This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/xeVq-PBuKK_SBfzuo8r_1P3J9i0.roa File: xeVq-PBuKK_SBfzuo8r_1P3J9i0.roa (raw, json) Hash identifier: nSDj1T3Jr53LrWElVUryMfTC/F/bH2T8+fPwvgYwitI= Subject key identifier: C5:E5:6A:F8:F0:6E:28:AF:D2:05:FC:EE:A3:CA:FF:D4:FD:C9:F6:2D Certificate issuer: /CN=8453d1e8618ef8fae8075ddd58270d094006be99 Certificate serial: 019B79EBBF85D95C1BC7DD7E242343E6E086 Authority key identifier: 84:53:D1:E8:61:8E:F8:FA:E8:07:5D:DD:58:27:0D:09:40:06:BE:99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/xeVq-PBuKK_SBfzuo8r_1P3J9i0.roa Signing time: Thu 01 Jan 2026 14:17:31 +0000 ROA not before: Thu 01 Jan 2026 14:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59577 IP address blocks: 91.201.232.0/22 maxlen: 22 178.216.14.0/24 maxlen: 24 195.72.144.0/24 maxlen: 24 195.72.145.0/24 maxlen: 24 195.72.146.0/24 maxlen: 24 2a12:5b80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:bf:85:d9:5c:1b:c7:dd:7e:24:23:43:e6:e0:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8453d1e8618ef8fae8075ddd58270d094006be99 Validity Not Before: Jan 1 14:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5e56af8f06e28afd205fceea3caffd4fdc9f62d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:94:5d:37:6a:de:08:20:98:8c:68:e5:bf:0d: 8e:b9:4a:d7:58:f2:fb:a7:4d:1f:62:00:6c:9e:04: a0:0f:83:ce:92:74:1a:f4:36:ba:0a:f5:30:e6:f3: bf:88:c2:6a:24:be:77:4e:84:57:43:8b:10:57:ba: 1f:4b:b0:f9:07:48:a2:16:ac:3b:29:fa:a9:11:2c: 1a:e6:c6:b2:30:97:83:f7:cc:b2:23:33:6d:f4:ca: bc:10:bd:b7:f1:b3:d1:17:22:b1:1e:f0:3a:cb:69: 48:19:2f:dc:bc:0a:88:67:6c:93:8e:00:3c:d9:bc: 6f:0d:61:c2:47:da:36:a4:16:77:95:68:5c:58:a3: fa:2d:37:3e:49:f2:bd:4a:49:34:63:df:89:2b:fc: 9a:ab:4d:97:ed:5f:98:f1:1f:9f:cb:e8:de:4f:af: 63:a8:8d:aa:31:6a:ad:23:d6:a7:61:ab:66:31:04: 9e:d0:30:1f:7e:f2:1d:74:40:56:1f:c6:91:c9:9d: c9:b4:8a:58:c6:cf:27:54:51:7d:5e:21:4d:a2:3b: 1e:c5:b9:08:b0:0e:da:46:0c:5d:22:ee:0f:69:b5: cb:f2:29:51:fa:1d:d9:fe:76:2a:89:19:09:ef:15: 81:b4:0b:ff:30:a9:c6:a3:e0:91:8c:3a:f2:0c:74: 27:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E5:6A:F8:F0:6E:28:AF:D2:05:FC:EE:A3:CA:FF:D4:FD:C9:F6:2D X509v3 Authority Key Identifier: keyid:84:53:D1:E8:61:8E:F8:FA:E8:07:5D:DD:58:27:0D:09:40:06:BE:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/xeVq-PBuKK_SBfzuo8r_1P3J9i0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.201.232.0/22 178.216.14.0/24 195.72.144.0-195.72.146.255 IPv6: 2a12:5b80::/29 Signature Algorithm: sha256WithRSAEncryption 59:4e:4b:bd:00:80:49:6a:da:2b:f5:32:32:17:49:7f:82:30: 50:94:a9:80:22:80:51:64:6c:54:35:f0:4e:70:b2:f7:be:43: 82:1f:90:2b:65:33:ef:80:77:3f:85:1a:68:40:30:69:fe:ad: 2e:f2:3e:09:86:ee:58:db:f3:b3:71:7f:16:18:c3:21:e7:b2: d7:74:3f:77:11:fd:5d:45:f4:b2:fe:d3:dc:fa:ac:6f:f4:1e: c9:7c:17:3b:89:bd:6d:19:50:f2:27:73:eb:38:18:50:3d:32: b1:27:cd:7c:30:b9:9b:9a:5c:81:41:7a:3a:f9:1a:54:f8:22: bf:fb:87:e7:74:33:57:3a:01:13:7c:90:45:fd:20:2e:86:ed: 5e:aa:d9:8a:63:8a:64:25:12:d9:50:31:ed:c8:96:ef:f7:e9: 93:51:84:0a:04:3c:ac:cd:91:50:ab:2a:fa:0b:00:b1:f7:a7: e8:74:c3:ee:ae:2f:5b:6b:75:78:d1:d4:a8:8f:31:18:87:fd: 51:4c:bd:9a:81:be:22:fc:b2:78:16:43:0e:fb:81:c3:6d:02: b6:e5:c9:52:89:f3:3e:16:db:87:6a:ba:54:7e:67:52:37:6b: 11:ba:77:44:61:59:af:dc:8b:b7:8f:d3:96:00:16:40:68:d1: 26:3c:f5:58 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt567+F2Vwbx91+JCND5uCGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NTNkMWU4NjE4ZWY4ZmFlODA3NWRkZDU4MjcwZDA5NDAw NmJlOTkwHhcNMjYwMTAxMTQxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNWU1NmFmOGYwNmUyOGFmZDIwNWZjZWVhM2NhZmZkNGZkYzlmNjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZRdN2reCCCYjGjlvw2OuUrXWPL7 p00fYgBsngSgD4POknQa9Da6CvUw5vO/iMJqJL53ToRXQ4sQV7ofS7D5B0iiFqw7 KfqpESwa5sayMJeD98yyIzNt9Mq8EL238bPRFyKxHvA6y2lIGS/cvAqIZ2yTjgA8 2bxvDWHCR9o2pBZ3lWhcWKP6LTc+SfK9Skk0Y9+JK/yaq02X7V+Y8R+fy+jeT69j qI2qMWqtI9anYatmMQSe0DAffvIddEBWH8aRyZ3JtIpYxs8nVFF9XiFNojsexbkI sA7aRgxdIu4PabXL8ilR+h3Z/nYqiRkJ7xWBtAv/MKnGo+CRjDryDHQnXwIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFMXlavjwbiiv0gX87qPK/9T9yfYtMB8GA1UdIwQY MBaAFIRT0ehhjvj66Add3VgnDQlABr6ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEZQUjZHR08tUHJvQjEzZFdDY05DVUFHdnBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83ODBjMzQtMTgzYi00NmY0LWI5NjEt ZDRhZTQwNzEzMjhmLzEveGVWcS1QQnVLS19TQmZ6dW84cl8xUDNKOWkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy83ODBjMzQtMTgzYi00NmY0LWI5NjEtZDRhZTQwNzEzMjhm LzEvaEZQUjZHR08tUHJvQjEzZFdDY05DVUFHdnBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaAwQCW8noAwQA stgOMAwDBATDSJADBADDSJIwDQQCAAIwBwMFAyoSW4AwDQYJKoZIhvcNAQELBQAD ggEBAFlOS70AgElq2iv1MjIXSX+CMFCUqYAigFFkbFQ18E5wsve+Q4IfkCtlM++A dz+FGmhAMGn+rS7yPgmG7ljb87NxfxYYwyHnstd0P3cR/V1F9LL+09z6rG/0Hsl8 FzuJvW0ZUPInc+s4GFA9MrEnzXwwuZuaXIFBejr5GlT4Ir/7h+d0M1c6ARN8kEX9 IC6G7V6q2YpjimQlEtlQMe3Ilu/36ZNRhAoEPKzNkVCrKvoLALH3p+h0w+6uL1tr dXjR1KiPMRiH/VFMvZqBviL8sngWQw77gcNtArblyVKJ8z4W24dqulR+Z1I3axG6 d0RhWa/ci7eP05YAFkBo0SY89Vg= -----END CERTIFICATE-----Generated at Mon Jan 26 13:46:21 2026 by rpki-client