This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/XHX6uA0vFND00gt2A2M8M6c_H2E.roa File: XHX6uA0vFND00gt2A2M8M6c_H2E.roa (raw, json) Hash identifier: 0mS0wIrGW0SE8AZb8eImudM9dWAJb+YE0EwH1fJXNI4= Subject key identifier: 5C:75:FA:B8:0D:2F:14:D0:F4:D2:0B:76:03:63:3C:33:A7:3F:1F:61 Certificate issuer: /CN=110e56177308c20c42fbf42f310f4c0ef6b27890 Certificate serial: 019B7CEDFB1D6FC3B5494F40C529889A06E0 Authority key identifier: 11:0E:56:17:73:08:C2:0C:42:FB:F4:2F:31:0F:4C:0E:F6:B2:78:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/XHX6uA0vFND00gt2A2M8M6c_H2E.roa Signing time: Fri 02 Jan 2026 04:18:49 +0000 ROA not before: Fri 02 Jan 2026 04:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 91.206.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:fb:1d:6f:c3:b5:49:4f:40:c5:29:88:9a:06:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=110e56177308c20c42fbf42f310f4c0ef6b27890 Validity Not Before: Jan 2 04:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c75fab80d2f14d0f4d20b7603633c33a73f1f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:23:f1:f8:60:2f:0c:57:2b:c3:8d:8c:e3:54: c8:c6:b7:a0:46:d6:fd:ee:4e:49:a3:79:10:d9:84: a1:01:f4:59:68:95:47:14:27:2c:89:bb:57:98:3c: e0:62:4b:95:fc:29:fd:74:88:76:c2:cb:9e:97:2e: 26:c4:9a:a0:37:2c:8b:7b:b1:9f:f8:d1:6e:cf:8e: 61:72:9b:6a:e2:6a:dc:45:4c:6e:d9:a6:0a:4f:af: 73:8d:8b:7b:17:7a:02:2b:ec:79:00:fe:47:3c:7d: f1:2e:52:23:78:8c:4b:e6:d0:f7:20:41:d2:c1:7d: d7:b8:e8:de:6e:ae:a7:a1:de:2a:9e:13:68:2f:0c: bd:6f:b5:bb:17:5e:ee:3c:67:6a:5d:2a:b9:0e:5c: d4:30:e8:6b:3a:2e:64:25:30:36:3f:21:fd:96:38: bb:ba:01:75:b2:29:ab:e9:e0:bf:53:9f:da:ef:d1: 16:91:f0:97:a3:9b:2c:24:1a:65:93:2f:e0:5a:2e: dd:96:0a:ab:f7:2e:4f:e7:60:21:96:98:e4:ba:03: 6b:37:52:97:5c:87:aa:a6:c8:3e:da:92:fd:c2:45: 6e:03:87:f0:c9:bc:d4:7c:6f:97:9b:d7:01:31:a6: d6:64:5d:c6:db:a0:76:8f:9a:84:20:de:ee:7b:e1: c5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:75:FA:B8:0D:2F:14:D0:F4:D2:0B:76:03:63:3C:33:A7:3F:1F:61 X509v3 Authority Key Identifier: keyid:11:0E:56:17:73:08:C2:0C:42:FB:F4:2F:31:0F:4C:0E:F6:B2:78:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/XHX6uA0vFND00gt2A2M8M6c_H2E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.48.0/24 Signature Algorithm: sha256WithRSAEncryption 09:93:89:5f:1a:69:96:2c:05:4a:64:cf:ff:1e:a6:24:75:6f: 60:00:11:94:dd:30:24:da:d4:e9:5e:4d:13:4c:a6:dd:36:21: c9:b5:39:d5:c0:18:a9:dc:6d:ec:1d:31:13:1a:30:67:2f:89: 7a:1f:53:5a:4e:f6:8f:b6:58:0d:19:dc:79:25:00:5d:75:92: 19:9c:7f:94:fb:bd:35:fe:f4:0e:5c:8c:87:d2:e1:7e:fd:fe: 92:35:cd:01:bb:8d:4b:67:57:ef:25:8a:06:3b:b8:da:0e:2c: 6c:dd:79:93:bf:5d:10:28:99:75:3b:ca:49:06:50:ae:bb:1c: af:fc:a7:69:d5:ef:04:5d:06:6f:b3:b9:74:95:7e:ce:bb:3a: a4:57:64:0b:a7:e7:85:b1:44:c8:f6:4b:63:a4:5c:ee:86:4a: 54:14:c9:e8:59:6c:29:72:84:84:3f:a3:79:53:aa:e5:4a:6c: e9:ae:f8:fe:1e:e9:10:b6:f7:8f:4b:43:9f:8a:6d:30:18:a8: 0f:8d:cd:bf:53:71:f9:9f:5a:b2:d7:c0:d4:5d:af:12:48:0b: 36:68:9a:80:ae:da:a6:fb:d8:a8:03:c4:e7:75:22:0a:a6:d6: 54:f0:6a:ba:2d:45:61:cc:68:4a:9b:31:77:50:82:38:0f:66: 8b:7b:f6:b3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87fsdb8O1SU9AxSmImgbgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMGU1NjE3NzMwOGMyMGM0MmZiZjQyZjMxMGY0YzBlZjZi Mjc4OTAwHhcNMjYwMTAyMDQxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Yzc1ZmFiODBkMmYxNGQwZjRkMjBiNzYwMzYzM2MzM2E3M2YxZjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSPx+GAvDFcrw42M41TIxregRtb9 7k5Jo3kQ2YShAfRZaJVHFCcsibtXmDzgYkuV/Cn9dIh2wsuely4mxJqgNyyLe7Gf +NFuz45hcptq4mrcRUxu2aYKT69zjYt7F3oCK+x5AP5HPH3xLlIjeIxL5tD3IEHS wX3XuOjebq6nod4qnhNoLwy9b7W7F17uPGdqXSq5DlzUMOhrOi5kJTA2PyH9lji7 ugF1simr6eC/U5/a79EWkfCXo5ssJBplky/gWi7dlgqr9y5P52AhlpjkugNrN1KX XIeqpsg+2pL9wkVuA4fwybzUfG+Xm9cBMabWZF3G26B2j5qEIN7ue+HFJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFx1+rgNLxTQ9NILdgNjPDOnPx9hMB8GA1UdIwQY MBaAFBEOVhdzCMIMQvv0LzEPTA72sniQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVE1V0YzTUl3Z3hDLV9Rdk1ROU1EdmF5ZUpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wZTU3MTEtMmZkNC00MGNhLTkxMzYt NmY0ZTY1ODViNTRiLzEvWEhYNnVBMHZGTkQwMGd0MkEyTThNNmNfSDJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi8wZTU3MTEtMmZkNC00MGNhLTkxMzYtNmY0ZTY1ODViNTRi LzEvRVE1V0YzTUl3Z3hDLV9Rdk1ROU1EdmF5ZUpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW84wMA0G CSqGSIb3DQEBCwUAA4IBAQAJk4lfGmmWLAVKZM//HqYkdW9gABGU3TAk2tTpXk0T TKbdNiHJtTnVwBip3G3sHTETGjBnL4l6H1NaTvaPtlgNGdx5JQBddZIZnH+U+701 /vQOXIyH0uF+/f6SNc0Bu41LZ1fvJYoGO7jaDixs3XmTv10QKJl1O8pJBlCuuxyv /Kdp1e8EXQZvs7l0lX7OuzqkV2QLp+eFsUTI9ktjpFzuhkpUFMnoWWwpcoSEP6N5 U6rlSmzprvj+HukQtvePS0Ofim0wGKgPjc2/U3H5n1qy18DUXa8SSAs2aJqArtqm +9ioA8TndSIKptZU8Gq6LUVhzGhKmzF3UII4D2aLe/az -----END CERTIFICATE-----Generated at Sun Jan 25 15:28:47 2026 by rpki-client