This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/XXpcSIWvTG-ujhC6WFKAP7xbCew.roa
File: XXpcSIWvTG-ujhC6WFKAP7xbCew.roa (raw, json)
Hash identifier: 8DYns3VAIMoO5AUluTPjCUWoA3CUpaSLrzipyJ93fJQ=
Subject key identifier: 5D:7A:5C:48:85:AF:4C:6F:AE:8E:10:BA:58:52:80:3F:BC:5B:09:EC
Certificate issuer: /CN=eaf96df31b3f404df5b77e399ce79371b4f44443
Certificate serial: 019B7CED2A8B8702D83B3FB7C1A44A52BF99
Authority key identifier: EA:F9:6D:F3:1B:3F:40:4D:F5:B7:7E:39:9C:E7:93:71:B4:F4:44:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6vlt8xs_QE31t345nOeTcbT0REM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/XXpcSIWvTG-ujhC6WFKAP7xbCew.roa
Signing time: Fri 02 Jan 2026 04:17:56 +0000
ROA not before: Fri 02 Jan 2026 04:17:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56886
IP address blocks: 91.229.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6vlt8xs_QE31t345nOeTcbT0REM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ed:2a:8b:87:02:d8:3b:3f:b7:c1:a4:4a:52:bf:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaf96df31b3f404df5b77e399ce79371b4f44443
Validity
Not Before: Jan 2 04:17:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5d7a5c4885af4c6fae8e10ba5852803fbc5b09ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:15:14:e0:e6:87:68:52:c2:a8:da:fe:83:42:
5c:47:d5:e7:7b:de:a6:f5:47:51:ac:83:df:65:56:
71:37:bb:db:7e:65:4b:6c:82:e8:ed:06:04:40:64:
9d:b9:4f:1d:1b:9f:89:b4:36:66:8c:b1:3d:a2:d1:
2d:d4:91:be:89:27:5b:c7:bc:f0:e7:c3:fd:a0:5c:
ca:2a:c3:02:eb:0c:0c:2d:8e:9c:dc:0c:31:79:c8:
a7:bb:41:36:0b:19:33:a3:c4:65:4f:fb:4d:99:ee:
19:c8:1d:e8:4a:d4:f3:7c:74:43:a3:42:6c:f3:25:
b4:6a:5f:82:ef:8a:b5:0e:62:7e:23:08:66:3b:e6:
1e:70:3e:3d:12:3a:e2:1d:a8:7d:e8:94:9d:99:9c:
ba:bc:39:d3:13:3b:ae:a3:0c:e8:e8:67:02:1a:26:
d9:b8:48:25:db:89:f9:f6:93:3d:0d:da:2e:bc:1e:
d8:23:1f:15:70:95:a9:ac:03:b4:de:70:f1:df:96:
5c:d0:b1:17:d6:42:6b:8f:a6:89:3f:88:26:19:46:
cc:9f:f8:34:46:0c:ef:3e:35:ef:1f:13:44:f5:42:
6b:70:e9:83:37:c1:0f:69:8e:2b:b2:e8:dd:09:67:
f0:48:01:61:68:40:e9:fd:60:2f:74:b2:19:f0:0f:
4b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:7A:5C:48:85:AF:4C:6F:AE:8E:10:BA:58:52:80:3F:BC:5B:09:EC
X509v3 Authority Key Identifier:
keyid:EA:F9:6D:F3:1B:3F:40:4D:F5:B7:7E:39:9C:E7:93:71:B4:F4:44:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6vlt8xs_QE31t345nOeTcbT0REM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/XXpcSIWvTG-ujhC6WFKAP7xbCew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.233.0/24
Signature Algorithm: sha256WithRSAEncryption
30:2d:d6:73:99:a1:c7:0a:3b:c4:2e:24:d3:a8:1b:03:82:09:
ae:13:be:79:0b:26:b9:42:13:17:ef:e1:96:0b:5b:78:5a:c3:
56:e5:bf:f7:a0:4e:7b:25:72:5d:41:ce:f1:8d:ce:ad:ba:d1:
53:a9:76:0f:a3:72:aa:92:51:9c:51:9b:35:32:98:5c:ea:c9:
c0:85:ae:14:50:2f:e0:52:8f:51:d8:15:1e:c6:dd:bd:6c:f6:
e3:6b:27:57:84:98:3d:9b:34:e7:4a:50:a6:e5:d6:0a:cf:cf:
95:d4:c5:f9:b1:ca:cf:03:9f:66:a0:66:02:03:52:47:c0:9e:
b6:83:c3:b1:75:62:90:4c:f3:de:2e:ce:d5:da:73:b4:ad:8d:
59:9c:a5:10:22:85:be:7e:55:4e:c5:99:c1:a6:2c:20:de:40:
1f:47:a5:c6:40:77:e1:c9:c5:e5:f3:91:5a:a9:36:86:95:f3:
b9:d8:30:db:38:71:ac:7f:7d:c2:92:b7:6d:f7:9a:ff:0f:c9:
68:ee:0b:ec:1d:9c:38:43:26:53:db:a6:fa:0d:75:3b:dc:db:
4a:27:cc:8c:bd:8f:e3:40:fe:0a:d5:bb:7d:a4:82:20:8e:5c:
92:c7:7a:03:3c:32:4c:7e:16:fd:31:25:d0:11:6c:14:2d:fa:
45:9b:31:bb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt87SqLhwLYOz+3waRKUr+ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhZjk2ZGYzMWIzZjQwNGRmNWI3N2UzOTljZTc5MzcxYjRm
NDQ0NDMwHhcNMjYwMTAyMDQxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZDdhNWM0ODg1YWY0YzZmYWU4ZTEwYmE1ODUyODAzZmJjNWIwOWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8hUU4OaHaFLCqNr+g0JcR9Xne96m
9UdRrIPfZVZxN7vbfmVLbILo7QYEQGSduU8dG5+JtDZmjLE9otEt1JG+iSdbx7zw
58P9oFzKKsMC6wwMLY6c3Awxecinu0E2Cxkzo8RlT/tNme4ZyB3oStTzfHRDo0Js
8yW0al+C74q1DmJ+IwhmO+YecD49EjriHah96JSdmZy6vDnTEzuuowzo6GcCGibZ
uEgl24n59pM9DdouvB7YIx8VcJWprAO03nDx35Zc0LEX1kJrj6aJP4gmGUbMn/g0
RgzvPjXvHxNE9UJrcOmDN8EPaY4rsujdCWfwSAFhaEDp/WAvdLIZ8A9LkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF16XEiFr0xvro4QulhSgD+8WwnsMB8GA1UdIwQY
MBaAFOr5bfMbP0BN9bd+OZznk3G09ERDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnZsdDh4c19RRTMxdDM0NW5PZVRjYlQwUkVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8wZTAzOWEtYmU5Ni00MWZjLWFiY2Qt
OTY0YjYxYmMzMTliLzEvWFhwY1NJV3ZURy11amhDNldGS0FQN3hiQ2V3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8wZTAzOWEtYmU5Ni00MWZjLWFiY2QtOTY0YjYxYmMzMTli
LzEvNnZsdDh4c19RRTMxdDM0NW5PZVRjYlQwUkVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+XpMA0G
CSqGSIb3DQEBCwUAA4IBAQAwLdZzmaHHCjvELiTTqBsDggmuE755Cya5QhMX7+GW
C1t4WsNW5b/3oE57JXJdQc7xjc6tutFTqXYPo3KqklGcUZs1Mphc6snAha4UUC/g
Uo9R2BUext29bPbjaydXhJg9mzTnSlCm5dYKz8+V1MX5scrPA59moGYCA1JHwJ62
g8OxdWKQTPPeLs7V2nO0rY1ZnKUQIoW+flVOxZnBpiwg3kAfR6XGQHfhycXl85Fa
qTaGlfO52DDbOHGsf33Ckrdt95r/D8lo7gvsHZw4QyZT26b6DXU73NtKJ8yMvY/j
QP4K1bt9pIIgjlySx3oDPDJMfhb9MSXQEWwULfpFmzG7
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:22:40 2026 by rpki-client