This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/xBqBXFmQrw0nrQUmLex4ucUbm6k.roa File: xBqBXFmQrw0nrQUmLex4ucUbm6k.roa (raw, json) Hash identifier: TnBMggLi5CIQ1hShDDAuB88To8EI50H2RKa7i+0/tRc= Subject key identifier: C4:1A:81:5C:59:90:AF:0D:27:AD:05:26:2D:EC:78:B9:C5:1B:9B:A9 Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d Certificate serial: 019B7E387128E9A0B4B1514BAD8787383B68 Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/xBqBXFmQrw0nrQUmLex4ucUbm6k.roa Signing time: Fri 02 Jan 2026 10:19:46 +0000 ROA not before: Fri 02 Jan 2026 10:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 46562 IP address blocks: 91.238.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:71:28:e9:a0:b4:b1:51:4b:ad:87:87:38:3b:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d Validity Not Before: Jan 2 10:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c41a815c5990af0d27ad05262dec78b9c51b9ba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6b:91:c0:0e:34:ab:17:a0:ea:59:f9:48:ab: 4d:52:83:4d:05:a4:9f:22:30:02:bb:ea:f9:24:6e: 94:b8:dc:eb:1d:03:9b:1e:06:88:c9:42:42:d7:84: 7f:5a:e0:b1:6c:73:a9:76:0b:5d:df:63:4e:a6:72: c9:64:cb:4b:43:f9:53:06:89:f1:82:be:c9:a0:5b: 11:0f:c7:8d:f5:29:bd:61:a8:e6:8f:ca:e0:f3:2d: 5f:02:85:1b:b2:3f:01:8f:c2:e8:b8:a4:a6:cb:0d: 21:56:34:b5:77:33:99:13:f9:c8:b2:cb:8e:3f:43: 8c:58:13:46:1a:ee:03:00:07:2d:2b:fd:eb:ee:e6: 35:c2:cf:d3:2c:7a:79:e1:2b:d0:4a:6b:de:6b:6d: 7a:2e:da:76:bf:32:f7:1a:ec:a9:7e:83:13:8c:d8: fd:19:d8:68:dd:ca:8f:11:c4:f1:2b:35:75:35:a7: 92:04:cc:15:25:f2:08:60:df:69:c0:27:3a:84:53: cf:90:b6:20:53:4b:14:08:fc:21:69:02:b3:c8:5e: 2d:46:db:70:5e:5c:98:bf:40:98:08:8d:7e:f8:df: 61:0b:5a:9c:58:16:98:6f:0d:5d:4f:9d:e4:9f:60: b9:fa:5a:5c:80:11:39:79:b8:82:ee:5c:4a:71:18: 9b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:1A:81:5C:59:90:AF:0D:27:AD:05:26:2D:EC:78:B9:C5:1B:9B:A9 X509v3 Authority Key Identifier: keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/xBqBXFmQrw0nrQUmLex4ucUbm6k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.238.71.0/24 Signature Algorithm: sha256WithRSAEncryption c2:3a:cf:d8:77:cc:e2:29:98:83:c6:ec:33:6b:a3:39:f2:88: a1:ec:a9:d5:35:fb:d7:16:52:83:42:db:d0:35:29:3a:66:d0: 02:2a:91:35:29:20:49:a4:6b:97:ac:45:61:19:b9:2d:f2:97: 77:42:b4:ff:c3:66:6d:38:4f:5e:06:e2:5d:c4:5c:9d:0d:76: 14:d2:9f:da:2d:a3:69:cb:82:02:08:4c:65:52:e8:4d:ad:f9: 92:03:89:06:96:ef:08:d5:27:c5:4f:9e:01:f7:26:20:fc:db: 10:cf:9f:02:be:11:5b:9a:40:b0:ce:f4:08:4b:d3:48:67:bc: e4:ba:cf:9d:35:33:7d:5b:4a:7d:ea:0c:c4:ea:35:19:5d:3b: 9e:ea:6e:ee:a6:08:6d:8c:07:2c:28:1a:4f:87:7e:14:ef:80: 37:c6:e3:df:d5:5b:ae:6c:ca:c7:ca:2c:47:69:c4:b9:4f:69: f3:d6:9c:3d:70:2d:5a:82:de:f0:ff:9e:5d:53:f0:a8:b1:d8: ea:b2:59:7c:f9:9d:79:24:39:99:ca:f4:a2:9f:3d:1a:3a:f2: 7c:b5:ba:4d:d5:21:d4:50:f9:59:7f:61:66:65:d2:ef:da:1d: 08:b5:ea:bb:8d:e4:73:2d:21:09:b9:c7:f3:61:b9:87:81:c3: ed:22:d0:43 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OHEo6aC0sVFLrYeHODtoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYjJiYjdiYWQ1MGYxOTIxODEwYTAyOGU3OGVkZDY1Zjgx ZjZhN2QwHhcNMjYwMTAyMTAxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDFhODE1YzU5OTBhZjBkMjdhZDA1MjYyZGVjNzhiOWM1MWI5YmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmuRwA40qxeg6ln5SKtNUoNNBaSf IjACu+r5JG6UuNzrHQObHgaIyUJC14R/WuCxbHOpdgtd32NOpnLJZMtLQ/lTBonx gr7JoFsRD8eN9Sm9Yajmj8rg8y1fAoUbsj8Bj8LouKSmyw0hVjS1dzOZE/nIssuO P0OMWBNGGu4DAActK/3r7uY1ws/TLHp54SvQSmvea216Ltp2vzL3GuypfoMTjNj9 Gdho3cqPEcTxKzV1NaeSBMwVJfIIYN9pwCc6hFPPkLYgU0sUCPwhaQKzyF4tRttw XlyYv0CYCI1++N9hC1qcWBaYbw1dT53kn2C5+lpcgBE5ebiC7lxKcRib6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMQagVxZkK8NJ60FJi3seLnFG5upMB8GA1UdIwQY MBaAFE+yu3utUPGSGBCgKOeO3WX4H2p9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYt MjdmYmM5OWVhM2M2LzEveEJxQlhGbVFydzBuclFVbUxleDR1Y1VibTZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYtMjdmYmM5OWVhM2M2 LzEvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+5HMA0G CSqGSIb3DQEBCwUAA4IBAQDCOs/Yd8ziKZiDxuwza6M58oih7KnVNfvXFlKDQtvQ NSk6ZtACKpE1KSBJpGuXrEVhGbkt8pd3QrT/w2ZtOE9eBuJdxFydDXYU0p/aLaNp y4ICCExlUuhNrfmSA4kGlu8I1SfFT54B9yYg/NsQz58CvhFbmkCwzvQIS9NIZ7zk us+dNTN9W0p96gzE6jUZXTue6m7upghtjAcsKBpPh34U74A3xuPf1VuubMrHyixH acS5T2nz1pw9cC1agt7w/55dU/Cosdjqsll8+Z15JDmZyvSinz0aOvJ8tbpN1SHU UPlZf2FmZdLv2h0Iteq7jeRzLSEJucfzYbmHgcPtItBD -----END CERTIFICATE-----Generated at Wed Jan 21 01:50:03 2026 by rpki-client