This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/XGtDH1L6DSDTcXSFlNGN7DJNIuA.roa File: XGtDH1L6DSDTcXSFlNGN7DJNIuA.roa (raw, json) Hash identifier: UmPHiymGAj7+/eK4hBqQMAkOwYiEZ6uebNHLD6+HTOE= Subject key identifier: 5C:6B:43:1F:52:FA:0D:20:D3:71:74:85:94:D1:8D:EC:32:4D:22:E0 Certificate issuer: /CN=a49d2e50b7738aed0acc1a0ec2fee30080255838 Certificate serial: 019B7BA3B8225BFF8DEB4499B1A14248F24B Authority key identifier: A4:9D:2E:50:B7:73:8A:ED:0A:CC:1A:0E:C2:FE:E3:00:80:25:58:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJ0uULdziu0KzBoOwv7jAIAlWDg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/XGtDH1L6DSDTcXSFlNGN7DJNIuA.roa Signing time: Thu 01 Jan 2026 22:18:05 +0000 ROA not before: Thu 01 Jan 2026 22:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2856 IP address blocks: 91.230.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.crl rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft rsync://rpki.ripe.net/repository/DEFAULT/pJ0uULdziu0KzBoOwv7jAIAlWDg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 07:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:b8:22:5b:ff:8d:eb:44:99:b1:a1:42:48:f2:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a49d2e50b7738aed0acc1a0ec2fee30080255838 Validity Not Before: Jan 1 22:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c6b431f52fa0d20d371748594d18dec324d22e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5e:45:c4:57:a1:be:db:41:f1:c0:ef:e5:a0: aa:8b:2a:ac:22:86:1c:f7:c1:b3:19:cf:e9:5d:4c: d0:30:ca:58:38:ff:7d:65:47:a5:b6:16:c8:e2:52: 6a:d4:1c:bb:79:de:87:c1:7b:bb:e3:d9:9c:77:22: 72:cc:6a:13:38:18:f6:41:76:2a:21:a3:8c:05:85: 7e:b1:f1:6f:b9:8b:c2:94:43:c9:81:dc:c6:a6:8c: 1f:49:8e:95:9e:08:f3:82:71:a2:5b:8c:9f:0d:bf: 2b:c2:18:f8:7a:2c:10:b5:5e:b6:4e:9f:3a:75:6b: 56:d1:c7:f1:b0:72:4a:b6:77:e0:aa:5b:27:16:72: 38:fe:d5:ee:57:20:0b:1b:fb:8e:4c:e1:c7:1c:94: 74:fe:b2:d4:20:f1:45:1d:a1:86:6d:20:74:52:5c: df:94:57:69:0a:ea:4d:f1:ef:3c:3f:f0:ca:bc:0f: 26:3d:bd:08:a6:4e:b8:7a:42:24:cd:39:f7:99:43: f7:86:f8:19:14:00:dd:ee:6a:2f:e4:9d:dd:32:0b: d2:a4:c7:03:29:62:f3:d8:09:41:38:a3:0e:13:13: b9:dc:7a:d4:d6:5e:e3:b9:c3:03:b7:c5:b1:8a:5e: dc:74:e6:f3:fa:01:3e:a6:1a:01:4d:6a:0a:26:b5: 57:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:6B:43:1F:52:FA:0D:20:D3:71:74:85:94:D1:8D:EC:32:4D:22:E0 X509v3 Authority Key Identifier: keyid:A4:9D:2E:50:B7:73:8A:ED:0A:CC:1A:0E:C2:FE:E3:00:80:25:58:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ0uULdziu0KzBoOwv7jAIAlWDg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/XGtDH1L6DSDTcXSFlNGN7DJNIuA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.230.40.0/24 Signature Algorithm: sha256WithRSAEncryption 73:18:3f:7f:06:f9:28:c0:a4:dc:4a:58:27:67:10:7c:ed:db: a9:a8:db:ae:9c:4b:77:2a:b4:c0:53:56:94:5e:8c:7a:7c:35: 96:be:a4:30:03:f5:a3:e2:cd:87:55:5c:b1:de:e2:2c:84:4d: 96:7b:c5:e4:0c:85:76:0b:22:cf:8a:8e:f1:35:01:c8:aa:a7: c4:00:a5:d3:20:5e:be:a0:b2:bb:f1:2f:ef:94:7f:c7:d4:a4: 0b:ae:fc:c1:9e:d1:b0:0e:00:5b:89:1d:2e:07:58:ca:22:74: 1a:72:a4:49:3b:de:e7:37:e4:52:10:e5:3b:16:99:dc:eb:c1: 2b:7e:95:69:39:a3:48:0a:08:ce:34:74:ba:d7:73:5a:dd:05: eb:3b:a3:14:4f:b5:84:ac:9f:50:ed:cc:52:7c:02:1a:81:57: 5d:4f:69:08:38:03:fa:3a:34:e9:af:c1:41:db:cc:76:81:75: 95:16:c4:75:1a:1d:91:ab:ad:ac:b1:19:5e:1f:76:51:74:35: ae:f9:54:f4:fd:02:4a:eb:12:5b:28:1f:f1:25:3b:bb:9c:f2: 06:92:1f:c2:41:d4:e8:cf:43:4b:e8:c7:4a:fb:f1:e2:39:f0: cd:aa:e8:db:be:64:6d:2a:1b:36:6a:56:76:05:75:90:d8:33: d8:05:bc:42 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o7giW/+N60SZsaFCSPJLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0OWQyZTUwYjc3MzhhZWQwYWNjMWEwZWMyZmVlMzAwODAy NTU4MzgwHhcNMjYwMTAxMjIxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzZiNDMxZjUyZmEwZDIwZDM3MTc0ODU5NGQxOGRlYzMyNGQyMmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsF5FxFehvttB8cDv5aCqiyqsIoYc 98GzGc/pXUzQMMpYOP99ZUelthbI4lJq1By7ed6HwXu749mcdyJyzGoTOBj2QXYq IaOMBYV+sfFvuYvClEPJgdzGpowfSY6VngjzgnGiW4yfDb8rwhj4eiwQtV62Tp86 dWtW0cfxsHJKtnfgqlsnFnI4/tXuVyALG/uOTOHHHJR0/rLUIPFFHaGGbSB0Ulzf lFdpCupN8e88P/DKvA8mPb0Ipk64ekIkzTn3mUP3hvgZFADd7mov5J3dMgvSpMcD KWLz2AlBOKMOExO53HrU1l7jucMDt8Wxil7cdObz+gE+phoBTWoKJrVXZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFxrQx9S+g0g03F0hZTRjewyTSLgMB8GA1UdIwQY MBaAFKSdLlC3c4rtCswaDsL+4wCAJVg4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEowdVVMZHppdTBLekJvT3d2N2pBSUFsV0RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8zOTMyMTgtNDZlNS00NjhiLWI1OGIt N2YzMzUyMjM0ZTIxLzEvWEd0REgxTDZEU0RUY1hTRmxOR043REpOSXVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8zOTMyMTgtNDZlNS00NjhiLWI1OGItN2YzMzUyMjM0ZTIx LzEvcEowdVVMZHppdTBLekJvT3d2N2pBSUFsV0RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+YoMA0G CSqGSIb3DQEBCwUAA4IBAQBzGD9/BvkowKTcSlgnZxB87dupqNuunEt3KrTAU1aU Xox6fDWWvqQwA/Wj4s2HVVyx3uIshE2We8XkDIV2CyLPio7xNQHIqqfEAKXTIF6+ oLK78S/vlH/H1KQLrvzBntGwDgBbiR0uB1jKInQacqRJO97nN+RSEOU7Fpnc68Er fpVpOaNICgjONHS613Na3QXrO6MUT7WErJ9Q7cxSfAIagVddT2kIOAP6OjTpr8FB 28x2gXWVFsR1Gh2Rq62ssRleH3ZRdDWu+VT0/QJK6xJbKB/xJTu7nPIGkh/CQdTo z0NL6MdK+/HiOfDNqujbvmRtKhs2alZ2BXWQ2DPYBbxC -----END CERTIFICATE-----Generated at Thu Jan 8 17:33:02 2026 by rpki-client