This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/xqX86PxnYUFgmbMyGq-FYjU7myI.roa File: xqX86PxnYUFgmbMyGq-FYjU7myI.roa (raw, json) Hash identifier: LU7BTND6Kz806aRKd+CDSvMICobI0jgTkTNE1f7lbDI= Subject key identifier: C6:A5:FC:E8:FC:67:61:41:60:99:B3:32:1A:AF:85:62:35:3B:9B:22 Certificate issuer: /CN=646836c9214faaa16798a93e8773e599534b29d7 Certificate serial: 019B7758FC7AA7A934A33B34A8FB76A01140 Authority key identifier: 64:68:36:C9:21:4F:AA:A1:67:98:A9:3E:87:73:E5:99:53:4B:29:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/xqX86PxnYUFgmbMyGq-FYjU7myI.roa Signing time: Thu 01 Jan 2026 02:17:59 +0000 ROA not before: Thu 01 Jan 2026 02:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56958 IP address blocks: 91.132.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.crl rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft rsync://rpki.ripe.net/repository/DEFAULT/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:fc:7a:a7:a9:34:a3:3b:34:a8:fb:76:a0:11:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=646836c9214faaa16798a93e8773e599534b29d7 Validity Not Before: Jan 1 02:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6a5fce8fc6761416099b3321aaf8562353b9b22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:55:b7:c5:b7:fd:74:a9:5e:ed:3e:07:06:05: dd:36:10:24:c4:18:94:c5:6f:b3:a7:5a:d5:cf:a9: 21:36:24:83:77:5f:11:2b:3b:84:3f:b8:de:bb:01: aa:72:fd:c3:38:06:ce:05:fc:b7:80:12:92:fb:23: 9c:81:b6:e8:31:ad:6f:c3:b9:8f:34:73:7c:f1:61: e9:d9:61:59:13:75:33:bf:52:2a:2e:10:c9:d4:12: 2f:89:db:89:5d:7a:da:c6:d8:0a:e9:d7:2b:e6:6a: 4a:86:9b:50:50:0b:52:4b:78:88:8d:7c:b0:14:49: 88:b3:b7:25:8a:f8:c1:f9:cd:53:2e:82:c2:82:7e: 76:da:47:ba:b0:f9:83:95:2d:af:52:37:2a:38:db: 04:6f:ac:a0:3c:07:db:ff:7a:90:6f:e7:96:f7:6e: 5d:e2:52:cb:55:8c:db:4d:c5:cf:ac:5a:e6:63:d7: db:ce:f7:8a:64:df:8c:19:ae:5f:fb:df:79:69:14: d9:cd:54:20:0a:29:b7:b0:90:d3:51:5e:3a:b3:7e: 1b:37:ea:3b:44:36:a5:c9:1d:0b:9e:6b:6e:9c:f6: 36:34:a6:e8:a8:ec:ad:e6:2d:68:94:38:33:a6:c5: fe:e0:ee:92:1f:0a:c2:13:e2:3f:db:ab:10:be:34: c2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:A5:FC:E8:FC:67:61:41:60:99:B3:32:1A:AF:85:62:35:3B:9B:22 X509v3 Authority Key Identifier: keyid:64:68:36:C9:21:4F:AA:A1:67:98:A9:3E:87:73:E5:99:53:4B:29:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/xqX86PxnYUFgmbMyGq-FYjU7myI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.132.103.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:7d:3c:6d:0b:2d:1d:8b:1b:a3:f4:1c:8b:6c:12:9e:05:e0: cc:ef:c0:c5:8b:5d:b3:bb:ea:d7:43:a1:37:e3:3b:49:53:91: 76:47:32:c9:95:14:75:f6:97:cf:c3:40:16:4b:eb:f2:f4:15: 50:16:cb:f7:3a:2a:4a:d8:1e:d5:c7:09:6c:16:79:1c:69:13: 60:fc:87:27:68:a8:1e:01:bb:45:de:75:0f:be:d0:dc:bc:ce: 1b:b6:b8:f4:83:59:13:3a:42:e5:1e:6e:7e:b7:f7:0b:3c:d6: 28:f4:89:ac:73:93:94:8e:ba:4f:e5:82:6f:d1:d6:d0:dd:88: 42:f3:1e:34:8f:c9:4a:b7:5a:30:35:75:04:83:81:e0:f7:8e: ca:56:30:4b:aa:1d:1c:c2:24:f3:23:0f:75:49:e3:04:01:61: fb:18:ff:a8:fe:b1:01:b1:ac:1f:ec:dc:7e:ef:05:df:b7:f9: 77:d1:19:9e:db:91:3e:0e:6c:fa:91:b0:5c:86:e2:15:86:07: cf:4d:ec:f4:41:f4:75:51:28:7a:b7:19:f3:39:56:89:cc:70: da:9f:23:d5:d9:0e:1f:38:42:17:25:b6:8f:55:1b:c7:82:21: 99:22:da:e1:03:63:a0:51:03:15:35:75:cc:bf:47:1c:24:4d: 67:27:83:18 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WPx6p6k0ozs0qPt2oBFAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0NjgzNmM5MjE0ZmFhYTE2Nzk4YTkzZTg3NzNlNTk5NTM0 YjI5ZDcwHhcNMjYwMTAxMDIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmE1ZmNlOGZjNjc2MTQxNjA5OWIzMzIxYWFmODU2MjM1M2I5YjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVW3xbf9dKle7T4HBgXdNhAkxBiU xW+zp1rVz6khNiSDd18RKzuEP7jeuwGqcv3DOAbOBfy3gBKS+yOcgbboMa1vw7mP NHN88WHp2WFZE3Uzv1IqLhDJ1BIviduJXXraxtgK6dcr5mpKhptQUAtSS3iIjXyw FEmIs7clivjB+c1TLoLCgn522ke6sPmDlS2vUjcqONsEb6ygPAfb/3qQb+eW925d 4lLLVYzbTcXPrFrmY9fbzveKZN+MGa5f+995aRTZzVQgCim3sJDTUV46s34bN+o7 RDalyR0LnmtunPY2NKboqOyt5i1olDgzpsX+4O6SHwrCE+I/26sQvjTCCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMal/Oj8Z2FBYJmzMhqvhWI1O5siMB8GA1UdIwQY MBaAFGRoNskhT6qhZ5ipPodz5ZlTSynXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkdnMnlTRlBxcUZubUtrLWgzUGxtVk5MS2RjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zZDk0N2QtNTg4MS00MmU2LWIzNWYt NWU4MjJmMzEwNjM4LzEveHFYODZQeG5ZVUZnbWJNeUdxLUZZalU3bXlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8zZDk0N2QtNTg4MS00MmU2LWIzNWYtNWU4MjJmMzEwNjM4 LzEvWkdnMnlTRlBxcUZubUtrLWgzUGxtVk5MS2RjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW4RnMA0G CSqGSIb3DQEBCwUAA4IBAQAefTxtCy0dixuj9ByLbBKeBeDM78DFi12zu+rXQ6E3 4ztJU5F2RzLJlRR19pfPw0AWS+vy9BVQFsv3OipK2B7VxwlsFnkcaRNg/IcnaKge AbtF3nUPvtDcvM4btrj0g1kTOkLlHm5+t/cLPNYo9Imsc5OUjrpP5YJv0dbQ3YhC 8x40j8lKt1owNXUEg4Hg947KVjBLqh0cwiTzIw91SeMEAWH7GP+o/rEBsawf7Nx+ 7wXft/l30Rme25E+Dmz6kbBchuIVhgfPTez0QfR1USh6txnzOVaJzHDanyPV2Q4f OEIXJbaPVRvHgiGZItrhA2OgUQMVNXXMv0ccJE1nJ4MY -----END CERTIFICATE-----Generated at Mon Feb 9 22:29:40 2026 by rpki-client