This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/xGSQtxBpS573s4zPyTFpERUQH7o.roa File: xGSQtxBpS573s4zPyTFpERUQH7o.roa (raw, json) Hash identifier: 0qhIt2oCl1BBlwABDamfzBFWIJOyQt4+H4muS8E2+74= Subject key identifier: C4:64:90:B7:10:69:4B:9E:F7:B3:8C:CF:C9:31:69:11:15:10:1F:BA Certificate issuer: /CN=01c352118fd5f75454cfc61be61a42abef4dc4f8 Certificate serial: 019B78A2F8FF7009466A12F70329C3CDB41D Authority key identifier: 01:C3:52:11:8F:D5:F7:54:54:CF:C6:1B:E6:1A:42:AB:EF:4D:C4:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcNSEY_V91RUz8Yb5hpCq-9NxPg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/xGSQtxBpS573s4zPyTFpERUQH7o.roa Signing time: Thu 01 Jan 2026 08:18:25 +0000 ROA not before: Thu 01 Jan 2026 08:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24776 IP address blocks: 91.213.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft rsync://rpki.ripe.net/repository/DEFAULT/AcNSEY_V91RUz8Yb5hpCq-9NxPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 20:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:f8:ff:70:09:46:6a:12:f7:03:29:c3:cd:b4:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01c352118fd5f75454cfc61be61a42abef4dc4f8 Validity Not Before: Jan 1 08:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c46490b710694b9ef7b38ccfc931691115101fba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:55:7a:19:04:22:5f:ac:ef:8e:2e:e1:d5:97: 85:be:d8:79:7d:89:62:d3:e5:1c:70:af:f2:b2:a5: 1e:0c:60:a7:53:69:29:b8:6d:ce:3e:55:43:25:2f: 80:d9:96:b2:a5:57:9f:b7:6f:eb:94:93:33:c3:9f: 0f:3a:22:30:61:c1:94:36:52:0f:f0:f2:f3:3a:ac: fb:9e:0e:b2:cf:6d:71:c8:9b:9e:be:ae:80:0f:07: 85:62:3b:7b:c3:35:5d:c7:dd:95:5d:ef:77:64:e6: a0:0a:ef:b0:4a:7a:a4:1d:89:b6:64:16:5b:7a:f0: 63:55:d8:8c:4d:33:c8:f6:d2:83:4a:e7:64:93:ab: f2:ff:91:f5:b3:bf:9b:56:2a:ac:4c:ae:b7:c1:18: 86:ac:ad:f8:20:bf:81:35:ff:37:a1:56:2e:24:80: e8:64:2d:7a:33:b4:70:58:dc:52:20:07:48:e4:f5: 06:3c:e4:94:a8:5d:91:d7:ec:32:96:cb:f1:01:6b: 4e:62:2e:fe:80:91:5c:87:a5:e0:73:5a:b9:ee:28: e7:0b:58:7b:f1:34:be:9d:ae:71:83:01:27:e6:39: 7b:5e:a1:9b:7f:53:e3:d9:91:85:1e:19:e1:29:e2: b7:f3:50:70:38:11:c9:0a:10:b4:a8:1a:13:73:83: f0:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:64:90:B7:10:69:4B:9E:F7:B3:8C:CF:C9:31:69:11:15:10:1F:BA X509v3 Authority Key Identifier: keyid:01:C3:52:11:8F:D5:F7:54:54:CF:C6:1B:E6:1A:42:AB:EF:4D:C4:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcNSEY_V91RUz8Yb5hpCq-9NxPg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/xGSQtxBpS573s4zPyTFpERUQH7o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.41.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:55:fb:2d:07:e7:fd:85:cd:fb:1f:91:04:b4:87:da:27:6d: 08:6b:05:6d:c6:b3:88:6d:f3:ce:b8:63:c4:e2:d1:09:05:0e: 10:7e:5d:f4:5c:cb:7f:8e:b4:fa:b5:56:92:d7:e2:ae:8c:63: df:b6:79:8f:56:7d:51:74:64:ec:dd:53:94:6a:09:af:8c:5f: fc:25:21:1e:37:02:1c:7e:4d:b7:be:b8:c7:9a:a5:f0:a1:e0: 88:ee:f4:1a:2a:85:36:6a:27:9f:86:83:e6:c3:a9:96:2d:2a: e1:e7:21:ed:ba:a9:86:08:ff:16:0c:a4:35:c5:df:bb:94:3f: c0:37:1e:98:00:aa:17:43:1f:42:46:e5:b4:83:63:7e:41:54: f7:fd:a5:9c:66:ee:e7:ef:f1:bd:72:7a:f4:6b:17:e3:5f:f8: f8:20:53:be:53:ca:77:38:19:36:ba:25:2a:62:45:fa:09:20: eb:9f:39:08:c9:0a:16:98:d1:cc:3d:c3:50:4f:d1:4a:69:7a: 28:69:38:40:23:90:7e:8c:79:ad:0f:c8:3e:95:f9:ae:5c:92: 25:ea:47:74:3c:dc:a4:94:b8:8f:e2:64:c4:1c:e9:fe:37:19: 71:f4:c6:c1:82:7e:11:d4:21:22:cc:07:f2:d7:95:4b:d9:1a: 7c:4c:ad:0e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ovj/cAlGahL3AynDzbQdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxYzM1MjExOGZkNWY3NTQ1NGNmYzYxYmU2MWE0MmFiZWY0 ZGM0ZjgwHhcNMjYwMTAxMDgxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDY0OTBiNzEwNjk0YjllZjdiMzhjY2ZjOTMxNjkxMTE1MTAxZmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1V6GQQiX6zvji7h1ZeFvth5fYli 0+UccK/ysqUeDGCnU2kpuG3OPlVDJS+A2ZaypVeft2/rlJMzw58POiIwYcGUNlIP 8PLzOqz7ng6yz21xyJuevq6ADweFYjt7wzVdx92VXe93ZOagCu+wSnqkHYm2ZBZb evBjVdiMTTPI9tKDSudkk6vy/5H1s7+bViqsTK63wRiGrK34IL+BNf83oVYuJIDo ZC16M7RwWNxSIAdI5PUGPOSUqF2R1+wylsvxAWtOYi7+gJFch6Xgc1q57ijnC1h7 8TS+na5xgwEn5jl7XqGbf1Pj2ZGFHhnhKeK381BwOBHJChC0qBoTc4PwjQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMRkkLcQaUue97OMz8kxaREVEB+6MB8GA1UdIwQY MBaAFAHDUhGP1fdUVM/GG+YaQqvvTcT4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWNOU0VZX1Y5MVJVejhZYjVocENxLTlOeFBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi81ZThhMmEtNDU3My00MzZiLTkwMmEt ZWYwMWUxZGM3ZGFjLzEveEdTUXR4QnBTNTczczR6UHlURnBFUlVRSDdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi81ZThhMmEtNDU3My00MzZiLTkwMmEtZWYwMWUxZGM3ZGFj LzEvQWNOU0VZX1Y5MVJVejhZYjVocENxLTlOeFBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9UpMA0G CSqGSIb3DQEBCwUAA4IBAQBdVfstB+f9hc37H5EEtIfaJ20IawVtxrOIbfPOuGPE 4tEJBQ4Qfl30XMt/jrT6tVaS1+KujGPftnmPVn1RdGTs3VOUagmvjF/8JSEeNwIc fk23vrjHmqXwoeCI7vQaKoU2aiefhoPmw6mWLSrh5yHtuqmGCP8WDKQ1xd+7lD/A Nx6YAKoXQx9CRuW0g2N+QVT3/aWcZu7n7/G9cnr0axfjX/j4IFO+U8p3OBk2uiUq YkX6CSDrnzkIyQoWmNHMPcNQT9FKaXooaThAI5B+jHmtD8g+lfmuXJIl6kd0PNyk lLiP4mTEHOn+Nxlx9MbBgn4R1CEizAfy15VL2Rp8TK0O -----END CERTIFICATE-----Generated at Sat Jan 3 04:13:20 2026 by rpki-client