This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/XWVE8tIi9ZecbOx1vcvWssJ0eCM.roa File: XWVE8tIi9ZecbOx1vcvWssJ0eCM.roa (raw, json) Hash identifier: o/4/Wc/Ucw5SFFNzfxfWEkMf/RRNr7V23q3xkukethg= Subject key identifier: 5D:65:44:F2:D2:22:F5:97:9C:6C:EC:75:BD:CB:D6:B2:C2:74:78:23 Certificate issuer: /CN=1e40ab40e53860871250e9bac4e163339710595d Certificate serial: 019B797E8CC5799D54736353FE27D5010354 Authority key identifier: 1E:40:AB:40:E5:38:60:87:12:50:E9:BA:C4:E1:63:33:97:10:59:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkCrQOU4YIcSUOm6xOFjM5cQWV0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/XWVE8tIi9ZecbOx1vcvWssJ0eCM.roa Signing time: Thu 01 Jan 2026 12:18:15 +0000 ROA not before: Thu 01 Jan 2026 12:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200826 IP address blocks: 91.234.241.0/24 maxlen: 24 91.234.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft rsync://rpki.ripe.net/repository/DEFAULT/HkCrQOU4YIcSUOm6xOFjM5cQWV0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:8c:c5:79:9d:54:73:63:53:fe:27:d5:01:03:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e40ab40e53860871250e9bac4e163339710595d Validity Not Before: Jan 1 12:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d6544f2d222f5979c6cec75bdcbd6b2c2747823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:00:1f:14:8f:51:2c:7d:0d:0a:fc:8a:1a:dd: 93:76:ee:bb:91:aa:cd:49:41:52:03:c4:b4:49:d6: 2c:88:69:d8:e7:52:11:55:92:7e:57:e5:9e:e7:b9: a6:33:e9:de:b5:d2:7d:48:4a:3d:c4:43:77:67:ba: 65:aa:2a:5a:73:29:02:72:ef:fd:01:c0:a4:35:97: af:95:2c:fd:15:c5:75:fd:99:f5:3c:ad:7e:17:8c: 6c:49:fd:41:92:e3:89:c6:90:5c:c9:8f:7f:c8:b9: b7:42:5c:d3:20:13:7b:1c:37:57:61:ef:fb:33:79: 5e:a2:2c:ca:64:53:92:ba:ae:f3:b7:93:8c:f8:70: ab:01:d0:d6:20:77:6a:2e:1a:59:fa:41:8e:db:19: cc:67:7c:22:c2:92:6d:ba:2f:32:0b:ac:cf:0b:e2: d7:a7:1f:8b:75:c0:5c:a8:3c:c1:13:3e:04:1d:8f: b1:c3:4a:9e:a6:5d:3d:8b:dc:fa:42:f6:8b:a4:55: 1e:8b:97:73:2b:a2:52:1d:6f:d9:fb:7a:2a:a4:8e: 18:1b:06:0b:fd:0a:1e:6d:22:bf:73:79:17:2c:ee: 8c:e0:65:84:8a:c3:ae:9e:e3:fa:af:86:8a:01:f2: 43:1f:50:69:a9:67:d8:cb:a3:ad:58:c2:d0:a5:a2: 70:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:65:44:F2:D2:22:F5:97:9C:6C:EC:75:BD:CB:D6:B2:C2:74:78:23 X509v3 Authority Key Identifier: keyid:1E:40:AB:40:E5:38:60:87:12:50:E9:BA:C4:E1:63:33:97:10:59:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkCrQOU4YIcSUOm6xOFjM5cQWV0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/XWVE8tIi9ZecbOx1vcvWssJ0eCM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.234.241.0-91.234.243.255 Signature Algorithm: sha256WithRSAEncryption 1b:1c:f9:fa:91:09:ac:55:c7:05:da:0b:a7:e0:f1:4c:0f:f8: f2:9d:af:a1:de:5f:3a:6c:4a:76:e7:c2:00:fc:0c:8f:cd:d8: 6a:9f:b0:01:ee:32:f5:d7:e4:f3:c5:3f:09:a7:67:f1:e2:c9: 8a:4c:40:a3:77:52:87:b0:7c:3d:96:cd:14:50:29:d5:2f:64: 97:f5:52:79:78:ea:0f:20:6f:9a:5d:41:f9:14:4d:f7:ee:e3: 60:a4:5c:e7:d5:c4:6f:b6:be:df:af:66:e7:d8:3a:ef:e3:24: d2:8e:6b:9d:64:48:74:7a:ad:8a:e1:fa:3a:46:14:d8:bd:4f: d7:68:55:68:91:fc:28:c0:6f:19:1f:16:0d:1a:17:fa:68:47: bc:fe:c3:04:5c:1b:d6:40:f1:89:53:35:ef:dd:e5:69:c9:fd: fb:07:00:0b:56:84:fc:2e:aa:c4:c7:1c:a6:20:98:b9:03:1d: 39:4a:e7:72:60:33:54:45:09:de:39:08:c9:d6:80:d7:fc:45: 11:2e:08:30:32:e4:9c:67:54:6c:c4:62:77:1b:a4:7a:91:44: 2e:ab:98:dc:29:24:d2:90:c9:65:56:6e:0d:e6:fa:7c:c1:11: dc:3c:01:ea:cf:64:29:dd:bf:db:e7:ac:eb:ff:6b:25:88:fa: 9e:42:58:a2 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt5fozFeZ1Uc2NT/ifVAQNUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNDBhYjQwZTUzODYwODcxMjUwZTliYWM0ZTE2MzMzOTcx MDU5NWQwHhcNMjYwMTAxMTIxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDY1NDRmMmQyMjJmNTk3OWM2Y2VjNzViZGNiZDZiMmMyNzQ3ODIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgAfFI9RLH0NCvyKGt2Tdu67karN SUFSA8S0SdYsiGnY51IRVZJ+V+We57mmM+netdJ9SEo9xEN3Z7plqipacykCcu/9 AcCkNZevlSz9FcV1/Zn1PK1+F4xsSf1BkuOJxpBcyY9/yLm3QlzTIBN7HDdXYe/7 M3leoizKZFOSuq7zt5OM+HCrAdDWIHdqLhpZ+kGO2xnMZ3wiwpJtui8yC6zPC+LX px+LdcBcqDzBEz4EHY+xw0qepl09i9z6QvaLpFUei5dzK6JSHW/Z+3oqpI4YGwYL /QoebSK/c3kXLO6M4GWEisOunuP6r4aKAfJDH1BpqWfYy6OtWMLQpaJwyQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFF1lRPLSIvWXnGzsdb3L1rLCdHgjMB8GA1UdIwQY MBaAFB5Aq0DlOGCHElDpusThYzOXEFldMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGtDclFPVTRZSWNTVU9tNnhPRmpNNWNRV1YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81NTk0ZWQtN2ViOC00MzFlLTkzMGMt N2Y4NjZkYWE1NDY0LzEvWFdWRTh0SWk5WmVjYk94MXZjdldzc0owZUNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy81NTk0ZWQtN2ViOC00MzFlLTkzMGMtN2Y4NjZkYWE1NDY0 LzEvSGtDclFPVTRZSWNTVU9tNnhPRmpNNWNRV1YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABb6vED BAJb6vAwDQYJKoZIhvcNAQELBQADggEBABsc+fqRCaxVxwXaC6fg8UwP+PKdr6He XzpsSnbnwgD8DI/N2GqfsAHuMvXX5PPFPwmnZ/HiyYpMQKN3UoewfD2WzRRQKdUv ZJf1Unl46g8gb5pdQfkUTffu42CkXOfVxG+2vt+vZufYOu/jJNKOa51kSHR6rYrh +jpGFNi9T9doVWiR/CjAbxkfFg0aF/poR7z+wwRcG9ZA8YlTNe/d5WnJ/fsHAAtW hPwuqsTHHKYgmLkDHTlK53JgM1RFCd45CMnWgNf8RREuCDAy5JxnVGzEYncbpHqR RC6rmNwpJNKQyWVWbg3m+nzBEdw8AerPZCndv9vnrOv/ayWI+p5CWKI= -----END CERTIFICATE-----Generated at Tue Jan 20 00:06:17 2026 by rpki-client