This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/xpFzvNysauejwNurSrVoomGPi2g.roa File: xpFzvNysauejwNurSrVoomGPi2g.roa (raw, json) Hash identifier: ZWen67CGabL9A0ahpVR1yOAZANbCjCBbSuhLawAwcs8= Subject key identifier: C6:91:73:BC:DC:AC:6A:E7:A3:C0:DB:AB:4A:B5:68:A2:61:8F:8B:68 Certificate issuer: /CN=913c5ea2f4eabf3f3c42df3c331e9cba10c93a09 Certificate serial: 019B797ED622EF40EDB6390A58DC9087A6AA Authority key identifier: 91:3C:5E:A2:F4:EA:BF:3F:3C:42:DF:3C:33:1E:9C:BA:10:C9:3A:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTxeovTqvz88Qt88Mx6cuhDJOgk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/xpFzvNysauejwNurSrVoomGPi2g.roa Signing time: Thu 01 Jan 2026 12:18:34 +0000 ROA not before: Thu 01 Jan 2026 12:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59990 IP address blocks: 91.246.76.0/24 maxlen: 24 91.246.77.0/24 maxlen: 24 91.246.78.0/24 maxlen: 24 91.246.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.mft rsync://rpki.ripe.net/repository/DEFAULT/kTxeovTqvz88Qt88Mx6cuhDJOgk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d6:22:ef:40:ed:b6:39:0a:58:dc:90:87:a6:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=913c5ea2f4eabf3f3c42df3c331e9cba10c93a09 Validity Not Before: Jan 1 12:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c69173bcdcac6ae7a3c0dbab4ab568a2618f8b68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e7:ca:20:25:04:d7:85:50:d2:19:d7:73:9f: c1:7f:60:4b:d3:b0:47:62:44:76:21:a4:84:46:f2: a5:db:82:82:76:62:25:80:7e:74:2e:da:e1:09:37: a5:20:5f:e9:a2:76:95:70:b6:ce:de:50:de:a7:99: 98:55:f5:92:45:a1:2b:c5:fa:be:1e:a5:d5:94:0a: 71:17:82:2b:69:a3:b2:d5:ef:5b:50:bb:b4:67:91: 54:76:e8:63:53:b7:4f:b7:09:d6:f5:b3:a2:17:66: e2:cb:a3:02:d5:19:0c:94:2f:93:41:4e:29:9d:e8: c3:43:31:c4:0f:28:bc:a0:4d:b9:24:b8:8f:44:88: 64:3f:b3:99:d9:66:7c:27:4a:24:64:e7:73:fa:19: 56:18:b2:06:87:b9:91:99:8c:29:0c:d8:fd:b0:b1: 8f:c6:56:57:5a:34:a2:e7:dc:0f:a0:46:1a:e5:55: 8c:c9:78:4f:a3:de:2b:25:ec:6d:c7:1b:cf:25:92: 52:e2:fb:c7:8e:f9:4b:f2:07:7a:3a:96:6a:d7:a7: cc:83:d2:39:9d:fa:c7:a2:fe:3b:9e:28:9e:35:ae: ef:ad:40:90:09:5c:34:46:dd:82:8e:53:89:25:56: 2a:be:be:e1:6c:be:4e:bb:14:e6:a8:c3:e6:ad:82: 2f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:91:73:BC:DC:AC:6A:E7:A3:C0:DB:AB:4A:B5:68:A2:61:8F:8B:68 X509v3 Authority Key Identifier: keyid:91:3C:5E:A2:F4:EA:BF:3F:3C:42:DF:3C:33:1E:9C:BA:10:C9:3A:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTxeovTqvz88Qt88Mx6cuhDJOgk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/xpFzvNysauejwNurSrVoomGPi2g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.246.76.0/22 Signature Algorithm: sha256WithRSAEncryption e6:7a:cf:12:26:3d:da:41:26:dd:a0:f7:e5:80:2d:d7:8a:da: ca:b9:7b:96:50:29:9f:07:b6:66:46:52:a5:3b:9e:f9:d4:3a: 12:f6:b1:98:ff:f2:d5:c5:e8:5d:48:a7:e1:aa:60:53:1a:19: eb:f7:b4:9d:9b:3e:b4:98:ff:73:57:1b:0d:6d:0e:32:03:4d: 70:24:c9:11:f4:69:30:33:84:e0:0d:44:3e:74:f2:41:2c:e5: f2:f8:b2:11:04:03:85:01:79:82:82:d8:b4:5d:c5:7d:a0:85: 6f:03:e9:84:75:89:23:84:a0:2e:9a:14:cb:91:90:d5:ea:b2: fd:f3:28:68:ee:42:9d:9d:df:b5:2f:1c:b6:e3:bb:7a:f8:d6: 0c:4c:22:18:0b:49:39:65:7b:4c:50:63:0d:cf:92:88:e2:d1: 68:f5:8b:7f:a0:6c:e1:a2:3f:3b:54:33:c6:71:cc:bc:61:2c: e8:8d:ba:37:2b:07:f5:7d:4f:70:86:32:4e:85:d0:a8:ec:6b: 0d:66:7c:fe:71:ea:f7:a2:c7:26:8f:69:24:13:9f:74:46:ef: 1b:d3:32:e7:ce:85:06:b8:f6:6a:33:87:3e:8c:61:a1:6e:19: fe:67:11:52:b2:4c:24:cd:3b:86:a0:51:a7:4b:ac:d3:38:5a: 65:e5:16:04 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ftYi70DttjkKWNyQh6aqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxM2M1ZWEyZjRlYWJmM2YzYzQyZGYzYzMzMWU5Y2JhMTBj OTNhMDkwHhcNMjYwMTAxMTIxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjkxNzNiY2RjYWM2YWU3YTNjMGRiYWI0YWI1NjhhMjYxOGY4YjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+fKICUE14VQ0hnXc5/Bf2BL07BH YkR2IaSERvKl24KCdmIlgH50LtrhCTelIF/ponaVcLbO3lDep5mYVfWSRaErxfq+ HqXVlApxF4IraaOy1e9bULu0Z5FUduhjU7dPtwnW9bOiF2biy6MC1RkMlC+TQU4p nejDQzHEDyi8oE25JLiPRIhkP7OZ2WZ8J0okZOdz+hlWGLIGh7mRmYwpDNj9sLGP xlZXWjSi59wPoEYa5VWMyXhPo94rJextxxvPJZJS4vvHjvlL8gd6OpZq16fMg9I5 nfrHov47niieNa7vrUCQCVw0Rt2CjlOJJVYqvr7hbL5OuxTmqMPmrYIv6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMaRc7zcrGrno8Dbq0q1aKJhj4toMB8GA1UdIwQY MBaAFJE8XqL06r8/PELfPDMenLoQyToJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1R4ZW92VHF2ejg4UXQ4OE14NmN1aERKT2drLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy80YjQwZDktOTc4ZS00MmEzLTgzMWUt YjEwOGFkOWUyMmM4LzEveHBGenZOeXNhdWVqd051clNyVm9vbUdQaTJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy80YjQwZDktOTc4ZS00MmEzLTgzMWUtYjEwOGFkOWUyMmM4 LzEva1R4ZW92VHF2ejg4UXQ4OE14NmN1aERKT2drLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW/ZMMA0G CSqGSIb3DQEBCwUAA4IBAQDmes8SJj3aQSbdoPflgC3XitrKuXuWUCmfB7ZmRlKl O5751DoS9rGY//LVxehdSKfhqmBTGhnr97Sdmz60mP9zVxsNbQ4yA01wJMkR9Gkw M4TgDUQ+dPJBLOXy+LIRBAOFAXmCgti0XcV9oIVvA+mEdYkjhKAumhTLkZDV6rL9 8yho7kKdnd+1Lxy247t6+NYMTCIYC0k5ZXtMUGMNz5KI4tFo9Yt/oGzhoj87VDPG ccy8YSzojbo3Kwf1fU9whjJOhdCo7GsNZnz+cer3oscmj2kkE590Ru8b0zLnzoUG uPZqM4c+jGGhbhn+ZxFSskwkzTuGoFGnS6zTOFpl5RYE -----END CERTIFICATE-----Generated at Mon Jan 26 20:24:38 2026 by rpki-client