This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xVvAeAbjAnywjqQvLFjnqGabFzo.roa File: xVvAeAbjAnywjqQvLFjnqGabFzo.roa (raw, json) Hash identifier: MHe3EjYa15PyEjrwN5cSdo1Ogd8ywELYCfO8/S46e2s= Subject key identifier: C5:5B:C0:78:06:E3:02:7C:B0:8E:A4:2F:2C:58:E7:A8:66:9B:17:3A Certificate issuer: /CN=d3d56f07be184cba52f6fdc049e8114d2616c32a Certificate serial: 019B7B369708DB1969CE037FE121A4D8C02E Authority key identifier: D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xVvAeAbjAnywjqQvLFjnqGabFzo.roa Signing time: Thu 01 Jan 2026 20:18:53 +0000 ROA not before: Thu 01 Jan 2026 20:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50607 IP address blocks: 91.198.97.0/24 maxlen: 24 109.207.105.0/24 maxlen: 24 176.126.56.0/22 maxlen: 24 176.126.56.0/24 maxlen: 24 176.126.57.0/24 maxlen: 24 176.126.59.0/24 maxlen: 24 2001:67c:778::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:97:08:db:19:69:ce:03:7f:e1:21:a4:d8:c0:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3d56f07be184cba52f6fdc049e8114d2616c32a Validity Not Before: Jan 1 20:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c55bc07806e3027cb08ea42f2c58e7a8669b173a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4b:e2:79:02:69:6e:bf:87:0a:b4:5e:89:bc: c4:22:5d:a8:91:e4:3a:a3:13:41:87:22:cf:c5:54: 50:03:10:f1:f8:69:55:6e:6c:7d:2b:eb:68:9e:15: 7b:83:8f:d2:e5:e7:b8:47:14:1f:d9:ea:34:ab:c7: 2a:8e:1e:3a:a5:14:aa:3f:14:7e:24:60:a9:a3:80: d3:b6:11:81:88:c8:e7:32:7f:25:36:76:34:ca:7a: b7:74:64:6e:9f:b0:88:33:58:0b:02:df:a7:0a:31: c3:09:15:4f:2f:d3:f1:02:b0:5b:1a:0c:26:2d:b2: 6d:32:10:fc:d8:19:c0:9e:c3:8e:ec:81:f8:8f:86: a7:7f:8c:17:ac:3e:0e:71:9f:01:00:05:f3:ce:79: 70:fa:eb:5f:a2:d4:8b:1b:8d:f8:fc:aa:81:ed:2b: 35:44:85:2e:00:bd:2b:9c:c3:2f:85:a5:15:ee:24: 76:37:95:94:ac:43:00:99:42:66:2a:d5:68:5e:96: 6b:9a:0e:58:ce:67:17:8e:c2:46:f4:04:e6:d5:ac: d5:50:15:d2:2e:9a:23:de:d3:fe:e4:a5:40:56:57: a4:66:6d:f1:67:a3:6c:a1:e7:ef:97:bb:ae:08:cb: 57:f5:cc:72:47:9c:c7:37:96:3e:58:ad:dd:ce:89: 26:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:5B:C0:78:06:E3:02:7C:B0:8E:A4:2F:2C:58:E7:A8:66:9B:17:3A X509v3 Authority Key Identifier: keyid:D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xVvAeAbjAnywjqQvLFjnqGabFzo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.97.0/24 109.207.105.0/24 176.126.56.0/22 IPv6: 2001:67c:778::/48 Signature Algorithm: sha256WithRSAEncryption 99:99:d3:4b:43:04:2b:13:29:fd:b2:66:0b:42:06:a0:d7:1a: c1:25:fa:b9:31:70:c4:01:39:c0:39:e2:56:4b:6e:ec:7c:03: e8:d3:4f:d1:43:9e:c9:dd:93:38:83:ea:e0:91:a5:50:93:ea: 96:69:86:01:77:46:5f:3b:bb:48:f0:14:a7:21:10:5d:22:63: 0b:34:21:d8:3a:06:49:dd:ab:75:ab:17:d5:17:38:cd:05:ea: f0:6f:2e:2c:2c:42:c1:41:d1:02:c2:38:f4:3a:49:b4:44:0b: 72:55:a7:44:1e:1e:31:f6:21:8a:76:10:2f:94:b6:48:13:8f: 49:7e:df:8d:cd:fb:3f:06:ad:30:74:4a:0d:c9:8f:8b:eb:b0: 0f:1f:fa:7b:0f:74:4b:34:a0:bd:75:28:e6:5d:02:ca:70:03: 1a:f7:6f:d6:9b:ef:9e:bb:58:46:9b:cc:bc:33:a2:10:33:01: 69:6b:e5:14:11:d8:b8:54:0d:d1:09:fe:e8:ae:64:e3:c5:9c: 09:b7:0a:22:ae:af:32:0f:ac:90:76:5b:46:c8:9f:0b:14:25: 84:33:b4:80:7d:79:1d:90:a8:d3:51:b4:ca:23:85:7c:5f:87: 64:f0:87:40:96:6c:7a:ab:cc:af:96:2a:40:da:26:a4:4a:b6: f4:46:69:18 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt7NpcI2xlpzgN/4SGk2MAuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZDU2ZjA3YmUxODRjYmE1MmY2ZmRjMDQ5ZTgxMTRkMjYx NmMzMmEwHhcNMjYwMTAxMjAxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTViYzA3ODA2ZTMwMjdjYjA4ZWE0MmYyYzU4ZTdhODY2OWIxNzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UvieQJpbr+HCrReibzEIl2okeQ6 oxNBhyLPxVRQAxDx+GlVbmx9K+tonhV7g4/S5ee4RxQf2eo0q8cqjh46pRSqPxR+ JGCpo4DTthGBiMjnMn8lNnY0ynq3dGRun7CIM1gLAt+nCjHDCRVPL9PxArBbGgwm LbJtMhD82BnAnsOO7IH4j4anf4wXrD4OcZ8BAAXzznlw+utfotSLG434/KqB7Ss1 RIUuAL0rnMMvhaUV7iR2N5WUrEMAmUJmKtVoXpZrmg5YzmcXjsJG9ATm1azVUBXS Lpoj3tP+5KVAVlekZm3xZ6Nsoefvl7uuCMtX9cxyR5zHN5Y+WK3dzokmAwIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFMVbwHgG4wJ8sI6kLyxY56hmmxc6MB8GA1UdIwQY MBaAFNPVbwe+GEy6Uvb9wEnoEU0mFsMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYt MWIwNmQxYzcwNGMxLzEveFZ2QWVBYmpBbnl3anFRdkxGam5xR2FiRnpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYtMWIwNmQxYzcwNGMx LzEvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQAW8ZhAwQA bc9pAwQCsH44MA8EAgACMAkDBwAgAQZ8B3gwDQYJKoZIhvcNAQELBQADggEBAJmZ 00tDBCsTKf2yZgtCBqDXGsEl+rkxcMQBOcA54lZLbux8A+jTT9FDnsndkziD6uCR pVCT6pZphgF3Rl87u0jwFKchEF0iYws0Idg6Bkndq3WrF9UXOM0F6vBvLiwsQsFB 0QLCOPQ6SbREC3JVp0QeHjH2IYp2EC+UtkgTj0l+343N+z8GrTB0Sg3Jj4vrsA8f +nsPdEs0oL11KOZdAspwAxr3b9ab7567WEabzLwzohAzAWlr5RQR2LhUDdEJ/uiu ZOPFnAm3CiKurzIPrJB2W0bInwsUJYQztIB9eR2QqNNRtMojhXxfh2Twh0CWbHqr zK+WKkDaJqRKtvRGaRg= -----END CERTIFICATE-----Generated at Sun Jan 25 19:37:31 2026 by rpki-client