This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/97311d-af26-4b8d-a1ad-13669569d68e/1/XByfpm3dhAK1nLqnE53HvBrJZ14.roa File: XByfpm3dhAK1nLqnE53HvBrJZ14.roa (raw, json) Hash identifier: Twuh9Z/mYXqmrwwkxFKLCbYBcb8KfPeW0OepZEczSfA= Subject key identifier: 5C:1C:9F:A6:6D:DD:84:02:B5:9C:BA:A7:13:9D:C7:BC:1A:C9:67:5E Certificate issuer: /CN=7ad869e5efd483a72fd3e89978d1cc66df32b512 Certificate serial: 019B797F330944A956242378AB3EC2AE3CC2 Authority key identifier: 7A:D8:69:E5:EF:D4:83:A7:2F:D3:E8:99:78:D1:CC:66:DF:32:B5:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ethp5e_Ug6cv0-iZeNHMZt8ytRI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/97311d-af26-4b8d-a1ad-13669569d68e/1/XByfpm3dhAK1nLqnE53HvBrJZ14.roa Signing time: Thu 01 Jan 2026 12:18:57 +0000 ROA not before: Thu 01 Jan 2026 12:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215588 IP address blocks: 91.201.92.0/22 maxlen: 24 2a10:1a80::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/97311d-af26-4b8d-a1ad-13669569d68e/1/ethp5e_Ug6cv0-iZeNHMZt8ytRI.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/97311d-af26-4b8d-a1ad-13669569d68e/1/ethp5e_Ug6cv0-iZeNHMZt8ytRI.mft rsync://rpki.ripe.net/repository/DEFAULT/ethp5e_Ug6cv0-iZeNHMZt8ytRI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:33:09:44:a9:56:24:23:78:ab:3e:c2:ae:3c:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ad869e5efd483a72fd3e89978d1cc66df32b512 Validity Not Before: Jan 1 12:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c1c9fa66ddd8402b59cbaa7139dc7bc1ac9675e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5a:20:0a:66:97:e4:1b:10:7e:2c:57:3d:8a: 03:3d:b3:6a:95:93:96:a3:bb:f6:0c:b1:8a:8e:75: 93:85:35:2e:b2:fe:d4:a0:8c:95:e3:75:81:a2:82: 7d:07:4a:cd:eb:e2:dd:08:ae:58:78:dd:65:ac:d8: 90:49:01:ee:d1:ad:21:ba:f2:0c:5b:9e:c3:2e:35: 1b:be:29:61:61:22:ef:ef:ef:2c:af:af:3b:6f:2c: fe:4c:26:77:01:4f:95:e0:9e:51:b2:5b:fe:86:97: 5f:c3:76:39:35:3a:06:62:8d:aa:ea:c3:b7:e7:e3: 34:20:f2:bf:5c:12:f7:fc:ed:ce:7e:13:03:a3:54: 84:6c:9f:cc:83:9c:18:1c:2f:26:49:bb:f9:01:89: 42:a1:78:c3:99:e5:06:60:d6:b0:ad:94:71:44:02: ff:b5:8b:ac:f8:84:4b:bb:20:7d:bb:71:5a:0d:68: b4:5e:8c:f8:ab:ac:d6:8e:be:87:ae:85:5c:b6:c2: 06:00:36:e5:ab:e4:23:f9:bd:59:88:0f:2d:80:c1: 34:cb:65:7a:95:85:e7:86:61:be:d5:42:56:6c:2d: bf:45:5d:70:ad:7c:21:bc:f0:e8:41:23:cb:0b:d1: 0c:14:9d:01:0c:dc:be:1d:56:a0:b5:bb:0c:a4:33: 7b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:1C:9F:A6:6D:DD:84:02:B5:9C:BA:A7:13:9D:C7:BC:1A:C9:67:5E X509v3 Authority Key Identifier: keyid:7A:D8:69:E5:EF:D4:83:A7:2F:D3:E8:99:78:D1:CC:66:DF:32:B5:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ethp5e_Ug6cv0-iZeNHMZt8ytRI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/97311d-af26-4b8d-a1ad-13669569d68e/1/XByfpm3dhAK1nLqnE53HvBrJZ14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/97311d-af26-4b8d-a1ad-13669569d68e/1/ethp5e_Ug6cv0-iZeNHMZt8ytRI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.201.92.0/22 IPv6: 2a10:1a80::/29 Signature Algorithm: sha256WithRSAEncryption 13:4a:52:fc:e7:0f:45:30:e4:53:dc:82:8e:cc:1a:60:3e:4f: 8a:55:48:b8:68:da:e7:a5:24:4e:b3:e8:f9:a7:c7:5f:4c:51: a3:35:19:60:a0:69:fb:c4:3f:be:24:bd:95:66:40:dd:7e:17: 5e:5c:c5:78:cc:20:e7:6a:ec:8f:86:ea:52:31:05:5c:07:a0: fa:ff:3c:d6:af:7b:df:8e:a3:7e:dd:3f:e3:b6:bf:ec:d8:4d: 27:39:88:cd:36:8b:80:98:7a:25:e4:1f:94:44:82:16:d6:1c: 65:b7:95:e6:b7:2f:6f:ee:74:77:9c:a5:4c:5f:6a:c5:58:55: f7:b8:d7:b3:6e:88:c1:e8:f6:50:1b:5a:f9:07:07:76:0a:40: 56:90:30:d3:a7:6c:69:d5:e8:d8:12:db:52:b4:83:67:f0:36: 00:45:1a:17:0c:3a:f1:ad:fa:15:a8:48:10:7a:aa:09:b3:34: f8:3c:e9:6e:03:f3:ee:9a:e7:8e:28:9c:aa:4d:a5:ef:d5:69: af:b4:b6:e6:50:a2:e0:38:df:de:33:66:7e:95:90:05:09:61: 8a:ff:57:ff:d2:06:25:a7:9e:a2:17:57:f8:e4:6a:27:44:50: 37:40:6f:bd:f5:eb:6b:d1:b3:f0:3b:a9:e4:ba:02:99:01:3b: 6c:34:87:d3 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5fzMJRKlWJCN4qz7CrjzCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhZDg2OWU1ZWZkNDgzYTcyZmQzZTg5OTc4ZDFjYzY2ZGYz MmI1MTIwHhcNMjYwMTAxMTIxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzFjOWZhNjZkZGQ4NDAyYjU5Y2JhYTcxMzlkYzdiYzFhYzk2NzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFogCmaX5BsQfixXPYoDPbNqlZOW o7v2DLGKjnWThTUusv7UoIyV43WBooJ9B0rN6+LdCK5YeN1lrNiQSQHu0a0huvIM W57DLjUbvilhYSLv7+8sr687byz+TCZ3AU+V4J5Rslv+hpdfw3Y5NToGYo2q6sO3 5+M0IPK/XBL3/O3OfhMDo1SEbJ/Mg5wYHC8mSbv5AYlCoXjDmeUGYNawrZRxRAL/ tYus+IRLuyB9u3FaDWi0Xoz4q6zWjr6HroVctsIGADblq+Qj+b1ZiA8tgME0y2V6 lYXnhmG+1UJWbC2/RV1wrXwhvPDoQSPLC9EMFJ0BDNy+HVagtbsMpDN70wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFwcn6Zt3YQCtZy6pxOdx7wayWdeMB8GA1UdIwQY MBaAFHrYaeXv1IOnL9PomXjRzGbfMrUSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXRocDVlX1VnNmN2MC1pWmVOSE1adDh5dFJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi85NzMxMWQtYWYyNi00YjhkLWExYWQt MTM2Njk1NjlkNjhlLzEvWEJ5ZnBtM2RoQUsxbkxxbkU1M0h2QnJKWjE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi85NzMxMWQtYWYyNi00YjhkLWExYWQtMTM2Njk1NjlkNjhl LzEvZXRocDVlX1VnNmN2MC1pWmVOSE1adDh5dFJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCW8lcMA0E AgACMAcDBQMqEBqAMA0GCSqGSIb3DQEBCwUAA4IBAQATSlL85w9FMORT3IKOzBpg Pk+KVUi4aNrnpSROs+j5p8dfTFGjNRlgoGn7xD++JL2VZkDdfhdeXMV4zCDnauyP hupSMQVcB6D6/zzWr3vfjqN+3T/jtr/s2E0nOYjNNouAmHol5B+URIIW1hxlt5Xm ty9v7nR3nKVMX2rFWFX3uNezbojB6PZQG1r5Bwd2CkBWkDDTp2xp1ejYEttStINn 8DYARRoXDDrxrfoVqEgQeqoJszT4POluA/PumueOKJyqTaXv1WmvtLbmUKLgON/e M2Z+lZAFCWGK/1f/0gYlp56iF1f45GonRFA3QG+99etr0bPwO6nkugKZATtsNIfT -----END CERTIFICATE-----Generated at Tue Feb 10 02:47:08 2026 by rpki-client