This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/XTl6Gkln2crT26j3N1rNr8b0Zus.roa File: XTl6Gkln2crT26j3N1rNr8b0Zus.roa (raw, json) Hash identifier: wRUsTIFhH0RYnKbe/pUv2CvS6lNzJTTn63B4Mkb2N7I= Subject key identifier: 5D:39:7A:1A:49:67:D9:CA:D3:DB:A8:F7:37:5A:CD:AF:C6:F4:66:EB Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B7910740D7E244DE6F14FFD0BA1685690 Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/XTl6Gkln2crT26j3N1rNr8b0Zus.roa Signing time: Thu 01 Jan 2026 10:17:59 +0000 ROA not before: Thu 01 Jan 2026 10:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215347 IP address blocks: 77.92.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:74:0d:7e:24:4d:e6:f1:4f:fd:0b:a1:68:56:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d397a1a4967d9cad3dba8f7375acdafc6f466eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:82:2e:d7:d0:f9:9b:9f:43:c3:cf:3f:56:93: cf:90:4c:c2:c6:45:93:1f:0a:33:8d:8e:f1:27:1f: ae:c0:c8:67:2c:c6:34:c6:df:03:ab:6e:24:ad:6a: bd:f2:11:8d:00:19:ce:de:23:f5:93:d8:68:f2:60: 56:09:0f:a6:c1:50:ae:18:0f:b5:2b:cd:da:09:80: d2:63:b5:82:75:dc:c0:0d:a9:c0:24:87:e5:14:9a: 55:45:2c:c0:94:c7:35:7c:01:14:60:e8:65:03:1e: ba:4c:5e:4a:61:13:5d:9f:54:ee:6b:48:a2:79:6f: dc:38:9e:31:12:8e:3e:39:c3:ea:e3:f7:91:07:fc: b1:76:39:e0:87:58:61:99:3c:b7:79:a0:9e:38:5e: a2:ed:9c:4d:97:04:59:62:a6:73:bc:56:c8:fc:a5: 32:1c:e5:72:de:ae:1f:a4:60:10:14:73:4f:bd:e9: 75:a3:9d:d1:8c:df:ff:28:c1:00:57:ed:c3:b1:29: 74:a9:cd:56:ea:fb:29:44:88:42:72:35:1b:19:55: d2:98:94:ea:72:ec:55:26:db:7a:c1:e5:c2:49:c5: c8:47:d9:63:ef:8b:25:e6:b9:73:0d:84:34:05:1b: ef:3f:b7:07:95:37:18:b1:3f:a7:cc:e4:9f:ad:ba: e9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:39:7A:1A:49:67:D9:CA:D3:DB:A8:F7:37:5A:CD:AF:C6:F4:66:EB X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/XTl6Gkln2crT26j3N1rNr8b0Zus.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.92.147.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:fa:a7:cd:b7:d2:17:2e:47:25:5a:dd:8f:04:5b:c8:27:0b: 52:c1:b4:3f:94:8f:97:15:85:b7:4d:34:10:fe:62:a8:64:52: 1f:26:84:39:da:3e:be:bd:26:e6:80:8f:a6:88:93:51:46:d5: 71:9e:58:75:bf:ba:06:fe:bf:e3:58:74:fd:32:22:a7:34:cd: 0c:67:d1:e0:6f:0d:f1:13:88:0d:60:59:03:c3:41:b1:87:7d: 6b:05:c8:65:f2:62:ac:73:af:5d:90:96:fc:84:b5:85:59:07: be:29:cb:fc:dc:d7:84:d6:bb:18:26:d8:54:30:1d:9f:53:50: 6f:bf:a1:6a:a3:e6:f9:81:75:5b:00:a5:09:5d:9f:98:74:89: 4e:d7:22:31:09:68:9a:6e:32:bb:4d:59:6e:88:3f:3f:2c:98: 95:43:8e:5b:1b:95:52:ac:6a:1f:b8:d9:44:24:49:bf:86:9f: 55:56:4b:7f:f8:55:17:74:42:58:0b:6d:6c:d0:87:18:ab:95: 59:f4:19:b3:3c:d8:86:63:a8:c4:9a:d3:22:d9:a3:db:76:40: 06:86:b9:df:9d:79:2c:51:9b:88:6a:e7:46:af:4a:b5:69:c4: 4a:51:6e:8b:c7:5b:e3:59:de:19:30:61:a3:fc:f1:1f:8f:97: 8d:ef:e3:cb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EHQNfiRN5vFP/QuhaFaQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDM5N2ExYTQ5NjdkOWNhZDNkYmE4ZjczNzVhY2RhZmM2ZjQ2NmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4Iu19D5m59Dw88/VpPPkEzCxkWT HwozjY7xJx+uwMhnLMY0xt8Dq24krWq98hGNABnO3iP1k9ho8mBWCQ+mwVCuGA+1 K83aCYDSY7WCddzADanAJIflFJpVRSzAlMc1fAEUYOhlAx66TF5KYRNdn1Tua0ii eW/cOJ4xEo4+OcPq4/eRB/yxdjngh1hhmTy3eaCeOF6i7ZxNlwRZYqZzvFbI/KUy HOVy3q4fpGAQFHNPvel1o53RjN//KMEAV+3DsSl0qc1W6vspRIhCcjUbGVXSmJTq cuxVJtt6weXCScXIR9lj74sl5rlzDYQ0BRvvP7cHlTcYsT+nzOSfrbrp1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF05ehpJZ9nK09uo9zdaza/G9GbrMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvWFRsNkdrbG4yY3JUMjZqM04xck5yOGIwWnVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVyTMA0G CSqGSIb3DQEBCwUAA4IBAQB8+qfNt9IXLkclWt2PBFvIJwtSwbQ/lI+XFYW3TTQQ /mKoZFIfJoQ52j6+vSbmgI+miJNRRtVxnlh1v7oG/r/jWHT9MiKnNM0MZ9Hgbw3x E4gNYFkDw0Gxh31rBchl8mKsc69dkJb8hLWFWQe+Kcv83NeE1rsYJthUMB2fU1Bv v6Fqo+b5gXVbAKUJXZ+YdIlO1yIxCWiabjK7TVluiD8/LJiVQ45bG5VSrGofuNlE JEm/hp9VVkt/+FUXdEJYC21s0IcYq5VZ9BmzPNiGY6jEmtMi2aPbdkAGhrnfnXks UZuIaudGr0q1acRKUW6Lx1vjWd4ZMGGj/PEfj5eN7+PL -----END CERTIFICATE-----Generated at Wed Jan 21 13:33:06 2026 by rpki-client