This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/xcl8Mchdt2Btj0g0JgHt3h-tIy4.roa File: xcl8Mchdt2Btj0g0JgHt3h-tIy4.roa (raw, json) Hash identifier: twnaq1xQPxN5fRVUCsGjR65lc9BgzkyPJDAj5uIrBv0= Subject key identifier: C5:C9:7C:31:C8:5D:B7:60:6D:8F:48:34:26:01:ED:DE:1F:AD:23:2E Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4 Certificate serial: 019B77C70272E93C138580FDB64E30440980 Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/xcl8Mchdt2Btj0g0JgHt3h-tIy4.roa Signing time: Thu 01 Jan 2026 04:18:09 +0000 ROA not before: Thu 01 Jan 2026 04:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212669 IP address blocks: 91.193.234.0/24 maxlen: 24 91.193.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:02:72:e9:3c:13:85:80:fd:b6:4e:30:44:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4 Validity Not Before: Jan 1 04:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5c97c31c85db7606d8f48342601edde1fad232e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b4:83:d6:82:8b:e2:82:10:b0:e4:7a:5e:df: f6:dc:bb:a8:ac:d2:26:41:19:35:df:3f:7e:d5:41: 5e:37:73:68:22:39:fb:74:9d:de:ad:72:33:f2:22: 0b:79:1f:6b:a7:16:8d:33:84:69:e2:24:a7:39:9a: 51:d0:9a:00:7a:58:f8:f5:ec:09:63:bf:e0:83:6a: a2:64:0a:82:c1:0d:9b:9c:92:40:a9:90:e9:8a:9c: 53:17:cc:8b:db:16:74:a2:86:cf:94:9e:ec:4b:e1: 7a:27:64:f1:2d:62:36:27:ef:ae:2f:79:dc:33:4a: 85:1c:b1:77:2d:69:41:52:d7:a2:aa:40:ca:00:62: 60:7e:a2:42:f2:4d:e3:ca:bd:75:a7:1e:11:1c:fd: 86:ec:f5:83:79:4f:2b:8b:50:a3:90:5d:70:b8:07: 49:0b:9c:46:7d:60:b8:9f:de:a3:98:73:ca:36:7e: 4a:2c:97:a2:99:86:14:97:cf:a5:f3:2e:2f:e5:64: 02:74:d5:bf:64:f3:91:f0:8b:b9:a1:e1:e7:d5:fd: 98:d2:a7:99:42:19:3c:25:9c:cf:61:c7:df:fe:e1: 1a:6a:4c:5d:ae:fb:6c:95:be:c5:3c:d6:b2:2b:62: 19:93:89:6d:0a:42:6c:58:72:e0:f2:36:04:1c:38: f8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C9:7C:31:C8:5D:B7:60:6D:8F:48:34:26:01:ED:DE:1F:AD:23:2E X509v3 Authority Key Identifier: keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/xcl8Mchdt2Btj0g0JgHt3h-tIy4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.193.234.0/23 Signature Algorithm: sha256WithRSAEncryption 20:51:e9:26:50:6b:80:cf:a9:f5:05:a2:fc:ee:4c:c2:2e:1e: 48:ed:86:cc:9f:63:56:cb:e0:e6:ed:2e:a3:af:f1:f5:6a:82: 23:9c:73:0a:03:b4:ae:9a:63:00:50:41:90:8e:f8:ba:da:7a: b2:6c:38:41:42:73:f7:42:2f:a7:d1:cb:3b:7a:72:20:ed:2e: e2:14:02:8f:49:d3:d3:5c:c2:da:10:51:20:8a:72:04:28:94: fd:fb:e7:79:50:83:65:24:b0:f9:1c:16:30:6c:07:85:bb:07: 69:76:35:77:e9:9f:5d:56:81:62:97:05:50:e3:16:7c:71:0b: 66:12:fb:cf:54:73:ab:96:5b:c2:86:02:1a:18:82:8c:92:74: 42:dc:72:6c:fe:d9:94:93:03:fd:7c:0f:9d:e6:13:0c:79:a1: 8d:f3:00:5f:2c:2c:fa:f4:a6:1b:d0:f8:4e:f9:c9:4c:02:cd: cf:ed:4d:21:87:2b:34:5a:2e:6f:d1:76:28:b7:26:85:de:79: 11:f5:aa:f4:78:6f:dc:94:60:e8:53:9d:a7:6e:ff:20:ad:c1: 4f:38:0e:8b:6c:a0:4c:d7:ef:04:bc:16:d0:4c:b4:2b:b5:9a: 28:80:13:d9:3d:3b:4b:e6:41:96:e2:90:50:8f:c1:23:8c:5c: db:28:98:bf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xwJy6TwThYD9tk4wRAmAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNWIzMzQ5NjU3ODg3OTRkNmYxNDdhMmYwMDRkMTNiZTMy NTdkYzQwHhcNMjYwMTAxMDQxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNWM5N2MzMWM4NWRiNzYwNmQ4ZjQ4MzQyNjAxZWRkZTFmYWQyMzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7SD1oKL4oIQsOR6Xt/23LuorNIm QRk13z9+1UFeN3NoIjn7dJ3erXIz8iILeR9rpxaNM4Rp4iSnOZpR0JoAelj49ewJ Y7/gg2qiZAqCwQ2bnJJAqZDpipxTF8yL2xZ0oobPlJ7sS+F6J2TxLWI2J++uL3nc M0qFHLF3LWlBUteiqkDKAGJgfqJC8k3jyr11px4RHP2G7PWDeU8ri1CjkF1wuAdJ C5xGfWC4n96jmHPKNn5KLJeimYYUl8+l8y4v5WQCdNW/ZPOR8Iu5oeHn1f2Y0qeZ Qhk8JZzPYcff/uEaakxdrvtslb7FPNayK2IZk4ltCkJsWHLg8jYEHDj4qQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMXJfDHIXbdgbY9INCYB7d4frSMuMB8GA1UdIwQY MBaAFB5bM0lleIeU1vFHovAE0TvjJX3EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDIt OTk5MGUyZDllYWZlLzEveGNsOE1jaGR0MkJ0ajBnMEpnSHQzaC10SXk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDItOTk5MGUyZDllYWZl LzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW8HqMA0G CSqGSIb3DQEBCwUAA4IBAQAgUekmUGuAz6n1BaL87kzCLh5I7YbMn2NWy+Dm7S6j r/H1aoIjnHMKA7SummMAUEGQjvi62nqybDhBQnP3Qi+n0cs7enIg7S7iFAKPSdPT XMLaEFEginIEKJT9++d5UINlJLD5HBYwbAeFuwdpdjV36Z9dVoFilwVQ4xZ8cQtm EvvPVHOrllvChgIaGIKMknRC3HJs/tmUkwP9fA+d5hMMeaGN8wBfLCz69KYb0PhO +clMAs3P7U0hhys0Wi5v0XYotyaF3nkR9ar0eG/clGDoU52nbv8grcFPOA6LbKBM 1+8EvBbQTLQrtZoogBPZPTtL5kGW4pBQj8EjjFzbKJi/ -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:55 2026 by rpki-client