This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/xjeDdXf7ijAeReyulaCu9tLAuOg.roa File: xjeDdXf7ijAeReyulaCu9tLAuOg.roa (raw, json) Hash identifier: NZX+NPDqKSDfommugazbgO0SZWT5a+JUA0X/7w1w800= Subject key identifier: C6:37:83:75:77:FB:8A:30:1E:45:EC:AE:95:A0:AE:F6:D2:C0:B8:E8 Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3 Certificate serial: 019B7F84CA1E7DF58091C8C4C4557CCB66FB Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/xjeDdXf7ijAeReyulaCu9tLAuOg.roa Signing time: Fri 02 Jan 2026 16:22:47 +0000 ROA not before: Fri 02 Jan 2026 16:22:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55201 IP address blocks: 2a06:b441::/32 maxlen: 40 2a0e:7780::/32 maxlen: 40 2a0f:e000::/32 maxlen: 40 2a11:3b40::/32 maxlen: 40 2a11:dcc0::/32 maxlen: 40 2a12:440::/32 maxlen: 40 2a12:6640::/32 maxlen: 40 2a13:ba00::/32 maxlen: 40 2a13:dac0::/32 maxlen: 40 2a14:c0::/32 maxlen: 40 2a14:1c0::/32 maxlen: 40 2a14:800::/32 maxlen: 40 2a14:7e00::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 04:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:ca:1e:7d:f5:80:91:c8:c4:c4:55:7c:cb:66:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3 Validity Not Before: Jan 2 16:22:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c637837577fb8a301e45ecae95a0aef6d2c0b8e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0c:42:14:49:f0:08:a6:ef:b0:d7:e5:ae:b5: c9:04:be:77:36:af:57:5b:1c:6a:82:50:88:de:eb: 70:04:11:e4:07:81:d1:47:7e:18:2a:75:ec:9a:58: c0:6a:76:3f:8d:f6:27:c3:20:c5:3b:48:6e:db:ea: d6:ab:a6:9f:ab:0e:37:6b:7d:92:49:63:00:1e:d1: fa:4b:7b:cc:51:78:0b:63:d1:13:bf:37:2f:35:38: f9:a3:f1:fc:b6:6b:bc:62:c8:35:c1:3f:a2:29:5b: 32:c8:95:b1:53:b9:98:a7:fb:65:74:f7:cd:76:8f: 3e:95:5e:32:a8:de:06:93:45:77:4b:7b:c6:4a:28: e9:49:2c:06:1b:12:63:5d:79:1c:3f:df:d0:41:88: f0:e3:06:df:4f:c8:41:86:ff:6f:95:18:7e:8e:ea: fb:60:f1:e2:e2:d6:66:f3:ad:3e:b8:52:e2:ae:58: 55:20:d3:90:bd:05:84:98:c4:12:35:28:f6:c9:10: 32:2b:e8:cd:70:4e:75:02:4c:7f:bf:d9:af:a7:4d: 81:33:a9:46:27:8c:cf:96:40:93:8f:7b:13:ea:38: e9:fd:3b:ec:4e:0f:6f:e2:23:c6:bf:f8:b9:d3:20: ec:d8:16:5f:76:ee:89:13:68:2a:bc:f5:81:68:b3: 98:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:37:83:75:77:FB:8A:30:1E:45:EC:AE:95:A0:AE:F6:D2:C0:B8:E8 X509v3 Authority Key Identifier: keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/xjeDdXf7ijAeReyulaCu9tLAuOg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:b441::/32 2a0e:7780::/32 2a0f:e000::/32 2a11:3b40::/32 2a11:dcc0::/32 2a12:440::/32 2a12:6640::/32 2a13:ba00::/32 2a13:dac0::/32 2a14:c0::/32 2a14:1c0::/32 2a14:800::/32 2a14:7e00::/32 Signature Algorithm: sha256WithRSAEncryption 68:c3:d3:e3:63:c8:a1:27:f2:78:df:82:6b:f2:6f:28:2c:05: b3:77:e7:e0:96:9c:3d:06:7c:22:c0:48:38:71:02:d2:da:4a: f1:39:b7:a7:40:24:1b:88:97:8b:4a:6d:e3:2d:91:32:d9:0a: d4:c5:be:1f:ba:6f:ee:b0:c5:6f:20:0a:63:d4:24:fb:e7:de: ad:60:81:c8:85:0b:16:92:bf:d9:90:fe:7f:c9:ed:e3:e2:79: e4:31:be:06:d8:63:80:26:fb:3b:99:97:b1:1e:3a:ef:cc:ed: 25:f9:5b:d9:be:32:17:11:66:60:ca:f5:aa:2a:4b:ae:36:26: fd:42:1b:25:7e:63:77:a2:84:33:c2:00:ad:bb:6c:c7:16:cf: 14:de:ab:c2:f6:15:49:36:d5:19:66:70:fb:20:32:78:e3:53: c4:2e:80:b4:92:d2:a5:47:1b:ca:b7:71:b9:6f:94:28:f5:b3: 17:c8:c6:23:9c:38:d7:64:3d:b8:a3:0b:61:a7:d3:9f:34:4f: c4:9b:2e:f2:8b:21:e6:c6:3f:31:74:5a:d8:39:37:2f:8a:d2: 66:bd:1e:fd:7c:72:16:41:57:57:b0:fb:16:d5:94:c5:f8:33: 62:72:7d:55:a9:99:55:5c:39:0c:ae:4b:6c:20:3e:99:d5:ad: 4b:30:6a:78 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgISAZt/hMoeffWAkcjExFV8y2b7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4OWQ2YjU1ZDZhNjg4ZWU1ZTMzODE4ODNiYjVhZjY4NDMz Mjc2ZTMwHhcNMjYwMTAyMTYyMjQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjM3ODM3NTc3ZmI4YTMwMWU0NWVjYWU5NWEwYWVmNmQyYzBiOGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgxCFEnwCKbvsNflrrXJBL53Nq9X WxxqglCI3utwBBHkB4HRR34YKnXsmljAanY/jfYnwyDFO0hu2+rWq6afqw43a32S SWMAHtH6S3vMUXgLY9ETvzcvNTj5o/H8tmu8Ysg1wT+iKVsyyJWxU7mYp/tldPfN do8+lV4yqN4Gk0V3S3vGSijpSSwGGxJjXXkcP9/QQYjw4wbfT8hBhv9vlRh+jur7 YPHi4tZm860+uFLirlhVINOQvQWEmMQSNSj2yRAyK+jNcE51Akx/v9mvp02BM6lG J4zPlkCTj3sT6jjp/TvsTg9v4iPGv/i50yDs2BZfdu6JE2gqvPWBaLOYIQIDAQAB o4ICXjCCAlowHQYDVR0OBBYEFMY3g3V3+4owHkXsrpWgrvbSwLjoMB8GA1UdIwQY MBaAFBida1XWpojuXjOBiDu1r2hDMnbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUt YTJhNGM2YTYyMWNkLzEveGplRGRYZjdpakFlUmV5dWxhQ3U5dExBdU9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUtYTJhNGM2YTYyMWNk LzEvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHQGCCsGAQUFBwEHAQH/BGUwYzBhBAIAAjBbAwUAKga0QQMF ACoOd4ADBQAqD+AAAwUAKhE7QAMFACoR3MADBQAqEgRAAwUAKhJmQAMFACoTugAD BQAqE9rAAwUAKhQAwAMFACoUAcADBQAqFAgAAwUAKhR+ADANBgkqhkiG9w0BAQsF AAOCAQEAaMPT42PIoSfyeN+Ca/JvKCwFs3fn4JacPQZ8IsBIOHEC0tpK8Tm3p0Ak G4iXi0pt4y2RMtkK1MW+H7pv7rDFbyAKY9Qk++ferWCByIULFpK/2ZD+f8nt4+J5 5DG+BthjgCb7O5mXsR4678ztJflb2b4yFxFmYMr1qipLrjYm/UIbJX5jd6KEM8IA rbtsxxbPFN6rwvYVSTbVGWZw+yAyeONTxC6AtJLSpUcbyrdxuW+UKPWzF8jGI5w4 12Q9uKMLYafTnzRPxJsu8osh5sY/MXRa2Dk3L4rSZr0e/XxyFkFXV7D7FtWUxfgz YnJ9VamZVVw5DK5LbCA+mdWtSzBqeA== -----END CERTIFICATE-----Generated at Wed Jan 21 11:14:22 2026 by rpki-client