This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/xVq8myRToHEzG4XtrfoYm_ql4tU.roa File: xVq8myRToHEzG4XtrfoYm_ql4tU.roa (raw, json) Hash identifier: qD4DTGCUvT4xhgt8cQf/IqQZzJ2Q7J0szRvgCLAXSVk= Subject key identifier: C5:5A:BC:9B:24:53:A0:71:33:1B:85:ED:AD:FA:18:9B:FA:A5:E2:D5 Certificate issuer: /CN=9e1533c4702c2ccb5a9e0e87ab27ad56b15f2c76 Certificate serial: 019B7D5C59AB6A2F19548D4C7833DD183E71 Authority key identifier: 9E:15:33:C4:70:2C:2C:CB:5A:9E:0E:87:AB:27:AD:56:B1:5F:2C:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/xVq8myRToHEzG4XtrfoYm_ql4tU.roa Signing time: Fri 02 Jan 2026 06:19:22 +0000 ROA not before: Fri 02 Jan 2026 06:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64445 IP address blocks: 91.193.55.0/24 maxlen: 24 2a12:e6c0::/32 maxlen: 64 2a12:e6c0:c50::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.crl rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:59:ab:6a:2f:19:54:8d:4c:78:33:dd:18:3e:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e1533c4702c2ccb5a9e0e87ab27ad56b15f2c76 Validity Not Before: Jan 2 06:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c55abc9b2453a071331b85edadfa189bfaa5e2d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:38:89:73:62:d1:69:60:e5:7c:55:65:29:5f: 87:a0:25:cc:0d:80:55:a5:b0:53:15:25:93:60:e1: 1e:67:84:23:bf:2d:85:15:f4:c4:55:23:76:2c:48: e5:ba:dc:0c:05:df:3b:36:5b:47:9a:02:a3:40:0e: cb:b1:b2:07:65:0e:d3:48:c3:3b:65:77:5b:8a:00: ce:cc:cb:6d:5d:98:0b:e9:52:55:4a:0b:ed:a1:88: 06:6f:28:78:85:b2:b9:8f:b3:a7:7b:5b:c8:97:76: 2e:ea:42:1f:ff:42:69:52:4d:59:aa:47:80:1d:e9: 2b:29:c7:e8:44:32:ff:d5:55:2c:0e:a9:f0:52:2e: ac:5a:b8:89:b6:5d:8c:73:24:68:7b:b0:f7:35:b8: 3c:37:2d:0d:dd:8f:40:a5:89:10:27:f9:37:b5:ec: a5:3f:30:64:c6:47:b0:f9:7e:af:f0:ee:f8:2f:9f: 49:1e:9f:3e:5c:b5:07:8a:2f:26:06:87:1d:cf:90: a1:6e:5c:aa:48:0a:d0:f8:71:b4:52:d8:54:1f:01: 50:c9:ec:9e:52:dc:ec:ce:aa:db:78:1a:8c:71:ae: b8:a1:13:aa:cb:0e:b3:d1:6b:4a:3f:03:b9:99:e0: a2:de:ec:3a:73:5e:26:ac:f9:9f:75:d9:c6:e2:47: 78:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:5A:BC:9B:24:53:A0:71:33:1B:85:ED:AD:FA:18:9B:FA:A5:E2:D5 X509v3 Authority Key Identifier: keyid:9E:15:33:C4:70:2C:2C:CB:5A:9E:0E:87:AB:27:AD:56:B1:5F:2C:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/xVq8myRToHEzG4XtrfoYm_ql4tU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.193.55.0/24 IPv6: 2a12:e6c0::/32 Signature Algorithm: sha256WithRSAEncryption 75:66:03:22:3a:ff:eb:65:3c:7a:00:37:7d:a8:1b:6f:f8:e2: 11:30:4a:cd:bf:02:f2:72:9a:f3:86:ea:84:a2:70:39:d5:ab: f4:d4:6d:f9:f4:6a:25:30:19:4b:e2:4c:de:f2:94:67:01:3e: e5:73:1b:83:a6:f6:3e:7b:96:fc:94:7a:36:58:c7:8f:dc:c4: f3:40:c7:aa:05:69:5f:f8:6f:73:37:c2:f7:e0:a5:f3:39:62: ec:6f:72:3f:6c:a8:62:87:ed:5a:a7:b9:e8:af:7c:06:d1:c3: 8a:34:55:56:73:12:be:52:1d:33:87:98:79:a8:f9:da:80:ce: 69:18:a4:a4:16:8f:57:97:f9:ce:87:2b:ab:d5:3c:42:84:e5: f2:a2:7e:96:5c:f0:31:a9:26:bc:11:b8:94:2c:47:ce:af:b1: d6:dd:b2:88:f2:0b:29:b0:c6:1f:d7:a5:0c:ef:01:c1:2e:fa: 72:ff:74:4b:74:c8:28:6c:4b:51:60:94:93:c2:2b:ea:89:93: dd:be:2e:19:ea:bf:d6:11:11:7c:cd:d7:ec:43:24:f0:2a:c1: be:c6:3d:26:6c:45:94:41:cb:5b:45:77:b8:01:7e:e5:8f:32: 61:2e:f0:72:9f:13:82:8f:b0:b9:d7:6b:a4:a2:be:78:f5:f2: cd:8f:e1:09 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9XFmrai8ZVI1MeDPdGD5xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMTUzM2M0NzAyYzJjY2I1YTllMGU4N2FiMjdhZDU2YjE1 ZjJjNzYwHhcNMjYwMTAyMDYxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTVhYmM5YjI0NTNhMDcxMzMxYjg1ZWRhZGZhMTg5YmZhYTVlMmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DiJc2LRaWDlfFVlKV+HoCXMDYBV pbBTFSWTYOEeZ4Qjvy2FFfTEVSN2LEjlutwMBd87NltHmgKjQA7LsbIHZQ7TSMM7 ZXdbigDOzMttXZgL6VJVSgvtoYgGbyh4hbK5j7One1vIl3Yu6kIf/0JpUk1ZqkeA HekrKcfoRDL/1VUsDqnwUi6sWriJtl2McyRoe7D3Nbg8Ny0N3Y9ApYkQJ/k3teyl PzBkxkew+X6v8O74L59JHp8+XLUHii8mBocdz5ChblyqSArQ+HG0UthUHwFQyeye UtzszqrbeBqMca64oROqyw6z0WtKPwO5meCi3uw6c14mrPmfddnG4kd4owIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMVavJskU6BxMxuF7a36GJv6peLVMB8GA1UdIwQY MBaAFJ4VM8RwLCzLWp4Oh6snrVaxXyx2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmhVenhIQXNMTXRhbmc2SHF5ZXRWckZmTEhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8yNjg4YjYtZGE3MC00YWJkLThmNTkt MWE4MzFiNTk5YzE4LzEveFZxOG15UlRvSEV6RzRYdHJmb1ltX3FsNHRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS8yNjg4YjYtZGE3MC00YWJkLThmNTktMWE4MzFiNTk5YzE4 LzEvbmhVenhIQXNMTXRhbmc2SHF5ZXRWckZmTEhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW8E3MA0E AgACMAcDBQAqEubAMA0GCSqGSIb3DQEBCwUAA4IBAQB1ZgMiOv/rZTx6ADd9qBtv +OIRMErNvwLycprzhuqEonA51av01G359GolMBlL4kze8pRnAT7lcxuDpvY+e5b8 lHo2WMeP3MTzQMeqBWlf+G9zN8L34KXzOWLsb3I/bKhih+1ap7nor3wG0cOKNFVW cxK+Uh0zh5h5qPnagM5pGKSkFo9Xl/nOhyur1TxChOXyon6WXPAxqSa8EbiULEfO r7HW3bKI8gspsMYf16UM7wHBLvpy/3RLdMgobEtRYJSTwivqiZPdvi4Z6r/WERF8 zdfsQyTwKsG+xj0mbEWUQctbRXe4AX7ljzJhLvBynxOCj7C512ukor549fLNj+EJ -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:26 2026 by rpki-client