNpN1f9v9c4cad -----END CERTIFICATE-----Generated at Mon Jan 26 10:13:53 2026 by rpki-client