This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/X_J4w6_X_Fc-iGZp9qhcmov1r-k.roa File: X_J4w6_X_Fc-iGZp9qhcmov1r-k.roa (raw, json) Hash identifier: wdUUJzFq+3Kuv79W4aMn2m3nNN36x62gheVm8ofkEhk= Subject key identifier: 5F:F2:78:C3:AF:D7:FC:57:3E:88:66:69:F6:A8:5C:9A:8B:F5:AF:E9 Certificate issuer: /CN=79a295c80b54c2dbe77ba47de7daec6b986021b4 Certificate serial: 019B7DCA7465D8C87E55B16388E6D0DE3ECA Authority key identifier: 79:A2:95:C8:0B:54:C2:DB:E7:7B:A4:7D:E7:DA:EC:6B:98:60:21:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaKVyAtUwtvne6R959rsa5hgIbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/X_J4w6_X_Fc-iGZp9qhcmov1r-k.roa Signing time: Fri 02 Jan 2026 08:19:38 +0000 ROA not before: Fri 02 Jan 2026 08:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43858 IP address blocks: 91.234.236.0/24 maxlen: 24 185.103.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/eaKVyAtUwtvne6R959rsa5hgIbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:74:65:d8:c8:7e:55:b1:63:88:e6:d0:de:3e:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79a295c80b54c2dbe77ba47de7daec6b986021b4 Validity Not Before: Jan 2 08:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ff278c3afd7fc573e886669f6a85c9a8bf5afe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f3:5a:33:41:8c:45:c2:90:4e:25:a7:91:f3: 7e:88:ec:59:e9:85:1d:82:43:56:2f:08:cd:35:ca: b0:9e:29:9d:13:0a:a3:69:9b:71:24:48:03:a2:28: a3:f2:2d:6a:f5:a9:58:ef:1f:60:7e:35:59:f8:32: 67:8b:4c:2f:9f:c3:87:8c:77:b7:49:fb:8c:05:54: 33:45:a2:50:64:af:13:58:21:df:6f:48:8a:00:8e: 77:29:cb:c9:98:6b:a4:e9:8e:ac:b1:7f:59:a0:56: 64:17:87:07:6a:28:1e:28:16:e9:3d:76:64:d3:a6: 50:45:1c:31:81:a8:a0:7f:7e:1b:1b:17:37:67:ae: c3:42:5d:64:b4:f9:8d:e9:bb:78:59:cd:01:f4:e8: df:92:1c:c0:8a:01:e1:7a:22:b7:07:46:66:f3:e6: 0d:77:65:79:d9:5e:a1:2d:af:50:ee:c8:b6:d6:b8: cc:b4:29:95:57:a0:c1:8d:86:d7:d0:4c:06:a8:d5: 5c:2c:76:2c:ba:4e:60:f0:33:43:4b:be:2c:ab:b8: f9:da:37:e5:66:8f:17:ae:63:b0:cd:21:ce:f2:30: b4:92:e2:15:ed:8d:db:16:b5:5c:8e:ae:3e:27:a0: 76:51:5e:f8:95:10:c3:a8:0e:fd:77:60:45:5b:3c: d9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F2:78:C3:AF:D7:FC:57:3E:88:66:69:F6:A8:5C:9A:8B:F5:AF:E9 X509v3 Authority Key Identifier: keyid:79:A2:95:C8:0B:54:C2:DB:E7:7B:A4:7D:E7:DA:EC:6B:98:60:21:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaKVyAtUwtvne6R959rsa5hgIbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/X_J4w6_X_Fc-iGZp9qhcmov1r-k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.234.236.0/24 185.103.118.0/24 Signature Algorithm: sha256WithRSAEncryption 15:45:ef:2f:1e:4d:dd:d9:c2:9d:2a:2b:ad:1e:86:d6:d8:08: 68:39:f1:6b:d7:68:a9:fc:3d:1f:41:95:fa:17:ab:72:04:d8: 5c:e6:3e:83:d3:68:82:c7:18:78:d5:80:88:91:11:49:c6:2e: 7c:48:72:89:b0:4f:4d:ca:3a:df:e0:07:6d:b0:6b:e4:87:80: b5:33:4e:6f:8d:14:4e:7b:b9:23:02:c5:47:7e:d3:dc:26:c2: db:ec:40:2a:1d:b9:ac:1e:1e:56:b2:79:72:a6:95:f5:2d:37: 3e:62:92:36:6c:93:09:c3:b8:1a:cb:3f:cf:45:f6:ef:d6:2c: 40:96:8f:7a:8d:37:5d:a2:4f:ea:c7:1d:34:72:69:b8:db:11: 6e:0b:89:39:78:0c:fd:1d:12:f5:a5:d9:b3:ce:49:30:f3:32: 91:ca:00:e4:8b:b0:7f:64:e9:c8:da:08:f4:e3:a3:06:ce:73: 87:71:74:c5:11:e6:05:9b:d5:c8:0d:20:c7:99:5d:c9:db:7d: d7:94:fe:d3:42:95:d4:95:e2:fc:28:d1:96:9d:f9:e1:3b:97: c7:ef:70:5d:61:77:e2:93:88:80:20:83:6c:b8:98:1e:6e:48: 33:2e:f6:b5:47:0a:4e:d1:97:be:cf:d4:37:ec:c7:4c:20:bb: 30:5b:0b:bf -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9ynRl2Mh+VbFjiObQ3j7KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5YTI5NWM4MGI1NGMyZGJlNzdiYTQ3ZGU3ZGFlYzZiOTg2 MDIxYjQwHhcNMjYwMTAyMDgxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmYyNzhjM2FmZDdmYzU3M2U4ODY2NjlmNmE4NWM5YThiZjVhZmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/NaM0GMRcKQTiWnkfN+iOxZ6YUd gkNWLwjNNcqwnimdEwqjaZtxJEgDoiij8i1q9alY7x9gfjVZ+DJni0wvn8OHjHe3 SfuMBVQzRaJQZK8TWCHfb0iKAI53KcvJmGuk6Y6ssX9ZoFZkF4cHaigeKBbpPXZk 06ZQRRwxgaigf34bGxc3Z67DQl1ktPmN6bt4Wc0B9OjfkhzAigHheiK3B0Zm8+YN d2V52V6hLa9Q7si21rjMtCmVV6DBjYbX0EwGqNVcLHYsuk5g8DNDS74sq7j52jfl Zo8XrmOwzSHO8jC0kuIV7Y3bFrVcjq4+J6B2UV74lRDDqA79d2BFWzzZnQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFF/yeMOv1/xXPohmafaoXJqL9a/pMB8GA1UdIwQY MBaAFHmilcgLVMLb53ukfefa7GuYYCG0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWFLVnlBdFV3dHZuZTZSOTU5cnNhNWhnSWJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9kMWRhNmEtNDkxOS00OTlhLTlhNDEt MmJiYjQ4ZWZiMGVkLzEvWF9KNHc2X1hfRmMtaUdacDlxaGNtb3Yxci1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9kMWRhNmEtNDkxOS00OTlhLTlhNDEtMmJiYjQ4ZWZiMGVk LzEvZWFLVnlBdFV3dHZuZTZSOTU5cnNhNWhnSWJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+rsAwQA uWd2MA0GCSqGSIb3DQEBCwUAA4IBAQAVRe8vHk3d2cKdKiutHobW2AhoOfFr12ip /D0fQZX6F6tyBNhc5j6D02iCxxh41YCIkRFJxi58SHKJsE9Nyjrf4AdtsGvkh4C1 M05vjRROe7kjAsVHftPcJsLb7EAqHbmsHh5WsnlyppX1LTc+YpI2bJMJw7gayz/P Rfbv1ixAlo96jTddok/qxx00cmm42xFuC4k5eAz9HRL1pdmzzkkw8zKRygDki7B/ ZOnI2gj046MGznOHcXTFEeYFm9XIDSDHmV3J233XlP7TQpXUleL8KNGWnfnhO5fH 73BdYXfik4iAIINsuJgebkgzLva1RwpO0Ze+z9Q37MdMILswWwu/ -----END CERTIFICATE-----Generated at Mon Feb 9 22:23:31 2026 by rpki-client