This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/xhCelkdkFdTsIHpEDmjN2bruQr8.roa File: xhCelkdkFdTsIHpEDmjN2bruQr8.roa (raw, json) Hash identifier: +AqQAgHYDXWjRd+5q4R8GrL4JFr5uaVtEUtnJ3XI5Ho= Subject key identifier: C6:10:9E:96:47:64:15:D4:EC:20:7A:44:0E:68:CD:D9:BA:EE:42:BF Certificate issuer: /CN=5e868b02e519dd7e694c7af1e708bdd66369bddf Certificate serial: 019B7CEE65029F321BA6D336BDE0C1A950D3 Authority key identifier: 5E:86:8B:02:E5:19:DD:7E:69:4C:7A:F1:E7:08:BD:D6:63:69:BD:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/xhCelkdkFdTsIHpEDmjN2bruQr8.roa Signing time: Fri 02 Jan 2026 04:19:16 +0000 ROA not before: Fri 02 Jan 2026 04:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196772 IP address blocks: 91.212.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.crl rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:65:02:9f:32:1b:a6:d3:36:bd:e0:c1:a9:50:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e868b02e519dd7e694c7af1e708bdd66369bddf Validity Not Before: Jan 2 04:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6109e96476415d4ec207a440e68cdd9baee42bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:86:e1:e2:40:6e:43:fa:19:ac:e9:c9:27:95: 5a:c5:4e:27:4f:85:08:dc:52:23:d9:6e:d6:28:bf: 2a:4d:23:f4:21:65:a8:c2:28:32:b8:99:7f:cd:d3: 5f:18:17:c3:e8:b0:b3:8f:c6:19:7f:ec:18:a1:c5: 94:5c:eb:de:96:f3:12:83:7f:3a:90:65:21:55:87: 6b:f4:51:4c:ad:22:c7:90:8f:44:28:8b:ea:44:df: 8c:e2:f7:0d:36:3e:2e:03:a8:86:76:b9:08:dd:43: 76:60:4a:f1:a6:ac:23:be:5e:ed:a0:b2:e3:26:6c: b7:aa:09:34:c4:58:37:10:3d:39:bb:4b:9b:77:22: df:51:e4:71:43:d6:d3:07:3a:1c:c0:64:3f:7f:b5: d7:71:14:93:f5:c4:48:94:90:73:76:5a:f6:38:9a: 07:32:84:58:9e:9f:69:8c:db:0d:26:f2:26:36:c0: 3b:f0:dc:15:2f:ce:3b:85:bb:f2:46:1f:0c:d0:4b: fa:85:6f:28:f5:75:1b:0d:fe:e0:db:27:2d:36:ae: db:1e:f5:54:c8:fe:5f:7d:3b:c0:51:6f:df:47:dd: 9f:40:04:95:b2:68:f7:a9:d2:19:4a:51:19:7c:b0: d8:ab:b7:69:9e:89:ee:a5:2e:df:00:6f:69:ca:3c: e8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:10:9E:96:47:64:15:D4:EC:20:7A:44:0E:68:CD:D9:BA:EE:42:BF X509v3 Authority Key Identifier: keyid:5E:86:8B:02:E5:19:DD:7E:69:4C:7A:F1:E7:08:BD:D6:63:69:BD:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/xhCelkdkFdTsIHpEDmjN2bruQr8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.199.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:b8:e2:f6:c8:5a:55:ab:29:bb:73:c3:71:6d:38:5b:89:ac: 53:59:4b:c2:56:a9:2f:73:76:80:1b:d2:9b:db:93:43:ba:1b: b8:b4:ca:12:58:87:bb:82:1c:94:b6:9f:e3:8f:63:77:62:2c: 25:29:33:6b:9b:ab:0b:f4:a0:85:bc:cd:05:9e:c9:67:90:08: fd:45:c0:7e:46:65:b7:9f:42:85:f0:36:7e:63:64:e6:47:8c: bc:fe:37:d0:18:34:97:3e:52:af:22:9e:aa:b7:4a:ea:8a:b7: b4:75:bc:14:e8:03:1c:fc:63:47:83:a9:b6:55:be:3f:06:c2: fd:da:ba:91:47:c1:49:45:29:7b:2e:17:06:1e:f8:3c:96:c5: a0:83:52:fd:0c:79:11:dc:a5:de:2c:e2:37:d0:78:1e:7f:2d: 90:23:a7:39:72:6a:24:2e:c3:b9:83:36:9b:0a:d0:90:94:97: a8:93:a2:88:33:5b:92:ef:e3:89:90:54:53:60:a1:e3:a9:40: 4b:3f:1c:b3:1c:da:61:eb:0b:c8:ef:9a:9e:8c:36:82:5b:fa: b9:92:46:af:74:08:93:0a:8a:18:28:6f:cc:eb:7c:f2:a7:ae: 04:e5:52:a8:8f:f6:6f:8c:35:cf:51:15:d6:1d:7e:55:22:78: f2:07:7c:41 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87mUCnzIbptM2veDBqVDTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlODY4YjAyZTUxOWRkN2U2OTRjN2FmMWU3MDhiZGQ2NjM2 OWJkZGYwHhcNMjYwMTAyMDQxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjEwOWU5NjQ3NjQxNWQ0ZWMyMDdhNDQwZTY4Y2RkOWJhZWU0MmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ibh4kBuQ/oZrOnJJ5VaxU4nT4UI 3FIj2W7WKL8qTSP0IWWowigyuJl/zdNfGBfD6LCzj8YZf+wYocWUXOvelvMSg386 kGUhVYdr9FFMrSLHkI9EKIvqRN+M4vcNNj4uA6iGdrkI3UN2YErxpqwjvl7toLLj Jmy3qgk0xFg3ED05u0ubdyLfUeRxQ9bTBzocwGQ/f7XXcRST9cRIlJBzdlr2OJoH MoRYnp9pjNsNJvImNsA78NwVL847hbvyRh8M0Ev6hW8o9XUbDf7g2yctNq7bHvVU yP5ffTvAUW/fR92fQASVsmj3qdIZSlEZfLDYq7dpnonupS7fAG9pyjzo+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMYQnpZHZBXU7CB6RA5ozdm67kK/MB8GA1UdIwQY MBaAFF6GiwLlGd1+aUx68ecIvdZjab3fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG9hTEF1VVozWDVwVEhyeDV3aTkxbU5wdmQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84MDJlMDUtMGQ1Yi00NTg5LTkxNmIt OTBjMTdlYjc1MWY0LzEveGhDZWxrZGtGZFRzSUhwRURtak4yYnJ1UXI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS84MDJlMDUtMGQ1Yi00NTg5LTkxNmItOTBjMTdlYjc1MWY0 LzEvWG9hTEF1VVozWDVwVEhyeDV3aTkxbU5wdmQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9THMA0G CSqGSIb3DQEBCwUAA4IBAQA6uOL2yFpVqym7c8NxbThbiaxTWUvCVqkvc3aAG9Kb 25NDuhu4tMoSWIe7ghyUtp/jj2N3YiwlKTNrm6sL9KCFvM0FnslnkAj9RcB+RmW3 n0KF8DZ+Y2TmR4y8/jfQGDSXPlKvIp6qt0rqire0dbwU6AMc/GNHg6m2Vb4/BsL9 2rqRR8FJRSl7LhcGHvg8lsWgg1L9DHkR3KXeLOI30Hgefy2QI6c5cmokLsO5gzab CtCQlJeok6KIM1uS7+OJkFRTYKHjqUBLPxyzHNph6wvI75qejDaCW/q5kkavdAiT CooYKG/M63zyp64E5VKoj/ZvjDXPURXWHX5VInjyB3xB -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:21 2026 by rpki-client