This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/XJ6e0opJKgimEijLIBG3BfhsLw4.roa File: XJ6e0opJKgimEijLIBG3BfhsLw4.roa (raw, json) Hash identifier: lRrbFVno2uiMZhsLJx7juhJS6VaYoerGh1S8idAaHlA= Subject key identifier: 5C:9E:9E:D2:8A:49:2A:08:A6:12:28:CB:20:11:B7:05:F8:6C:2F:0E Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6DA18439DD83C0372490A811FB9D9 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/XJ6e0opJKgimEijLIBG3BfhsLw4.roa Signing time: Fri 02 Jan 2026 12:20:22 +0000 ROA not before: Fri 02 Jan 2026 12:20:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199707 IP address blocks: 2a0c:9a40:8aa0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:da:18:43:9d:d8:3c:03:72:49:0a:81:1f:b9:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c9e9ed28a492a08a61228cb2011b705f86c2f0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ab:92:93:3d:75:2c:d2:8b:18:3e:fd:c9:c6: 97:88:81:6d:f4:09:40:6f:a1:6b:82:87:2d:a1:2d: 93:01:ef:f2:c6:49:6f:ab:8f:a1:9b:c6:e6:75:e5: ef:5e:b4:1b:ba:4c:dc:72:12:d4:23:06:ef:2d:26: 4d:77:7e:34:57:8e:91:9c:4c:c0:a8:3f:3d:ae:ed: 2f:2f:72:d1:1a:60:3b:be:3a:49:fe:27:f0:ac:62: 47:ed:0a:ef:46:a1:67:60:33:c2:41:aa:02:9f:11: 57:df:a8:4f:c1:30:06:9d:32:c0:49:2b:2a:f4:26: 74:c5:fd:08:8f:86:f7:57:b6:f6:a7:61:f2:d0:fb: b6:f1:41:84:83:1d:44:6e:e1:93:20:ce:4a:f0:e8: 41:2d:58:30:4f:50:1a:bc:81:49:92:cb:2b:09:dd: 4b:49:bd:ad:70:3c:8f:65:cd:fc:77:9e:6c:d4:91: fd:c6:4a:ed:6e:74:fd:3d:5e:39:01:c4:66:59:f5: f9:5d:06:15:4e:ba:44:bc:2a:87:27:e4:ad:27:8c: 23:1e:05:c2:5a:8d:98:7a:de:41:65:c7:79:58:12: 9b:82:19:e9:38:1e:c0:b7:31:4c:d8:cf:67:7e:16: 44:ef:2c:ed:b6:83:80:38:39:49:bb:86:13:14:3c: 31:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:9E:9E:D2:8A:49:2A:08:A6:12:28:CB:20:11:B7:05:F8:6C:2F:0E X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/XJ6e0opJKgimEijLIBG3BfhsLw4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8aa0::/44 Signature Algorithm: sha256WithRSAEncryption 2e:fd:55:f9:76:0d:1b:09:54:da:d4:6a:3b:63:51:fb:6d:c7: c5:44:38:69:4c:b2:60:67:6d:d6:77:b0:cc:28:e8:68:cf:ab: ee:e5:b3:f4:28:af:9f:b8:46:b6:73:27:89:4f:d8:fc:5f:9f: af:0e:ee:a6:ca:4d:e5:a0:82:ac:de:ac:8d:dc:68:6f:aa:2b: a2:95:66:ac:81:e8:b8:e3:6f:8b:48:95:eb:65:0e:51:11:c5: aa:24:46:84:fb:1b:1e:43:08:c4:54:78:0f:7e:1c:3e:8c:41: 3a:14:dd:ec:a0:b2:4b:0c:f8:4a:6c:28:b6:b5:36:e9:29:24: b2:97:74:c2:32:9a:f6:6a:4a:89:3c:bd:fa:50:f3:3b:ea:fc: 1a:f3:ac:45:d1:4c:99:79:81:a7:2d:fd:c6:88:a6:cd:f3:e7: 38:2f:6c:d7:cc:25:84:9c:fe:71:47:8f:35:04:de:e8:0f:c9: d9:88:ea:de:76:14:b2:88:30:cc:15:bd:19:5a:1f:66:c7:55: 94:6a:37:6e:88:78:72:de:d3:fb:51:15:d3:25:4a:72:70:5c: 5e:74:e2:6f:d9:a7:c6:76:b0:31:0a:28:d9:57:b2:e4:17:df: 99:86:0d:c3:43:ff:67:04:ff:01:3b:87:c8:88:5d:dd:93:88: 4d:49:23:80 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+ptoYQ53YPANySQqBH7nZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzllOWVkMjhhNDkyYTA4YTYxMjI4Y2IyMDExYjcwNWY4NmMyZjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KuSkz11LNKLGD79ycaXiIFt9AlA b6FrgoctoS2TAe/yxklvq4+hm8bmdeXvXrQbukzcchLUIwbvLSZNd340V46RnEzA qD89ru0vL3LRGmA7vjpJ/ifwrGJH7QrvRqFnYDPCQaoCnxFX36hPwTAGnTLASSsq 9CZ0xf0Ij4b3V7b2p2Hy0Pu28UGEgx1EbuGTIM5K8OhBLVgwT1AavIFJkssrCd1L Sb2tcDyPZc38d55s1JH9xkrtbnT9PV45AcRmWfX5XQYVTrpEvCqHJ+StJ4wjHgXC Wo2Yet5BZcd5WBKbghnpOB7AtzFM2M9nfhZE7yzttoOAODlJu4YTFDwxywIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFyentKKSSoIphIoyyARtwX4bC8OMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvWEo2ZTBvcEpLZ2ltRWlqTElCRzNCZmhzTHc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgyaQIqg MA0GCSqGSIb3DQEBCwUAA4IBAQAu/VX5dg0bCVTa1Go7Y1H7bcfFRDhpTLJgZ23W d7DMKOhoz6vu5bP0KK+fuEa2cyeJT9j8X5+vDu6myk3loIKs3qyN3GhvqiuilWas gei442+LSJXrZQ5REcWqJEaE+xseQwjEVHgPfhw+jEE6FN3soLJLDPhKbCi2tTbp KSSyl3TCMpr2akqJPL36UPM76vwa86xF0UyZeYGnLf3GiKbN8+c4L2zXzCWEnP5x R481BN7oD8nZiOredhSyiDDMFb0ZWh9mx1WUajduiHhy3tP7URXTJUpycFxedOJv 2afGdrAxCijZV7LkF9+Zhg3DQ/9nBP8BO4fIiF3dk4hNSSOA -----END CERTIFICATE-----Generated at Tue Jan 20 09:03:36 2026 by rpki-client