This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/xmPDT0qXzI-WfyPj03f5LiDX-UE.roa File: xmPDT0qXzI-WfyPj03f5LiDX-UE.roa (raw, json) Hash identifier: bKQt5YSuFEZd8wxQPDeL7WmtwFEyplerjSwRLOQ9NRw= Subject key identifier: C6:63:C3:4F:4A:97:CC:8F:96:7F:23:E3:D3:77:F9:2E:20:D7:F9:41 Certificate issuer: /CN=d4a039aeee62103b288c6c8b9692cf5808743e21 Certificate serial: 019B7DCB4FC81D529BE21F962C63BA591EB5 Authority key identifier: D4:A0:39:AE:EE:62:10:3B:28:8C:6C:8B:96:92:CF:58:08:74:3E:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KA5ru5iEDsojGyLlpLPWAh0PiE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/xmPDT0qXzI-WfyPj03f5LiDX-UE.roa Signing time: Fri 02 Jan 2026 08:20:34 +0000 ROA not before: Fri 02 Jan 2026 08:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208772 IP address blocks: 91.216.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.crl rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft rsync://rpki.ripe.net/repository/DEFAULT/1KA5ru5iEDsojGyLlpLPWAh0PiE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:4f:c8:1d:52:9b:e2:1f:96:2c:63:ba:59:1e:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4a039aeee62103b288c6c8b9692cf5808743e21 Validity Not Before: Jan 2 08:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c663c34f4a97cc8f967f23e3d377f92e20d7f941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:51:15:9f:e1:76:25:6f:fd:d6:27:3d:a0:a4: 62:3b:0f:10:f7:a3:67:41:bf:75:fa:5f:ff:3b:0e: 80:d2:7f:b6:c3:66:98:bf:72:f6:e6:70:16:4c:18: ca:c3:27:30:84:f9:81:9f:06:07:a4:95:ac:47:12: 99:80:94:9a:55:39:dc:4a:cd:93:de:cb:97:ba:05: 5d:62:1e:5e:c7:01:95:2b:0f:63:67:fe:f3:2d:69: 80:ee:e9:a7:24:a1:f5:ff:90:e8:1c:d8:2c:86:97: 86:9e:62:a2:bc:c1:74:44:11:fd:6d:1e:a4:e4:59: ed:dc:36:b4:fd:30:e1:fa:f6:6b:0b:43:c8:34:ec: 4e:18:58:33:bb:62:cd:00:f5:2a:46:43:e3:de:12: 4e:fd:fe:ab:8e:43:69:bb:91:af:cd:c6:a3:15:3c: 92:aa:ee:5d:98:c0:1b:67:6f:ad:ff:ac:51:16:23: c6:63:5a:24:e9:5b:4f:71:56:71:9a:14:ed:24:19: f9:e9:b8:47:e9:59:ae:26:9c:98:ea:11:69:83:92: b0:3a:f7:c4:57:35:0c:61:13:de:f3:ed:15:83:94: 73:fe:5c:94:3e:7e:d0:4d:55:f4:78:4c:e5:b1:07: 9d:e2:d3:c3:ab:16:37:d5:04:ef:99:5b:d5:0a:f0: c4:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:63:C3:4F:4A:97:CC:8F:96:7F:23:E3:D3:77:F9:2E:20:D7:F9:41 X509v3 Authority Key Identifier: keyid:D4:A0:39:AE:EE:62:10:3B:28:8C:6C:8B:96:92:CF:58:08:74:3E:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KA5ru5iEDsojGyLlpLPWAh0PiE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/xmPDT0qXzI-WfyPj03f5LiDX-UE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.35.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:d7:2b:95:9c:21:d1:92:3f:1b:5b:01:f5:db:ec:3a:66:6c: 75:38:4a:e5:70:69:28:15:f6:40:fd:59:b9:0e:32:b2:51:dc: 22:25:de:1a:b5:1a:89:63:f8:08:46:fa:ae:4f:80:e0:77:c9: f6:0a:ad:5e:ea:1f:25:f8:30:3b:57:60:79:e3:f4:37:3d:04: 4a:56:4a:a2:51:12:b9:2b:05:bb:33:ad:59:48:c4:5d:ad:33: 6f:b5:41:09:8a:1e:74:5a:19:61:f3:94:ff:9d:76:b5:0f:5a: 01:4a:4f:f9:0e:15:8e:8d:40:c9:b3:6c:90:31:cc:9a:b8:3b: 7f:c2:d0:c9:59:ac:d3:13:f4:3f:c7:f1:e0:5f:e0:d1:14:44: ef:74:60:dc:fb:94:81:7d:4a:ad:8b:72:2c:c5:ce:15:33:12: 6a:47:36:73:c6:05:42:c3:c8:59:9c:03:8f:ec:f4:ca:7a:01: f4:78:d4:ae:37:9c:68:69:18:b7:04:85:8b:d5:35:f5:b0:89: 7a:7a:f4:77:21:6d:39:d7:c9:8a:de:49:f0:15:7d:15:c5:d0: 7d:41:d3:ba:7e:62:db:36:a1:bc:d0:33:3a:76:b9:71:5b:15: 89:18:47:df:68:55:c0:8b:c8:3b:e9:ba:0a:ae:94:52:5b:bc: c9:a4:b5:65 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y0/IHVKb4h+WLGO6WR61MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0YTAzOWFlZWU2MjEwM2IyODhjNmM4Yjk2OTJjZjU4MDg3 NDNlMjEwHhcNMjYwMTAyMDgyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjYzYzM0ZjRhOTdjYzhmOTY3ZjIzZTNkMzc3ZjkyZTIwZDdmOTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlEVn+F2JW/91ic9oKRiOw8Q96Nn Qb91+l//Ow6A0n+2w2aYv3L25nAWTBjKwycwhPmBnwYHpJWsRxKZgJSaVTncSs2T 3suXugVdYh5exwGVKw9jZ/7zLWmA7umnJKH1/5DoHNgshpeGnmKivMF0RBH9bR6k 5Fnt3Da0/TDh+vZrC0PINOxOGFgzu2LNAPUqRkPj3hJO/f6rjkNpu5GvzcajFTyS qu5dmMAbZ2+t/6xRFiPGY1ok6VtPcVZxmhTtJBn56bhH6VmuJpyY6hFpg5KwOvfE VzUMYRPe8+0Vg5Rz/lyUPn7QTVX0eEzlsQed4tPDqxY31QTvmVvVCvDEjQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMZjw09Kl8yPln8j49N3+S4g1/lBMB8GA1UdIwQY MBaAFNSgOa7uYhA7KIxsi5aSz1gIdD4hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUtBNXJ1NWlFRHNvakd5TGxwTFBXQWgwUGlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9lNTRlODktN2I2Yi00MTdkLTliYzkt NjJjZTg0ZjcwNzVlLzEveG1QRFQwcVh6SS1XZnlQajAzZjVMaURYLVVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9lNTRlODktN2I2Yi00MTdkLTliYzktNjJjZTg0ZjcwNzVl LzEvMUtBNXJ1NWlFRHNvakd5TGxwTFBXQWgwUGlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9gjMA0G CSqGSIb3DQEBCwUAA4IBAQBP1yuVnCHRkj8bWwH12+w6Zmx1OErlcGkoFfZA/Vm5 DjKyUdwiJd4atRqJY/gIRvquT4Dgd8n2Cq1e6h8l+DA7V2B54/Q3PQRKVkqiURK5 KwW7M61ZSMRdrTNvtUEJih50Whlh85T/nXa1D1oBSk/5DhWOjUDJs2yQMcyauDt/ wtDJWazTE/Q/x/HgX+DRFETvdGDc+5SBfUqti3Isxc4VMxJqRzZzxgVCw8hZnAOP 7PTKegH0eNSuN5xoaRi3BIWL1TX1sIl6evR3IW0518mK3knwFX0VxdB9QdO6fmLb NqG80DM6drlxWxWJGEffaFXAi8g76boKrpRSW7zJpLVl -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:25 2026 by rpki-client