This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/xWBdF-suhv_AQ_y3QjjvHjJhVNY.roa File: xWBdF-suhv_AQ_y3QjjvHjJhVNY.roa (raw, json) Hash identifier: 8ersIxCy3Vp1+jKmiBqzidC6ha48xZVgqBacD5foNJA= Subject key identifier: C5:60:5D:17:EB:2E:86:FF:C0:43:FC:B7:42:38:EF:1E:32:61:54:D6 Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339 Certificate serial: 019B76EB1E227708DC58101042AC2351AE67 Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/xWBdF-suhv_AQ_y3QjjvHjJhVNY.roa Signing time: Thu 01 Jan 2026 00:17:58 +0000 ROA not before: Thu 01 Jan 2026 00:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216127 IP address blocks: 91.108.244.0/24 maxlen: 24 91.108.245.0/24 maxlen: 24 91.108.246.0/24 maxlen: 24 91.108.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:1e:22:77:08:dc:58:10:10:42:ac:23:51:ae:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339 Validity Not Before: Jan 1 00:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5605d17eb2e86ffc043fcb74238ef1e326154d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:69:9c:fb:dc:c5:28:3b:b1:d0:8e:d6:d8:34: 54:e3:ef:94:b5:40:9f:f2:11:55:f3:e1:c6:1f:cd: 85:a6:aa:d7:9c:7a:4c:3e:2f:16:6e:d9:29:8e:75: 66:a9:d8:2c:85:43:cb:b4:24:ce:7f:8e:d8:ab:ec: 78:b2:fa:2d:13:4f:6b:2f:0d:24:65:1f:ae:4c:3b: 16:ce:6d:08:34:70:43:2d:1e:a2:24:3c:4a:b5:30: c0:0a:53:ea:eb:10:9d:e8:fe:7e:35:32:29:b1:b7: 2e:73:ce:1b:81:50:93:dc:bb:77:58:46:74:10:66: d5:66:85:64:57:7f:ec:e1:0a:ee:7b:8e:13:e8:e1: 0d:f1:f6:2e:e0:c0:05:21:20:69:f9:7e:3c:3a:e3: 5d:35:13:08:6a:05:c0:12:39:0f:d9:83:64:9e:9e: 6a:c6:e7:64:07:5b:7f:0f:d1:85:7f:dd:c8:13:9f: 1f:d9:a9:bd:bf:e2:f8:2b:99:be:da:30:05:9a:66: 54:43:7a:12:90:10:84:5f:37:01:18:a5:6a:81:59: a6:f6:fc:8e:44:be:22:25:83:0d:5b:01:cd:3d:f4: 9d:84:5a:cf:a1:b4:c1:e7:af:2f:e7:b0:d7:3e:4c: 17:93:e5:94:1e:c3:c2:89:b6:b9:22:fa:b0:47:22: 14:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:60:5D:17:EB:2E:86:FF:C0:43:FC:B7:42:38:EF:1E:32:61:54:D6 X509v3 Authority Key Identifier: keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/xWBdF-suhv_AQ_y3QjjvHjJhVNY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.108.244.0/22 Signature Algorithm: sha256WithRSAEncryption 69:0a:2b:d9:07:48:2b:0c:f6:0c:04:29:20:8a:75:b1:53:09: 1f:1d:87:11:08:a4:61:31:7f:7f:8a:50:cb:e1:87:4f:a3:00: e5:60:d9:60:4c:35:09:91:b0:02:ca:bb:f1:86:80:b0:02:d9: 8a:b2:f2:7a:56:ea:63:c4:df:84:a3:c2:52:d0:42:23:7d:d4: f1:2d:0c:79:33:a5:7a:07:d1:a4:dc:8d:c0:85:68:d7:e8:ca: 38:88:0d:18:d8:29:a0:54:0f:e1:9b:97:2f:8a:45:12:40:84: f0:05:4a:30:77:85:4f:fd:6e:03:5d:7a:a4:79:8a:de:16:2b: 7a:19:a1:ba:cb:48:f6:87:c6:e1:c1:86:66:18:7b:8e:14:5a: d5:7b:86:83:82:aa:97:c1:f2:2b:67:4f:8c:8a:83:e8:ad:77: 47:c7:12:a4:3f:f3:0a:4d:65:ad:45:ec:c0:83:24:7d:03:9d: 42:5d:75:91:c1:c8:61:33:3b:6c:c7:e4:28:c3:09:3a:e5:9e: 9d:1c:45:51:af:ee:fd:50:5e:9f:d5:f4:ed:7d:c0:c3:a3:f8: 77:db:6f:9f:56:27:7b:b0:4b:4c:10:50:d0:88:d7:c2:7f:8c: 7a:5b:40:e7:33:dd:63:74:81:09:dd:d1:97:14:92:8c:0d:ff: 2c:d5:c9:13 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26x4idwjcWBAQQqwjUa5nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZWU0NTQyNmUxMmU1MGZlMzBlOGZmYzM5ZTA0NDg1ZDhm NzMzMzkwHhcNMjYwMTAxMDAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTYwNWQxN2ViMmU4NmZmYzA0M2ZjYjc0MjM4ZWYxZTMyNjE1NGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWmc+9zFKDux0I7W2DRU4++UtUCf 8hFV8+HGH82FpqrXnHpMPi8WbtkpjnVmqdgshUPLtCTOf47Yq+x4svotE09rLw0k ZR+uTDsWzm0INHBDLR6iJDxKtTDAClPq6xCd6P5+NTIpsbcuc84bgVCT3Lt3WEZ0 EGbVZoVkV3/s4Qrue44T6OEN8fYu4MAFISBp+X48OuNdNRMIagXAEjkP2YNknp5q xudkB1t/D9GFf93IE58f2am9v+L4K5m+2jAFmmZUQ3oSkBCEXzcBGKVqgVmm9vyO RL4iJYMNWwHNPfSdhFrPobTB568v57DXPkwXk+WUHsPCiba5IvqwRyIUawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMVgXRfrLob/wEP8t0I47x4yYVTWMB8GA1UdIwQY MBaAFMLuRUJuEuUP4w6P/DngRIXY9zM5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUt ZGE3NTQzMGIxNmY2LzEveFdCZEYtc3Vodl9BUV95M1FqanZIakpoVk5ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUtZGE3NTQzMGIxNmY2 LzEvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW2z0MA0G CSqGSIb3DQEBCwUAA4IBAQBpCivZB0grDPYMBCkginWxUwkfHYcRCKRhMX9/ilDL 4YdPowDlYNlgTDUJkbACyrvxhoCwAtmKsvJ6VupjxN+Eo8JS0EIjfdTxLQx5M6V6 B9Gk3I3AhWjX6Mo4iA0Y2CmgVA/hm5cvikUSQITwBUowd4VP/W4DXXqkeYreFit6 GaG6y0j2h8bhwYZmGHuOFFrVe4aDgqqXwfIrZ0+MioPorXdHxxKkP/MKTWWtRezA gyR9A51CXXWRwchhMztsx+Qowwk65Z6dHEVRr+79UF6f1fTtfcDDo/h322+fVid7 sEtMEFDQiNfCf4x6W0DnM91jdIEJ3dGXFJKMDf8s1ckT -----END CERTIFICATE-----Generated at Tue Jan 20 15:50:11 2026 by rpki-client