This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/xn4i-fiHxOz0VUsB8YhWKLghbLs.roa File: xn4i-fiHxOz0VUsB8YhWKLghbLs.roa (raw, json) Hash identifier: Ptihx8qc04YVHI7Uz+aNOpCGFom4Sx5jCTJsyxvgVYs= Subject key identifier: C6:7E:22:F9:F8:87:C4:EC:F4:55:4B:01:F1:88:56:28:B8:21:6C:BB Certificate issuer: /CN=3389e0b8a2ff82a23b48dd6e6e76176b4cd3832e Certificate serial: 019B7B36E8B39C5C3E649D17AAE516577502 Authority key identifier: 33:89:E0:B8:A2:FF:82:A2:3B:48:DD:6E:6E:76:17:6B:4C:D3:83:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/xn4i-fiHxOz0VUsB8YhWKLghbLs.roa Signing time: Thu 01 Jan 2026 20:19:14 +0000 ROA not before: Thu 01 Jan 2026 20:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20712 IP address blocks: 91.240.176.0/24 maxlen: 24 2001:67c:2a40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:e8:b3:9c:5c:3e:64:9d:17:aa:e5:16:57:75:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3389e0b8a2ff82a23b48dd6e6e76176b4cd3832e Validity Not Before: Jan 1 20:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c67e22f9f887c4ecf4554b01f1885628b8216cbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:58:e5:97:13:86:ff:ea:2d:75:16:96:bf:c1: 7c:b0:aa:18:42:96:2f:24:e2:12:d8:0f:36:a8:85: 5a:1a:a2:23:9f:de:cc:17:61:b1:0c:3d:61:e4:e2: 57:9f:1d:09:39:74:06:db:83:78:9f:4b:d7:c8:39: 93:5a:93:4f:20:b1:6b:3b:c1:ad:46:76:e4:53:1c: 6b:61:1d:9c:4d:89:b4:ed:17:89:91:7d:71:2d:17: da:c1:07:88:e9:8f:d5:fa:ba:34:66:ae:c6:7e:96: b2:ed:a1:1e:5a:52:f9:fe:17:98:88:ad:ec:b3:fd: 80:4c:ee:16:3f:eb:01:66:35:b6:73:51:54:11:e8: 0b:b3:e8:32:33:20:34:1e:3b:c9:46:49:b9:13:45: 63:1a:70:9f:1e:06:2d:e5:4c:13:16:20:cf:f9:4c: df:24:72:95:d1:17:b5:88:99:45:07:e3:04:81:9b: 21:f4:d5:a0:81:da:17:2a:6d:9c:be:eb:0a:b5:76: 51:e7:fa:8c:33:e6:4d:13:69:8b:21:9a:ef:c1:7a: c2:99:2f:d5:ad:5f:04:89:ba:6d:f5:83:b4:19:af: 16:86:25:5f:d1:32:63:96:21:5f:67:81:38:dd:0f: 2d:32:d2:8e:21:c1:13:d9:85:81:ab:d3:22:3c:69: bc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:7E:22:F9:F8:87:C4:EC:F4:55:4B:01:F1:88:56:28:B8:21:6C:BB X509v3 Authority Key Identifier: keyid:33:89:E0:B8:A2:FF:82:A2:3B:48:DD:6E:6E:76:17:6B:4C:D3:83:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/xn4i-fiHxOz0VUsB8YhWKLghbLs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.240.176.0/24 IPv6: 2001:67c:2a40::/48 Signature Algorithm: sha256WithRSAEncryption 18:28:5d:4d:b9:bc:85:e2:56:03:5b:eb:6a:2e:cf:ff:5d:1f: b7:26:80:9c:56:22:c2:6f:61:e0:14:4b:40:0b:68:4c:85:c8: 3d:e8:1e:17:23:fb:8d:8a:f6:31:34:06:9b:d6:64:d6:64:a4: fa:75:9f:ad:42:b5:a0:f2:1c:a7:ff:b8:11:dd:d9:2d:c1:90: f2:63:a2:31:05:e7:95:db:94:f3:f1:9e:76:41:40:0d:da:c1: f7:07:75:3a:c3:78:ad:07:ac:59:6e:2d:15:ba:8d:b1:9e:6d: 48:36:17:87:87:c1:55:db:47:0f:de:a3:5e:83:3d:59:a5:c6: 18:46:ba:b0:01:e7:b1:ab:c8:e0:22:31:de:7f:bc:71:0b:0c: c7:1c:06:3a:3a:fd:76:c8:fe:ae:75:42:5b:01:82:1d:8e:e6: e0:b9:a0:05:7f:1d:7e:54:13:99:c7:cb:e5:6d:cb:e0:15:47: d2:ed:ab:1e:43:a3:b4:4f:de:d9:7c:26:b1:74:54:c0:4b:02: bb:c2:b0:33:5c:8a:c0:3c:d9:72:dc:0d:39:48:64:e1:1a:40: 3c:eb:06:56:94:dc:f4:e1:85:66:60:aa:53:d1:9e:21:b8:78: db:db:b1:84:32:dd:e6:70:7e:7c:75:2e:33:65:b1:f1:bd:53: 08:c2:63:db -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt7NuiznFw+ZJ0XquUWV3UCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzODllMGI4YTJmZjgyYTIzYjQ4ZGQ2ZTZlNzYxNzZiNGNk MzgzMmUwHhcNMjYwMTAxMjAxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjdlMjJmOWY4ODdjNGVjZjQ1NTRiMDFmMTg4NTYyOGI4MjE2Y2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVjllxOG/+otdRaWv8F8sKoYQpYv JOIS2A82qIVaGqIjn97MF2GxDD1h5OJXnx0JOXQG24N4n0vXyDmTWpNPILFrO8Gt RnbkUxxrYR2cTYm07ReJkX1xLRfawQeI6Y/V+ro0Zq7Gfpay7aEeWlL5/heYiK3s s/2ATO4WP+sBZjW2c1FUEegLs+gyMyA0HjvJRkm5E0VjGnCfHgYt5UwTFiDP+Uzf JHKV0Re1iJlFB+MEgZsh9NWggdoXKm2cvusKtXZR5/qMM+ZNE2mLIZrvwXrCmS/V rV8Eibpt9YO0Ga8WhiVf0TJjliFfZ4E43Q8tMtKOIcET2YWBq9MiPGm8cwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFMZ+Ivn4h8Ts9FVLAfGIVii4IWy7MB8GA1UdIwQY MBaAFDOJ4Lii/4KiO0jdbm52F2tM04MuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTRuZ3VLTF9ncUk3U04xdWJuWVhhMHpUZ3k0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS83YTQ0MDItZjNmNS00ZjNhLTk4YTgt MjMzN2E4MWIxZjc4LzEveG40aS1maUh4T3owVlVzQjhZaFdLTGdoYkxzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS83YTQ0MDItZjNmNS00ZjNhLTk4YTgtMjMzN2E4MWIxZjc4 LzEvTTRuZ3VLTF9ncUk3U04xdWJuWVhhMHpUZ3k0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW/CwMA8E AgACMAkDBwAgAQZ8KkAwDQYJKoZIhvcNAQELBQADggEBABgoXU25vIXiVgNb62ou z/9dH7cmgJxWIsJvYeAUS0ALaEyFyD3oHhcj+42K9jE0BpvWZNZkpPp1n61CtaDy HKf/uBHd2S3BkPJjojEF55XblPPxnnZBQA3awfcHdTrDeK0HrFluLRW6jbGebUg2 F4eHwVXbRw/eo16DPVmlxhhGurAB57GryOAiMd5/vHELDMccBjo6/XbI/q51QlsB gh2O5uC5oAV/HX5UE5nHy+Vty+AVR9Ltqx5Do7RP3tl8JrF0VMBLArvCsDNcisA8 2XLcDTlIZOEaQDzrBlaU3PThhWZgqlPRniG4eNvbsYQy3eZwfnx1LjNlsfG9UwjC Y9s= -----END CERTIFICATE-----Generated at Sun Jan 25 17:48:59 2026 by rpki-client