This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/xoKcISPL1Jwi7hzHyBK481SyMhs.roa File: xoKcISPL1Jwi7hzHyBK481SyMhs.roa (raw, json) Hash identifier: YYYqL1wQytGDZy/Hs3UwYo8z3YjSaAnQCOFFUvagQxY= Subject key identifier: C6:82:9C:21:23:CB:D4:9C:22:EE:1C:C7:C8:12:B8:F3:54:B2:32:1B Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6D8FCAA6A4B1137B11DA92771BD94 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/xoKcISPL1Jwi7hzHyBK481SyMhs.roa Signing time: Fri 02 Jan 2026 12:20:22 +0000 ROA not before: Fri 02 Jan 2026 12:20:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199689 IP address blocks: 2a0c:9a40:81f9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:d8:fc:aa:6a:4b:11:37:b1:1d:a9:27:71:bd:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6829c2123cbd49c22ee1cc7c812b8f354b2321b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:65:fe:ca:70:85:2f:e4:2e:c6:e3:09:c6:3e: 74:5a:0e:7a:e4:2a:cb:ce:1c:65:4b:6a:26:f4:27: ee:fe:61:92:a8:b5:cb:38:e3:9c:8c:b5:19:99:25: 40:02:84:5c:e2:68:9e:89:78:ee:61:53:3f:55:90: 4b:5d:d0:b4:80:e8:75:fa:ba:70:6e:ba:0b:65:15: 10:1d:98:0a:5a:55:ad:c6:96:c2:c1:bf:41:77:df: ee:ec:af:c6:a6:6e:1b:2f:ec:18:67:6b:41:cb:46: a8:67:96:7c:00:26:f5:f4:17:db:ee:e4:36:00:4b: bb:44:4e:f5:53:4c:46:f9:14:dc:cb:45:6a:e0:b6: 72:22:f7:cb:bb:37:81:1f:82:38:d4:cc:c8:53:72: 78:11:3f:99:ed:f1:a1:7b:3d:f8:2f:e4:a5:77:38: 56:91:c3:2a:28:54:8f:b4:bf:62:0c:1f:8d:14:34: 9d:f7:a2:27:94:4e:d4:50:49:96:4a:47:f8:95:47: 85:0d:cf:c3:48:dc:ac:73:08:03:8f:b1:b5:ee:90: 35:67:5a:bc:90:91:42:c5:cc:ce:2d:30:9c:c4:2a: 48:4d:6d:ba:d9:00:52:0d:b5:cb:3e:37:16:d7:da: 1d:cd:22:e2:52:af:2a:db:e7:1d:f8:b6:26:ec:bd: d9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:82:9C:21:23:CB:D4:9C:22:EE:1C:C7:C8:12:B8:F3:54:B2:32:1B X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/xoKcISPL1Jwi7hzHyBK481SyMhs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:81f9::/48 Signature Algorithm: sha256WithRSAEncryption 4f:75:e9:fd:57:2d:99:fe:72:a7:21:89:40:76:b3:84:73:c3: f3:2d:35:57:9c:ca:75:7b:73:e5:38:30:07:c4:cd:16:df:75: 51:11:dc:6e:da:52:5f:a7:8f:22:2d:d9:aa:b9:18:e9:74:3e: 93:67:25:97:70:a7:0b:0c:51:0d:e7:f0:72:c4:93:b2:2d:1b: fd:58:67:4d:cc:a3:67:3a:b4:d0:53:f0:a6:94:72:91:25:71: b5:b9:d3:2d:90:f1:58:69:e1:92:07:28:36:f5:e2:46:f3:e0: 2f:66:f5:22:43:99:51:a5:0c:d1:43:7d:54:70:87:5e:52:e1: 85:a3:56:11:e9:df:88:88:a0:68:e6:77:9b:10:ae:05:ef:dc: 61:6f:c7:e5:41:0e:01:3f:3c:72:a3:26:bb:68:84:de:36:49: b3:d4:aa:4a:f7:d5:66:b8:fe:b0:49:c3:79:8d:fb:a7:f8:de: 9f:c0:7b:02:99:e3:fa:34:87:96:8d:f1:18:58:b6:af:a8:a5: ba:43:a9:d4:ff:bd:72:ff:93:55:84:c9:9a:75:72:b3:91:90: 35:12:60:eb:51:b0:ae:61:bf:30:4e:6c:25:eb:c3:d8:92:c3: ff:4d:7d:d6:50:1a:ad:a3:6a:e2:59:64:25:80:e9:5f:a6:88: 95:97:36:dd -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+ptj8qmpLETexHakncb2UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjgyOWMyMTIzY2JkNDljMjJlZTFjYzdjODEyYjhmMzU0YjIzMjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22X+ynCFL+QuxuMJxj50Wg565CrL zhxlS2om9Cfu/mGSqLXLOOOcjLUZmSVAAoRc4mieiXjuYVM/VZBLXdC0gOh1+rpw broLZRUQHZgKWlWtxpbCwb9Bd9/u7K/Gpm4bL+wYZ2tBy0aoZ5Z8ACb19Bfb7uQ2 AEu7RE71U0xG+RTcy0Vq4LZyIvfLuzeBH4I41MzIU3J4ET+Z7fGhez34L+SldzhW kcMqKFSPtL9iDB+NFDSd96InlE7UUEmWSkf4lUeFDc/DSNyscwgDj7G17pA1Z1q8 kJFCxczOLTCcxCpITW262QBSDbXLPjcW19odzSLiUq8q2+cd+LYm7L3ZOwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMaCnCEjy9ScIu4cx8gSuPNUsjIbMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEveG9LY0lTUEwxSndpN2h6SHlCSzQ4MVN5TWhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIH5 MA0GCSqGSIb3DQEBCwUAA4IBAQBPden9Vy2Z/nKnIYlAdrOEc8PzLTVXnMp1e3Pl ODAHxM0W33VREdxu2lJfp48iLdmquRjpdD6TZyWXcKcLDFEN5/ByxJOyLRv9WGdN zKNnOrTQU/CmlHKRJXG1udMtkPFYaeGSByg29eJG8+AvZvUiQ5lRpQzRQ31UcIde UuGFo1YR6d+IiKBo5nebEK4F79xhb8flQQ4BPzxyoya7aITeNkmz1KpK99VmuP6w ScN5jfun+N6fwHsCmeP6NIeWjfEYWLavqKW6Q6nU/71y/5NVhMmadXKzkZA1EmDr UbCuYb8wTmwl68PYksP/TX3WUBqto2riWWQlgOlfpoiVlzbd -----END CERTIFICATE-----Generated at Sun Jan 11 22:26:34 2026 by rpki-client