This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/XqVaeCjaPtQW5nTcWKYaszB243o.roa File: XqVaeCjaPtQW5nTcWKYaszB243o.roa (raw, json) Hash identifier: 0c77i33BA9sh6hWoaqI47xWtW3Ms9jVeqGWtj/letD0= Subject key identifier: 5E:A5:5A:78:28:DA:3E:D4:16:E6:74:DC:58:A6:1A:B3:30:76:E3:7A Certificate issuer: /CN=52bf21eeb36414b3280e6c33b0b57296b8f6b675 Certificate serial: 019B7F15AE9F8AC10C9BEA32E151CDC05862 Authority key identifier: 52:BF:21:EE:B3:64:14:B3:28:0E:6C:33:B0:B5:72:96:B8:F6:B6:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/XqVaeCjaPtQW5nTcWKYaszB243o.roa Signing time: Fri 02 Jan 2026 14:21:25 +0000 ROA not before: Fri 02 Jan 2026 14:21:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48775 IP address blocks: 91.197.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ae:9f:8a:c1:0c:9b:ea:32:e1:51:cd:c0:58:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52bf21eeb36414b3280e6c33b0b57296b8f6b675 Validity Not Before: Jan 2 14:21:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ea55a7828da3ed416e674dc58a61ab33076e37a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d9:ee:e4:72:63:c3:35:88:62:47:6c:5a:98: 33:5d:d7:4a:d8:b9:a4:67:0d:26:8f:cf:b0:af:f0: e6:f2:ff:ee:c2:4a:29:a1:9d:e0:8a:d4:39:83:2f: 1f:96:4c:22:fd:8b:83:a0:e2:9d:e8:5a:a2:b7:7e: 83:26:4f:5c:b3:b4:f6:e5:85:e2:bf:05:ab:5d:4d: a9:16:93:d4:af:54:e2:61:81:47:df:14:94:c4:d7: de:d3:e9:dd:be:38:d5:11:b7:02:e2:a5:45:0e:df: 44:d3:10:f6:93:7b:d3:3d:21:f9:b5:e4:1e:9b:3c: 7c:f2:5f:5f:cf:0d:a9:ef:b8:af:f9:4a:95:9b:4b: 98:59:54:48:ca:0d:47:5c:36:fe:46:d3:87:90:e9: 0d:d1:7b:8c:c6:d9:92:1b:02:8a:53:4d:bd:26:da: 87:b1:70:2d:e6:63:f7:59:72:f9:2a:eb:42:ab:cd: e6:91:20:f1:0c:5e:0e:ce:85:92:36:a5:6a:a4:5a: a4:27:4c:c7:93:1c:73:c7:4e:1d:25:98:f6:59:e1: eb:b7:94:5e:eb:8a:78:02:6b:b2:40:77:63:f4:d6: a4:b1:46:3d:bd:2f:50:6f:3a:56:7f:32:58:e0:c1: 1d:48:fb:22:81:61:30:f9:2a:0d:ac:35:1f:11:de: 7d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:A5:5A:78:28:DA:3E:D4:16:E6:74:DC:58:A6:1A:B3:30:76:E3:7A X509v3 Authority Key Identifier: keyid:52:BF:21:EE:B3:64:14:B3:28:0E:6C:33:B0:B5:72:96:B8:F6:B6:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/XqVaeCjaPtQW5nTcWKYaszB243o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.197.56.0/24 Signature Algorithm: sha256WithRSAEncryption 72:0d:9f:6e:8e:15:3a:3a:38:60:4a:ed:5f:5e:85:bb:2c:43: 0b:e0:a9:1a:c7:9e:59:14:e4:a9:9d:64:71:e3:39:64:c3:f7: 9a:9f:52:21:7d:9e:23:0f:02:70:9d:e7:64:43:1f:15:b8:82: cc:3c:7c:66:56:c0:f6:55:32:db:22:e1:f9:70:04:6c:b6:ea: 10:b3:c2:61:99:19:d1:6a:50:2f:69:6d:b2:09:60:25:39:c1: c2:c7:b9:fa:26:7c:f3:56:67:4b:bf:6e:80:33:26:0a:16:70: 72:37:40:21:81:97:74:25:49:28:85:98:49:15:aa:31:00:dd: 04:7f:4b:17:50:59:c1:1a:34:85:41:44:dc:ff:ea:12:31:7d: ad:a3:b2:ef:10:14:20:69:20:70:00:63:55:0b:b3:85:7a:32: 76:dc:ad:db:3e:97:57:72:30:86:da:19:9d:10:98:2a:61:7f: 3f:99:d8:49:d9:61:da:b3:c1:e1:fa:5b:32:37:e9:b3:28:7e: bd:cf:48:33:e1:91:3c:71:63:a5:bc:ff:05:80:7f:b3:3c:60: 3e:7d:9e:16:9a:dd:ad:b5:4d:29:49:ba:bb:ea:a9:35:0f:d3: 06:cc:0f:81:8c:fa:53:81:ee:71:11:ed:82:13:dd:c1:f6:f8: b3:80:95:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/Fa6fisEMm+oy4VHNwFhiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyYmYyMWVlYjM2NDE0YjMyODBlNmMzM2IwYjU3Mjk2Yjhm NmI2NzUwHhcNMjYwMTAyMTQyMTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZWE1NWE3ODI4ZGEzZWQ0MTZlNjc0ZGM1OGE2MWFiMzMwNzZlMzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9nu5HJjwzWIYkdsWpgzXddK2Lmk Zw0mj8+wr/Dm8v/uwkopoZ3gitQ5gy8flkwi/YuDoOKd6Fqit36DJk9cs7T25YXi vwWrXU2pFpPUr1TiYYFH3xSUxNfe0+ndvjjVEbcC4qVFDt9E0xD2k3vTPSH5teQe mzx88l9fzw2p77iv+UqVm0uYWVRIyg1HXDb+RtOHkOkN0XuMxtmSGwKKU029JtqH sXAt5mP3WXL5KutCq83mkSDxDF4OzoWSNqVqpFqkJ0zHkxxzx04dJZj2WeHrt5Re 64p4AmuyQHdj9NaksUY9vS9QbzpWfzJY4MEdSPsigWEw+SoNrDUfEd59dwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF6lWngo2j7UFuZ03FimGrMwduN6MB8GA1UdIwQY MBaAFFK/Ie6zZBSzKA5sM7C1cpa49rZ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXI4aDdyTmtGTE1vRG13enNMVnlscmoydG5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wNTk1NDMtNjllNC00OGY2LWExNzUt YWM5NmY2YWFiNDk0LzEvWHFWYWVDamFQdFFXNW5UY1dLWWFzekIyNDNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8wNTk1NDMtNjllNC00OGY2LWExNzUtYWM5NmY2YWFiNDk0 LzEvVXI4aDdyTmtGTE1vRG13enNMVnlscmoydG5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8U4MA0G CSqGSIb3DQEBCwUAA4IBAQByDZ9ujhU6OjhgSu1fXoW7LEML4Kkax55ZFOSpnWRx 4zlkw/ean1IhfZ4jDwJwnedkQx8VuILMPHxmVsD2VTLbIuH5cARstuoQs8JhmRnR alAvaW2yCWAlOcHCx7n6JnzzVmdLv26AMyYKFnByN0AhgZd0JUkohZhJFaoxAN0E f0sXUFnBGjSFQUTc/+oSMX2to7LvEBQgaSBwAGNVC7OFejJ23K3bPpdXcjCG2hmd EJgqYX8/mdhJ2WHas8Hh+lsyN+mzKH69z0gz4ZE8cWOlvP8FgH+zPGA+fZ4Wmt2t tU0pSbq76qk1D9MGzA+BjPpTge5xEe2CE93B9vizgJXi -----END CERTIFICATE-----Generated at Mon Feb 9 20:03:33 2026 by rpki-client