This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/456505-ce32-4a5b-a2a8-bd4f7b728995/1/xnRLlo23tZr77P_PlWWHMXafiE0.roa File: xnRLlo23tZr77P_PlWWHMXafiE0.roa (raw, json) Hash identifier: ZOHh3lxyRijBgs+ZpNg6w7UuHGhuEqemVn0XlY7nDQ4= Subject key identifier: C6:74:4B:96:8D:B7:B5:9A:FB:EC:FF:CF:95:65:87:31:76:9F:88:4D Certificate issuer: /CN=12557d4c7e07c6e95cb391292dc11866f6619f5d Certificate serial: 019B46F39E8B1E5C1E2769C4FCDC3923FA72 Authority key identifier: 12:55:7D:4C:7E:07:C6:E9:5C:B3:91:29:2D:C1:18:66:F6:61:9F:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ElV9TH4Hxulcs5EpLcEYZvZhn10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/456505-ce32-4a5b-a2a8-bd4f7b728995/1/xnRLlo23tZr77P_PlWWHMXafiE0.roa Signing time: Mon 22 Dec 2025 16:45:29 +0000 ROA not before: Mon 22 Dec 2025 16:45:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 39686 IP address blocks: 91.212.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/456505-ce32-4a5b-a2a8-bd4f7b728995/1/ElV9TH4Hxulcs5EpLcEYZvZhn10.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/456505-ce32-4a5b-a2a8-bd4f7b728995/1/ElV9TH4Hxulcs5EpLcEYZvZhn10.mft rsync://rpki.ripe.net/repository/DEFAULT/ElV9TH4Hxulcs5EpLcEYZvZhn10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 10:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:f3:9e:8b:1e:5c:1e:27:69:c4:fc:dc:39:23:fa:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12557d4c7e07c6e95cb391292dc11866f6619f5d Validity Not Before: Dec 22 16:45:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c6744b968db7b59afbecffcf95658731769f884d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:03:64:c9:50:4a:e2:de:fe:d3:30:cf:c1:be: 9e:59:31:c5:ab:bb:ac:6d:c4:f8:3b:6c:6c:61:d4: 59:70:b1:ba:b5:45:4b:a2:be:70:e4:0c:0a:76:24: 3b:a8:33:d4:f9:4e:f9:cc:30:a6:27:e8:cd:cc:61: a3:a3:5a:af:32:05:9d:7c:f8:31:2e:03:08:a6:d6: ba:f1:aa:8a:1d:ea:c8:25:98:8b:30:29:c9:61:df: c5:a8:bb:39:7b:fd:92:04:20:b8:92:f3:9f:c9:5e: 4d:da:f3:0f:f0:45:c7:0d:a3:2e:65:68:51:98:84: 1e:f0:c6:6a:ad:44:b1:e4:a7:3a:58:1e:3d:f2:c4: 64:4e:4a:01:78:70:da:7d:74:c0:a7:13:ab:f8:67: 36:17:53:a3:2d:5d:dc:27:f3:50:1d:0a:7a:bc:ef: 60:af:2b:ef:64:f4:d7:ff:41:fb:7c:6c:85:c0:df: 16:43:d0:a1:bc:91:33:df:a0:ac:22:9c:f1:a9:36: 73:b6:7d:b8:89:33:63:be:a0:3f:05:fe:cd:9c:5c: fb:99:ea:d8:87:0d:e4:9c:38:f9:df:e7:cc:9e:09: 9f:24:47:bf:84:51:ed:93:5e:69:13:85:29:c4:66: 0e:34:69:f6:26:28:4a:f5:fc:88:85:48:08:d2:52: 6e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:74:4B:96:8D:B7:B5:9A:FB:EC:FF:CF:95:65:87:31:76:9F:88:4D X509v3 Authority Key Identifier: keyid:12:55:7D:4C:7E:07:C6:E9:5C:B3:91:29:2D:C1:18:66:F6:61:9F:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ElV9TH4Hxulcs5EpLcEYZvZhn10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/456505-ce32-4a5b-a2a8-bd4f7b728995/1/xnRLlo23tZr77P_PlWWHMXafiE0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/456505-ce32-4a5b-a2a8-bd4f7b728995/1/ElV9TH4Hxulcs5EpLcEYZvZhn10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.104.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:ac:b8:cf:f9:cc:01:5f:0f:ab:2f:db:2a:7e:db:a0:e2:5f: 4f:73:57:5c:3b:23:d1:0d:b3:b6:5e:f9:cb:db:79:06:73:70: f5:89:1a:8a:a1:05:07:1a:03:a2:ba:8b:88:1b:fd:4f:8f:61: 8b:01:73:ea:82:84:4c:f6:29:a1:c6:7f:d0:e6:66:96:77:41: 84:ec:02:26:e1:d1:47:f1:d4:38:a6:ed:45:79:27:bd:fc:6e: 5a:42:62:c6:7a:97:23:12:81:89:95:ea:eb:c3:02:cb:9e:1d: b2:60:ad:49:db:09:98:1e:13:82:0f:7f:91:ef:2a:f9:bc:69: 03:ee:0a:4a:31:31:ac:50:d9:66:23:b6:d5:da:11:72:92:d2: 64:a3:29:1a:6e:98:a6:c6:24:4a:73:8a:59:22:42:34:7e:95: 48:6e:69:5c:7d:9b:1b:5f:7d:ae:94:e3:0b:5c:0a:2c:52:5c: 49:f8:fa:31:68:e1:f4:76:17:ac:72:3e:24:c2:17:20:65:a3: f0:e3:d7:1e:0e:4b:2d:c6:04:64:38:48:37:ac:34:1c:51:cd: e9:ed:21:4a:24:84:63:e3:78:66:4b:12:f3:91:2b:45:82:8d: cb:cb:f8:d8:12:77:78:e4:b0:e3:a4:2a:a7:16:65:59:5d:c8: 94:26:d6:a1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZtG856LHlweJ2nE/Nw5I/pyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNTU3ZDRjN2UwN2M2ZTk1Y2IzOTEyOTJkYzExODY2ZjY2 MTlmNWQwHhcNMjUxMjIyMTY0NTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjc0NGI5NjhkYjdiNTlhZmJlY2ZmY2Y5NTY1ODczMTc2OWY4ODRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuANkyVBK4t7+0zDPwb6eWTHFq7us bcT4O2xsYdRZcLG6tUVLor5w5AwKdiQ7qDPU+U75zDCmJ+jNzGGjo1qvMgWdfPgx LgMIpta68aqKHerIJZiLMCnJYd/FqLs5e/2SBCC4kvOfyV5N2vMP8EXHDaMuZWhR mIQe8MZqrUSx5Kc6WB498sRkTkoBeHDafXTApxOr+Gc2F1OjLV3cJ/NQHQp6vO9g ryvvZPTX/0H7fGyFwN8WQ9ChvJEz36CsIpzxqTZztn24iTNjvqA/Bf7NnFz7merY hw3knDj53+fMngmfJEe/hFHtk15pE4UpxGYONGn2JihK9fyIhUgI0lJumwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMZ0S5aNt7Wa++z/z5VlhzF2n4hNMB8GA1UdIwQY MBaAFBJVfUx+B8bpXLORKS3BGGb2YZ9dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWxWOVRINEh4dWxjczVFcExjRVladlpobjEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi80NTY1MDUtY2UzMi00YTViLWEyYTgt YmQ0ZjdiNzI4OTk1LzEveG5STGxvMjN0WnI3N1BfUGxXV0hNWGFmaUUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi80NTY1MDUtY2UzMi00YTViLWEyYTgtYmQ0ZjdiNzI4OTk1 LzEvRWxWOVRINEh4dWxjczVFcExjRVladlpobjEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9RoMA0G CSqGSIb3DQEBCwUAA4IBAQCKrLjP+cwBXw+rL9sqftug4l9Pc1dcOyPRDbO2XvnL 23kGc3D1iRqKoQUHGgOiuouIG/1Pj2GLAXPqgoRM9imhxn/Q5maWd0GE7AIm4dFH 8dQ4pu1FeSe9/G5aQmLGepcjEoGJlerrwwLLnh2yYK1J2wmYHhOCD3+R7yr5vGkD 7gpKMTGsUNlmI7bV2hFyktJkoykabpimxiRKc4pZIkI0fpVIbmlcfZsbX32ulOML XAosUlxJ+PoxaOH0dhescj4kwhcgZaPw49ceDkstxgRkOEg3rDQcUc3p7SFKJIRj 43hmSxLzkStFgo3Ly/jYEnd45LDjpCqnFmVZXciUJtah -----END CERTIFICATE-----Generated at Fri Dec 26 17:18:14 2025 by rpki-client