This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/xQPVpv6oDfVejRnWElQGbmYJcaY.roa File: xQPVpv6oDfVejRnWElQGbmYJcaY.roa (raw, json) Hash identifier: y3RHPAzs8tten2VXnVg+llQRjecqqHar32AXcJuIcWg= Subject key identifier: C5:03:D5:A6:FE:A8:0D:F5:5E:8D:19:D6:12:54:06:6E:66:09:71:A6 Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Certificate serial: 019B7AC7C9F2DF5D8CC7D96299D2DE152C68 Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/xQPVpv6oDfVejRnWElQGbmYJcaY.roa Signing time: Thu 01 Jan 2026 18:17:52 +0000 ROA not before: Thu 01 Jan 2026 18:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40065 IP address blocks: 91.217.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:c9:f2:df:5d:8c:c7:d9:62:99:d2:de:15:2c:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Validity Not Before: Jan 1 18:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c503d5a6fea80df55e8d19d61254066e660971a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:59:7f:a8:99:36:a3:55:3b:09:79:ab:9b:a2: 62:97:65:00:11:c3:84:f2:2c:f5:63:f4:d1:0f:3f: 17:32:69:72:c0:c7:f0:65:8d:23:22:49:5b:b7:b4: 60:02:e2:d6:9b:30:30:74:66:85:c1:02:f5:31:cb: 55:d6:4f:cc:b4:cc:2f:91:26:51:2b:88:54:8a:18: 5b:39:23:57:cc:3a:45:46:2a:84:9e:ce:ff:24:1b: 61:dd:a3:ad:32:2b:ff:12:88:bd:13:fd:93:ae:76: 47:dc:de:e2:11:ed:32:61:ae:1d:d4:ca:a9:c6:65: 92:56:a6:28:ba:30:ce:28:2c:b6:23:fd:4b:bc:e1: 74:6f:87:95:9e:9d:bc:e8:72:bc:8d:11:7b:09:f0: 7f:44:ee:9f:72:65:79:a9:c8:8e:75:f3:f9:7e:7e: 9e:29:6c:06:55:f6:6c:8d:09:70:a3:cd:98:69:db: 62:2d:0d:00:76:73:3d:9e:ed:41:76:94:8a:82:47: 3c:aa:0c:07:e4:ff:f2:12:3d:d0:98:9a:2c:c3:31: 2c:5c:26:17:57:2f:29:de:a6:cf:c3:32:f7:de:c6: f2:6a:ba:36:f4:cc:66:db:a1:fd:d5:38:f8:c4:75: 26:c0:91:56:f7:9d:3e:52:3b:e0:d4:41:b7:94:ec: f4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:03:D5:A6:FE:A8:0D:F5:5E:8D:19:D6:12:54:06:6E:66:09:71:A6 X509v3 Authority Key Identifier: keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/xQPVpv6oDfVejRnWElQGbmYJcaY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.139.0/24 Signature Algorithm: sha256WithRSAEncryption ca:8f:3c:2c:82:bb:c7:91:00:5c:ce:0c:6c:38:80:87:0a:4a: 2f:df:0f:93:60:e6:5f:c1:08:5d:5a:a8:6d:98:a2:95:69:cf: 4b:1a:b6:f0:13:f6:0e:75:8d:a9:c4:ba:61:b0:b8:88:5c:ae: 82:f0:b9:1e:99:ec:62:26:26:de:c1:2c:1b:20:96:58:2c:18: 7a:62:3b:2f:16:55:f9:92:09:14:16:49:f1:02:ea:cb:93:43: 8e:c4:f8:f0:0f:80:ab:a7:53:64:59:8b:4b:36:b2:66:f3:83: dd:fd:d6:86:61:30:1d:c7:80:64:34:0e:78:f8:78:73:dc:32: ff:3d:63:79:b2:88:96:8a:60:db:1f:38:11:c4:0d:b4:12:76: 86:19:34:13:6b:c5:ec:ff:86:8c:76:24:25:b6:73:95:88:2d: 6d:de:16:03:ea:18:2b:21:bf:51:ae:e7:e5:83:30:dc:78:53: d2:21:00:eb:5d:6f:ac:20:cd:44:ee:8e:c9:04:5d:c6:da:44: 80:1c:b9:0e:cc:c9:d0:6f:cf:63:0e:97:17:18:cd:b5:4d:a3: d8:a4:16:e0:53:e1:75:43:38:50:d3:52:b1:1d:95:14:57:ea: 65:2c:87:6e:83:aa:4c:86:41:16:24:ee:cf:b1:ea:2c:57:99: 9f:be:46:93 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x8ny312Mx9limdLeFSxoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMzcxODMzNDFhMmFiNmRmM2M1OWVjODI3ZWQ3MTIwMGI1 YTYyNDQwHhcNMjYwMTAxMTgxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTAzZDVhNmZlYTgwZGY1NWU4ZDE5ZDYxMjU0MDY2ZTY2MDk3MWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnll/qJk2o1U7CXmrm6Jil2UAEcOE 8iz1Y/TRDz8XMmlywMfwZY0jIklbt7RgAuLWmzAwdGaFwQL1MctV1k/MtMwvkSZR K4hUihhbOSNXzDpFRiqEns7/JBth3aOtMiv/Eoi9E/2TrnZH3N7iEe0yYa4d1Mqp xmWSVqYoujDOKCy2I/1LvOF0b4eVnp286HK8jRF7CfB/RO6fcmV5qciOdfP5fn6e KWwGVfZsjQlwo82YadtiLQ0AdnM9nu1BdpSKgkc8qgwH5P/yEj3QmJoswzEsXCYX Vy8p3qbPwzL33sbyaro29Mxm26H91Tj4xHUmwJFW950+Ujvg1EG3lOz0qQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMUD1ab+qA31Xo0Z1hJUBm5mCXGmMB8GA1UdIwQY MBaAFIs3GDNBoqtt88WeyCftcSALWmJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUt MDg1MmNiMzUzMjkzLzEveFFQVnB2Nm9EZlZlalJuV0VsUUdibVlKY2FZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUtMDg1MmNiMzUzMjkz LzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9mLMA0G CSqGSIb3DQEBCwUAA4IBAQDKjzwsgrvHkQBczgxsOICHCkov3w+TYOZfwQhdWqht mKKVac9LGrbwE/YOdY2pxLphsLiIXK6C8LkemexiJibewSwbIJZYLBh6YjsvFlX5 kgkUFknxAurLk0OOxPjwD4Crp1NkWYtLNrJm84Pd/daGYTAdx4BkNA54+Hhz3DL/ PWN5soiWimDbHzgRxA20EnaGGTQTa8Xs/4aMdiQltnOViC1t3hYD6hgrIb9Rrufl gzDceFPSIQDrXW+sIM1E7o7JBF3G2kSAHLkOzMnQb89jDpcXGM21TaPYpBbgU+F1 QzhQ01KxHZUUV+plLIdug6pMhkEWJO7PseosV5mfvkaT -----END CERTIFICATE-----Generated at Tue Jan 20 06:02:48 2026 by rpki-client