This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/Xt6VlYdBXXzNk_5SkMqf0Ssy87E.roa File: Xt6VlYdBXXzNk_5SkMqf0Ssy87E.roa (raw, json) Hash identifier: 9vBskc5hxURaaf/JWcTgm3uyfOTVcjvg9WeBIxqRnpQ= Subject key identifier: 5E:DE:95:95:87:41:5D:7C:CD:93:FE:52:90:CA:9F:D1:2B:32:F3:B1 Certificate issuer: /CN=f31d1c05abd714c67c3291e010d21c70a35dd57e Certificate serial: 019B7A5AE50310220000DFC07E6C48360B0C Authority key identifier: F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/Xt6VlYdBXXzNk_5SkMqf0Ssy87E.roa Signing time: Thu 01 Jan 2026 16:18:55 +0000 ROA not before: Thu 01 Jan 2026 16:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12843 IP address blocks: 91.103.241.0/24 maxlen: 24 91.103.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:e5:03:10:22:00:00:df:c0:7e:6c:48:36:0b:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f31d1c05abd714c67c3291e010d21c70a35dd57e Validity Not Before: Jan 1 16:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ede959587415d7ccd93fe5290ca9fd12b32f3b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:27:5f:9d:8d:02:ba:b0:8d:7b:d2:53:86:c8: df:8a:b2:88:e0:02:62:6d:f9:c6:8e:63:74:20:1a: da:e9:67:fc:47:56:52:27:2c:ac:ef:e0:75:6d:20: fc:bc:36:2f:9f:fa:9c:a7:88:59:d2:24:2a:35:af: f9:34:9a:ff:ef:ce:4d:50:d5:b0:c9:16:18:fa:ae: 0b:16:4d:68:33:77:4f:2d:69:69:03:86:d9:e3:72: 43:64:45:50:a5:df:c6:0c:c4:49:c1:de:1d:9a:27: 1e:ad:1d:5c:de:38:bb:85:32:8d:0c:73:7e:40:ed: 07:29:6a:5e:3b:42:09:d5:29:2c:94:d6:8c:49:6a: 4d:cd:da:4b:84:bb:bd:63:7d:d5:09:f4:7a:b8:e8: 8b:15:c4:fe:e3:9f:00:9a:3b:53:ce:52:f6:ca:96: 62:1c:58:0c:f4:e5:fd:a9:52:62:21:b3:1d:57:0f: f7:91:de:d3:4e:4d:c3:45:76:0b:99:4f:90:3e:3f: 5d:80:3e:97:b7:28:d9:0f:0b:36:0a:26:67:a5:21: df:3f:6b:82:33:91:20:70:66:81:37:67:5a:cf:4c: 01:22:1a:52:e8:f3:ef:72:31:7b:7e:58:a1:b4:b8: b3:fa:69:0b:29:62:a3:22:09:a8:89:52:5a:3d:30: d0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:DE:95:95:87:41:5D:7C:CD:93:FE:52:90:CA:9F:D1:2B:32:F3:B1 X509v3 Authority Key Identifier: keyid:F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/Xt6VlYdBXXzNk_5SkMqf0Ssy87E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.103.241.0-91.103.242.255 Signature Algorithm: sha256WithRSAEncryption 2e:4f:0d:63:c9:6f:db:7e:fb:8e:af:c2:11:5d:da:c2:18:2c: cd:d3:9c:1a:a9:7c:bc:ff:d9:2a:05:87:e0:59:ac:09:ae:4a: db:53:96:29:68:85:a2:1f:83:32:e3:22:47:6f:6c:90:fc:0c: b0:f4:75:40:0d:ed:82:c5:27:41:84:fc:9b:c1:35:a4:03:0b: e3:07:9f:b4:21:ce:69:36:c7:44:bd:33:a2:e9:86:2d:e6:75: 6b:36:65:54:66:42:1f:f2:6b:da:34:0c:f1:be:ac:34:51:20: e3:3c:9a:e4:fd:f6:b8:dc:ca:15:f6:3c:fc:12:a4:88:27:6b: 15:c1:e4:97:b2:f6:5c:cf:d5:a8:ad:ae:a0:55:20:d9:67:ad: 00:41:6f:46:72:6b:a4:c8:7e:91:4a:ff:de:13:b4:19:67:5e: 27:07:34:5d:54:51:16:a2:07:38:f8:9a:d4:a2:b2:6d:0a:c4: f4:a7:d1:b2:7f:d0:ac:5c:7a:02:08:60:17:3e:b9:89:b0:29: d9:c2:79:9b:1c:02:c2:5e:03:c7:a5:c0:6d:8b:8d:d0:3a:56: ad:b3:4c:31:7b:b1:3b:1b:ca:3b:fc:19:7c:44:92:f5:48:88: 0b:cf:4e:16:cc:61:21:2c:f6:46:b4:7e:6d:e3:42:6b:5c:63: 80:f1:c2:22 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt6WuUDECIAAN/AfmxINgsMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMWQxYzA1YWJkNzE0YzY3YzMyOTFlMDEwZDIxYzcwYTM1 ZGQ1N2UwHhcNMjYwMTAxMTYxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZWRlOTU5NTg3NDE1ZDdjY2Q5M2ZlNTI5MGNhOWZkMTJiMzJmM2IxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkidfnY0CurCNe9JThsjfirKI4AJi bfnGjmN0IBra6Wf8R1ZSJyys7+B1bSD8vDYvn/qcp4hZ0iQqNa/5NJr/785NUNWw yRYY+q4LFk1oM3dPLWlpA4bZ43JDZEVQpd/GDMRJwd4dmicerR1c3ji7hTKNDHN+ QO0HKWpeO0IJ1SkslNaMSWpNzdpLhLu9Y33VCfR6uOiLFcT+458AmjtTzlL2ypZi HFgM9OX9qVJiIbMdVw/3kd7TTk3DRXYLmU+QPj9dgD6XtyjZDws2CiZnpSHfP2uC M5EgcGaBN2daz0wBIhpS6PPvcjF7flihtLiz+mkLKWKjIgmoiVJaPTDQ1wIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFF7elZWHQV18zZP+UpDKn9ErMvOxMB8GA1UdIwQY MBaAFPMdHAWr1xTGfDKR4BDSHHCjXdV+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHgwY0JhdlhGTVo4TXBIZ0VOSWNjS05kMVg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC84ODY2YmItMmViNy00Mjg4LWE4MmMt NTU1OWFjNDEwYWNlLzEvWHQ2VmxZZEJYWHpOa181U2tNcWYwU3N5ODdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC84ODY2YmItMmViNy00Mjg4LWE4MmMtNTU1OWFjNDEwYWNl LzEvOHgwY0JhdlhGTVo4TXBIZ0VOSWNjS05kMVg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABbZ/ED BABbZ/IwDQYJKoZIhvcNAQELBQADggEBAC5PDWPJb9t++46vwhFd2sIYLM3TnBqp fLz/2SoFh+BZrAmuSttTlilohaIfgzLjIkdvbJD8DLD0dUAN7YLFJ0GE/JvBNaQD C+MHn7Qhzmk2x0S9M6Lphi3mdWs2ZVRmQh/ya9o0DPG+rDRRIOM8muT99rjcyhX2 PPwSpIgnaxXB5Jey9lzP1aitrqBVINlnrQBBb0Zya6TIfpFK/94TtBlnXicHNF1U URaiBzj4mtSism0KxPSn0bJ/0KxcegIIYBc+uYmwKdnCeZscAsJeA8elwG2LjdA6 Vq2zTDF7sTsbyjv8GXxEkvVIiAvPThbMYSEs9ka0fm3jQmtcY4DxwiI= -----END CERTIFICATE-----Generated at Mon Jan 26 19:35:52 2026 by rpki-client