This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/xLJtQXm9P6maxGC-hxArjHM1WvQ.roa File: xLJtQXm9P6maxGC-hxArjHM1WvQ.roa (raw, json) Hash identifier: fh/uCHUwOCAmoBiX5Ih0Qna/9cR2PxvxnSe6Xn99zr4= Subject key identifier: C4:B2:6D:41:79:BD:3F:A9:9A:C4:60:BE:87:10:2B:8C:73:35:5A:F4 Certificate issuer: /CN=4b70a3a6c4a85725037598b3913e21869dbdd38d Certificate serial: 019B7E37524EB1257F42E2C47C1F107D2130 Authority key identifier: 4B:70:A3:A6:C4:A8:57:25:03:75:98:B3:91:3E:21:86:9D:BD:D3:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/xLJtQXm9P6maxGC-hxArjHM1WvQ.roa Signing time: Fri 02 Jan 2026 10:18:33 +0000 ROA not before: Fri 02 Jan 2026 10:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197444 IP address blocks: 91.217.52.0/23 maxlen: 23 91.221.148.0/23 maxlen: 23 217.26.221.0/24 maxlen: 24 2001:67c:2038::/48 maxlen: 48 2a13:50c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:52:4e:b1:25:7f:42:e2:c4:7c:1f:10:7d:21:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b70a3a6c4a85725037598b3913e21869dbdd38d Validity Not Before: Jan 2 10:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4b26d4179bd3fa99ac460be87102b8c73355af4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3c:75:36:33:15:8d:02:82:57:dd:7d:1b:04: a1:ec:b5:08:de:74:0c:d5:d6:9f:3d:50:b6:af:3a: 3d:37:07:38:c6:1c:b6:2f:21:ba:43:50:22:06:77: dc:39:64:c6:32:a0:82:e7:f2:7d:bc:b3:f2:c6:ec: b2:76:9f:7d:18:b9:ad:11:52:4d:9c:be:4c:8f:51: c7:a2:39:c3:26:37:98:2a:14:19:90:86:aa:7f:e8: 50:a4:79:1d:82:8c:49:85:55:13:4e:a7:95:7c:6a: c0:51:87:96:10:97:3c:76:49:fb:9b:89:ae:28:53: 15:27:86:0d:28:67:3b:e1:1f:81:f0:2d:ec:de:6c: 62:fe:fa:48:9f:98:da:b5:f4:37:44:cf:13:79:61: c2:96:4b:96:34:cc:59:79:02:74:63:80:2b:6d:04: de:84:9e:1b:81:b5:5c:a9:4f:4d:5c:1a:68:7b:ec: 4c:31:12:c3:72:0f:27:18:aa:a6:1a:ba:97:9c:4c: 5b:e6:46:c4:d3:c4:c5:a6:21:1d:21:f5:3b:eb:da: 1d:89:ea:3a:63:a4:95:a7:7a:fc:f3:c6:99:6f:8e: 70:f4:10:33:d5:74:75:af:a3:6d:77:39:1e:6b:42: 0b:b1:af:f6:f1:df:9d:9a:6c:a1:84:d9:59:b9:4c: fd:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B2:6D:41:79:BD:3F:A9:9A:C4:60:BE:87:10:2B:8C:73:35:5A:F4 X509v3 Authority Key Identifier: keyid:4B:70:A3:A6:C4:A8:57:25:03:75:98:B3:91:3E:21:86:9D:BD:D3:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/xLJtQXm9P6maxGC-hxArjHM1WvQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.52.0/23 91.221.148.0/23 217.26.221.0/24 IPv6: 2001:67c:2038::/48 2a13:50c0::/29 Signature Algorithm: sha256WithRSAEncryption 79:31:0c:76:e5:9a:37:ee:ef:21:d5:61:66:18:29:97:fe:b5: 9b:ba:d3:65:fd:c5:b2:3f:28:82:bc:01:3b:b6:1a:a5:e6:19: 5b:8e:da:f1:d5:b5:32:de:f6:a1:51:ed:5f:34:e3:d5:9d:6c: 14:9c:81:34:29:10:23:6d:40:4a:1b:cc:c3:21:7d:89:0e:e1: b2:78:2c:e9:ba:2c:29:cd:36:e2:b4:ec:d5:16:b2:67:3f:ca: c9:ff:f7:ea:f6:78:51:a7:3e:cf:5a:08:51:21:37:4d:50:c8: a3:3e:13:d3:15:4f:dc:9c:85:6e:c5:15:a1:64:85:11:5d:73: 75:39:4e:46:45:68:f3:b3:3e:60:75:86:50:8d:1c:58:f2:53: ef:1f:0d:0c:b1:6c:2d:02:f9:2f:98:ff:5b:62:46:e6:e7:3d: 39:73:19:c0:be:50:04:26:e1:f0:dc:83:82:b7:5a:9f:bb:05: fb:e3:c1:d3:c3:04:d5:b8:05:73:7b:25:14:42:8f:bb:6e:d6: a6:44:26:cb:88:dd:22:34:81:43:90:a3:bd:c6:20:9c:d6:da: d5:dc:17:fd:8a:a2:8c:26:c0:af:71:03:15:50:67:ab:66:60: af:2b:6a:18:1d:d5:2f:cf:c3:f8:4b:d4:7d:fb:46:78:50:72: 44:6c:d7:41 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt+N1JOsSV/QuLEfB8QfSEwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNzBhM2E2YzRhODU3MjUwMzc1OThiMzkxM2UyMTg2OWRi ZGQzOGQwHhcNMjYwMTAyMTAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNGIyNmQ0MTc5YmQzZmE5OWFjNDYwYmU4NzEwMmI4YzczMzU1YWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjx1NjMVjQKCV919GwSh7LUI3nQM 1dafPVC2rzo9Nwc4xhy2LyG6Q1AiBnfcOWTGMqCC5/J9vLPyxuyydp99GLmtEVJN nL5Mj1HHojnDJjeYKhQZkIaqf+hQpHkdgoxJhVUTTqeVfGrAUYeWEJc8dkn7m4mu KFMVJ4YNKGc74R+B8C3s3mxi/vpIn5jatfQ3RM8TeWHClkuWNMxZeQJ0Y4ArbQTe hJ4bgbVcqU9NXBpoe+xMMRLDcg8nGKqmGrqXnExb5kbE08TFpiEdIfU769odieo6 Y6SVp3r888aZb45w9BAz1XR1r6Ntdzkea0ILsa/28d+dmmyhhNlZuUz96wIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFMSybUF5vT+pmsRgvocQK4xzNVr0MB8GA1UdIwQY MBaAFEtwo6bEqFclA3WYs5E+IYadvdONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzNDanBzU29WeVVEZFppemtUNGhocDI5MDQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9kYzcwMTAtMTlmOS00NzY4LWE2MTUt NDgyNWIyOWRkNTcyLzEveExKdFFYbTlQNm1heEdDLWh4QXJqSE0xV3ZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9kYzcwMTAtMTlmOS00NzY4LWE2MTUtNDgyNWIyOWRkNTcy LzEvUzNDanBzU29WeVVEZFppemtUNGhocDI5MDQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAYBAIAATASAwQBW9k0AwQB W92UAwQA2RrdMBYEAgACMBADBwAgAQZ8IDgDBQMqE1DAMA0GCSqGSIb3DQEBCwUA A4IBAQB5MQx25Zo37u8h1WFmGCmX/rWbutNl/cWyPyiCvAE7thql5hlbjtrx1bUy 3vahUe1fNOPVnWwUnIE0KRAjbUBKG8zDIX2JDuGyeCzpuiwpzTbitOzVFrJnP8rJ //fq9nhRpz7PWghRITdNUMijPhPTFU/cnIVuxRWhZIURXXN1OU5GRWjzsz5gdYZQ jRxY8lPvHw0MsWwtAvkvmP9bYkbm5z05cxnAvlAEJuHw3IOCt1qfuwX748HTwwTV uAVzeyUUQo+7btamRCbLiN0iNIFDkKO9xiCc1trV3Bf9iqKMJsCvcQMVUGerZmCv K2oYHdUvz8P4S9R9+0Z4UHJEbNdB -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:36 2026 by rpki-client