This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/xtYa8bwk3nyDT9DDoPQRXQH07ZA.roa File: xtYa8bwk3nyDT9DDoPQRXQH07ZA.roa (raw, json) Hash identifier: lmcFVrPV65LmiCT3FMjsX+zWuUETsINp4pkawWHBcO8= Subject key identifier: C6:D6:1A:F1:BC:24:DE:7C:83:4F:D0:C3:A0:F4:11:5D:01:F4:ED:90 Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24 Certificate serial: 019C1AFF15B8A83D024B2828BDD3C17880CA Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/xtYa8bwk3nyDT9DDoPQRXQH07ZA.roa Signing time: Sun 01 Feb 2026 20:57:30 +0000 ROA not before: Sun 01 Feb 2026 20:57:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202316 IP address blocks: 81.90.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1a:ff:15:b8:a8:3d:02:4b:28:28:bd:d3:c1:78:80:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24 Validity Not Before: Feb 1 20:57:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6d61af1bc24de7c834fd0c3a0f4115d01f4ed90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7c:89:59:2b:6c:57:23:41:9e:89:87:ff:69: 47:aa:67:f4:b7:ff:be:1d:a5:2f:d5:10:01:36:5c: 34:26:45:8b:8e:db:dd:d8:b7:8a:24:91:10:c4:21: 26:69:2b:cb:99:d0:d1:30:59:58:a1:7c:09:f9:b6: 1d:fb:ca:46:79:b3:0f:da:79:a2:c9:31:20:bf:69: 01:4e:e1:47:f7:a5:c9:44:ec:d1:ae:97:18:79:37: 07:6a:d5:5b:16:c4:77:03:b5:d7:9c:b5:19:e7:99: f8:94:3c:88:62:f7:bc:3e:0d:a6:7f:77:4f:d0:c3: 4a:ae:02:39:8a:3e:47:2f:35:8e:76:f1:67:8e:95: b8:41:b5:45:da:d3:a0:8e:4c:34:76:82:90:e9:e2: 62:ef:ab:d0:a7:75:61:b9:6b:94:58:96:15:28:dd: 23:d3:9c:55:31:bb:b1:f4:17:1e:4b:a8:11:09:be: 6b:9a:fc:5a:af:ff:55:ef:54:58:dc:36:6d:b8:44: de:1d:51:0d:c1:c4:7a:0f:c3:6d:ca:0a:10:54:6f: e9:38:7d:bc:54:56:d1:dd:76:07:2a:65:7c:43:d6: ab:07:f0:52:b8:e8:3e:48:b3:57:12:e8:af:cf:1d: 01:1b:18:0d:9f:22:5c:b6:a7:d3:cb:ce:01:7b:98: 07:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D6:1A:F1:BC:24:DE:7C:83:4F:D0:C3:A0:F4:11:5D:01:F4:ED:90 X509v3 Authority Key Identifier: keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/xtYa8bwk3nyDT9DDoPQRXQH07ZA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.90.16.0/23 Signature Algorithm: sha256WithRSAEncryption 4b:56:ce:26:9a:56:8c:66:4d:93:81:7e:07:bc:e3:07:05:0c: ce:9d:6b:5b:a4:09:9d:b8:1c:b4:9e:fc:ee:9c:73:ca:17:1c: 3c:ab:6c:d7:61:84:39:9f:b8:dc:40:7a:c2:fc:dc:c0:7e:42: 4f:f2:7d:cf:3e:f5:dc:6d:42:82:8e:87:22:83:c9:80:bc:67: 17:3b:57:51:f7:6e:44:9b:29:67:fb:9e:8f:69:68:1a:db:19: 01:03:6b:4d:f7:b8:47:74:42:c4:fa:58:00:87:64:3d:b1:23: 6d:d5:eb:c9:9f:ae:51:b2:d9:f6:95:1b:d2:00:22:7f:bb:04: b2:8d:8f:35:0a:df:1f:0b:7a:55:aa:e6:fa:c2:76:01:b5:24: 48:0d:37:70:55:a6:37:4a:b1:9b:ed:c1:ca:08:97:5c:aa:33: f0:93:27:d2:a0:f5:00:62:eb:f8:e3:4e:cf:db:aa:75:2d:11: 5a:f0:e7:f6:1a:6c:7a:32:c4:03:6f:b2:7a:c8:5b:43:78:ac: e6:dd:e1:61:52:46:dd:61:0e:a4:ab:a9:f3:00:dc:ea:08:4c: 65:b7:b7:48:c9:51:27:25:ce:0f:ab:e9:89:31:7d:b6:7e:56: 2c:d1:e5:00:a0:91:35:af:42:66:60:76:b2:64:0c:b2:a6:40: 5b:17:e7:12 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwa/xW4qD0CSygovdPBeIDKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MjE2ZjVjMTY1YjgyN2E3ZmQ3M2Q4MTA3YWViZDJmNjNj NjNlMjQwHhcNMjYwMjAxMjA1NzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmQ2MWFmMWJjMjRkZTdjODM0ZmQwYzNhMGY0MTE1ZDAxZjRlZDkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HyJWStsVyNBnomH/2lHqmf0t/++ HaUv1RABNlw0JkWLjtvd2LeKJJEQxCEmaSvLmdDRMFlYoXwJ+bYd+8pGebMP2nmi yTEgv2kBTuFH96XJROzRrpcYeTcHatVbFsR3A7XXnLUZ55n4lDyIYve8Pg2mf3dP 0MNKrgI5ij5HLzWOdvFnjpW4QbVF2tOgjkw0doKQ6eJi76vQp3VhuWuUWJYVKN0j 05xVMbux9BceS6gRCb5rmvxar/9V71RY3DZtuETeHVENwcR6D8NtygoQVG/pOH28 VFbR3XYHKmV8Q9arB/BSuOg+SLNXEuivzx0BGxgNnyJctqfTy84Be5gHQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMbWGvG8JN58g0/Qw6D0EV0B9O2QMB8GA1UdIwQY MBaAFEkhb1wWW4J6f9c9gQeuvS9jxj4kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQt MGRiYmMyNDllNjU3LzEveHRZYThid2szbnlEVDlERG9QUVJYUUgwN1pBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQtMGRiYmMyNDllNjU3 LzEvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUVoQMA0G CSqGSIb3DQEBCwUAA4IBAQBLVs4mmlaMZk2TgX4HvOMHBQzOnWtbpAmduBy0nvzu nHPKFxw8q2zXYYQ5n7jcQHrC/NzAfkJP8n3PPvXcbUKCjocig8mAvGcXO1dR925E myln+56PaWga2xkBA2tN97hHdELE+lgAh2Q9sSNt1evJn65Rstn2lRvSACJ/uwSy jY81Ct8fC3pVqub6wnYBtSRIDTdwVaY3SrGb7cHKCJdcqjPwkyfSoPUAYuv4407P 26p1LRFa8Of2Gmx6MsQDb7J6yFtDeKzm3eFhUkbdYQ6kq6nzANzqCExlt7dIyVEn Jc4Pq+mJMX22flYs0eUAoJE1r0JmYHayZAyypkBbF+cS -----END CERTIFICATE-----Generated at Mon Feb 2 14:10:31 2026 by rpki-client