This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/XkScNvH90ID41eeL1f4PQqE9fIo.roa File: XkScNvH90ID41eeL1f4PQqE9fIo.roa (raw, json) Hash identifier: O0IfwXUKgTdYCzkdsNlWzP2njTem9TfBGXZ1smPc3BA= Subject key identifier: 5E:44:9C:36:F1:FD:D0:80:F8:D5:E7:8B:D5:FE:0F:42:A1:3D:7C:8A Certificate issuer: /CN=254cc4ab5d48c5270d40e9fe50e72396deec5869 Certificate serial: 019B77C7060E791847A7807C2632C44C500C Authority key identifier: 25:4C:C4:AB:5D:48:C5:27:0D:40:E9:FE:50:E7:23:96:DE:EC:58:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/XkScNvH90ID41eeL1f4PQqE9fIo.roa Signing time: Thu 01 Jan 2026 04:18:10 +0000 ROA not before: Thu 01 Jan 2026 04:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56622 IP address blocks: 91.226.34.0/24 maxlen: 24 91.226.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.crl rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:06:0e:79:18:47:a7:80:7c:26:32:c4:4c:50:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=254cc4ab5d48c5270d40e9fe50e72396deec5869 Validity Not Before: Jan 1 04:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e449c36f1fdd080f8d5e78bd5fe0f42a13d7c8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:40:f0:ea:bc:94:f8:2f:3e:dd:56:af:4f:f4: 69:50:4e:ee:d9:da:91:bf:42:f8:41:d3:c6:2d:13: 8b:c1:45:74:bf:2d:e9:2c:b2:c7:fb:bf:63:c3:06: ce:77:3a:2d:52:1b:40:7b:cf:26:ef:97:f0:18:25: 21:ea:87:7d:c5:fc:16:58:30:45:c6:61:64:95:27: 9b:0e:99:9b:5f:be:8f:63:aa:6d:a1:c5:ed:ef:f0: 63:43:e8:df:71:9f:7d:1b:7c:f5:4c:9e:75:5b:3b: 56:ae:6f:9d:61:40:5c:b0:24:85:b9:3b:2f:84:29: fe:76:3f:50:0a:38:07:dd:50:15:48:5f:d4:39:4c: 08:6a:52:96:cf:97:5c:d2:da:b5:69:84:35:33:3c: 96:53:83:e6:ab:13:65:20:11:67:fb:3c:71:f9:f6: 5c:d5:d3:d6:7d:54:d2:7c:e6:a0:b9:68:7a:49:b3: 73:93:10:33:1c:96:5d:a9:48:94:0b:f1:87:8e:fa: 13:5e:35:9d:0d:9e:6f:e7:1c:7b:70:a3:38:0f:db: d0:82:d3:dc:e0:03:63:9e:02:23:57:49:6e:7c:b5: f9:7c:c2:cd:fd:cc:9e:07:b4:f4:91:34:63:87:7b: 41:1a:47:03:6d:ed:cc:7a:c5:68:56:e0:e5:a6:e0: 81:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:44:9C:36:F1:FD:D0:80:F8:D5:E7:8B:D5:FE:0F:42:A1:3D:7C:8A X509v3 Authority Key Identifier: keyid:25:4C:C4:AB:5D:48:C5:27:0D:40:E9:FE:50:E7:23:96:DE:EC:58:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/XkScNvH90ID41eeL1f4PQqE9fIo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.226.34.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:87:c5:e0:59:68:a3:a8:9b:1a:ed:15:ec:17:d4:87:4a:b5: de:ec:c4:7f:3d:05:1b:ca:df:c5:ed:c2:80:fd:ab:1b:67:df: 2d:d7:71:f6:a3:4b:25:41:22:ae:ca:62:ba:11:f1:25:46:b7: 4e:a5:ba:ca:1b:99:57:a6:0b:2d:8a:2e:8c:00:93:32:64:2f: 39:c8:fd:01:3b:e0:cb:7b:87:34:dd:82:c1:1e:e5:8c:22:85: 2a:39:b1:34:46:52:34:cd:6e:a7:e4:7a:02:34:95:a0:ba:e8: d9:c9:b4:29:03:4d:8a:58:52:b9:a6:cb:35:d8:68:2d:0d:e2: 8c:0a:f0:56:16:25:7e:10:19:ab:e3:18:b3:17:19:8e:61:91: c8:1b:c2:35:27:88:d0:b2:1b:78:ea:9e:dd:be:fd:53:14:ab: 6a:26:e6:c5:3d:09:57:d6:89:89:04:eb:45:bd:9f:bc:f7:33: 16:d5:a2:f0:f5:44:32:91:8b:f0:4a:13:e0:ba:da:10:62:cb: c6:d8:9e:1b:67:63:f0:05:b9:de:59:b2:00:c4:76:34:06:f8: 47:91:ad:07:e7:da:af:84:b0:09:5d:d9:e0:36:08:c7:8d:bd: 8a:30:65:b0:68:6e:7f:eb:d5:e7:81:80:ce:6f:a3:a7:c4:9e: c4:aa:3a:f0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xwYOeRhHp4B8JjLETFAMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NGNjNGFiNWQ0OGM1MjcwZDQwZTlmZTUwZTcyMzk2ZGVl YzU4NjkwHhcNMjYwMTAxMDQxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTQ0OWMzNmYxZmRkMDgwZjhkNWU3OGJkNWZlMGY0MmExM2Q3YzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUDw6ryU+C8+3VavT/RpUE7u2dqR v0L4QdPGLROLwUV0vy3pLLLH+79jwwbOdzotUhtAe88m75fwGCUh6od9xfwWWDBF xmFklSebDpmbX76PY6ptocXt7/BjQ+jfcZ99G3z1TJ51WztWrm+dYUBcsCSFuTsv hCn+dj9QCjgH3VAVSF/UOUwIalKWz5dc0tq1aYQ1MzyWU4PmqxNlIBFn+zxx+fZc 1dPWfVTSfOaguWh6SbNzkxAzHJZdqUiUC/GHjvoTXjWdDZ5v5xx7cKM4D9vQgtPc 4ANjngIjV0lufLX5fMLN/cyeB7T0kTRjh3tBGkcDbe3MesVoVuDlpuCBZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF5EnDbx/dCA+NXni9X+D0KhPXyKMB8GA1UdIwQY MBaAFCVMxKtdSMUnDUDp/lDnI5be7FhpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlV6RXExMUl4U2NOUU9uLVVPY2psdDdzV0drLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy82OWY4ZmMtNTE3NS00ZmIzLWFhYWYt NjM3Y2ZkNzJiYWYwLzEvWGtTY052SDkwSUQ0MWVlTDFmNFBRcUU5ZklvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy82OWY4ZmMtNTE3NS00ZmIzLWFhYWYtNjM3Y2ZkNzJiYWYw LzEvSlV6RXExMUl4U2NOUU9uLVVPY2psdDdzV0drLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+IiMA0G CSqGSIb3DQEBCwUAA4IBAQAqh8XgWWijqJsa7RXsF9SHSrXe7MR/PQUbyt/F7cKA /asbZ98t13H2o0slQSKuymK6EfElRrdOpbrKG5lXpgstii6MAJMyZC85yP0BO+DL e4c03YLBHuWMIoUqObE0RlI0zW6n5HoCNJWguujZybQpA02KWFK5pss12GgtDeKM CvBWFiV+EBmr4xizFxmOYZHIG8I1J4jQsht46p7dvv1TFKtqJubFPQlX1omJBOtF vZ+89zMW1aLw9UQykYvwShPgutoQYsvG2J4bZ2PwBbneWbIAxHY0BvhHka0H59qv hLAJXdngNgjHjb2KMGWwaG5/69XngYDOb6OnxJ7Eqjrw -----END CERTIFICATE-----Generated at Mon Feb 9 23:41:47 2026 by rpki-client