This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/X5xasRCAPW_8AqrOyyfOnavLV3w.roa File: X5xasRCAPW_8AqrOyyfOnavLV3w.roa (raw, json) Hash identifier: MKvIXTaUYcBmqhG/1QMaETUtrI13kI75foPOMSHT8WU= Subject key identifier: 5F:9C:5A:B1:10:80:3D:6F:FC:02:AA:CE:CB:27:CE:9D:AB:CB:57:7C Certificate issuer: /CN=e6f824e4bc5cd81886ec24b5e15266e95f8ddf93 Certificate serial: 019B7FF1ECB8205B52F99DB4C129B012C41C Authority key identifier: E6:F8:24:E4:BC:5C:D8:18:86:EC:24:B5:E1:52:66:E9:5F:8D:DF:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vgk5Lxc2BiG7CS14VJm6V-N35M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/X5xasRCAPW_8AqrOyyfOnavLV3w.roa Signing time: Fri 02 Jan 2026 18:21:59 +0000 ROA not before: Fri 02 Jan 2026 18:21:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197266 IP address blocks: 91.217.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.crl rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft rsync://rpki.ripe.net/repository/DEFAULT/5vgk5Lxc2BiG7CS14VJm6V-N35M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:ec:b8:20:5b:52:f9:9d:b4:c1:29:b0:12:c4:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6f824e4bc5cd81886ec24b5e15266e95f8ddf93 Validity Not Before: Jan 2 18:21:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f9c5ab110803d6ffc02aacecb27ce9dabcb577c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:23:44:85:7a:6e:45:41:5f:5c:45:33:cc:a1: a5:81:e3:1f:df:e6:ab:0b:7c:0e:83:e7:a9:bd:b0: bb:cb:3a:6e:2e:d6:6f:5a:62:d8:a2:67:35:3c:cf: 5c:6a:1c:a0:b5:1b:59:40:1d:0f:3c:d3:0b:20:34: 2f:a8:c8:f4:fb:dd:e2:cf:4f:56:14:91:db:c4:cb: 03:2c:51:1e:3c:3e:01:17:35:8c:97:3c:2b:e6:fb: aa:64:92:47:b1:26:f3:59:52:53:4d:04:ca:ad:b5: cb:40:93:62:61:ef:a6:23:1c:b5:bb:61:d8:94:dc: d8:9a:61:e1:e2:ef:48:00:72:6c:cc:3d:de:04:90: 0b:90:98:c9:7e:a1:c9:76:ba:2e:0a:8a:a3:70:f5: 12:c5:97:98:99:73:b4:82:ba:b2:26:22:7b:1f:8c: e3:b3:4f:e1:8b:38:42:fd:40:95:4a:d6:f3:a2:a8: 5f:b5:3c:94:c5:b7:55:86:2b:60:b9:8f:2c:2f:03: 40:7a:66:c7:d6:98:05:a8:f7:53:2d:d2:92:6b:76: c3:95:62:40:62:ee:91:86:8d:85:c5:d3:73:7d:7b: 20:1c:be:9d:16:93:48:77:a3:69:77:ce:6c:fb:64: d0:a8:fd:a1:81:e0:66:aa:f3:ae:d6:53:5d:ac:87: 2a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:9C:5A:B1:10:80:3D:6F:FC:02:AA:CE:CB:27:CE:9D:AB:CB:57:7C X509v3 Authority Key Identifier: keyid:E6:F8:24:E4:BC:5C:D8:18:86:EC:24:B5:E1:52:66:E9:5F:8D:DF:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vgk5Lxc2BiG7CS14VJm6V-N35M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/X5xasRCAPW_8AqrOyyfOnavLV3w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.222.0/24 Signature Algorithm: sha256WithRSAEncryption 28:04:50:e7:12:5a:33:56:35:ab:c2:71:b6:21:15:d2:b1:70: 08:9d:12:ed:fa:53:d1:44:38:96:dd:5e:5f:06:3e:79:68:94: 9c:8e:a4:f6:bc:8b:d7:bf:f7:4a:df:0d:91:5f:c1:10:af:e9: d1:c8:e2:96:84:a9:8e:49:d5:aa:1b:6c:f8:9a:ee:ed:17:cf: 3c:2c:04:bb:b4:dd:cc:8e:a0:8a:e8:33:3d:73:ee:0c:4b:bd: 5c:6d:3a:a7:80:b9:1f:5b:b6:fe:eb:09:7d:2c:9d:6c:df:0d: 6d:99:ae:3b:fa:5c:34:6e:ca:7f:d0:ab:5c:dd:5b:60:c0:05: 51:80:81:24:e4:6a:8b:4e:d1:40:ae:15:d3:35:7f:a3:73:b2: 54:7c:9a:a8:c7:c0:7d:52:c6:db:bd:a8:d4:c2:a5:a6:41:ab: 37:38:5b:6c:d9:75:57:81:5f:58:37:5f:8a:a1:7f:ed:1f:36: de:c2:af:a1:21:9f:4c:71:30:f0:cc:75:fe:b7:8a:ff:51:57: d5:03:3b:02:d2:c8:00:bc:f3:e2:8e:4b:36:f3:c1:2e:71:63: c1:99:b3:9d:45:be:0c:a8:ac:73:8a:f1:d7:a6:5e:4a:e5:ce: c4:ad:06:d0:ca:b9:6f:4d:74:9f:ea:0f:9a:92:b8:0f:79:20: 0a:5e:c4:89 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8ey4IFtS+Z20wSmwEsQcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2ZjgyNGU0YmM1Y2Q4MTg4NmVjMjRiNWUxNTI2NmU5NWY4 ZGRmOTMwHhcNMjYwMTAyMTgyMTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjljNWFiMTEwODAzZDZmZmMwMmFhY2VjYjI3Y2U5ZGFiY2I1NzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSNEhXpuRUFfXEUzzKGlgeMf3+ar C3wOg+epvbC7yzpuLtZvWmLYomc1PM9cahygtRtZQB0PPNMLIDQvqMj0+93iz09W FJHbxMsDLFEePD4BFzWMlzwr5vuqZJJHsSbzWVJTTQTKrbXLQJNiYe+mIxy1u2HY lNzYmmHh4u9IAHJszD3eBJALkJjJfqHJdrouCoqjcPUSxZeYmXO0grqyJiJ7H4zj s0/hizhC/UCVStbzoqhftTyUxbdVhitguY8sLwNAembH1pgFqPdTLdKSa3bDlWJA Yu6Rho2FxdNzfXsgHL6dFpNId6Npd85s+2TQqP2hgeBmqvOu1lNdrIcq4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF+cWrEQgD1v/AKqzssnzp2ry1d8MB8GA1UdIwQY MBaAFOb4JOS8XNgYhuwkteFSZulfjd+TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXZnazVMeGMyQmlHN0NTMTRWSm02Vi1OMzVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9hZDM3OTctMzM0Ni00NzhmLTllOWQt YTg5Zjk1OWJlMjA0LzEvWDV4YXNSQ0FQV184QXFyT3l5Zk9uYXZMVjN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9hZDM3OTctMzM0Ni00NzhmLTllOWQtYTg5Zjk1OWJlMjA0 LzEvNXZnazVMeGMyQmlHN0NTMTRWSm02Vi1OMzVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9neMA0G CSqGSIb3DQEBCwUAA4IBAQAoBFDnElozVjWrwnG2IRXSsXAInRLt+lPRRDiW3V5f Bj55aJScjqT2vIvXv/dK3w2RX8EQr+nRyOKWhKmOSdWqG2z4mu7tF888LAS7tN3M jqCK6DM9c+4MS71cbTqngLkfW7b+6wl9LJ1s3w1tma47+lw0bsp/0Ktc3VtgwAVR gIEk5GqLTtFArhXTNX+jc7JUfJqox8B9UsbbvajUwqWmQas3OFts2XVXgV9YN1+K oX/tHzbewq+hIZ9McTDwzHX+t4r/UVfVAzsC0sgAvPPijks288EucWPBmbOdRb4M qKxzivHXpl5K5c7ErQbQyrlvTXSf6g+akrgPeSAKXsSJ -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:16 2026 by rpki-client