This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/Xc20FTd_9i1cvP_V-us2VR8rcgw.roa File: Xc20FTd_9i1cvP_V-us2VR8rcgw.roa (raw, json) Hash identifier: P+2TwYeHZ5Tcfkj30y1ee92Z2pzwCyx2c2a540pfIM4= Subject key identifier: 5D:CD:B4:15:37:7F:F6:2D:5C:BC:FF:D5:FA:EB:36:55:1F:2B:72:0C Certificate issuer: /CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6 Certificate serial: 019B797F0E78F227A5725553E1124C5325C4 Authority key identifier: 06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/Xc20FTd_9i1cvP_V-us2VR8rcgw.roa Signing time: Thu 01 Jan 2026 12:18:48 +0000 ROA not before: Thu 01 Jan 2026 12:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57129 IP address blocks: 91.209.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:0e:78:f2:27:a5:72:55:53:e1:12:4c:53:25:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6 Validity Not Before: Jan 1 12:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5dcdb415377ff62d5cbcffd5faeb36551f2b720c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0b:21:12:60:5b:4a:74:af:50:54:fd:9b:0a: 4a:c3:87:3f:6a:2d:9e:ac:3d:53:ff:b2:5e:36:7f: d6:d1:1b:8c:af:6f:f4:18:d3:e5:58:91:95:f3:2e: d0:89:0e:2e:c8:28:8a:db:df:70:b9:23:0e:65:de: 1b:8f:4c:f7:8b:e3:87:c5:58:57:4b:91:1c:59:e7: 09:5e:58:33:a8:d3:04:09:7b:53:7e:44:17:77:ab: 18:8c:a9:a1:2e:ae:9e:05:dd:cf:a5:64:4f:d8:a1: 13:e5:0e:55:82:d2:fc:52:1e:20:9f:3e:72:a7:80: 75:dc:5e:d2:60:7f:bc:90:99:ea:26:38:99:89:fa: 44:be:e1:5a:6e:56:1b:ac:24:06:72:4c:f9:5e:d2: bd:42:0b:54:36:8a:17:53:d9:b9:5b:b8:71:1a:f7: a6:1c:48:e4:77:e8:b0:24:60:70:52:8f:3a:b3:df: 6d:d6:b4:aa:02:6a:84:9d:94:23:5c:68:f2:7a:98: 42:59:d6:56:a2:73:59:de:65:fd:0a:ad:f8:b7:1d: d5:24:8f:57:73:d4:3d:5f:03:7e:37:3b:7d:55:df: 00:47:f2:b1:3c:bf:df:36:d8:91:6e:9c:fc:a8:c8: 47:d5:19:62:38:50:b4:bd:92:46:d9:4b:18:50:4b: 3e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:CD:B4:15:37:7F:F6:2D:5C:BC:FF:D5:FA:EB:36:55:1F:2B:72:0C X509v3 Authority Key Identifier: keyid:06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/Xc20FTd_9i1cvP_V-us2VR8rcgw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.137.0/24 Signature Algorithm: sha256WithRSAEncryption 28:2e:62:e3:26:1c:35:0f:1c:f5:e3:9b:5c:0b:a2:64:37:04: ef:ce:ed:79:70:b7:9c:d9:53:73:39:e5:11:fb:92:cd:32:04: 16:6b:d0:53:b9:81:45:f7:d9:bb:7d:65:ba:c9:97:f0:9b:7c: 32:6e:1f:3e:a2:4b:5e:9d:7a:d0:be:61:d1:9f:04:ea:04:01: 55:a7:e8:2c:10:1b:c1:96:67:8d:b6:42:a3:fb:7b:59:36:57: 10:d0:f0:a4:bf:fa:c2:aa:cc:4a:8e:c8:e0:8c:ba:be:b9:64: 67:22:2a:a0:78:0e:54:ef:67:03:87:97:51:4e:61:88:b0:45: 8b:bb:a8:9e:fb:c3:a0:5b:f6:67:c8:fa:6d:16:11:c6:c5:bf: 10:a6:c7:dc:ab:39:49:d2:7c:87:31:6d:3f:bf:ee:96:59:01: 45:09:f4:1a:44:a9:2f:8f:39:8d:78:0f:6e:53:02:1b:a0:51: ac:f1:24:e0:3e:45:13:59:bd:fb:50:32:05:8f:40:33:21:30: 37:50:d7:7b:6f:d7:e0:de:df:fd:0b:9e:2f:65:1c:9a:31:22: 4e:37:88:8c:ee:5c:e8:0e:91:73:4e:94:8e:7a:80:a1:16:e3: 29:40:aa:ce:65:32:76:2f:25:ff:46:2c:51:54:dd:2c:13:8b: ab:b2:45:99 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fw548ielclVT4RJMUyXEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NjFmMjBmYjhhN2U2MzVkN2JjYzk0YzAwYmVkNzE3OWI3 NjA4ZjYwHhcNMjYwMTAxMTIxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZGNkYjQxNTM3N2ZmNjJkNWNiY2ZmZDVmYWViMzY1NTFmMmI3MjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgshEmBbSnSvUFT9mwpKw4c/ai2e rD1T/7JeNn/W0RuMr2/0GNPlWJGV8y7QiQ4uyCiK299wuSMOZd4bj0z3i+OHxVhX S5EcWecJXlgzqNMECXtTfkQXd6sYjKmhLq6eBd3PpWRP2KET5Q5VgtL8Uh4gnz5y p4B13F7SYH+8kJnqJjiZifpEvuFablYbrCQGckz5XtK9QgtUNooXU9m5W7hxGvem HEjkd+iwJGBwUo86s99t1rSqAmqEnZQjXGjyephCWdZWonNZ3mX9Cq34tx3VJI9X c9Q9XwN+Nzt9Vd8AR/KxPL/fNtiRbpz8qMhH1RliOFC0vZJG2UsYUEs+AwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF3NtBU3f/YtXLz/1frrNlUfK3IMMB8GA1UdIwQY MBaAFAZh8g+4p+Y117zJTAC+1xebdgj2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm1IeUQ3aW41alhYdk1sTUFMN1hGNXQyQ1BZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9kNmQ0OWItYmM2Zi00Y2U0LTkzMzMt YWQ4ZWRmZTVmMGY3LzEvWGMyMEZUZF85aTFjdlBfVi11czJWUjhyY2d3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9kNmQ0OWItYmM2Zi00Y2U0LTkzMzMtYWQ4ZWRmZTVmMGY3 LzEvQm1IeUQ3aW41alhYdk1sTUFMN1hGNXQyQ1BZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9GJMA0G CSqGSIb3DQEBCwUAA4IBAQAoLmLjJhw1Dxz145tcC6JkNwTvzu15cLec2VNzOeUR +5LNMgQWa9BTuYFF99m7fWW6yZfwm3wybh8+oktenXrQvmHRnwTqBAFVp+gsEBvB lmeNtkKj+3tZNlcQ0PCkv/rCqsxKjsjgjLq+uWRnIiqgeA5U72cDh5dRTmGIsEWL u6ie+8OgW/ZnyPptFhHGxb8QpsfcqzlJ0nyHMW0/v+6WWQFFCfQaRKkvjzmNeA9u UwIboFGs8STgPkUTWb37UDIFj0AzITA3UNd7b9fg3t/9C54vZRyaMSJON4iM7lzo DpFzTpSOeoChFuMpQKrOZTJ2LyX/RixRVN0sE4urskWZ -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:46 2026 by rpki-client