This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/6ffb9c-7d44-4cf7-84ed-2f4aa45cb5ec/1/xNch41BpbIQQVdqmlC2pFNDEh54.roa File: xNch41BpbIQQVdqmlC2pFNDEh54.roa (raw, json) Hash identifier: kpaSflZxbJkkkw1acyRiBoQFA2z+rt2NA71T9bvArw0= Subject key identifier: C4:D7:21:E3:50:69:6C:84:10:55:DA:A6:94:2D:A9:14:D0:C4:87:9E Certificate issuer: /CN=98f388bfa665bb8467fd5cdcd2c3327ec7f27fec Certificate serial: 019B79103CE604A988CDF7C8B92BBDE0F753 Authority key identifier: 98:F3:88:BF:A6:65:BB:84:67:FD:5C:DC:D2:C3:32:7E:C7:F2:7F:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/6ffb9c-7d44-4cf7-84ed-2f4aa45cb5ec/1/xNch41BpbIQQVdqmlC2pFNDEh54.roa Signing time: Thu 01 Jan 2026 10:17:45 +0000 ROA not before: Thu 01 Jan 2026 10:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43587 IP address blocks: 91.195.62.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/6ffb9c-7d44-4cf7-84ed-2f4aa45cb5ec/1/mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/6ffb9c-7d44-4cf7-84ed-2f4aa45cb5ec/1/mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.mft rsync://rpki.ripe.net/repository/DEFAULT/mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:3c:e6:04:a9:88:cd:f7:c8:b9:2b:bd:e0:f7:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98f388bfa665bb8467fd5cdcd2c3327ec7f27fec Validity Not Before: Jan 1 10:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4d721e350696c841055daa6942da914d0c4879e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:4d:af:0e:01:2a:27:69:32:81:39:be:da:59: 94:33:54:a9:de:d1:40:b2:15:10:d3:54:9f:a2:c9: 71:21:28:82:a9:52:e8:21:88:9e:f5:3d:c9:04:87: 11:6a:1e:5b:11:a8:75:23:ba:0c:8a:5b:a0:a7:2f: 5a:9f:ce:f8:0f:17:94:a5:3f:b0:d8:46:a7:32:2b: 6b:18:f9:76:ba:9b:63:ac:e4:52:cf:9a:0d:0c:ab: 1a:18:13:af:b6:d3:c5:f1:c7:ab:4a:9d:72:19:48: c1:f6:43:34:33:42:b2:e5:06:14:43:ce:fb:c3:ec: c0:17:c8:1c:ef:11:4e:da:de:c9:ff:bf:55:b2:04: d7:ff:81:09:6e:cb:cf:bf:22:ac:d9:15:60:79:25: b0:dd:df:63:a5:2c:71:9e:aa:36:f5:9c:18:07:2f: 26:fb:fa:84:1b:88:4a:60:2c:e3:6b:31:2d:4e:9b: 14:49:e3:d6:ba:93:52:42:37:7e:f9:35:fe:93:2a: 6c:b3:c2:05:05:aa:be:20:b4:57:d4:c1:46:70:0b: c8:f6:5a:6b:8f:2c:6b:ed:4c:08:9e:31:d8:81:4b: 4d:16:a4:db:8c:3c:53:b6:80:4c:64:72:18:e3:93: 2c:1a:0a:97:d2:ca:09:38:70:c6:be:1f:10:78:e4: ab:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D7:21:E3:50:69:6C:84:10:55:DA:A6:94:2D:A9:14:D0:C4:87:9E X509v3 Authority Key Identifier: keyid:98:F3:88:BF:A6:65:BB:84:67:FD:5C:DC:D2:C3:32:7E:C7:F2:7F:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6ffb9c-7d44-4cf7-84ed-2f4aa45cb5ec/1/xNch41BpbIQQVdqmlC2pFNDEh54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6ffb9c-7d44-4cf7-84ed-2f4aa45cb5ec/1/mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.195.62.0/23 Signature Algorithm: sha256WithRSAEncryption 4f:f7:7a:e8:21:cc:5d:bd:c2:ff:4c:5d:12:59:6d:c4:cd:92: 2b:d1:e3:84:4a:56:87:a2:8c:c3:32:91:04:4f:29:29:98:61: e5:65:d6:52:e3:db:d6:49:3e:9d:48:33:bf:59:07:47:ef:9e: a2:4e:8b:99:a3:21:35:ad:71:68:47:b2:42:c8:e4:69:8e:d3: 6a:34:04:b0:97:cb:72:55:4b:d2:09:48:8e:0c:8c:45:53:99: ac:18:df:0b:83:a9:f9:b8:14:58:b2:39:d8:78:bf:1b:f3:3b: 65:91:40:23:e9:0f:12:06:21:b5:0e:87:fe:95:ec:5c:14:3d: 9a:6e:20:6f:f4:5e:2d:cc:c7:c3:9c:53:34:a1:a3:95:79:5c: a0:35:08:cf:e1:b4:b0:50:09:5b:0b:f7:ce:b7:5f:c9:5b:9b: 9b:1b:5d:75:8e:a6:2b:a3:1e:41:aa:2d:30:c4:d7:c7:89:5a: f8:b4:56:5f:82:32:31:d4:6b:a9:8a:e8:45:ee:3c:74:05:d8: c4:c0:b6:bc:fb:ce:1f:9e:6d:50:f6:cf:c5:0d:fa:6c:e8:79: 94:b8:3f:29:5c:45:d2:ed:37:1b:07:57:4a:f0:72:46:09:fc: 17:14:87:51:13:7a:7c:0b:f1:20:a9:be:24:43:b3:c1:a8:bd: ef:48:ae:a6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EDzmBKmIzffIuSu94PdTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4ZjM4OGJmYTY2NWJiODQ2N2ZkNWNkY2QyYzMzMjdlYzdm MjdmZWMwHhcNMjYwMTAxMTAxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNGQ3MjFlMzUwNjk2Yzg0MTA1NWRhYTY5NDJkYTkxNGQwYzQ4NzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjU2vDgEqJ2kygTm+2lmUM1Sp3tFA shUQ01SfoslxISiCqVLoIYie9T3JBIcRah5bEah1I7oMilugpy9an874DxeUpT+w 2EanMitrGPl2uptjrORSz5oNDKsaGBOvttPF8cerSp1yGUjB9kM0M0Ky5QYUQ877 w+zAF8gc7xFO2t7J/79VsgTX/4EJbsvPvyKs2RVgeSWw3d9jpSxxnqo29ZwYBy8m +/qEG4hKYCzjazEtTpsUSePWupNSQjd++TX+kypss8IFBaq+ILRX1MFGcAvI9lpr jyxr7UwInjHYgUtNFqTbjDxTtoBMZHIY45MsGgqX0soJOHDGvh8QeOSrsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMTXIeNQaWyEEFXappQtqRTQxIeeMB8GA1UdIwQY MBaAFJjziL+mZbuEZ/1c3NLDMn7H8n/sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVBPSXY2Wmx1NFJuX1Z6YzBzTXlmc2Z5Zi13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS82ZmZiOWMtN2Q0NC00Y2Y3LTg0ZWQt MmY0YWE0NWNiNWVjLzEveE5jaDQxQnBiSVFRVmRxbWxDMnBGTkRFaDU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS82ZmZiOWMtN2Q0NC00Y2Y3LTg0ZWQtMmY0YWE0NWNiNWVj LzEvbVBPSXY2Wmx1NFJuX1Z6YzBzTXlmc2Z5Zi13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW8M+MA0G CSqGSIb3DQEBCwUAA4IBAQBP93roIcxdvcL/TF0SWW3EzZIr0eOESlaHoozDMpEE TykpmGHlZdZS49vWST6dSDO/WQdH756iTouZoyE1rXFoR7JCyORpjtNqNASwl8ty VUvSCUiODIxFU5msGN8Lg6n5uBRYsjnYeL8b8ztlkUAj6Q8SBiG1Dof+lexcFD2a biBv9F4tzMfDnFM0oaOVeVygNQjP4bSwUAlbC/fOt1/JW5ubG111jqYrox5Bqi0w xNfHiVr4tFZfgjIx1GupiuhF7jx0BdjEwLa8+84fnm1Q9s/FDfps6HmUuD8pXEXS 7TcbB1dK8HJGCfwXFIdRE3p8C/Egqb4kQ7PBqL3vSK6m -----END CERTIFICATE-----Generated at Mon Feb 9 23:41:44 2026 by rpki-client