This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/xA5sMJbpGDXNj929s4lDp7CDJZo.roa File: xA5sMJbpGDXNj929s4lDp7CDJZo.roa (raw, json) Hash identifier: T2enU+xNeq0wsVYQ/nobBNoqaf5n1cDRTTjeA7C/1ME= Subject key identifier: C4:0E:6C:30:96:E9:18:35:CD:8F:DD:BD:B3:89:43:A7:B0:83:25:9A Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56 Certificate serial: 019B7C805E8FA0C8D7602D0C5B2F0C537D4F Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/xA5sMJbpGDXNj929s4lDp7CDJZo.roa Signing time: Fri 02 Jan 2026 02:19:06 +0000 ROA not before: Fri 02 Jan 2026 02:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56915 IP address blocks: 91.229.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:5e:8f:a0:c8:d7:60:2d:0c:5b:2f:0c:53:7d:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56 Validity Not Before: Jan 2 02:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c40e6c3096e91835cd8fddbdb38943a7b083259a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b5:1c:64:54:a8:de:ef:df:67:a1:fa:34:44: eb:89:69:68:86:0f:5f:87:2e:c2:93:34:99:fc:db: 48:a0:fe:da:03:1a:fa:fe:9f:46:d0:4b:ca:37:fc: f1:8f:a6:b6:88:df:81:be:7f:f4:db:ce:f3:07:20: 5f:5f:ad:82:20:b3:b5:10:34:c3:d2:5b:94:a5:a1: be:e0:48:0f:aa:52:a2:af:5b:87:6e:39:54:a0:0f: 19:3b:d8:c8:32:43:af:24:86:ea:1e:df:a3:1b:7b: 90:ae:b5:db:5b:df:d4:d8:c1:78:a3:db:ae:b9:6e: 8c:ef:31:84:3c:e1:38:d1:3e:82:3c:3e:d4:22:3d: 67:3c:42:45:9b:a0:82:36:91:09:07:63:b2:fd:4c: f3:2c:9a:58:3c:f7:bf:d0:88:e4:38:72:d4:35:b2: e7:c8:46:ee:71:11:84:62:e9:17:f1:eb:96:74:55: 7e:45:4f:e7:79:24:00:d5:51:9f:88:5c:06:43:56: 06:1b:af:6d:8d:9e:cd:47:32:d2:f1:15:de:3b:1d: f7:71:6e:3f:5b:44:76:7f:b6:9b:e9:8e:4e:e7:b3: aa:97:0e:dc:a5:8d:ac:e8:33:40:b7:37:76:6a:a1: b4:11:bf:69:71:a3:0a:2e:b4:b6:ea:5d:bd:20:ad: b8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:0E:6C:30:96:E9:18:35:CD:8F:DD:BD:B3:89:43:A7:B0:83:25:9A X509v3 Authority Key Identifier: keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/xA5sMJbpGDXNj929s4lDp7CDJZo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.229.119.0/24 Signature Algorithm: sha256WithRSAEncryption 07:e2:d1:7a:ea:68:97:35:99:29:18:d5:42:b5:a6:dd:a0:51: 0c:b7:8b:e9:52:83:d1:5b:ce:5f:3c:6d:2c:6c:7f:55:ff:91: 1a:6b:07:54:d5:02:53:4b:64:de:b6:ca:27:41:15:1b:5a:f6: 1b:91:6c:c6:a1:2c:74:c7:28:2d:91:2f:1b:ae:11:7a:a0:42: 19:56:63:51:61:1c:aa:e7:9b:a7:c3:a1:5d:ac:e1:67:bc:33: ed:3a:e2:91:6d:a4:fe:d6:49:7a:a6:a0:87:ce:b4:60:50:f4: 77:18:b4:61:bd:cf:f3:77:0c:5e:a1:9c:da:f2:a9:e9:00:4b: c8:57:db:f0:bd:55:b7:d8:1e:cf:5f:8e:21:3a:71:6d:7c:35: 57:30:8d:0f:8b:76:6a:74:82:4e:09:c2:e3:56:4c:01:7d:3b: 3b:2d:45:c7:9b:d6:6a:9c:54:54:c7:57:47:b5:03:6c:a9:1e: 01:f0:28:68:8d:01:88:d3:0a:86:c5:ee:8f:2b:76:1c:73:c9: 2c:96:83:a1:87:1b:54:3f:68:ef:05:0e:af:dd:9d:9f:7f:9e: e9:a1:01:55:c2:0a:62:7e:37:e1:78:32:e7:9d:b8:db:97:b6: 23:63:7f:45:05:8e:cb:9a:29:49:8c:6a:ff:2d:26:a7:7b:ab: 71:9d:1f:a7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gF6PoMjXYC0MWy8MU31PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0 ZjVlNTYwHhcNMjYwMTAyMDIxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDBlNmMzMDk2ZTkxODM1Y2Q4ZmRkYmRiMzg5NDNhN2IwODMyNTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbUcZFSo3u/fZ6H6NETriWlohg9f hy7CkzSZ/NtIoP7aAxr6/p9G0EvKN/zxj6a2iN+Bvn/0287zByBfX62CILO1EDTD 0luUpaG+4EgPqlKir1uHbjlUoA8ZO9jIMkOvJIbqHt+jG3uQrrXbW9/U2MF4o9uu uW6M7zGEPOE40T6CPD7UIj1nPEJFm6CCNpEJB2Oy/UzzLJpYPPe/0IjkOHLUNbLn yEbucRGEYukX8euWdFV+RU/neSQA1VGfiFwGQ1YGG69tjZ7NRzLS8RXeOx33cW4/ W0R2f7ab6Y5O57Oqlw7cpY2s6DNAtzd2aqG0Eb9pcaMKLrS26l29IK24LQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMQObDCW6Rg1zY/dvbOJQ6ewgyWaMB8GA1UdIwQY MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt YmE5OGYxMTIyMTIxLzEveEE1c01KYnBHRFhOajkyOXM0bERwN0NESlpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+V3MA0G CSqGSIb3DQEBCwUAA4IBAQAH4tF66miXNZkpGNVCtabdoFEMt4vpUoPRW85fPG0s bH9V/5EaawdU1QJTS2TetsonQRUbWvYbkWzGoSx0xygtkS8brhF6oEIZVmNRYRyq 55unw6FdrOFnvDPtOuKRbaT+1kl6pqCHzrRgUPR3GLRhvc/zdwxeoZza8qnpAEvI V9vwvVW32B7PX44hOnFtfDVXMI0Pi3ZqdIJOCcLjVkwBfTs7LUXHm9ZqnFRUx1dH tQNsqR4B8ChojQGI0wqGxe6PK3Ycc8ksloOhhxtUP2jvBQ6v3Z2ff57poQFVwgpi fjfheDLnnbjbl7YjY39FBY7LmilJjGr/LSane6txnR+n -----END CERTIFICATE-----Generated at Sat Jan 10 03:59:15 2026 by rpki-client