This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/XxeNNCKdsKtsWJE0Iy3TYGX5MOE.roa File: XxeNNCKdsKtsWJE0Iy3TYGX5MOE.roa (raw, json) Hash identifier: wAuwL6Iz2Pwm9WGIInMjcsxZMvhkc1vHutS+nMnQpa8= Subject key identifier: 5F:17:8D:34:22:9D:B0:AB:6C:58:91:34:23:2D:D3:60:65:F9:30:E1 Certificate issuer: /CN=a67f1cf27426070aeda7b26053453c283fdf7537 Certificate serial: 019B7E390B59D75677059D61C389E44FD6BA Authority key identifier: A6:7F:1C:F2:74:26:07:0A:ED:A7:B2:60:53:45:3C:28:3F:DF:75:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/XxeNNCKdsKtsWJE0Iy3TYGX5MOE.roa Signing time: Fri 02 Jan 2026 10:20:26 +0000 ROA not before: Fri 02 Jan 2026 10:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3242 IP address blocks: 91.207.150.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:0b:59:d7:56:77:05:9d:61:c3:89:e4:4f:d6:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a67f1cf27426070aeda7b26053453c283fdf7537 Validity Not Before: Jan 2 10:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f178d34229db0ab6c589134232dd36065f930e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:25:34:c5:34:a2:34:e6:20:d3:ef:ac:87:ed: 77:0a:a2:f0:af:2e:c4:08:b1:74:22:9a:03:49:8f: 2c:2e:2b:d6:67:0e:67:09:d2:b8:00:46:43:99:82: a1:22:12:95:79:5e:a6:32:89:cd:6b:ea:63:0a:db: 31:5f:e8:b2:82:14:43:b9:d6:fb:d4:b6:63:49:78: f4:31:ec:b6:80:f3:f5:dc:a5:d1:5b:07:1b:b9:ed: 2d:6c:86:1d:68:d9:50:0e:f7:1b:18:f1:a2:38:d6: c5:72:01:b6:0e:02:b3:8e:f7:c9:5d:34:fb:6d:11: 81:d4:93:4e:fc:40:d9:e5:3d:c5:bc:0c:4b:18:8a: 2e:e2:7f:17:3b:d4:19:84:14:13:d2:87:ed:7b:ca: 02:74:ac:46:36:bd:ab:21:e5:e4:fd:b2:bf:62:70: c9:9c:60:56:c5:89:c7:06:06:4a:e2:fc:c9:c4:26: 2a:fb:9f:fa:64:bc:7e:8c:fc:4a:03:d8:19:c3:14: 64:c0:70:a3:e1:8f:c0:af:7a:fb:bd:74:04:3e:29: 8c:2f:ea:e7:eb:d9:a4:f7:ac:86:e7:4e:a7:f7:d0: 66:55:87:a8:b5:05:c8:b8:f0:63:d9:e0:5e:0a:6d: c1:8d:6c:c1:a3:1c:8d:25:14:e7:d8:32:0a:bf:76: bb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:17:8D:34:22:9D:B0:AB:6C:58:91:34:23:2D:D3:60:65:F9:30:E1 X509v3 Authority Key Identifier: keyid:A6:7F:1C:F2:74:26:07:0A:ED:A7:B2:60:53:45:3C:28:3F:DF:75:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/XxeNNCKdsKtsWJE0Iy3TYGX5MOE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.207.150.0/23 Signature Algorithm: sha256WithRSAEncryption 43:ee:8b:80:de:5d:2f:f1:b6:45:4b:39:75:e2:76:80:e4:46: b9:f7:7d:65:5f:17:46:d3:4b:07:5a:66:2e:c8:02:91:63:c7: b4:fe:03:c1:03:d0:a0:4b:d4:9d:7f:cd:84:5e:b2:be:04:ef: 6e:c4:7d:67:be:f8:ce:9c:87:4b:40:1d:01:dd:80:47:07:96: cb:36:4b:32:e2:2f:f1:2c:95:72:22:ee:4d:b7:1b:6f:e3:e6: 7d:c6:ee:c6:7b:c6:89:b4:49:8d:20:37:e8:91:01:30:27:09: ac:dc:f6:2e:2a:1f:1d:4b:98:e0:83:3e:c0:fc:ad:c5:48:fc: 8f:d4:ad:1f:fd:0c:27:99:e9:79:dc:f6:24:7a:d3:a1:a9:8b: 58:15:59:87:16:68:70:27:58:1c:a1:93:bc:da:15:55:fb:92: e5:ea:f0:13:21:3a:c1:33:fc:98:d7:9f:48:73:aa:6a:8d:10: 74:2b:49:ab:24:d5:57:1d:ad:e7:70:89:9a:34:0e:8c:25:5c: 40:0e:bf:cf:d5:fd:84:e0:13:ef:9f:b0:74:40:b1:8a:81:67: 8f:c9:20:e9:3b:11:52:c7:5b:79:c6:6a:b7:75:74:ad:21:33: 5a:e2:71:aa:94:dd:a0:85:b1:bc:56:20:b4:17:a6:01:b8:c5: 4d:15:30:01 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OQtZ11Z3BZ1hw4nkT9a6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2N2YxY2YyNzQyNjA3MGFlZGE3YjI2MDUzNDUzYzI4M2Zk Zjc1MzcwHhcNMjYwMTAyMTAyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjE3OGQzNDIyOWRiMGFiNmM1ODkxMzQyMzJkZDM2MDY1ZjkzMGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSU0xTSiNOYg0++sh+13CqLwry7E CLF0IpoDSY8sLivWZw5nCdK4AEZDmYKhIhKVeV6mMonNa+pjCtsxX+iyghRDudb7 1LZjSXj0Mey2gPP13KXRWwcbue0tbIYdaNlQDvcbGPGiONbFcgG2DgKzjvfJXTT7 bRGB1JNO/EDZ5T3FvAxLGIou4n8XO9QZhBQT0ofte8oCdKxGNr2rIeXk/bK/YnDJ nGBWxYnHBgZK4vzJxCYq+5/6ZLx+jPxKA9gZwxRkwHCj4Y/Ar3r7vXQEPimML+rn 69mk96yG506n99BmVYeotQXIuPBj2eBeCm3BjWzBoxyNJRTn2DIKv3a7YwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF8XjTQinbCrbFiRNCMt02Bl+TDhMB8GA1UdIwQY MBaAFKZ/HPJ0JgcK7aeyYFNFPCg/33U3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcG44YzhuUW1Cd3J0cDdKZ1UwVThLRF9mZFRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8xMmUyYzQtMjQzZC00NGRmLWIwZGMt YjlkNjY4ZjA1MWRlLzEvWHhlTk5DS2RzS3RzV0pFMEl5M1RZR1g1TU9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8xMmUyYzQtMjQzZC00NGRmLWIwZGMtYjlkNjY4ZjA1MWRl LzEvcG44YzhuUW1Cd3J0cDdKZ1UwVThLRF9mZFRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW8+WMA0G CSqGSIb3DQEBCwUAA4IBAQBD7ouA3l0v8bZFSzl14naA5Ea5931lXxdG00sHWmYu yAKRY8e0/gPBA9CgS9Sdf82EXrK+BO9uxH1nvvjOnIdLQB0B3YBHB5bLNksy4i/x LJVyIu5Ntxtv4+Z9xu7Ge8aJtEmNIDfokQEwJwms3PYuKh8dS5jggz7A/K3FSPyP 1K0f/Qwnmel53PYketOhqYtYFVmHFmhwJ1gcoZO82hVV+5Ll6vATITrBM/yY159I c6pqjRB0K0mrJNVXHa3ncImaNA6MJVxADr/P1f2E4BPvn7B0QLGKgWePySDpOxFS x1t5xmq3dXStITNa4nGqlN2ghbG8ViC0F6YBuMVNFTAB -----END CERTIFICATE-----Generated at Mon Feb 9 22:59:39 2026 by rpki-client