This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/XTIB3wAu-H5jaJDXDYV1NuX8wKg.roa File: XTIB3wAu-H5jaJDXDYV1NuX8wKg.roa (raw, json) Hash identifier: XT8YNrFmajQC+0dTcA0EhEoUbR7GPWJZO+G57x2fMrQ= Subject key identifier: 5D:32:01:DF:00:2E:F8:7E:63:68:90:D7:0D:85:75:36:E5:FC:C0:A8 Certificate issuer: /CN=d6dbaa1b52f3a73289ff768acb7baa7f387f955f Certificate serial: 019B79ED000415DD96513657A443FBFC2CD6 Authority key identifier: D6:DB:AA:1B:52:F3:A7:32:89:FF:76:8A:CB:7B:AA:7F:38:7F:95:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/XTIB3wAu-H5jaJDXDYV1NuX8wKg.roa Signing time: Thu 01 Jan 2026 14:18:53 +0000 ROA not before: Thu 01 Jan 2026 14:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29802 IP address blocks: 91.208.0.0/24 maxlen: 24 91.208.16.0/24 maxlen: 24 91.208.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft rsync://rpki.ripe.net/repository/DEFAULT/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 17:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:00:04:15:dd:96:51:36:57:a4:43:fb:fc:2c:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6dbaa1b52f3a73289ff768acb7baa7f387f955f Validity Not Before: Jan 1 14:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d3201df002ef87e636890d70d857536e5fcc0a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0f:dc:15:c5:ae:fd:b9:d8:aa:c2:e7:2e:2e: 5f:3e:15:62:46:31:ce:4b:b8:42:48:4e:28:d6:74: de:2c:53:20:03:c6:3c:72:ec:aa:7a:eb:0a:fa:ac: 9a:07:24:9f:cc:ff:4a:66:51:bb:2d:68:74:ef:0f: 3a:7a:fe:a6:05:57:25:5a:ce:38:fd:68:d9:b2:4b: 0c:a3:09:b8:88:72:69:69:cf:8e:4b:7b:6f:1a:e9: 31:6b:b1:63:bd:d6:d5:26:ef:ae:60:df:0d:29:6a: 43:d6:65:63:7d:c9:50:76:2a:20:db:18:7e:7d:c7: 71:70:8b:36:5c:9f:51:c5:38:a6:6b:61:06:b3:a5: 81:f9:02:a6:84:04:2a:31:d4:aa:41:74:2b:90:f9: df:92:4f:15:85:96:45:05:03:8a:5a:eb:46:4e:b0: cb:94:a5:89:c4:f8:f6:86:a8:4b:86:15:f7:21:88: ab:d8:87:ac:7e:76:4c:f8:a5:3a:2b:9d:53:68:7d: d9:be:cf:55:03:29:e8:b2:4c:0e:0b:eb:fb:2c:e6: 1a:f2:2e:22:a5:01:e6:93:9b:ed:1e:ae:3e:54:a2: 87:ff:ba:6b:42:91:1b:e8:01:cf:24:21:f4:3a:e0: af:55:e9:54:53:45:08:fa:7e:5b:e9:7e:8a:18:29: b5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:32:01:DF:00:2E:F8:7E:63:68:90:D7:0D:85:75:36:E5:FC:C0:A8 X509v3 Authority Key Identifier: keyid:D6:DB:AA:1B:52:F3:A7:32:89:FF:76:8A:CB:7B:AA:7F:38:7F:95:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/XTIB3wAu-H5jaJDXDYV1NuX8wKg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.0.0/24 91.208.16.0/24 91.208.19.0/24 Signature Algorithm: sha256WithRSAEncryption 26:d5:12:f1:0c:68:14:37:ab:5f:f9:d2:82:99:88:7c:72:d7: 92:2d:1f:30:55:cc:0e:d8:91:e1:d5:1e:cd:91:09:cd:ad:81: b3:3d:cb:78:8c:f6:52:9d:ab:f2:d7:aa:6e:43:a6:0c:a2:b5: f1:0b:a1:5a:9d:4a:0d:df:7c:4a:1d:a7:e0:fc:f6:87:52:da: 1a:c9:0e:6d:bf:b2:48:90:3b:5d:e0:b8:b9:d8:18:bd:37:0b: 2c:70:13:09:c8:5a:89:9d:b4:ad:21:24:f1:bc:4f:46:ba:20: 8e:df:6a:7e:14:dd:e4:2c:72:b5:bd:d8:61:8e:2e:c5:95:f1: 42:ce:ac:96:55:6b:9f:a1:26:ea:3b:a0:ee:cb:dc:05:1d:d0: 35:91:0c:be:a4:3d:b0:6f:a1:33:4b:86:c5:8f:19:90:d0:c0: 4e:d8:68:59:cd:c5:6d:5e:1b:72:a6:20:2e:4f:7f:15:db:a0: cf:64:6e:52:d0:43:dd:8e:6b:2f:fd:3d:32:c4:79:07:a3:b3: d4:96:f0:2b:66:bb:94:a5:0b:f6:64:cb:1c:c4:db:d7:b0:53: ce:0b:61:10:b2:89:d1:93:a0:70:db:ae:f1:ad:4c:16:ce:43: 16:f8:34:61:38:bc:a2:ee:89:d1:48:b6:c8:49:63:91:35:1c: ca:57:db:f3 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt57QAEFd2WUTZXpEP7/CzWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ZGJhYTFiNTJmM2E3MzI4OWZmNzY4YWNiN2JhYTdmMzg3 Zjk1NWYwHhcNMjYwMTAxMTQxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDMyMDFkZjAwMmVmODdlNjM2ODkwZDcwZDg1NzUzNmU1ZmNjMGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqw/cFcWu/bnYqsLnLi5fPhViRjHO S7hCSE4o1nTeLFMgA8Y8cuyqeusK+qyaBySfzP9KZlG7LWh07w86ev6mBVclWs44 /WjZsksMowm4iHJpac+OS3tvGukxa7FjvdbVJu+uYN8NKWpD1mVjfclQdiog2xh+ fcdxcIs2XJ9RxTima2EGs6WB+QKmhAQqMdSqQXQrkPnfkk8VhZZFBQOKWutGTrDL lKWJxPj2hqhLhhX3IYir2IesfnZM+KU6K51TaH3Zvs9VAynoskwOC+v7LOYa8i4i pQHmk5vtHq4+VKKH/7prQpEb6AHPJCH0OuCvVelUU0UI+n5b6X6KGCm1PwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFF0yAd8ALvh+Y2iQ1w2FdTbl/MCoMB8GA1UdIwQY MBaAFNbbqhtS86cyif92ist7qn84f5VfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXR1cUcxTHpwektKXzNhS3kzdXFmemhfbFY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9iMGI2ZTctM2UyMy00NDI2LThjODQt ZmFiODNkNDAzNTU4LzEvWFRJQjN3QXUtSDVqYUpEWERZVjFOdVg4d0tnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9iMGI2ZTctM2UyMy00NDI2LThjODQtZmFiODNkNDAzNTU4 LzEvMXR1cUcxTHpwektKXzNhS3kzdXFmemhfbFY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW9AAAwQA W9AQAwQAW9ATMA0GCSqGSIb3DQEBCwUAA4IBAQAm1RLxDGgUN6tf+dKCmYh8cteS LR8wVcwO2JHh1R7NkQnNrYGzPct4jPZSnavy16puQ6YMorXxC6FanUoN33xKHafg /PaHUtoayQ5tv7JIkDtd4Li52Bi9NwsscBMJyFqJnbStISTxvE9GuiCO32p+FN3k LHK1vdhhji7FlfFCzqyWVWufoSbqO6Duy9wFHdA1kQy+pD2wb6EzS4bFjxmQ0MBO 2GhZzcVtXhtypiAuT38V26DPZG5S0EPdjmsv/T0yxHkHo7PUlvArZruUpQv2ZMsc xNvXsFPOC2EQsonRk6Bw267xrUwWzkMW+DRhOLyi7onRSLbISWORNRzKV9vz -----END CERTIFICATE-----Generated at Sat Jan 3 01:34:22 2026 by rpki-client