This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/XVq3IYAj2pjJVKsPJGpvrfgzYxs.roa File: XVq3IYAj2pjJVKsPJGpvrfgzYxs.roa (raw, json) Hash identifier: 1m83ro/W3gU5CbeKTbsHPZcXEc5WYBDNa/RLiDPwPnI= Subject key identifier: 5D:5A:B7:21:80:23:DA:98:C9:54:AB:0F:24:6A:6F:AD:F8:33:63:1B Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00 Certificate serial: 019B79EC45CE758D42E41D9F9345DA6747B1 Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/XVq3IYAj2pjJVKsPJGpvrfgzYxs.roa Signing time: Thu 01 Jan 2026 14:18:06 +0000 ROA not before: Thu 01 Jan 2026 14:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196665 IP address blocks: 91.232.116.0/24 maxlen: 24 91.232.117.0/24 maxlen: 24 91.232.118.0/23 maxlen: 23 195.88.52.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:45:ce:75:8d:42:e4:1d:9f:93:45:da:67:47:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00 Validity Not Before: Jan 1 14:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d5ab7218023da98c954ab0f246a6fadf833631b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8f:10:a6:d6:fb:d8:25:42:ed:bc:cc:4b:79: a0:9a:7b:79:95:02:85:ff:4c:2e:4d:69:3c:74:47: fb:bd:dd:03:1c:8d:eb:d9:76:66:b9:a2:9a:5b:27: ce:1a:76:94:2f:c0:72:ef:9f:e1:38:2f:35:0a:58: 82:1f:0c:b6:13:dc:5e:e1:20:7a:b9:64:12:5c:50: 6e:11:1e:f4:60:42:0f:08:6f:02:62:0f:a1:56:b8: c5:ae:e0:7f:47:93:19:1f:43:a3:62:b3:28:e3:75: a7:51:08:41:6d:54:bf:87:8e:39:10:97:31:03:3c: 51:92:ee:38:3c:80:ec:23:a7:8b:62:85:6b:d8:73: cd:ae:6c:2f:d5:71:8e:85:c6:ed:f7:f9:af:4a:62: 9a:b5:cf:56:a1:6d:de:8c:2a:cb:8c:92:29:02:4d: 84:6c:b5:d9:c7:07:ff:b8:cd:4e:93:a9:80:e8:1c: 7a:8f:53:1c:b9:cd:5f:e1:d9:2a:c7:ef:f9:ca:3a: 69:11:db:9c:d6:7a:b0:1a:01:ae:2b:29:32:f9:3d: ee:c9:9d:43:71:35:b6:8a:ef:d4:f1:a0:fe:76:55: f6:86:cb:22:11:e5:13:2d:5c:f4:7a:00:c1:d0:89: 04:70:ec:15:7d:96:74:a5:24:30:26:e5:3a:32:23: 1d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:5A:B7:21:80:23:DA:98:C9:54:AB:0F:24:6A:6F:AD:F8:33:63:1B X509v3 Authority Key Identifier: keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/XVq3IYAj2pjJVKsPJGpvrfgzYxs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.232.116.0/22 195.88.52.0/23 Signature Algorithm: sha256WithRSAEncryption 74:28:1f:68:b1:58:b4:4b:65:3d:d2:2f:53:c5:a7:9f:fa:67: a9:a6:18:a6:5c:5e:ca:83:fe:ec:f0:e8:4d:9c:62:df:18:c5: 72:56:c8:35:00:09:ea:ab:06:8f:ae:bd:cb:8f:74:98:60:d9: c9:23:ad:fa:2d:cc:70:15:55:01:0e:97:37:ed:98:fb:bc:fe: 9b:b9:b2:93:1b:19:0a:0e:f9:a4:c5:58:af:79:b6:f3:0a:ce: 0b:b9:29:b2:b0:13:f7:e0:d6:7f:69:d9:e6:e1:12:e7:3b:61: 3b:c1:bb:21:a5:58:b1:4d:57:5b:7a:c4:17:5b:fe:8b:ed:66: 6b:15:cf:f0:11:33:80:1c:67:1a:e8:a5:ba:df:b5:84:fb:43: 38:b9:f2:a7:ab:f2:01:a5:42:d1:58:f4:77:1b:c5:32:fb:77: 6a:30:c8:a0:a2:6f:f1:de:e7:43:31:ac:ee:31:db:f6:e1:b6: 7c:31:9c:14:9f:59:98:ae:05:52:98:d5:b4:af:64:71:ab:5b: 09:3a:e2:36:75:dc:c3:9c:7e:72:e7:26:ca:58:c1:bc:de:b9: 54:d5:a8:ea:30:89:08:99:a4:6c:44:f9:3b:65:4e:c8:62:5a: d1:50:88:c0:4a:72:57:51:11:eb:f2:7e:3d:40:7b:ed:b4:f5: d1:7e:d6:a5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57EXOdY1C5B2fk0XaZ0exMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMWRmNjY2N2RhMzhlNTdhMjViMTk0NWZhNDBlNTkzZTVh ZGZhMDAwHhcNMjYwMTAxMTQxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDVhYjcyMTgwMjNkYTk4Yzk1NGFiMGYyNDZhNmZhZGY4MzM2MzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu48Qptb72CVC7bzMS3mgmnt5lQKF /0wuTWk8dEf7vd0DHI3r2XZmuaKaWyfOGnaUL8By75/hOC81CliCHwy2E9xe4SB6 uWQSXFBuER70YEIPCG8CYg+hVrjFruB/R5MZH0OjYrMo43WnUQhBbVS/h445EJcx AzxRku44PIDsI6eLYoVr2HPNrmwv1XGOhcbt9/mvSmKatc9WoW3ejCrLjJIpAk2E bLXZxwf/uM1Ok6mA6Bx6j1Mcuc1f4dkqx+/5yjppEduc1nqwGgGuKyky+T3uyZ1D cTW2iu/U8aD+dlX2hssiEeUTLVz0egDB0IkEcOwVfZZ0pSQwJuU6MiMd5wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFF1atyGAI9qYyVSrDyRqb634M2MbMB8GA1UdIwQY MBaAFM8d9mZ9o45XolsZRfpA5ZPlrfoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEt OGRmMzYzMzdlNmJjLzEvWFZxM0lZQWoycGpKVktzUEpHcHZyZmd6WXhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEtOGRmMzYzMzdlNmJj LzEvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW+h0AwQB w1g0MA0GCSqGSIb3DQEBCwUAA4IBAQB0KB9osVi0S2U90i9Txaef+mepphimXF7K g/7s8OhNnGLfGMVyVsg1AAnqqwaPrr3Lj3SYYNnJI636LcxwFVUBDpc37Zj7vP6b ubKTGxkKDvmkxVivebbzCs4LuSmysBP34NZ/adnm4RLnO2E7wbshpVixTVdbesQX W/6L7WZrFc/wETOAHGca6KW637WE+0M4ufKnq/IBpULRWPR3G8Uy+3dqMMigom/x 3udDMazuMdv24bZ8MZwUn1mYrgVSmNW0r2Rxq1sJOuI2ddzDnH5y5ybKWMG83rlU 1ajqMIkImaRsRPk7ZU7IYlrRUIjASnJXURHr8n49QHvttPXRftal -----END CERTIFICATE-----Generated at Mon Jan 26 08:03:20 2026 by rpki-client