This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2c1061-db25-44bd-804c-a14dcee57e74/1/XzoObcvIrvpe4E-joQhgqkoGqLA.roa File: XzoObcvIrvpe4E-joQhgqkoGqLA.roa (raw, json) Hash identifier: S6Kp+ZpIF7hLDvCfmvBbRJUrOU1sswfc6F+dvz5fqJo= Subject key identifier: 5F:3A:0E:6D:CB:C8:AE:FA:5E:E0:4F:A3:A1:08:60:AA:4A:06:A8:B0 Certificate issuer: /CN=36cfb3975bbd5ef87b29c3dc4a4b98ea5c25c444 Certificate serial: 019B7F83BFA7FE32D06CFB8B17F809C7B7FE Authority key identifier: 36:CF:B3:97:5B:BD:5E:F8:7B:29:C3:DC:4A:4B:98:EA:5C:25:C4:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2c1061-db25-44bd-804c-a14dcee57e74/1/XzoObcvIrvpe4E-joQhgqkoGqLA.roa Signing time: Fri 02 Jan 2026 16:21:39 +0000 ROA not before: Fri 02 Jan 2026 16:21:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47991 IP address blocks: 91.208.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/2c1061-db25-44bd-804c-a14dcee57e74/1/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/2c1061-db25-44bd-804c-a14dcee57e74/1/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:bf:a7:fe:32:d0:6c:fb:8b:17:f8:09:c7:b7:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36cfb3975bbd5ef87b29c3dc4a4b98ea5c25c444 Validity Not Before: Jan 2 16:21:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f3a0e6dcbc8aefa5ee04fa3a10860aa4a06a8b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:09:6a:1e:b7:09:fb:87:80:e4:cc:53:ba:6f: 0f:c0:9e:f6:42:c6:bd:b6:95:ec:9b:85:88:03:cd: 12:e2:bf:28:47:c0:67:ce:47:8a:2a:56:6a:65:0a: b3:77:1f:6c:03:67:e4:f0:3f:d9:7d:63:3e:22:dd: bc:31:66:8d:ab:67:41:76:f7:c1:45:10:8a:e3:7d: f3:a5:3d:23:f6:2c:3a:88:3f:44:53:67:34:30:93: 16:36:89:a9:0b:3c:4a:19:91:c6:8f:76:3d:b9:32: 6a:77:3e:44:3d:5a:2a:bd:2b:ac:75:87:2e:49:9b: 5e:93:f4:54:33:f0:f0:bb:49:c6:7f:6f:79:dd:7f: 7f:09:1e:6e:80:15:aa:0d:6a:20:4b:73:33:ac:be: 03:e6:3e:a7:5c:7a:f0:84:23:0c:5e:6e:b8:0f:ae: 02:c4:0e:18:2c:db:10:ac:14:29:7e:4f:2b:07:19: e1:95:a6:3f:05:50:d1:1d:e9:29:91:9d:cb:32:10: 69:28:61:7b:af:a2:a8:e5:ba:9a:d2:e9:fc:ea:c2: 30:7e:63:65:92:05:f7:49:d9:f5:e4:84:62:48:74: bf:08:4e:46:1d:41:38:0c:40:a5:de:cf:77:09:e9: 94:68:d7:3b:fe:1d:1d:c9:03:28:db:7a:e5:7c:81: 05:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:3A:0E:6D:CB:C8:AE:FA:5E:E0:4F:A3:A1:08:60:AA:4A:06:A8:B0 X509v3 Authority Key Identifier: keyid:36:CF:B3:97:5B:BD:5E:F8:7B:29:C3:DC:4A:4B:98:EA:5C:25:C4:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2c1061-db25-44bd-804c-a14dcee57e74/1/XzoObcvIrvpe4E-joQhgqkoGqLA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2c1061-db25-44bd-804c-a14dcee57e74/1/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.235.0/24 Signature Algorithm: sha256WithRSAEncryption 33:13:0e:6d:24:45:a8:3e:62:72:0e:50:02:05:8d:58:13:e2: a2:37:a4:3f:c9:9c:ce:ff:1a:3c:ec:d3:c1:2b:0a:c6:1c:87: 3c:e1:d0:ac:a5:d0:e9:ac:ec:63:ee:95:ba:6e:5e:03:9b:99: 54:54:82:91:64:e5:44:0b:c0:f9:52:29:e3:12:25:2c:28:09: dd:96:6c:49:0c:60:13:3f:3f:35:32:6e:61:18:df:e2:db:bb: 86:de:32:52:78:61:da:85:a2:8a:b3:05:86:e7:17:20:f4:2d: 5f:76:05:27:8a:6d:65:ff:ad:a3:43:5d:30:92:a3:71:e3:5b: 48:61:52:ad:12:dd:47:7c:fe:6b:77:b7:7a:89:1d:09:a1:15: 7a:50:fd:21:13:2d:92:80:1e:0b:02:06:f4:ee:15:79:ea:89: ff:3e:86:34:43:4b:02:c0:41:6b:43:e4:47:09:71:85:0a:5a: 6d:cf:c7:b1:57:27:e6:2e:39:1a:cd:9a:05:29:bb:42:7c:4b: 46:4f:6f:6d:69:cb:b9:b5:da:2e:57:50:fb:1b:7b:f6:2f:7a: 21:3c:95:02:72:84:de:41:ac:41:c7:2e:3e:82:c3:36:77:9f: 3c:c8:75:20:cf:a9:5c:ab:3a:a0:03:1f:44:d8:49:8f:af:89: 3b:eb:5f:28 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g7+n/jLQbPuLF/gJx7f+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2Y2ZiMzk3NWJiZDVlZjg3YjI5YzNkYzRhNGI5OGVhNWMy NWM0NDQwHhcNMjYwMTAyMTYyMTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjNhMGU2ZGNiYzhhZWZhNWVlMDRmYTNhMTA4NjBhYTRhMDZhOGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwlqHrcJ+4eA5MxTum8PwJ72Qsa9 tpXsm4WIA80S4r8oR8BnzkeKKlZqZQqzdx9sA2fk8D/ZfWM+It28MWaNq2dBdvfB RRCK433zpT0j9iw6iD9EU2c0MJMWNompCzxKGZHGj3Y9uTJqdz5EPVoqvSusdYcu SZtek/RUM/Dwu0nGf2953X9/CR5ugBWqDWogS3MzrL4D5j6nXHrwhCMMXm64D64C xA4YLNsQrBQpfk8rBxnhlaY/BVDRHekpkZ3LMhBpKGF7r6Ko5bqa0un86sIwfmNl kgX3Sdn15IRiSHS/CE5GHUE4DECl3s93CemUaNc7/h0dyQMo23rlfIEFRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF86Dm3LyK76XuBPo6EIYKpKBqiwMB8GA1UdIwQY MBaAFDbPs5dbvV74eynD3EpLmOpcJcREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnMtemwxdTlYdmg3S2NQY1NrdVk2bHdseEVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8yYzEwNjEtZGIyNS00NGJkLTgwNGMt YTE0ZGNlZTU3ZTc0LzEvWHpvT2JjdklydnBlNEUtam9RaGdxa29HcUxBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC8yYzEwNjEtZGIyNS00NGJkLTgwNGMtYTE0ZGNlZTU3ZTc0 LzEvTnMtemwxdTlYdmg3S2NQY1NrdVk2bHdseEVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9DrMA0G CSqGSIb3DQEBCwUAA4IBAQAzEw5tJEWoPmJyDlACBY1YE+KiN6Q/yZzO/xo87NPB KwrGHIc84dCspdDprOxj7pW6bl4Dm5lUVIKRZOVEC8D5UinjEiUsKAndlmxJDGAT Pz81Mm5hGN/i27uG3jJSeGHahaKKswWG5xcg9C1fdgUnim1l/62jQ10wkqNx41tI YVKtEt1HfP5rd7d6iR0JoRV6UP0hEy2SgB4LAgb07hV56on/PoY0Q0sCwEFrQ+RH CXGFClptz8exVyfmLjkazZoFKbtCfEtGT29tacu5tdouV1D7G3v2L3ohPJUCcoTe QaxBxy4+gsM2d588yHUgz6lcqzqgAx9E2EmPr4k7618o -----END CERTIFICATE-----Generated at Mon Feb 9 22:58:14 2026 by rpki-client