This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/1d4994-cfe3-46df-b02d-f776c92207b7/1/XZK8ESeU017UcTyLosKrMbmvFu4.roa File: XZK8ESeU017UcTyLosKrMbmvFu4.roa (raw, json) Hash identifier: QOupiUPzPs9rkbCndSp1pJv9yzcYmDSFdBLs7abwVV0= Subject key identifier: 5D:92:BC:11:27:94:D3:5E:D4:71:3C:8B:A2:C2:AB:31:B9:AF:16:EE Certificate issuer: /CN=93ad6e39991a2e8c09c1ade53be595f8b8a9425e Certificate serial: 019B7BA37435C99A4BFB3CD29EBA7684C9D8 Authority key identifier: 93:AD:6E:39:99:1A:2E:8C:09:C1:AD:E5:3B:E5:95:F8:B8:A9:42:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k61uOZkaLowJwa3lO-WV-LipQl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/1d4994-cfe3-46df-b02d-f776c92207b7/1/XZK8ESeU017UcTyLosKrMbmvFu4.roa Signing time: Thu 01 Jan 2026 22:17:48 +0000 ROA not before: Thu 01 Jan 2026 22:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21173 IP address blocks: 80.91.96.0/20 maxlen: 20 80.91.96.0/21 maxlen: 21 80.91.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/1d4994-cfe3-46df-b02d-f776c92207b7/1/k61uOZkaLowJwa3lO-WV-LipQl4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/1d4994-cfe3-46df-b02d-f776c92207b7/1/k61uOZkaLowJwa3lO-WV-LipQl4.mft rsync://rpki.ripe.net/repository/DEFAULT/k61uOZkaLowJwa3lO-WV-LipQl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:74:35:c9:9a:4b:fb:3c:d2:9e:ba:76:84:c9:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93ad6e39991a2e8c09c1ade53be595f8b8a9425e Validity Not Before: Jan 1 22:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d92bc112794d35ed4713c8ba2c2ab31b9af16ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ec:4b:97:a4:81:3a:f8:ef:d6:33:c5:4b:29: f0:b0:b3:16:ef:27:10:85:f5:62:8b:ac:f0:7c:5a: 1b:4a:64:c3:87:f1:d1:3e:bc:a6:7d:31:63:f1:5c: 38:cd:84:9a:01:d1:63:58:bc:cd:30:ad:dc:41:99: d7:c3:38:e1:a5:9d:74:bf:b6:74:d2:3d:0e:9a:68: 39:63:f7:69:d2:93:a1:82:0c:69:8f:d0:3e:4e:6e: 29:03:01:4e:09:f0:e8:65:a0:f3:f5:99:50:22:33: f9:4a:88:13:cd:ab:4a:8d:84:e7:db:39:f4:57:24: 07:61:bc:05:85:3a:65:bb:51:eb:9b:0e:fc:4a:36: e4:b5:03:4f:f5:06:f1:47:b4:de:47:0f:56:4e:46: 36:67:9c:b7:23:ad:b3:7b:f3:1f:b4:fe:ae:48:27: be:eb:97:2c:62:d8:ce:a7:40:a6:f7:4c:1d:50:f6: 70:4f:69:56:45:d3:b4:ba:ae:e4:33:d6:78:60:82: 92:9c:d1:b6:7f:fc:4f:ed:1c:5a:c2:43:82:8a:4f: 09:82:bb:61:d5:7a:e2:29:94:57:fc:7f:7a:58:b8: f9:dd:68:f3:2a:1d:af:7e:8b:43:38:df:3f:60:0d: 48:10:2a:0d:b3:67:5b:26:9a:b6:83:e4:44:c0:b4: 4e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:92:BC:11:27:94:D3:5E:D4:71:3C:8B:A2:C2:AB:31:B9:AF:16:EE X509v3 Authority Key Identifier: keyid:93:AD:6E:39:99:1A:2E:8C:09:C1:AD:E5:3B:E5:95:F8:B8:A9:42:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k61uOZkaLowJwa3lO-WV-LipQl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1d4994-cfe3-46df-b02d-f776c92207b7/1/XZK8ESeU017UcTyLosKrMbmvFu4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1d4994-cfe3-46df-b02d-f776c92207b7/1/k61uOZkaLowJwa3lO-WV-LipQl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.91.96.0/20 Signature Algorithm: sha256WithRSAEncryption 97:e3:01:6c:b4:bb:6e:08:49:94:f5:a7:f3:3b:b5:4a:2b:0a: 8b:43:50:c5:55:53:1d:58:f6:de:50:bd:16:c3:3b:48:90:d6: 81:24:9d:2a:20:22:08:0c:34:a4:cc:78:48:d0:44:ce:82:79: 2e:23:2a:94:8e:c8:88:c5:0a:05:f9:46:74:39:e8:00:a5:58: eb:06:59:fd:26:f7:94:1d:05:10:d6:f6:ea:81:66:4c:19:c9: d8:69:bc:5a:8e:71:cb:f5:90:9f:6f:f4:d0:cc:bd:91:5d:ae: a7:3b:4c:68:8f:98:71:ef:8f:1f:6c:b5:0d:08:70:14:3c:a5: a4:4e:46:ac:68:95:b5:c8:f5:76:32:48:3f:82:ac:b6:02:90: e1:a4:7f:3a:91:a2:3b:58:b4:96:8c:a1:fb:0a:26:b6:ee:cf: db:41:13:5b:d9:78:3e:2a:cb:99:69:44:a7:63:ec:18:2b:29: dc:86:fd:a8:41:ca:5e:fa:12:38:1d:8f:42:4d:ee:77:05:b3: fe:07:12:3e:13:c8:95:ea:e9:4b:eb:46:9e:f4:77:66:ca:e1: f0:ff:fc:d9:46:a3:1e:f5:43:fd:50:5c:94:b5:01:6a:ec:4a: fd:6d:8b:f8:dd:44:65:d5:57:4c:2b:77:02:f9:b7:cf:8b:a5: f0:3e:9a:1e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o3Q1yZpL+zzSnrp2hMnYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYWQ2ZTM5OTkxYTJlOGMwOWMxYWRlNTNiZTU5NWY4Yjhh OTQyNWUwHhcNMjYwMTAxMjIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDkyYmMxMTI3OTRkMzVlZDQ3MTNjOGJhMmMyYWIzMWI5YWYxNmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOxLl6SBOvjv1jPFSynwsLMW7ycQ hfVii6zwfFobSmTDh/HRPrymfTFj8Vw4zYSaAdFjWLzNMK3cQZnXwzjhpZ10v7Z0 0j0Ommg5Y/dp0pOhggxpj9A+Tm4pAwFOCfDoZaDz9ZlQIjP5SogTzatKjYTn2zn0 VyQHYbwFhTplu1Hrmw78SjbktQNP9QbxR7TeRw9WTkY2Z5y3I62ze/MftP6uSCe+ 65csYtjOp0Cm90wdUPZwT2lWRdO0uq7kM9Z4YIKSnNG2f/xP7RxawkOCik8Jgrth 1XriKZRX/H96WLj53WjzKh2vfotDON8/YA1IECoNs2dbJpq2g+REwLROUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF2SvBEnlNNe1HE8i6LCqzG5rxbuMB8GA1UdIwQY MBaAFJOtbjmZGi6MCcGt5Tvllfi4qUJeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazYxdU9aa2FMb3dKd2EzbE8tV1YtTGlwUWw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8xZDQ5OTQtY2ZlMy00NmRmLWIwMmQt Zjc3NmM5MjIwN2I3LzEvWFpLOEVTZVUwMTdVY1R5TG9zS3JNYm12RnU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8xZDQ5OTQtY2ZlMy00NmRmLWIwMmQtZjc3NmM5MjIwN2I3 LzEvazYxdU9aa2FMb3dKd2EzbE8tV1YtTGlwUWw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEUFtgMA0G CSqGSIb3DQEBCwUAA4IBAQCX4wFstLtuCEmU9afzO7VKKwqLQ1DFVVMdWPbeUL0W wztIkNaBJJ0qICIIDDSkzHhI0ETOgnkuIyqUjsiIxQoF+UZ0OegApVjrBln9JveU HQUQ1vbqgWZMGcnYabxajnHL9ZCfb/TQzL2RXa6nO0xoj5hx748fbLUNCHAUPKWk TkasaJW1yPV2Mkg/gqy2ApDhpH86kaI7WLSWjKH7Cia27s/bQRNb2Xg+KsuZaUSn Y+wYKynchv2oQcpe+hI4HY9CTe53BbP+BxI+E8iV6ulL60ae9HdmyuHw//zZRqMe 9UP9UFyUtQFq7Er9bYv43URl1VdMK3cC+bfPi6XwPpoe -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:27 2026 by rpki-client