This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/XXP-dhhAsDiu_BIO93qfw7aI1RA.roa File: XXP-dhhAsDiu_BIO93qfw7aI1RA.roa (raw, json) Hash identifier: uK/rG0SJ5CUQ4luAhXzC1Xpkag0arz3fKpyhElVaPoA= Subject key identifier: 5D:73:FE:76:18:40:B0:38:AE:FC:12:0E:F7:7A:9F:C3:B6:88:D5:10 Certificate issuer: /CN=979586035abe23569c2135e320dbd1a255b84034 Certificate serial: 019B7C7FFCC02CCF219A09DE23CF5C6A6A23 Authority key identifier: 97:95:86:03:5A:BE:23:56:9C:21:35:E3:20:DB:D1:A2:55:B8:40:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5WGA1q-I1acITXjINvRolW4QDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/XXP-dhhAsDiu_BIO93qfw7aI1RA.roa Signing time: Fri 02 Jan 2026 02:18:41 +0000 ROA not before: Fri 02 Jan 2026 02:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197470 IP address blocks: 46.151.232.0/21 maxlen: 21 91.220.221.0/24 maxlen: 24 91.221.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/l5WGA1q-I1acITXjINvRolW4QDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:fc:c0:2c:cf:21:9a:09:de:23:cf:5c:6a:6a:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=979586035abe23569c2135e320dbd1a255b84034 Validity Not Before: Jan 2 02:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d73fe761840b038aefc120ef77a9fc3b688d510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1c:94:d1:09:ba:52:d4:d3:d4:c5:33:2e:81: 85:75:97:d7:56:eb:bc:91:fe:bd:26:c6:77:51:7d: 4b:5d:cb:2b:4d:95:0e:0b:68:ab:1e:a9:88:46:d4: 65:c9:40:01:1d:5e:2c:1d:7b:ed:b7:67:c9:d8:7c: d2:ab:77:b5:08:24:be:97:db:5d:ee:dc:3a:e2:70: 96:46:6f:cb:fc:21:83:df:53:a1:73:92:da:66:72: 9d:6b:69:32:1e:b6:db:f9:ef:35:a0:c7:17:7e:74: cc:c8:93:de:21:7a:13:99:19:a3:2e:41:fa:32:bd: 0f:cb:f2:22:6d:f8:21:81:0f:a4:0e:17:7f:60:bf: 7d:b8:c5:d3:45:3d:27:56:36:ef:94:82:e2:0d:54: 67:f8:1b:4b:2a:81:46:15:2c:70:7d:77:37:2c:c5: 9c:58:99:5e:00:a5:4a:e8:14:e1:94:af:ee:47:5a: 42:78:28:4d:ab:65:25:7d:7e:fa:eb:48:63:e6:c4: 37:57:77:1a:07:a0:08:3b:e2:94:48:b6:6f:1f:c5: cf:e2:e6:34:82:02:91:71:52:c1:40:26:06:70:5f: 55:39:7d:d0:a2:92:46:88:42:8a:35:13:ca:b0:ac: 6a:d0:9d:c8:59:83:5f:20:15:f0:dd:d6:3a:dd:85: 5e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:73:FE:76:18:40:B0:38:AE:FC:12:0E:F7:7A:9F:C3:B6:88:D5:10 X509v3 Authority Key Identifier: keyid:97:95:86:03:5A:BE:23:56:9C:21:35:E3:20:DB:D1:A2:55:B8:40:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5WGA1q-I1acITXjINvRolW4QDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/XXP-dhhAsDiu_BIO93qfw7aI1RA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.151.232.0/21 91.220.221.0/24 91.221.170.0/23 Signature Algorithm: sha256WithRSAEncryption 66:6a:d5:fa:32:9e:ed:ee:2d:d0:f0:dc:dd:34:10:a6:28:0a: 27:85:77:7e:b2:a5:64:8b:17:e6:20:e6:41:80:67:f5:f3:4f: d5:d2:e9:1f:70:16:55:c9:fa:5b:11:fd:3a:cb:f0:92:1d:a9: 2c:9a:da:7e:93:d1:ea:19:02:dc:94:18:f3:e2:af:ba:8e:6d: fe:20:9d:5d:8a:8e:28:69:f5:20:f1:fb:d6:0c:92:d7:78:4f: 06:82:1e:d7:57:44:0c:c6:d9:c6:79:cd:7a:50:a8:67:91:7b: e4:2b:d0:5c:df:b1:3c:72:39:59:a0:8f:dd:9c:ad:95:4c:89: 97:f2:73:20:f4:a5:2b:5a:94:35:fa:59:7b:a7:28:ad:14:bb: 98:09:75:d1:51:43:f9:d0:a7:ba:3a:24:a6:61:bb:e1:0d:cb: c2:88:72:f8:13:68:04:fc:34:6c:b6:50:d5:67:3b:74:a7:98: f8:da:9b:fa:03:ac:c5:7c:5f:f9:a4:86:88:22:34:d8:c2:2b: 03:17:39:50:ce:ab:41:65:a0:a4:cc:f8:3c:5f:b0:eb:4a:78: 1b:56:15:d0:36:6d:97:e1:42:99:bf:23:c5:3c:b3:c5:b2:b5: 7f:44:45:1a:b1:b1:c5:74:99:e1:d2:4d:cf:87:8f:31:a9:cf: 13:91:a3:5d -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8f/zALM8hmgneI89camojMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OTU4NjAzNWFiZTIzNTY5YzIxMzVlMzIwZGJkMWEyNTVi ODQwMzQwHhcNMjYwMTAyMDIxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDczZmU3NjE4NDBiMDM4YWVmYzEyMGVmNzdhOWZjM2I2ODhkNTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvByU0Qm6UtTT1MUzLoGFdZfXVuu8 kf69JsZ3UX1LXcsrTZUOC2irHqmIRtRlyUABHV4sHXvtt2fJ2HzSq3e1CCS+l9td 7tw64nCWRm/L/CGD31Ohc5LaZnKda2kyHrbb+e81oMcXfnTMyJPeIXoTmRmjLkH6 Mr0Py/IibfghgQ+kDhd/YL99uMXTRT0nVjbvlILiDVRn+BtLKoFGFSxwfXc3LMWc WJleAKVK6BThlK/uR1pCeChNq2UlfX7660hj5sQ3V3caB6AIO+KUSLZvH8XP4uY0 ggKRcVLBQCYGcF9VOX3QopJGiEKKNRPKsKxq0J3IWYNfIBXw3dY63YVeWQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFF1z/nYYQLA4rvwSDvd6n8O2iNUQMB8GA1UdIwQY MBaAFJeVhgNaviNWnCE14yDb0aJVuEA0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDVXR0ExcS1JMWFjSVRYaklOdlJvbFc0UURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8wMDFiOWYtZTRkOC00ZGFjLWJmMDgt NzI0MGMzNjAwMGQ3LzEvWFhQLWRoaEFzRGl1X0JJTzkzcWZ3N2FJMVJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi8wMDFiOWYtZTRkOC00ZGFjLWJmMDgtNzI0MGMzNjAwMGQ3 LzEvbDVXR0ExcS1JMWFjSVRYaklOdlJvbFc0UURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDLpfoAwQA W9zdAwQBW92qMA0GCSqGSIb3DQEBCwUAA4IBAQBmatX6Mp7t7i3Q8NzdNBCmKAon hXd+sqVkixfmIOZBgGf180/V0ukfcBZVyfpbEf06y/CSHaksmtp+k9HqGQLclBjz 4q+6jm3+IJ1dio4oafUg8fvWDJLXeE8Ggh7XV0QMxtnGec16UKhnkXvkK9Bc37E8 cjlZoI/dnK2VTImX8nMg9KUrWpQ1+ll7pyitFLuYCXXRUUP50Ke6OiSmYbvhDcvC iHL4E2gE/DRstlDVZzt0p5j42pv6A6zFfF/5pIaIIjTYwisDFzlQzqtBZaCkzPg8 X7DrSngbVhXQNm2X4UKZvyPFPLPFsrV/REUasbHFdJnh0k3Ph48xqc8TkaNd -----END CERTIFICATE-----Generated at Mon Feb 9 21:26:07 2026 by rpki-client