This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/xFB3Zx8OA2B37pJFfgmnnuvZubg.roa File: xFB3Zx8OA2B37pJFfgmnnuvZubg.roa (raw, json) Hash identifier: 3Pcin6bpATM/RFdmUED+/xq8W0YsNONG5eqnhEsp7vs= Subject key identifier: C4:50:77:67:1F:0E:03:60:77:EE:92:45:7E:09:A7:9E:EB:D9:B9:B8 Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B797DF15CD052CCD10753CAAD7646F44C Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/xFB3Zx8OA2B37pJFfgmnnuvZubg.roa Signing time: Thu 01 Jan 2026 12:17:35 +0000 ROA not before: Thu 01 Jan 2026 12:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59878 IP address blocks: 91.132.48.0/24 maxlen: 24 188.208.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:f1:5c:d0:52:cc:d1:07:53:ca:ad:76:46:f4:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Jan 1 12:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c45077671f0e036077ee92457e09a79eebd9b9b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:45:20:f6:7d:53:48:5f:ce:ed:11:96:f3:05: 4a:6c:ea:ab:a4:79:a4:15:71:b9:15:fa:be:5d:1c: 29:08:d2:73:0b:ad:45:a9:fe:92:c7:c6:b6:17:f2: 73:5e:3c:31:0f:17:37:58:6d:b4:6b:27:c1:c8:61: 76:95:1f:67:fe:50:b3:c6:29:48:23:08:37:d0:e0: 1f:f4:86:5c:28:f3:c8:c3:a6:22:98:c0:f5:7b:4e: 3a:22:70:3d:8b:f3:e5:8a:31:c6:00:96:71:a4:e2: d0:e4:09:2b:bd:c7:4e:f7:f9:d5:95:97:8f:a6:44: 09:08:9e:06:ad:3a:20:2d:43:30:2f:b7:1d:26:44: 76:92:c4:ea:d1:0f:66:18:a6:57:b6:54:3c:63:48: 55:23:27:d5:de:23:eb:72:92:c1:22:58:a2:87:ee: 0e:9c:88:2f:c2:95:12:75:86:ea:9a:c9:47:c8:c0: b6:43:90:49:92:0f:da:ab:eb:8e:f1:3a:22:63:c3: 00:97:cf:12:79:95:7e:c8:b6:61:94:63:ee:11:72: 88:a8:9c:ae:e8:8a:b5:17:c1:16:a7:84:73:df:fb: 66:b1:f7:1f:64:5e:47:a3:b7:74:38:81:4c:e0:dd: 85:6b:07:65:3e:31:66:d6:be:aa:f7:dd:04:eb:b4: 54:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:50:77:67:1F:0E:03:60:77:EE:92:45:7E:09:A7:9E:EB:D9:B9:B8 X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/xFB3Zx8OA2B37pJFfgmnnuvZubg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.132.48.0/24 188.208.110.0/24 Signature Algorithm: sha256WithRSAEncryption 61:13:81:52:40:5c:39:a5:3f:51:c3:c9:ca:74:4f:06:10:35: 6e:8f:a7:ec:86:70:8d:58:3b:f4:0c:89:f4:30:46:9e:fc:82: 3f:68:0a:54:db:7d:db:c0:69:8c:66:fe:43:1b:07:94:9b:3d: 54:5b:9a:ec:15:0d:e2:1d:da:16:d1:9b:6c:f7:8f:4f:b7:fc: 1a:de:97:c0:da:c6:59:6a:c6:78:be:14:50:41:a1:20:e6:f7: 5d:61:69:20:fb:2c:38:0a:44:cf:47:d2:fd:a9:aa:5f:9a:1a: d9:dd:c8:c1:b2:d7:e2:a2:3a:ce:65:01:16:ce:7a:0e:c1:46: 9d:57:28:3a:c1:6a:46:2e:8b:fd:1a:cf:61:35:e2:d6:f7:33: f1:10:eb:5c:ea:64:d8:dc:76:66:62:20:85:6b:a6:9a:73:ac: cc:2d:37:30:0b:50:b9:58:95:4d:eb:cb:f6:f7:ee:31:16:18: 40:a7:dd:2a:46:cb:51:d1:90:e3:d6:69:02:b3:c9:4c:25:10: a9:ec:e5:cf:a2:2d:b5:45:8c:0d:d0:b5:7a:d1:04:9a:e3:5d: 94:09:a6:21:b8:e8:39:e1:51:df:16:d4:d8:a2:9a:f1:2d:0b: 8a:7d:17:16:a4:1d:4a:fe:39:1e:1e:cd:5d:c5:10:98:06:d3: e6:dd:8e:33 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5ffFc0FLM0QdTyq12RvRMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjYwMTAxMTIxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDUwNzc2NzFmMGUwMzYwNzdlZTkyNDU3ZTA5YTc5ZWViZDliOWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEUg9n1TSF/O7RGW8wVKbOqrpHmk FXG5Ffq+XRwpCNJzC61Fqf6Sx8a2F/JzXjwxDxc3WG20ayfByGF2lR9n/lCzxilI Iwg30OAf9IZcKPPIw6YimMD1e046InA9i/PlijHGAJZxpOLQ5AkrvcdO9/nVlZeP pkQJCJ4GrTogLUMwL7cdJkR2ksTq0Q9mGKZXtlQ8Y0hVIyfV3iPrcpLBIliih+4O nIgvwpUSdYbqmslHyMC2Q5BJkg/aq+uO8ToiY8MAl88SeZV+yLZhlGPuEXKIqJyu 6Iq1F8EWp4Rz3/tmsfcfZF5Ho7d0OIFM4N2FawdlPjFm1r6q990E67RUJwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMRQd2cfDgNgd+6SRX4Jp57r2bm4MB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEveEZCM1p4OE9BMkIzN3BKRmZnbW5udXZadWJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW4QwAwQA vNBuMA0GCSqGSIb3DQEBCwUAA4IBAQBhE4FSQFw5pT9Rw8nKdE8GEDVuj6fshnCN WDv0DIn0MEae/II/aApU233bwGmMZv5DGweUmz1UW5rsFQ3iHdoW0Zts949Pt/wa 3pfA2sZZasZ4vhRQQaEg5vddYWkg+yw4CkTPR9L9qapfmhrZ3cjBstfiojrOZQEW znoOwUadVyg6wWpGLov9Gs9hNeLW9zPxEOtc6mTY3HZmYiCFa6aac6zMLTcwC1C5 WJVN68v29+4xFhhAp90qRstR0ZDj1mkCs8lMJRCp7OXPoi21RYwN0LV60QSa412U CaYhuOg54VHfFtTYoprxLQuKfRcWpB1K/jkeHs1dxRCYBtPm3Y4z -----END CERTIFICATE-----Generated at Thu Jan 8 11:02:00 2026 by rpki-client