This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/XONs_E2_mERrRrFNb2botDETzSc.roa File: XONs_E2_mERrRrFNb2botDETzSc.roa (raw, json) Hash identifier: lmm+azAJx/7E8TvFMJKD3y1YbrVutZLYCsdKWEEGE5U= Subject key identifier: 5C:E3:6C:FC:4D:BF:98:44:6B:46:B1:4D:6F:66:E8:B4:31:13:CD:27 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA71BE3B325B94F06E4AE4E8B762113 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/XONs_E2_mERrRrFNb2botDETzSc.roa Signing time: Fri 02 Jan 2026 12:20:39 +0000 ROA not before: Fri 02 Jan 2026 12:20:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 2a0c:9a40:8a90::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:1b:e3:b3:25:b9:4f:06:e4:ae:4e:8b:76:21:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ce36cfc4dbf98446b46b14d6f66e8b43113cd27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:37:4d:3f:b1:f1:3d:90:f5:cf:72:47:73:5c: 6d:5a:af:02:ff:b5:4f:64:70:d5:43:d7:bc:a7:4d: 69:8e:cb:6a:0d:32:54:7f:13:09:e1:e2:ec:12:e1: 19:79:76:22:b1:70:1b:8d:52:eb:09:fd:fc:c6:0c: 88:82:26:92:a9:13:62:e4:da:8e:81:b1:35:4d:ff: 15:7c:24:0d:d0:b7:21:2f:b9:c3:b6:05:28:fe:1b: 15:cc:db:41:47:f7:41:c7:f2:e8:17:32:43:9e:56: 09:0e:56:a8:d2:c6:e1:48:8d:34:ff:a7:37:3b:01: 09:0e:dc:c9:51:31:71:94:c1:1b:57:92:10:44:6d: f8:60:f2:99:af:71:c3:34:ca:e0:c7:3c:14:fa:dd: 1d:43:8b:a3:8f:05:ed:89:81:ce:78:0e:b7:d7:e5: e3:e1:0f:08:3c:7a:38:04:1c:a8:04:e2:76:a5:5a: 0e:fd:0f:01:c9:88:db:57:76:0a:99:74:e6:ee:d1: 55:24:f9:8a:81:88:ef:ce:5c:60:aa:4c:52:4e:5c: e7:fb:40:04:01:0c:e1:ae:27:99:88:1b:c6:d0:27: 97:0e:14:a3:28:48:32:73:0c:88:04:62:4f:9b:da: 8f:b4:18:39:1d:92:db:f2:91:12:80:a5:c9:ba:fd: 2c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E3:6C:FC:4D:BF:98:44:6B:46:B1:4D:6F:66:E8:B4:31:13:CD:27 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/XONs_E2_mERrRrFNb2botDETzSc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8a90::/48 Signature Algorithm: sha256WithRSAEncryption a5:fe:38:ba:70:ec:82:ff:3d:0a:d1:03:85:68:93:5e:ba:9d: e8:83:74:70:26:d5:f3:31:17:20:4d:d8:ac:2e:4a:6d:40:92: 6a:00:da:54:ea:fa:3c:63:3f:3f:73:39:6d:38:26:21:70:7a: af:39:40:b8:30:ee:d2:d3:60:9b:21:50:4a:de:14:02:14:70: 49:b9:32:63:4c:95:7a:8a:78:43:20:1b:25:35:9b:e4:53:9f: 7f:95:42:00:0b:4d:9c:8e:cc:34:cb:df:42:4c:be:e1:1e:a8: f4:cc:c1:9e:ff:92:b2:fe:e2:75:a8:ab:f7:3e:17:19:9a:7c: 3b:21:4e:c7:71:f1:9f:bc:76:5d:41:e6:e6:1c:1b:85:48:12: 93:8d:d0:85:dd:a0:71:81:d3:cb:83:f6:5c:38:1d:ea:03:59: 20:c3:9b:ea:d9:1b:5b:c6:47:dc:2e:40:4d:e0:7f:da:95:90: 02:ad:31:7c:19:a7:1f:3a:48:4d:11:01:1e:6c:04:42:b8:d5: 5c:11:60:9c:98:af:62:ba:5e:d1:d3:9f:85:50:b9:8e:b6:23: 42:b0:c4:88:99:6c:cb:38:bc:78:d6:b6:37:8f:27:6d:5a:36: 17:d3:1c:9c:72:a6:ae:f6:47:3a:18:dd:9f:10:e3:dd:f9:69: 14:f7:e1:4d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pxvjsyW5Twbkrk6LdiETMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2UzNmNmYzRkYmY5ODQ0NmI0NmIxNGQ2ZjY2ZThiNDMxMTNjZDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDdNP7HxPZD1z3JHc1xtWq8C/7VP ZHDVQ9e8p01pjstqDTJUfxMJ4eLsEuEZeXYisXAbjVLrCf38xgyIgiaSqRNi5NqO gbE1Tf8VfCQN0LchL7nDtgUo/hsVzNtBR/dBx/LoFzJDnlYJDlao0sbhSI00/6c3 OwEJDtzJUTFxlMEbV5IQRG34YPKZr3HDNMrgxzwU+t0dQ4ujjwXtiYHOeA631+Xj 4Q8IPHo4BByoBOJ2pVoO/Q8ByYjbV3YKmXTm7tFVJPmKgYjvzlxgqkxSTlzn+0AE AQzhrieZiBvG0CeXDhSjKEgycwyIBGJPm9qPtBg5HZLb8pESgKXJuv0sTwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFzjbPxNv5hEa0axTW9m6LQxE80nMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvWE9Oc19FMl9tRVJyUnJGTmIyYm90REVUelNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIqQ MA0GCSqGSIb3DQEBCwUAA4IBAQCl/ji6cOyC/z0K0QOFaJNeup3og3RwJtXzMRcg TdisLkptQJJqANpU6vo8Yz8/czltOCYhcHqvOUC4MO7S02CbIVBK3hQCFHBJuTJj TJV6inhDIBslNZvkU59/lUIAC02cjsw0y99CTL7hHqj0zMGe/5Ky/uJ1qKv3PhcZ mnw7IU7HcfGfvHZdQebmHBuFSBKTjdCF3aBxgdPLg/ZcOB3qA1kgw5vq2Rtbxkfc LkBN4H/alZACrTF8GacfOkhNEQEebARCuNVcEWCcmK9iul7R05+FULmOtiNCsMSI mWzLOLx41rY3jydtWjYX0xyccqau9kc6GN2fEOPd+WkU9+FN -----END CERTIFICATE-----Generated at Fri Jan 9 06:24:36 2026 by rpki-client