This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/xlt8n39Q7R1g_e7UkyAibvBbcF8.roa File: xlt8n39Q7R1g_e7UkyAibvBbcF8.roa (raw, json) Hash identifier: ftgA+Nk8I70LNZsiK4LFzKj5GyUztPEQG6JXnLUxej0= Subject key identifier: C6:5B:7C:9F:7F:50:ED:1D:60:FD:EE:D4:93:20:22:6E:F0:5B:70:5F Certificate issuer: /CN=68637081ca7c2eba41010abeaad64a7c61f6a113 Certificate serial: 019B78A246D883CDB867DF040CF4CFCA4874 Authority key identifier: 68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/xlt8n39Q7R1g_e7UkyAibvBbcF8.roa Signing time: Thu 01 Jan 2026 08:17:39 +0000 ROA not before: Thu 01 Jan 2026 08:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29684 IP address blocks: 91.202.248.0/22 maxlen: 24 91.202.248.0/24 maxlen: 24 91.202.249.0/24 maxlen: 24 91.202.250.0/24 maxlen: 24 91.202.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:46:d8:83:cd:b8:67:df:04:0c:f4:cf:ca:48:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68637081ca7c2eba41010abeaad64a7c61f6a113 Validity Not Before: Jan 1 08:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c65b7c9f7f50ed1d60fdeed49320226ef05b705f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2a:b1:a9:80:14:85:18:89:88:c8:2b:8a:b3: ae:bd:e6:a7:b9:4a:87:e2:51:57:c2:42:8b:6b:a8: 46:ca:1b:ac:cd:fe:ca:a2:a5:c2:9c:7c:8f:41:42: 98:76:a0:60:1f:9b:33:b5:82:64:e7:e4:a9:c1:0d: 1e:57:5a:15:2f:fe:b9:66:81:26:e3:bc:29:6c:c9: e2:fd:9a:c4:49:3b:f2:48:b1:4b:a4:74:0c:1d:98: 88:36:0a:5a:b5:ed:18:c1:34:be:66:4d:ad:f4:47: 10:b0:80:ab:85:2a:c8:b4:4d:0d:f3:10:7d:31:91: ef:d7:7e:93:a5:71:39:8f:60:28:c5:60:1d:f1:ae: 1d:79:ae:f5:ae:57:fe:70:83:9a:28:90:60:5a:1b: 08:84:d7:d4:45:6a:9c:c7:00:c1:c5:e1:e8:b3:66: 96:ad:66:d4:b4:36:d8:ba:52:05:0b:76:b0:0d:6e: 46:a5:94:99:f0:fd:d3:58:27:03:05:65:25:b0:cc: 86:ff:f5:09:86:d2:20:39:de:b6:be:ef:6c:e4:92: c9:6d:dd:68:d0:db:b1:36:01:25:4c:16:ff:d0:31: c2:d2:88:d9:4e:67:90:5b:f4:17:e1:da:45:95:c6: f9:fe:99:7b:21:cd:b3:ea:b4:fc:30:8d:1b:78:cb: a1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:5B:7C:9F:7F:50:ED:1D:60:FD:EE:D4:93:20:22:6E:F0:5B:70:5F X509v3 Authority Key Identifier: keyid:68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/xlt8n39Q7R1g_e7UkyAibvBbcF8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.202.248.0/22 Signature Algorithm: sha256WithRSAEncryption 7e:91:7a:05:a7:d9:94:81:ea:39:4e:ee:7e:be:41:6f:f9:95: a9:40:b6:30:c6:76:40:4b:bb:d4:a0:a3:45:34:d2:3b:06:ff: 6b:0e:b9:f5:e9:70:af:20:fd:55:e0:3b:89:20:db:ca:96:12: 99:9f:d2:35:d9:66:14:36:cd:88:b7:30:60:24:dd:36:f8:69: f6:24:87:84:17:1a:63:86:05:a8:f9:ee:13:1b:74:24:61:ac: ca:62:8b:83:99:7b:b4:a1:92:23:74:29:e8:db:a2:02:6b:31: a6:0b:65:60:29:a0:c9:c4:78:94:63:7e:7d:9a:0a:3b:3d:6c: ec:b5:95:21:05:4d:3c:b2:d6:79:8f:1a:60:b1:69:13:5e:c9: 41:33:ef:3c:e1:39:52:80:df:b6:09:aa:13:b2:9a:1a:65:b6: 19:ae:45:73:2f:62:0d:18:09:a9:47:fe:58:33:b0:38:6d:91: 2d:60:49:57:7d:5b:5f:bc:74:3c:3d:af:7f:20:51:11:0a:dc: f6:f7:ab:40:89:3f:0f:0e:b2:15:45:a8:89:44:5f:8c:aa:7f: 89:20:a3:c7:ba:e3:34:a2:11:f7:98:09:df:3a:9e:32:4c:22: b5:df:8f:b0:d7:b9:31:fa:b5:3d:31:80:6b:20:d3:f0:8d:4f: 4b:3e:78:4e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4okbYg824Z98EDPTPykh0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4NjM3MDgxY2E3YzJlYmE0MTAxMGFiZWFhZDY0YTdjNjFm NmExMTMwHhcNMjYwMTAxMDgxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjViN2M5ZjdmNTBlZDFkNjBmZGVlZDQ5MzIwMjI2ZWYwNWI3MDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSqxqYAUhRiJiMgrirOuveanuUqH 4lFXwkKLa6hGyhuszf7KoqXCnHyPQUKYdqBgH5sztYJk5+SpwQ0eV1oVL/65ZoEm 47wpbMni/ZrESTvySLFLpHQMHZiINgpate0YwTS+Zk2t9EcQsICrhSrItE0N8xB9 MZHv136TpXE5j2AoxWAd8a4dea71rlf+cIOaKJBgWhsIhNfURWqcxwDBxeHos2aW rWbUtDbYulIFC3awDW5GpZSZ8P3TWCcDBWUlsMyG//UJhtIgOd62vu9s5JLJbd1o 0NuxNgElTBb/0DHC0ojZTmeQW/QX4dpFlcb5/pl7Ic2z6rT8MI0beMuhfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMZbfJ9/UO0dYP3u1JMgIm7wW3BfMB8GA1UdIwQY MBaAFGhjcIHKfC66QQEKvqrWSnxh9qETMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUdOd2djcDhMcnBCQVFxLXF0WktmR0gyb1JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82ZjMyNjktNTg3ZC00Yjg3LThkM2Et ZTY2NzllN2I3OTVhLzEveGx0OG4zOVE3UjFnX2U3VWt5QWlidkJiY0Y4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC82ZjMyNjktNTg3ZC00Yjg3LThkM2EtZTY2NzllN2I3OTVh LzEvYUdOd2djcDhMcnBCQVFxLXF0WktmR0gyb1JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW8r4MA0G CSqGSIb3DQEBCwUAA4IBAQB+kXoFp9mUgeo5Tu5+vkFv+ZWpQLYwxnZAS7vUoKNF NNI7Bv9rDrn16XCvIP1V4DuJINvKlhKZn9I12WYUNs2ItzBgJN02+Gn2JIeEFxpj hgWo+e4TG3QkYazKYouDmXu0oZIjdCno26ICazGmC2VgKaDJxHiUY359mgo7PWzs tZUhBU08stZ5jxpgsWkTXslBM+884TlSgN+2CaoTspoaZbYZrkVzL2INGAmpR/5Y M7A4bZEtYElXfVtfvHQ8Pa9/IFERCtz296tAiT8PDrIVRaiJRF+Mqn+JIKPHuuM0 ohH3mAnfOp4yTCK134+w17kx+rU9MYBrINPwjU9LPnhO -----END CERTIFICATE-----Generated at Tue Jan 20 07:46:02 2026 by rpki-client