This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/XOqhNOZxOAhHFkz4hARIcbp-d5A.roa File: XOqhNOZxOAhHFkz4hARIcbp-d5A.roa (raw, json) Hash identifier: 4hL/1mxlpdw2Hk9JU1ljcj2USapEcK3wvUAzct7W9FE= Subject key identifier: 5C:EA:A1:34:E6:71:38:08:47:16:4C:F8:84:04:48:71:BA:7E:77:90 Certificate issuer: /CN=eeea4d4a6ad6b7289b1822ff4e3837a0a0619204 Certificate serial: 019B7BA3A96132458BF9D4CFF828013EE7A2 Authority key identifier: EE:EA:4D:4A:6A:D6:B7:28:9B:18:22:FF:4E:38:37:A0:A0:61:92:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7upNSmrWtyibGCL_Tjg3oKBhkgQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/XOqhNOZxOAhHFkz4hARIcbp-d5A.roa Signing time: Thu 01 Jan 2026 22:18:01 +0000 ROA not before: Thu 01 Jan 2026 22:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56971 IP address blocks: 91.108.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.crl rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft rsync://rpki.ripe.net/repository/DEFAULT/7upNSmrWtyibGCL_Tjg3oKBhkgQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 16:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:a9:61:32:45:8b:f9:d4:cf:f8:28:01:3e:e7:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eeea4d4a6ad6b7289b1822ff4e3837a0a0619204 Validity Not Before: Jan 1 22:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ceaa134e671380847164cf884044871ba7e7790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ba:c4:46:34:f8:69:5c:64:5b:9f:63:a1:2d: 63:c4:fd:e3:b0:65:94:5e:a1:c0:d0:ab:5c:71:fe: 99:0b:8b:bc:eb:63:bf:4f:ff:72:5f:65:3f:a4:2a: 07:98:58:ca:67:d9:4d:ac:1f:ee:44:46:b7:ce:b1: 53:67:b4:4e:e3:99:23:de:ff:30:ee:b0:42:d9:ba: aa:22:da:a5:8f:fe:87:5b:50:d5:99:54:16:ca:1f: 9c:1c:a2:2e:3a:5e:f1:df:3c:39:a6:81:05:a0:1b: 5d:9d:b2:44:2d:42:eb:8b:3d:4f:a3:bf:f6:2f:34: cb:6c:fd:28:7f:04:a4:bb:79:7b:38:00:4a:de:92: d7:eb:d9:bf:4d:0a:ed:09:14:cf:d5:90:99:9c:45: e9:62:c8:55:33:f2:23:77:a6:20:65:fa:86:ca:74: b5:ef:13:15:02:87:ed:77:c3:57:7a:c8:01:da:0e: f7:c7:62:e1:60:6d:1a:ec:51:45:1f:4a:e7:77:59: 25:09:47:bc:24:f7:d5:c0:46:ba:59:ad:b3:8a:ad: d5:8b:35:ac:08:85:d1:33:17:3e:a7:f1:0c:cb:dd: cc:cb:bd:e1:76:d2:e8:46:b4:37:d2:ed:eb:31:81: 01:66:7e:fb:cb:66:8e:e8:74:62:92:04:d6:79:43: 66:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:EA:A1:34:E6:71:38:08:47:16:4C:F8:84:04:48:71:BA:7E:77:90 X509v3 Authority Key Identifier: keyid:EE:EA:4D:4A:6A:D6:B7:28:9B:18:22:FF:4E:38:37:A0:A0:61:92:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7upNSmrWtyibGCL_Tjg3oKBhkgQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/XOqhNOZxOAhHFkz4hARIcbp-d5A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.108.189.0/24 Signature Algorithm: sha256WithRSAEncryption d4:3d:ea:9b:33:b1:15:95:5c:7c:5c:0c:45:95:b4:dc:78:cc: 0f:f2:ad:e6:75:1d:91:18:b4:c1:4e:36:d4:a4:67:14:c7:bf: 92:1a:a0:19:22:50:85:9d:dd:b6:c3:47:29:2b:3f:5f:b8:4d: 8f:03:4a:a6:18:17:23:33:6a:49:1c:0c:0f:ea:99:74:92:98: fe:a4:4e:36:73:fa:4f:21:c8:32:92:ac:0a:9d:11:2a:98:e7: 8c:36:2f:fe:2a:97:21:98:35:84:27:1d:87:4d:69:bf:f3:83: de:e8:aa:98:35:d0:37:07:fe:db:34:6f:ea:f2:8b:1e:df:0f: 5b:8d:1a:4c:6c:aa:f5:09:58:ff:52:36:0f:d9:ce:0d:5e:f2: 3d:33:d9:c9:a7:fc:5a:94:e5:6c:5a:54:e1:ac:6e:31:bf:91: 16:28:a8:c5:c1:00:30:6e:ca:02:6f:cc:e5:5b:a6:96:4c:65: 39:8c:95:77:9c:51:fc:0f:10:c4:6b:af:42:b9:25:d8:45:4a: 26:28:cb:8a:30:ad:65:f5:94:98:87:21:0d:2c:4e:bb:a2:84: 3d:32:42:49:61:dd:c1:0a:1b:77:6b:f0:23:ff:d8:83:d8:9e: 86:c9:76:2b:1a:2e:52:9c:00:40:9f:dc:04:33:9d:9f:83:03: 7a:3e:10:15 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o6lhMkWL+dTP+CgBPueiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlZWE0ZDRhNmFkNmI3Mjg5YjE4MjJmZjRlMzgzN2EwYTA2 MTkyMDQwHhcNMjYwMTAxMjIxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2VhYTEzNGU2NzEzODA4NDcxNjRjZjg4NDA0NDg3MWJhN2U3NzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrrERjT4aVxkW59joS1jxP3jsGWU XqHA0Ktccf6ZC4u862O/T/9yX2U/pCoHmFjKZ9lNrB/uREa3zrFTZ7RO45kj3v8w 7rBC2bqqItqlj/6HW1DVmVQWyh+cHKIuOl7x3zw5poEFoBtdnbJELULriz1Po7/2 LzTLbP0ofwSku3l7OABK3pLX69m/TQrtCRTP1ZCZnEXpYshVM/Ijd6YgZfqGynS1 7xMVAoftd8NXesgB2g73x2LhYG0a7FFFH0rnd1klCUe8JPfVwEa6Wa2ziq3VizWs CIXRMxc+p/EMy93My73hdtLoRrQ30u3rMYEBZn77y2aO6HRikgTWeUNm7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFzqoTTmcTgIRxZM+IQESHG6fneQMB8GA1UdIwQY MBaAFO7qTUpq1rcomxgi/044N6CgYZIEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3VwTlNtcld0eWliR0NMX1RqZzNvS0Joa2dRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9kNDhjZDQtMjA4OC00MDI1LWFhMTct ZjcyMjMzMTc5Y2NmLzEvWE9xaE5PWnhPQWhIRmt6NGhBUkljYnAtZDVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9kNDhjZDQtMjA4OC00MDI1LWFhMTctZjcyMjMzMTc5Y2Nm LzEvN3VwTlNtcld0eWliR0NMX1RqZzNvS0Joa2dRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW2y9MA0G CSqGSIb3DQEBCwUAA4IBAQDUPeqbM7EVlVx8XAxFlbTceMwP8q3mdR2RGLTBTjbU pGcUx7+SGqAZIlCFnd22w0cpKz9fuE2PA0qmGBcjM2pJHAwP6pl0kpj+pE42c/pP IcgykqwKnREqmOeMNi/+KpchmDWEJx2HTWm/84Pe6KqYNdA3B/7bNG/q8ose3w9b jRpMbKr1CVj/UjYP2c4NXvI9M9nJp/xalOVsWlThrG4xv5EWKKjFwQAwbsoCb8zl W6aWTGU5jJV3nFH8DxDEa69CuSXYRUomKMuKMK1l9ZSYhyENLE67ooQ9MkJJYd3B Cht3a/Aj/9iD2J6GyXYrGi5SnABAn9wEM52fgwN6PhAV -----END CERTIFICATE-----Generated at Thu Feb 5 02:53:42 2026 by rpki-client