This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/xs2nJzo3Rk58Z2BcwamLcHEwnDA.roa File: xs2nJzo3Rk58Z2BcwamLcHEwnDA.roa (raw, json) Hash identifier: ZJ+YcdwxYrTOk2uKzIqFnqUJ/TPq1N6JkOSkhw/1KeQ= Subject key identifier: C6:CD:A7:27:3A:37:46:4E:7C:67:60:5C:C1:A9:8B:70:71:30:9C:30 Certificate issuer: /CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d Certificate serial: 019B7C11F4F29B5560B0DF060CAD3CA4AF3B Authority key identifier: 39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/xs2nJzo3Rk58Z2BcwamLcHEwnDA.roa Signing time: Fri 02 Jan 2026 00:18:30 +0000 ROA not before: Fri 02 Jan 2026 00:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33915 IP address blocks: 91.105.216.0/24 maxlen: 24 91.105.217.0/24 maxlen: 24 91.105.218.0/23 maxlen: 23 91.105.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:f4:f2:9b:55:60:b0:df:06:0c:ad:3c:a4:af:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d Validity Not Before: Jan 2 00:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6cda7273a37464e7c67605cc1a98b7071309c30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:bf:8e:75:93:66:72:4c:93:ec:55:5e:bd:75: 64:7f:8c:ad:5e:14:4a:17:ef:ea:14:a3:92:80:dc: b4:fe:29:c2:ff:35:dd:04:03:9d:79:33:0b:d2:6d: a5:d5:c2:e3:c5:54:cc:de:9f:72:c5:72:13:0f:6c: 15:d1:d7:e9:db:6c:e4:a6:79:3b:b1:0e:7a:ba:46: fd:d8:62:7f:f6:1d:75:09:5d:c3:30:ae:78:71:38: 1a:77:f1:9c:40:d9:c1:b8:1f:99:9f:48:0e:de:0a: b1:5b:f4:24:28:c1:fe:65:f8:09:58:1f:bb:25:4b: 43:f5:25:78:dd:79:ea:2b:55:6a:67:f5:8d:51:22: 8e:98:38:5d:56:31:cb:45:c6:42:97:9f:a8:a1:7c: 6c:f5:72:0d:76:71:82:00:ce:e7:99:05:07:bc:e9: 5d:49:c7:5a:2d:08:af:e0:1c:7e:34:c4:9d:79:7e: 42:84:ae:b7:b0:bf:bc:bd:f9:ed:9d:72:ad:9e:65: ee:66:de:7e:85:02:eb:a5:21:ac:dc:71:6e:a9:64: 7f:92:83:79:06:13:a8:32:67:f2:e1:cb:28:61:cd: b7:77:9f:ae:47:c9:af:a1:11:99:f8:8c:2f:0b:1c: c1:d7:44:bc:a0:64:b1:d9:59:f5:f6:11:5e:df:1c: 93:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:CD:A7:27:3A:37:46:4E:7C:67:60:5C:C1:A9:8B:70:71:30:9C:30 X509v3 Authority Key Identifier: keyid:39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/xs2nJzo3Rk58Z2BcwamLcHEwnDA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.105.216.0/21 Signature Algorithm: sha256WithRSAEncryption 10:ba:ed:ec:e1:32:94:29:66:6d:29:a6:3b:a7:dc:e5:1a:a2: 25:20:62:8c:90:ff:cf:cc:7f:d0:68:f0:4f:82:18:f5:7a:05: d7:cd:7c:4a:7f:04:ff:49:6a:89:32:bb:52:be:a3:a2:27:28: b4:41:ba:9e:cc:b8:66:54:ff:50:6f:01:6e:7d:ca:96:13:d8: c6:1c:a1:ef:3a:f8:75:54:bc:29:23:c9:ff:b6:88:f0:06:af: 02:3a:fb:b4:8a:f0:7f:20:c7:cc:67:f8:e1:af:d9:7c:49:da: d1:5e:08:d7:83:ca:6e:d4:a9:8d:b3:8f:8f:32:46:0b:82:50: 47:15:d5:c6:3e:74:b9:93:db:49:ef:c2:46:48:20:d8:2b:06: 74:10:3f:04:a4:97:71:29:56:6b:bc:62:73:35:bb:ee:2c:7b: 18:76:4d:a8:4d:1a:9a:a5:7e:24:f6:84:2c:40:91:f0:31:2c: e7:2a:e7:d1:b1:73:72:c1:c1:e3:7e:6d:e5:b7:44:13:be:87: a0:c9:80:35:7c:a7:37:ad:c3:77:b3:dc:89:49:c0:a6:b5:cf: 33:9e:00:2f:89:53:b5:65:ea:89:81:cc:8d:b2:36:78:c4:a0: e7:0e:2f:0a:d4:01:19:5e:2b:70:48:83:7e:00:73:3b:04:51: 9f:32:2f:ba -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EfTym1VgsN8GDK08pK87MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5ZGRhMGEwMDk1MzAzYTkxZjM4ZTQzYWI0ZDM3YjYxOWMz YmVhMWQwHhcNMjYwMTAyMDAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmNkYTcyNzNhMzc0NjRlN2M2NzYwNWNjMWE5OGI3MDcxMzA5YzMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxr+OdZNmckyT7FVevXVkf4ytXhRK F+/qFKOSgNy0/inC/zXdBAOdeTML0m2l1cLjxVTM3p9yxXITD2wV0dfp22zkpnk7 sQ56ukb92GJ/9h11CV3DMK54cTgad/GcQNnBuB+Zn0gO3gqxW/QkKMH+ZfgJWB+7 JUtD9SV43XnqK1VqZ/WNUSKOmDhdVjHLRcZCl5+ooXxs9XINdnGCAM7nmQUHvOld ScdaLQiv4Bx+NMSdeX5ChK63sL+8vfntnXKtnmXuZt5+hQLrpSGs3HFuqWR/koN5 BhOoMmfy4csoYc23d5+uR8mvoRGZ+IwvCxzB10S8oGSx2Vn19hFe3xyTSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMbNpyc6N0ZOfGdgXMGpi3BxMJwwMB8GA1UdIwQY MBaAFDndoKAJUwOpHzjkOrTTe2GcO+odMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2QyZ29BbFRBNmtmT09RNnROTjdZWnc3NmgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84OTc4NzYtZGE3Mi00MGJjLThkNWMt N2NhOWI4ZTkxYWM3LzEveHMybkp6bzNSazU4WjJCY3dhbUxjSEV3bkRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy84OTc4NzYtZGE3Mi00MGJjLThkNWMtN2NhOWI4ZTkxYWM3 LzEvT2QyZ29BbFRBNmtmT09RNnROTjdZWnc3NmgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDW2nYMA0G CSqGSIb3DQEBCwUAA4IBAQAQuu3s4TKUKWZtKaY7p9zlGqIlIGKMkP/PzH/QaPBP ghj1egXXzXxKfwT/SWqJMrtSvqOiJyi0QbqezLhmVP9QbwFufcqWE9jGHKHvOvh1 VLwpI8n/tojwBq8COvu0ivB/IMfMZ/jhr9l8SdrRXgjXg8pu1KmNs4+PMkYLglBH FdXGPnS5k9tJ78JGSCDYKwZ0ED8EpJdxKVZrvGJzNbvuLHsYdk2oTRqapX4k9oQs QJHwMSznKufRsXNywcHjfm3lt0QTvoegyYA1fKc3rcN3s9yJScCmtc8zngAviVO1 ZeqJgcyNsjZ4xKDnDi8K1AEZXitwSIN+AHM7BFGfMi+6 -----END CERTIFICATE-----Generated at Tue Jan 27 00:26:54 2026 by rpki-client