This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/xuhDpHE2bnYdJOoJ6yInvIa6YrE.roa File: xuhDpHE2bnYdJOoJ6yInvIa6YrE.roa (raw, json) Hash identifier: ohBVT4HyJLZk/hzU7rkg4mhr642F6fJ3Kl5PbeKWAPM= Subject key identifier: C6:E8:43:A4:71:36:6E:76:1D:24:EA:09:EB:22:27:BC:86:BA:62:B1 Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566 Certificate serial: 019B7D5C97D4F44F2BBAD203C430BAA8977B Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/xuhDpHE2bnYdJOoJ6yInvIa6YrE.roa Signing time: Fri 02 Jan 2026 06:19:38 +0000 ROA not before: Fri 02 Jan 2026 06:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48126 IP address blocks: 91.229.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:97:d4:f4:4f:2b:ba:d2:03:c4:30:ba:a8:97:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566 Validity Not Before: Jan 2 06:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6e843a471366e761d24ea09eb2227bc86ba62b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:dd:32:33:38:00:7e:50:de:1c:b8:0f:d8:56: 32:2b:58:65:fa:1a:67:ca:d1:43:c0:83:f6:11:cb: b6:c7:ca:cc:15:fe:f2:e8:1e:32:1f:1d:b2:36:cb: 67:4e:61:d8:da:b9:5f:fa:ae:12:9b:c4:6c:f2:1b: 65:04:74:e4:0a:a4:bb:55:d0:de:cc:a4:47:27:e0: cb:73:2c:a7:d2:c4:aa:88:05:90:9a:fe:35:e2:c7: 15:88:41:d9:44:9e:e7:2b:34:1d:cf:71:0a:f7:f8: fb:03:99:84:34:f4:de:b1:17:6b:df:2b:55:61:ff: 6b:84:46:c7:6a:bd:e9:08:d4:c9:60:fb:00:1d:21: 45:ac:e8:fd:f4:85:0f:da:d2:6f:34:02:38:62:26: d9:56:9c:6e:d7:6d:6b:1b:ba:47:fb:1c:e1:56:8b: 34:20:09:bd:3f:b9:be:23:e5:28:bf:5a:85:e1:0a: 95:02:1c:0a:89:eb:c6:18:2b:93:63:d8:76:e2:d5: f1:c8:d3:bf:a9:7c:c4:73:2f:dc:aa:a2:43:51:d0: 21:0c:df:41:40:97:2f:6f:f6:d9:a1:e2:b5:91:82: 0f:48:c8:0f:d0:7f:0a:1d:44:a4:80:b3:59:cb:f6: 26:a0:98:7c:12:be:9e:15:dd:37:23:f7:12:9b:94: 91:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E8:43:A4:71:36:6E:76:1D:24:EA:09:EB:22:27:BC:86:BA:62:B1 X509v3 Authority Key Identifier: keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/xuhDpHE2bnYdJOoJ6yInvIa6YrE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.229.248.0/24 Signature Algorithm: sha256WithRSAEncryption 11:76:59:9e:b9:71:a1:74:e6:ed:0f:66:e8:da:8c:5c:b0:fe: 5d:aa:ee:de:fb:12:7a:6a:f2:da:48:53:be:d6:8b:57:0c:f3: 91:7c:4d:a7:c4:94:d7:42:d8:0f:cd:bb:78:5b:24:ae:11:d7: 35:04:8e:65:66:d3:ad:87:ef:4a:60:c8:5f:4e:66:4e:c0:15: da:32:fe:a7:88:e9:79:cb:d6:c2:7d:9c:90:0b:2d:ea:0f:ef: 7c:ae:a5:21:4c:88:6a:aa:40:3c:43:f0:b4:c3:84:83:d7:ad: ed:5a:5c:f9:a4:70:a2:11:fa:30:82:0d:a0:ea:6c:b1:e9:83: 3c:79:33:05:d3:d8:3e:3e:a2:82:b4:ed:5d:4c:32:a5:ef:60: be:b9:26:bd:86:ec:8b:0b:39:d1:3f:c2:95:7c:05:96:10:60: 03:6d:fa:e5:c6:4b:d9:e6:a7:75:62:b7:ca:41:0d:fb:e1:7f: 25:63:c5:72:15:79:37:9a:23:27:4d:ce:cd:b6:40:03:ad:e1: d5:12:1b:85:c0:77:f5:7a:bc:dc:ad:e1:69:28:07:96:2e:d6: 06:37:e2:63:1d:91:e8:e6:1e:0a:04:d2:60:40:2b:82:1b:e1: e6:0f:db:bb:9e:22:f6:8d:95:94:1d:c9:d8:0e:03:bf:4d:9f: e3:f5:24:cb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XJfU9E8rutIDxDC6qJd7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMjY0N2M4MDFmYjU4ZmNmYWFjMTM1YmI0OGY1ZTYxZmVh N2U1NjYwHhcNMjYwMTAyMDYxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmU4NDNhNDcxMzY2ZTc2MWQyNGVhMDllYjIyMjdiYzg2YmE2MmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6N0yMzgAflDeHLgP2FYyK1hl+hpn ytFDwIP2Ecu2x8rMFf7y6B4yHx2yNstnTmHY2rlf+q4Sm8Rs8htlBHTkCqS7VdDe zKRHJ+DLcyyn0sSqiAWQmv414scViEHZRJ7nKzQdz3EK9/j7A5mENPTesRdr3ytV Yf9rhEbHar3pCNTJYPsAHSFFrOj99IUP2tJvNAI4YibZVpxu121rG7pH+xzhVos0 IAm9P7m+I+Uov1qF4QqVAhwKievGGCuTY9h24tXxyNO/qXzEcy/cqqJDUdAhDN9B QJcvb/bZoeK1kYIPSMgP0H8KHUSkgLNZy/YmoJh8Er6eFd03I/cSm5SRUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMboQ6RxNm52HSTqCesiJ7yGumKxMB8GA1UdIwQY MBaAFAAmR8gB+1j8+qwTW7SPXmH+p+VmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODIt OTRlZmJmNWNlY2Q0LzEveHVoRHBIRTJibllkSk9vSjZ5SW52SWE2WXJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODItOTRlZmJmNWNlY2Q0 LzEvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+X4MA0G CSqGSIb3DQEBCwUAA4IBAQARdlmeuXGhdObtD2bo2oxcsP5dqu7e+xJ6avLaSFO+ 1otXDPORfE2nxJTXQtgPzbt4WySuEdc1BI5lZtOth+9KYMhfTmZOwBXaMv6niOl5 y9bCfZyQCy3qD+98rqUhTIhqqkA8Q/C0w4SD163tWlz5pHCiEfowgg2g6myx6YM8 eTMF09g+PqKCtO1dTDKl72C+uSa9huyLCznRP8KVfAWWEGADbfrlxkvZ5qd1YrfK QQ374X8lY8VyFXk3miMnTc7NtkADreHVEhuFwHf1erzcreFpKAeWLtYGN+JjHZHo 5h4KBNJgQCuCG+HmD9u7niL2jZWUHcnYDgO/TZ/j9STL -----END CERTIFICATE-----Generated at Mon Jan 26 15:00:28 2026 by rpki-client