This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/70abb0-7aec-44f5-8583-bebee24feca9/1/xjtZklR-zKEZ526c5JfoxAgcZ98.roa File: xjtZklR-zKEZ526c5JfoxAgcZ98.roa (raw, json) Hash identifier: P/TjyPt4uvrFDGoV5aG27wuJfG3S4it2FVzEdH8POos= Subject key identifier: C6:3B:59:92:54:7E:CC:A1:19:E7:6E:9C:E4:97:E8:C4:08:1C:67:DF Certificate issuer: /CN=3981073c223f751e33d7d40e792f529d1430fa7f Certificate serial: 019B7F858BB9847A8B23ECB0D901BB7C9757 Authority key identifier: 39:81:07:3C:22:3F:75:1E:33:D7:D4:0E:79:2F:52:9D:14:30:FA:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OYEHPCI_dR4z19QOeS9SnRQw-n8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/70abb0-7aec-44f5-8583-bebee24feca9/1/xjtZklR-zKEZ526c5JfoxAgcZ98.roa Signing time: Fri 02 Jan 2026 16:23:36 +0000 ROA not before: Fri 02 Jan 2026 16:23:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41904 IP address blocks: 91.102.216.0/22 maxlen: 22 91.102.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/70abb0-7aec-44f5-8583-bebee24feca9/1/OYEHPCI_dR4z19QOeS9SnRQw-n8.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/70abb0-7aec-44f5-8583-bebee24feca9/1/OYEHPCI_dR4z19QOeS9SnRQw-n8.mft rsync://rpki.ripe.net/repository/DEFAULT/OYEHPCI_dR4z19QOeS9SnRQw-n8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:8b:b9:84:7a:8b:23:ec:b0:d9:01:bb:7c:97:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3981073c223f751e33d7d40e792f529d1430fa7f Validity Not Before: Jan 2 16:23:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c63b5992547ecca119e76e9ce497e8c4081c67df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6c:76:8d:3c:3c:3b:b4:88:e2:12:17:7a:28: aa:5f:91:b6:1c:26:a2:75:38:6d:3c:64:10:f6:38: 11:57:a9:cc:6d:91:3c:6e:b0:e4:20:7c:2b:e1:d3: fa:b9:e9:81:0c:e1:70:f6:6f:ab:aa:c9:c0:40:8f: 85:07:78:ae:32:94:bf:b0:3f:66:61:27:de:d0:b1: 0d:6a:5e:1a:84:50:c6:78:26:9b:b6:d9:e0:14:69: 1d:23:f3:10:09:c1:fb:24:86:d8:ad:93:ef:9b:4a: 1d:92:f3:1d:f6:48:a2:bd:96:e7:3f:94:21:93:03: 44:36:81:4b:84:2c:ae:9f:10:da:19:22:88:5c:80: 1a:89:86:51:98:20:b0:1e:29:90:8f:90:d1:c3:b7: 04:0d:8f:5d:5e:67:41:b4:aa:bc:36:7a:1c:c2:ba: 3d:84:d6:54:21:a4:38:8a:fe:5a:02:fa:15:db:98: 2b:52:59:c5:2e:15:24:36:e0:a3:c3:ba:b8:5d:84: e5:04:0f:a2:f7:e5:e2:eb:cd:63:cd:1f:1b:8a:c3: 1a:8a:e3:33:98:0d:62:19:d6:ce:8f:bf:f8:97:84: 43:b3:f7:3e:b8:cc:7c:82:a7:84:9a:6a:16:e8:ec: 56:b0:a7:8e:88:f1:e7:6b:c9:1d:df:ee:de:e8:7b: 0a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:3B:59:92:54:7E:CC:A1:19:E7:6E:9C:E4:97:E8:C4:08:1C:67:DF X509v3 Authority Key Identifier: keyid:39:81:07:3C:22:3F:75:1E:33:D7:D4:0E:79:2F:52:9D:14:30:FA:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OYEHPCI_dR4z19QOeS9SnRQw-n8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/70abb0-7aec-44f5-8583-bebee24feca9/1/xjtZklR-zKEZ526c5JfoxAgcZ98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/70abb0-7aec-44f5-8583-bebee24feca9/1/OYEHPCI_dR4z19QOeS9SnRQw-n8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.102.216.0/21 Signature Algorithm: sha256WithRSAEncryption b8:1f:6e:4d:ab:df:bd:26:78:73:e9:92:43:ea:c8:d8:f8:7f: 21:be:b5:45:b4:d7:0b:79:14:2a:42:f4:5b:4c:ae:cb:91:ef: 55:76:f0:20:59:c1:e2:00:66:9a:d3:ad:a7:56:77:1b:1a:d8: be:b0:02:3c:1d:9b:88:6b:b7:71:11:51:8f:a8:47:98:3b:9b: a4:e5:fa:8f:e3:6b:64:99:36:bc:28:59:8a:3f:f7:37:3a:5f: bc:cf:07:e9:07:1b:e8:9b:31:6e:27:f4:87:d8:75:70:24:34: 49:e0:84:13:63:fb:21:b4:03:44:51:60:47:07:6d:b0:da:db: 5a:fc:f0:63:07:65:b1:84:f2:de:d0:ea:e1:0a:09:c4:f1:1b: f6:91:d5:f7:26:dc:d6:9d:bc:c9:4e:89:9d:a2:a4:0d:6e:6a: f3:2c:89:93:fb:cb:b4:19:a4:37:b3:4b:04:fc:54:7e:2b:70: bc:01:0e:96:29:5f:33:00:3a:c9:aa:5d:ed:c0:16:43:ff:c3: 79:c0:b8:b5:98:5f:5e:08:23:4a:1f:96:61:87:45:1b:dc:a4: 54:ee:71:93:88:50:0b:11:79:2d:0b:09:52:fc:fb:6c:c5:1a: 58:1e:1d:c1:49:07:93:d9:45:a5:7b:30:a1:65:8f:98:d0:63: 88:33:4e:a5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hYu5hHqLI+yw2QG7fJdXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5ODEwNzNjMjIzZjc1MWUzM2Q3ZDQwZTc5MmY1MjlkMTQz MGZhN2YwHhcNMjYwMTAyMTYyMzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjNiNTk5MjU0N2VjY2ExMTllNzZlOWNlNDk3ZThjNDA4MWM2N2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Wx2jTw8O7SI4hIXeiiqX5G2HCai dThtPGQQ9jgRV6nMbZE8brDkIHwr4dP6uemBDOFw9m+rqsnAQI+FB3iuMpS/sD9m YSfe0LENal4ahFDGeCabttngFGkdI/MQCcH7JIbYrZPvm0odkvMd9kiivZbnP5Qh kwNENoFLhCyunxDaGSKIXIAaiYZRmCCwHimQj5DRw7cEDY9dXmdBtKq8Nnocwro9 hNZUIaQ4iv5aAvoV25grUlnFLhUkNuCjw7q4XYTlBA+i9+Xi681jzR8bisMaiuMz mA1iGdbOj7/4l4RDs/c+uMx8gqeEmmoW6OxWsKeOiPHna8kd3+7e6HsKOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMY7WZJUfsyhGedunOSX6MQIHGffMB8GA1UdIwQY MBaAFDmBBzwiP3UeM9fUDnkvUp0UMPp/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1lFSFBDSV9kUjR6MTlRT2VTOVNuUlF3LW44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS83MGFiYjAtN2FlYy00NGY1LTg1ODMt YmViZWUyNGZlY2E5LzEveGp0WmtsUi16S0VaNTI2YzVKZm94QWdjWjk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS83MGFiYjAtN2FlYy00NGY1LTg1ODMtYmViZWUyNGZlY2E5 LzEvT1lFSFBDSV9kUjR6MTlRT2VTOVNuUlF3LW44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDW2bYMA0G CSqGSIb3DQEBCwUAA4IBAQC4H25Nq9+9Jnhz6ZJD6sjY+H8hvrVFtNcLeRQqQvRb TK7Lke9VdvAgWcHiAGaa062nVncbGti+sAI8HZuIa7dxEVGPqEeYO5uk5fqP42tk mTa8KFmKP/c3Ol+8zwfpBxvomzFuJ/SH2HVwJDRJ4IQTY/shtANEUWBHB22w2tta /PBjB2WxhPLe0OrhCgnE8Rv2kdX3JtzWnbzJTomdoqQNbmrzLImT+8u0GaQ3s0sE /FR+K3C8AQ6WKV8zADrJql3twBZD/8N5wLi1mF9eCCNKH5Zhh0Ub3KRU7nGTiFAL EXktCwlS/PtsxRpYHh3BSQeT2UWlezChZY+Y0GOIM06l -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:29 2026 by rpki-client