This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/_XqYGA-pEt3m7_s_CPxyp7qJP2A.roa File: _XqYGA-pEt3m7_s_CPxyp7qJP2A.roa (raw, json) Hash identifier: O6ZYesqoa27MzcbxuiFVeMgVEHpdjgSyZyr0JNr1ZEU= Subject key identifier: FD:7A:98:18:0F:A9:12:DD:E6:EF:FB:3F:08:FC:72:A7:BA:89:3F:60 Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4 Certificate serial: 019B77C6FCE5C8A3B1B40AA30D68D2F03D6D Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/_XqYGA-pEt3m7_s_CPxyp7qJP2A.roa Signing time: Thu 01 Jan 2026 04:18:08 +0000 ROA not before: Thu 01 Jan 2026 04:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63199 IP address blocks: 91.193.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:fc:e5:c8:a3:b1:b4:0a:a3:0d:68:d2:f0:3d:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4 Validity Not Before: Jan 1 04:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd7a98180fa912dde6effb3f08fc72a7ba893f60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:9f:ce:25:fe:00:32:39:9e:71:36:3a:e9:2a: 20:19:d9:6c:cb:94:48:9b:93:36:49:d0:3c:25:c8: 80:6d:e7:af:cf:8c:5b:fc:47:91:e8:43:fc:85:e9: 12:70:75:15:02:14:18:f2:5e:19:44:59:8a:9c:e4: 54:e9:ab:e6:e3:4b:9c:2a:4c:69:90:89:af:dd:1a: 20:0d:57:5c:42:47:8d:69:5e:9f:d8:20:62:da:f8: 1a:3c:db:35:88:39:21:ca:ab:b2:aa:08:44:20:98: 18:ac:07:39:61:00:0c:cb:76:fb:63:d1:a6:97:34: bd:26:2f:16:26:23:30:40:e7:f9:ed:e0:9d:01:b0: 53:dd:66:fc:63:2b:31:dd:d8:e2:f3:79:a6:2d:68: 85:b3:d6:97:16:74:09:f1:60:66:16:73:c6:2a:a9: 14:75:7d:55:6a:07:48:45:db:64:60:f9:d5:c6:9f: 64:6e:5c:b6:30:6d:d9:87:7d:12:fb:c0:83:62:8f: 5e:5e:e4:be:b5:4d:c2:79:fc:63:60:37:f1:27:02: 81:84:6b:77:9a:21:c1:24:64:d5:6f:75:b2:c2:ff: 1d:44:46:83:96:34:df:20:b5:c5:15:27:30:2d:ac: 8c:97:6d:d1:30:6b:b7:20:0c:65:20:a3:cb:01:41: f6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:7A:98:18:0F:A9:12:DD:E6:EF:FB:3F:08:FC:72:A7:BA:89:3F:60 X509v3 Authority Key Identifier: keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/_XqYGA-pEt3m7_s_CPxyp7qJP2A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.193.233.0/24 Signature Algorithm: sha256WithRSAEncryption a3:a8:40:04:ef:2c:4c:99:d7:f6:bb:81:a5:1c:ef:95:cc:6d: 04:19:a4:21:33:8b:4c:c5:ad:76:fd:74:67:1c:a4:aa:8b:3c: b1:21:2d:ce:7d:13:48:69:57:d1:c0:5a:25:44:a8:30:9a:2c: f9:d7:2f:b0:f7:9e:ab:41:96:32:c0:97:83:7b:51:9d:c6:bb: 88:75:bb:93:ff:a4:a7:8f:3a:0a:1d:fd:7b:e9:1b:09:65:eb: 23:76:6b:00:77:99:12:bc:78:38:0d:ca:ff:f7:d9:15:d0:37: 37:4d:31:eb:70:4a:96:a9:12:b5:3f:27:a7:33:78:77:e3:1f: b9:1b:51:5b:50:84:57:75:fa:db:a5:d0:c2:d0:6d:ee:89:06: a4:3e:16:a2:e0:1e:93:a9:ac:ef:9c:30:df:08:2d:92:06:f0: 98:72:ac:fc:93:5d:1c:1a:6b:6d:ef:bf:f9:ef:26:43:f8:2d: b5:be:c5:fe:8c:c4:05:bb:b3:94:6f:69:e4:c9:df:19:f3:68: c1:10:1e:56:5e:1a:4a:f1:09:5b:15:01:de:7c:c2:ee:8b:ca: b6:95:66:57:ac:58:7f:89:fc:5f:48:80:5d:64:de:8f:46:4c: fd:16:a2:ae:23:36:ed:3a:a8:28:48:8f:f5:01:20:d0:ee:28: 67:ff:7b:32 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xvzlyKOxtAqjDWjS8D1tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNWIzMzQ5NjU3ODg3OTRkNmYxNDdhMmYwMDRkMTNiZTMy NTdkYzQwHhcNMjYwMTAxMDQxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDdhOTgxODBmYTkxMmRkZTZlZmZiM2YwOGZjNzJhN2JhODkzZjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4J/OJf4AMjmecTY66SogGdlsy5RI m5M2SdA8JciAbeevz4xb/EeR6EP8hekScHUVAhQY8l4ZRFmKnORU6avm40ucKkxp kImv3RogDVdcQkeNaV6f2CBi2vgaPNs1iDkhyquyqghEIJgYrAc5YQAMy3b7Y9Gm lzS9Ji8WJiMwQOf57eCdAbBT3Wb8Yysx3dji83mmLWiFs9aXFnQJ8WBmFnPGKqkU dX1VagdIRdtkYPnVxp9kbly2MG3Zh30S+8CDYo9eXuS+tU3CefxjYDfxJwKBhGt3 miHBJGTVb3Wywv8dREaDljTfILXFFScwLayMl23RMGu3IAxlIKPLAUH2GwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP16mBgPqRLd5u/7Pwj8cqe6iT9gMB8GA1UdIwQY MBaAFB5bM0lleIeU1vFHovAE0TvjJX3EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDIt OTk5MGUyZDllYWZlLzEvX1hxWUdBLXBFdDNtN19zX0NQeHlwN3FKUDJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDItOTk5MGUyZDllYWZl LzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8HpMA0G CSqGSIb3DQEBCwUAA4IBAQCjqEAE7yxMmdf2u4GlHO+VzG0EGaQhM4tMxa12/XRn HKSqizyxIS3OfRNIaVfRwFolRKgwmiz51y+w956rQZYywJeDe1GdxruIdbuT/6Sn jzoKHf176RsJZesjdmsAd5kSvHg4Dcr/99kV0Dc3TTHrcEqWqRK1PyenM3h34x+5 G1FbUIRXdfrbpdDC0G3uiQakPhai4B6TqazvnDDfCC2SBvCYcqz8k10cGmtt77/5 7yZD+C21vsX+jMQFu7OUb2nkyd8Z82jBEB5WXhpK8QlbFQHefMLui8q2lWZXrFh/ ifxfSIBdZN6PRkz9FqKuIzbtOqgoSI/1ASDQ7ihn/3sy -----END CERTIFICATE-----Generated at Mon Jan 19 17:08:26 2026 by rpki-client