This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/X3KvgZAY27RQ-bq4Qy2THGWg_uQ.roa File: X3KvgZAY27RQ-bq4Qy2THGWg_uQ.roa (raw, json) Hash identifier: YbckkX9T4IiKtYIGe5CTWWDr+38WukVF6oQuJdcMkXo= Subject key identifier: 5F:72:AF:81:90:18:DB:B4:50:F9:BA:B8:43:2D:93:1C:65:A0:FE:E4 Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA77F37A0EA72636EB04A89689BAA37 Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/X3KvgZAY27RQ-bq4Qy2THGWg_uQ.roa Signing time: Fri 02 Jan 2026 12:21:04 +0000 ROA not before: Fri 02 Jan 2026 12:21:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60833 IP address blocks: 91.229.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:7f:37:a0:ea:72:63:6e:b0:4a:89:68:9b:aa:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:21:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f72af819018dbb450f9bab8432d931c65a0fee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:18:65:81:12:be:f2:75:82:82:21:52:42:6d: ce:5c:1d:07:36:aa:7d:c7:eb:ea:74:46:d7:81:0c: 8d:ea:69:13:cc:4e:1b:c2:60:85:98:34:be:24:7a: 41:90:f7:a7:21:92:15:18:c0:c5:c8:03:9d:04:aa: 55:26:94:0a:44:05:ea:d7:4e:b7:5a:3c:8a:0f:3b: 2b:44:44:94:c8:76:54:b8:1b:df:36:6f:ff:d2:f8: a6:f6:93:8f:88:4b:48:a0:b1:45:10:4e:f3:48:74: 7f:44:f8:3b:e7:f9:64:45:56:74:e7:31:c3:62:7e: e4:16:5d:67:d8:bf:e0:96:cc:ce:14:73:8d:e2:bd: ca:14:15:10:35:0d:d8:01:4b:91:d5:2a:21:3f:30: e0:96:e4:02:dd:d8:68:89:cd:f5:68:98:d3:f9:18: 06:ab:4c:24:33:f4:ea:8d:3d:d1:6a:7d:7c:56:d9: cd:2c:a6:4d:cc:66:99:53:27:ea:7e:65:77:99:d3: 1e:7f:57:57:9f:a3:f8:57:c8:10:35:22:09:6a:ad: 0b:70:22:69:fa:86:b5:f6:e8:17:95:68:55:ef:51: d1:ae:6c:dc:d8:68:6a:e5:39:1b:d9:43:88:af:f5: e1:ad:69:e3:97:ce:2f:b9:7a:64:12:fe:02:24:f9: d2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:72:AF:81:90:18:DB:B4:50:F9:BA:B8:43:2D:93:1C:65:A0:FE:E4 X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/X3KvgZAY27RQ-bq4Qy2THGWg_uQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.229.189.0/24 Signature Algorithm: sha256WithRSAEncryption 04:55:34:7c:da:0e:2a:03:6d:ce:13:53:89:ff:a1:5f:91:03: c7:1a:14:1b:1f:cb:d4:cd:86:30:cf:e4:53:b8:85:83:55:52: b8:61:3c:93:7f:da:94:3d:49:ac:e7:ef:ca:92:80:7a:98:49: e7:c3:52:e0:4a:5b:80:70:2a:b8:67:bb:6a:46:cc:c2:77:c2: 1f:e4:e4:ae:05:68:f6:d1:d9:6c:dc:03:2b:fa:3d:16:7c:ed: 35:8f:ca:52:f5:57:bc:7d:07:5b:82:76:34:38:ac:1e:e0:6c: b6:54:f0:5f:a4:70:e9:da:e5:f0:7f:28:f5:94:26:bd:33:01: 69:b6:52:c0:9e:8f:2a:b8:d3:8c:4c:06:44:60:10:92:f9:d4: 11:ac:59:73:bb:6c:31:79:25:8a:17:1e:1a:1f:6b:3b:38:58: 0b:0b:22:91:f2:43:d0:4c:5c:d3:da:a3:e6:20:cc:a4:f7:84: af:3d:91:16:2f:09:b1:46:67:94:ec:3f:a8:d4:8c:2a:84:c8: 79:36:3c:23:4c:80:b1:38:a1:22:1c:e7:9c:53:7c:ec:57:fc: e4:9a:3b:d5:e1:ca:37:4b:a2:d4:e1:69:e0:0e:78:01:2b:78: e6:9b:1f:5e:47:ac:ad:8d:29:b1:29:68:21:87:6d:05:41:ca: 8b:5b:78:d2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p383oOpyY26wSolom6o3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjcyYWY4MTkwMThkYmI0NTBmOWJhYjg0MzJkOTMxYzY1YTBmZWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhhlgRK+8nWCgiFSQm3OXB0HNqp9 x+vqdEbXgQyN6mkTzE4bwmCFmDS+JHpBkPenIZIVGMDFyAOdBKpVJpQKRAXq1063 WjyKDzsrRESUyHZUuBvfNm//0vim9pOPiEtIoLFFEE7zSHR/RPg75/lkRVZ05zHD Yn7kFl1n2L/glszOFHON4r3KFBUQNQ3YAUuR1SohPzDgluQC3dhoic31aJjT+RgG q0wkM/TqjT3Ran18VtnNLKZNzGaZUyfqfmV3mdMef1dXn6P4V8gQNSIJaq0LcCJp +oa19ugXlWhV71HRrmzc2Ghq5Tkb2UOIr/XhrWnjl84vuXpkEv4CJPnSCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF9yr4GQGNu0UPm6uEMtkxxloP7kMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvWDNLdmdaQVkyN1JRLWJxNFF5MlRIR1dnX3VRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+W9MA0G CSqGSIb3DQEBCwUAA4IBAQAEVTR82g4qA23OE1OJ/6FfkQPHGhQbH8vUzYYwz+RT uIWDVVK4YTyTf9qUPUms5+/KkoB6mEnnw1LgSluAcCq4Z7tqRszCd8If5OSuBWj2 0dls3AMr+j0WfO01j8pS9Ve8fQdbgnY0OKwe4Gy2VPBfpHDp2uXwfyj1lCa9MwFp tlLAno8quNOMTAZEYBCS+dQRrFlzu2wxeSWKFx4aH2s7OFgLCyKR8kPQTFzT2qPm IMyk94SvPZEWLwmxRmeU7D+o1IwqhMh5NjwjTICxOKEiHOecU3zsV/zkmjvV4co3 S6LU4WngDngBK3jmmx9eR6ytjSmxKWghh20FQcqLW3jS -----END CERTIFICATE-----Generated at Mon Jan 26 10:14:10 2026 by rpki-client