This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/XzwU4Nt3DyHSw6KO9lVt3ep-ckE.roa File: XzwU4Nt3DyHSw6KO9lVt3ep-ckE.roa (raw, json) Hash identifier: 2zcUa6/uZ9h1BQ8NTIwTXh/uRxlqRKYmG36Q/hQFxug= Subject key identifier: 5F:3C:14:E0:DB:77:0F:21:D2:C3:A2:8E:F6:55:6D:DD:EA:7E:72:41 Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Certificate serial: 019B7F85316BEB70548B8E5CA81F7003FBB3 Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/XzwU4Nt3DyHSw6KO9lVt3ep-ckE.roa Signing time: Fri 02 Jan 2026 16:23:13 +0000 ROA not before: Fri 02 Jan 2026 16:23:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6461 IP address blocks: 91.242.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:31:6b:eb:70:54:8b:8e:5c:a8:1f:70:03:fb:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Validity Not Before: Jan 2 16:23:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f3c14e0db770f21d2c3a28ef6556dddea7e7241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e2:3a:92:05:96:1a:65:6d:26:31:4b:29:c2: 5b:ab:69:da:e0:e0:77:36:b5:c2:1d:e6:46:c5:48: 24:d2:f0:0b:a8:a8:cf:58:99:eb:e6:dc:a8:da:c0: ed:cd:cc:3d:18:ea:5b:c2:5e:61:1b:68:2a:38:fc: 67:e4:5d:99:33:82:ac:aa:02:96:67:31:db:09:53: a1:6f:a4:95:54:31:62:af:a2:a9:8e:f7:17:06:66: 23:e7:b6:4a:87:34:09:d2:d6:6d:bc:61:dc:cb:e0: 66:99:bb:45:3d:5a:f7:e6:86:c9:49:e8:c0:43:98: 4b:0f:0d:4a:7c:5c:11:92:c3:f7:44:30:a1:f5:16: 5b:56:bf:fe:57:d0:a2:93:2a:b0:b9:3b:a8:e9:e4: c9:c1:a7:8c:44:cf:fa:85:dd:e5:61:2f:92:2f:8e: 32:c6:a5:f6:63:01:3c:74:db:34:80:ef:7d:f5:6d: d4:20:40:5f:36:d1:4d:6a:a7:97:e4:a2:50:dd:ad: a6:b1:21:c5:00:99:9b:a4:f4:2b:76:dd:63:82:43: e8:a2:99:3f:15:51:21:00:11:f3:e8:88:b3:22:ed: 06:73:9c:20:dd:4b:67:d0:07:88:1d:28:5b:17:57: cc:ff:6a:1f:09:1d:59:92:40:e5:b4:e5:c6:a6:fa: f2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:3C:14:E0:DB:77:0F:21:D2:C3:A2:8E:F6:55:6D:DD:EA:7E:72:41 X509v3 Authority Key Identifier: keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/XzwU4Nt3DyHSw6KO9lVt3ep-ckE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.242.108.0/22 Signature Algorithm: sha256WithRSAEncryption 4c:2d:a2:c0:77:2e:4a:02:30:c7:70:fb:7a:bf:8b:69:eb:55: 64:c7:96:89:af:46:9d:5b:87:f1:48:11:b4:f0:3f:6a:82:8f: bb:d6:d9:90:2e:56:29:81:7c:c9:b7:cb:1e:e8:15:7e:25:0b: 81:9e:5c:0d:8f:8f:32:e5:92:af:6d:df:d4:75:f3:ab:1b:31: 02:55:1b:4d:6a:c7:94:1a:d1:8f:9e:b7:c9:dd:8e:ec:11:7e: fe:af:49:cf:36:02:e0:ae:b7:4a:ab:c9:55:f2:3f:88:98:81: 47:e3:13:b9:92:1c:0f:1a:f4:9b:27:b5:ba:67:9a:ab:93:35: bc:3e:02:4e:79:04:48:bd:e5:05:25:8a:d2:8d:e4:de:b4:86: 18:ff:2c:c3:72:82:a9:a7:1e:45:7a:5b:af:8f:92:54:b9:a8: 79:0f:41:80:06:9e:e9:e0:8d:36:7e:77:46:7c:3a:15:c8:c5: 30:63:db:7f:c4:fb:97:eb:a5:42:97:44:0c:ea:e9:c3:13:4e: 3c:b8:6b:69:b7:4f:45:72:e7:84:11:dc:53:ac:71:55:50:17: 07:89:77:a3:ac:5f:40:06:c3:d9:5e:1a:89:e6:ff:37:00:17: cb:5c:08:7d:0c:6b:65:a6:71:b9:df:d7:dd:0e:66:1b:b7:5d: fb:80:cc:fd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hTFr63BUi45cqB9wA/uzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3 MWE5YTgwHhcNMjYwMTAyMTYyMzEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjNjMTRlMGRiNzcwZjIxZDJjM2EyOGVmNjU1NmRkZGVhN2U3MjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+I6kgWWGmVtJjFLKcJbq2na4OB3 NrXCHeZGxUgk0vALqKjPWJnr5tyo2sDtzcw9GOpbwl5hG2gqOPxn5F2ZM4KsqgKW ZzHbCVOhb6SVVDFir6KpjvcXBmYj57ZKhzQJ0tZtvGHcy+BmmbtFPVr35obJSejA Q5hLDw1KfFwRksP3RDCh9RZbVr/+V9CikyqwuTuo6eTJwaeMRM/6hd3lYS+SL44y xqX2YwE8dNs0gO999W3UIEBfNtFNaqeX5KJQ3a2msSHFAJmbpPQrdt1jgkPoopk/ FVEhABHz6IizIu0Gc5wg3Utn0AeIHShbF1fM/2ofCR1ZkkDltOXGpvryUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF88FODbdw8h0sOijvZVbd3qfnJBMB8GA1UdIwQY MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt M2FjOWU1NmMzMDg5LzEvWHp3VTROdDNEeUhTdzZLTzlsVnQzZXAtY2tFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5 LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW/JsMA0G CSqGSIb3DQEBCwUAA4IBAQBMLaLAdy5KAjDHcPt6v4tp61Vkx5aJr0adW4fxSBG0 8D9qgo+71tmQLlYpgXzJt8se6BV+JQuBnlwNj48y5ZKvbd/UdfOrGzECVRtNaseU GtGPnrfJ3Y7sEX7+r0nPNgLgrrdKq8lV8j+ImIFH4xO5khwPGvSbJ7W6Z5qrkzW8 PgJOeQRIveUFJYrSjeTetIYY/yzDcoKppx5Feluvj5JUuah5D0GABp7p4I02fndG fDoVyMUwY9t/xPuX66VCl0QM6unDE048uGtpt09FcueEEdxTrHFVUBcHiXejrF9A BsPZXhqJ5v83ABfLXAh9DGtlpnG539fdDmYbt137gMz9 -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:22 2026 by rpki-client