This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/xXH6X_IOnNDgMEwf_lwGup3uQvg.roa File: xXH6X_IOnNDgMEwf_lwGup3uQvg.roa (raw, json) Hash identifier: hjNh5acdf+cSlML3dZJT6ZDXla4AE1nzxLn18xMQSnM= Subject key identifier: C5:71:FA:5F:F2:0E:9C:D0:E0:30:4C:1F:FE:5C:06:BA:9D:EE:42:F8 Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56 Certificate serial: 019B7C805F376031CFBA7C5144BD8A34ADBA Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/xXH6X_IOnNDgMEwf_lwGup3uQvg.roa Signing time: Fri 02 Jan 2026 02:19:06 +0000 ROA not before: Fri 02 Jan 2026 02:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57013 IP address blocks: 91.231.187.0/24 maxlen: 24 92.63.181.0/24 maxlen: 24 93.92.115.0/24 maxlen: 24 109.196.105.0/24 maxlen: 24 109.196.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:5f:37:60:31:cf:ba:7c:51:44:bd:8a:34:ad:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56 Validity Not Before: Jan 2 02:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c571fa5ff20e9cd0e0304c1ffe5c06ba9dee42f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ab:61:7f:81:8e:ed:28:3f:4c:1a:cf:3f:49: 78:3a:35:bb:8c:59:bf:23:fa:15:95:ec:c8:ee:1f: 21:75:04:27:70:1b:7a:0c:99:ab:c5:a4:9f:c7:df: cb:80:17:bb:28:75:8e:cc:c6:4e:87:0e:1d:1b:5d: cf:64:e2:8e:bb:3e:7c:31:50:01:85:e2:4c:ff:08: 6a:a8:12:6e:34:44:c3:18:cb:ab:4c:a0:48:c3:5f: 82:c2:d8:d0:9b:fc:14:c0:fa:aa:33:3a:32:29:32: e7:cf:6f:77:3f:25:b7:5f:42:e9:fb:bc:29:7e:81: 75:1b:a0:66:6d:7e:00:ae:e1:61:9d:37:40:67:40: 5d:f9:ea:c9:fa:d6:54:88:40:cb:3a:93:89:6e:42: 05:49:04:11:d7:73:13:a1:88:6d:e4:a6:a6:64:3c: 74:f5:0e:88:5e:a4:cf:2f:3b:8f:f8:11:c3:00:9d: ce:e5:f8:1c:22:63:1f:84:a0:ee:b5:b3:e4:ea:e9: e6:27:f5:5c:63:ea:79:4d:7e:c9:52:5d:2b:7b:56: 3e:78:d2:c9:e1:38:0a:69:ed:b0:45:2f:0d:d3:dc: 02:b7:19:4c:6f:bf:cb:65:05:11:f2:93:f7:4e:3e: 1b:47:ee:05:32:2c:e6:dd:08:01:9e:ff:48:3c:ff: e7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:71:FA:5F:F2:0E:9C:D0:E0:30:4C:1F:FE:5C:06:BA:9D:EE:42:F8 X509v3 Authority Key Identifier: keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/xXH6X_IOnNDgMEwf_lwGup3uQvg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.231.187.0/24 92.63.181.0/24 93.92.115.0/24 109.196.105.0/24 109.196.110.0/24 Signature Algorithm: sha256WithRSAEncryption 09:8a:b4:68:0c:ea:59:63:5b:64:da:1c:5d:61:55:b1:3e:eb: 8d:c6:ec:2c:59:b0:ac:38:aa:1b:4c:42:5e:92:e2:e7:72:99: eb:8d:f1:16:91:a2:6c:97:87:1d:d9:d5:d0:98:55:11:7d:df: b2:ac:83:c3:c5:bb:b1:6b:04:4c:bf:16:96:63:b8:af:18:de: 58:03:5e:c0:4d:9b:7e:24:36:8c:ab:cd:25:ce:a9:97:f9:4d: e5:5a:da:61:10:5d:5d:d6:b7:07:76:4f:d6:44:30:c5:96:2c: 47:1f:56:cf:a2:06:ca:52:ad:b7:c9:e9:b3:e3:9c:5f:25:8a: de:59:d7:2a:1f:9d:f3:47:99:56:97:00:40:b9:91:fc:49:23: 93:3f:bc:06:8f:c5:06:22:4d:1b:d3:4a:2a:ec:33:c9:72:08: a4:10:c9:bd:5f:b8:6e:d0:8f:c3:b2:97:37:b5:ba:6d:18:be: 5a:db:55:0d:29:43:36:b2:9c:a6:03:e4:11:94:ad:74:25:c8: be:ea:36:a3:89:40:cf:ef:6f:6d:5b:19:cb:b5:5f:59:4b:14: 72:6e:a2:71:ac:42:60:74:93:34:6b:b1:fa:6d:69:8a:08:11: 11:b3:e0:cf:3e:3e:b9:39:96:7c:17:c3:41:0e:fe:68:73:9f: c9:ec:21:5f -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt8gF83YDHPunxRRL2KNK26MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0 ZjVlNTYwHhcNMjYwMTAyMDIxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTcxZmE1ZmYyMGU5Y2QwZTAzMDRjMWZmZTVjMDZiYTlkZWU0MmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6thf4GO7Sg/TBrPP0l4OjW7jFm/ I/oVlezI7h8hdQQncBt6DJmrxaSfx9/LgBe7KHWOzMZOhw4dG13PZOKOuz58MVAB heJM/whqqBJuNETDGMurTKBIw1+CwtjQm/wUwPqqMzoyKTLnz293PyW3X0Lp+7wp foF1G6BmbX4AruFhnTdAZ0Bd+erJ+tZUiEDLOpOJbkIFSQQR13MToYht5KamZDx0 9Q6IXqTPLzuP+BHDAJ3O5fgcImMfhKDutbPk6unmJ/VcY+p5TX7JUl0re1Y+eNLJ 4TgKae2wRS8N09wCtxlMb7/LZQUR8pP3Tj4bR+4FMizm3QgBnv9IPP/nswIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFMVx+l/yDpzQ4DBMH/5cBrqd7kL4MB8GA1UdIwQY MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt YmE5OGYxMTIyMTIxLzEveFhINlhfSU9uTkRnTUV3Zl9sd0d1cDN1UXZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAW+e7AwQA XD+1AwQAXVxzAwQAbcRpAwQAbcRuMA0GCSqGSIb3DQEBCwUAA4IBAQAJirRoDOpZ Y1tk2hxdYVWxPuuNxuwsWbCsOKobTEJekuLncpnrjfEWkaJsl4cd2dXQmFURfd+y rIPDxbuxawRMvxaWY7ivGN5YA17ATZt+JDaMq80lzqmX+U3lWtphEF1d1rcHdk/W RDDFlixHH1bPogbKUq23yemz45xfJYreWdcqH53zR5lWlwBAuZH8SSOTP7wGj8UG Ik0b00oq7DPJcgikEMm9X7hu0I/Dspc3tbptGL5a21UNKUM2spymA+QRlK10Jci+ 6jajiUDP729tWxnLtV9ZSxRybqJxrEJgdJM0a7H6bWmKCBERs+DPPj65OZZ8F8NB Dv5oc5/J7CFf -----END CERTIFICATE-----Generated at Sat Jan 10 03:55:49 2026 by rpki-client