This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/xXZoIesIsVLnbbFVS6uD0w1QOCY.roa File: xXZoIesIsVLnbbFVS6uD0w1QOCY.roa (raw, json) Hash identifier: pEd0VeAjn0hUjIU5aNRKB8vb7ZezOzTftnRZZoX4QL8= Subject key identifier: C5:76:68:21:EB:08:B1:52:E7:6D:B1:55:4B:AB:83:D3:0D:50:38:26 Certificate issuer: /CN=8fe692658aef093d9e3603132b965bf1be075d37 Certificate serial: 019B78346E1E7B3E36965C6970609E71EBD8 Authority key identifier: 8F:E6:92:65:8A:EF:09:3D:9E:36:03:13:2B:96:5B:F1:BE:07:5D:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/xXZoIesIsVLnbbFVS6uD0w1QOCY.roa Signing time: Thu 01 Jan 2026 06:17:40 +0000 ROA not before: Thu 01 Jan 2026 06:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213997 IP address blocks: 2001:67c:f48::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.crl rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft rsync://rpki.ripe.net/repository/DEFAULT/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:6e:1e:7b:3e:36:96:5c:69:70:60:9e:71:eb:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fe692658aef093d9e3603132b965bf1be075d37 Validity Not Before: Jan 1 06:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5766821eb08b152e76db1554bab83d30d503826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3f:cf:a0:8f:2b:15:05:fa:98:a0:e2:46:f8: 18:71:92:94:36:64:4b:e2:cc:2b:dd:72:b1:23:60: d9:e6:55:28:75:7d:62:13:d4:b1:6f:0f:a3:8f:99: 85:a1:7e:92:d0:e9:c5:9f:0d:d4:20:5d:a0:b0:f7: cf:88:5d:0a:46:23:aa:da:67:ea:18:40:87:9e:f4: 79:3d:a8:7e:48:f3:8a:29:c8:be:a0:1f:94:82:20: ee:f3:0c:a5:b4:5e:68:74:30:a6:f6:8c:53:74:03: b5:c9:b0:be:f9:98:16:b3:14:e3:46:9b:d3:3f:8f: 08:ef:04:73:33:96:dc:9a:b2:0b:4a:dd:62:72:6d: 66:3a:f2:6f:ce:39:58:21:7a:2c:73:d2:ae:68:4e: ff:a4:10:53:4a:59:4a:83:78:82:ab:4c:99:28:dc: 63:3c:b7:e7:90:e9:ed:a4:9b:aa:5a:cb:39:6a:93: d7:a1:19:a3:d4:7a:94:7e:3e:0d:04:e4:25:f7:ce: 99:94:4d:47:76:40:5d:39:10:08:60:63:08:99:36: 96:06:86:58:cc:c7:db:d9:33:c8:36:32:9f:ac:3e: 7d:69:b7:2f:ed:5d:60:9f:39:f6:5b:85:a7:eb:91: c6:8b:1f:30:b4:e2:ca:0a:e9:cb:20:59:eb:60:e2: 95:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:76:68:21:EB:08:B1:52:E7:6D:B1:55:4B:AB:83:D3:0D:50:38:26 X509v3 Authority Key Identifier: keyid:8F:E6:92:65:8A:EF:09:3D:9E:36:03:13:2B:96:5B:F1:BE:07:5D:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/xXZoIesIsVLnbbFVS6uD0w1QOCY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:f48::/48 Signature Algorithm: sha256WithRSAEncryption 70:ab:84:cd:35:05:99:86:2e:31:73:aa:8b:c2:4f:bb:8f:08: 97:f6:7b:57:b7:38:ab:05:41:cc:b1:68:9d:59:39:24:0d:a8: c9:fa:aa:a2:a4:d8:cb:e3:9b:e5:a2:b3:52:63:17:bd:75:78: 98:08:39:fd:8a:1f:55:2e:54:1b:dc:ca:73:57:bb:8f:a0:ec: 4c:63:45:e1:9e:22:6d:fb:28:66:34:b9:b3:eb:7d:fb:af:23: 09:ec:15:72:27:3b:d2:02:69:01:9e:85:a3:9e:f9:73:2e:2a: 9f:7f:a3:94:2e:2b:21:5f:a1:39:38:22:df:4b:30:01:bb:8e: 7e:3c:ff:cb:de:77:78:b2:0c:86:ff:71:aa:04:27:79:da:5f: 8b:08:f3:a9:d7:c9:1c:08:a0:7f:22:41:fb:89:69:9f:c4:6a: 6f:fc:99:fb:bf:02:44:46:d9:27:ac:68:6d:ad:2c:c0:5f:70: c8:4b:38:c6:06:74:b4:31:82:63:b0:76:a9:ff:63:dd:7f:20: 17:52:ce:41:4d:67:f4:fa:b4:bb:74:63:c0:c7:86:0f:9b:ff: 0d:ba:2d:e1:da:d4:34:77:c6:c3:c0:69:04:d9:0d:a6:22:e0: 8e:29:01:56:42:68:ad:e1:cc:a5:2d:a9:34:70:5a:e7:e1:16: 56:3d:72:b6 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4NG4eez42llxpcGCecevYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmZTY5MjY1OGFlZjA5M2Q5ZTM2MDMxMzJiOTY1YmYxYmUw NzVkMzcwHhcNMjYwMTAxMDYxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTc2NjgyMWViMDhiMTUyZTc2ZGIxNTU0YmFiODNkMzBkNTAzODI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArT/PoI8rFQX6mKDiRvgYcZKUNmRL 4swr3XKxI2DZ5lUodX1iE9Sxbw+jj5mFoX6S0OnFnw3UIF2gsPfPiF0KRiOq2mfq GECHnvR5Pah+SPOKKci+oB+UgiDu8wyltF5odDCm9oxTdAO1ybC++ZgWsxTjRpvT P48I7wRzM5bcmrILSt1icm1mOvJvzjlYIXosc9KuaE7/pBBTSllKg3iCq0yZKNxj PLfnkOntpJuqWss5apPXoRmj1HqUfj4NBOQl986ZlE1HdkBdORAIYGMImTaWBoZY zMfb2TPINjKfrD59abcv7V1gnzn2W4Wn65HGix8wtOLKCunLIFnrYOKVwwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMV2aCHrCLFS522xVUurg9MNUDgmMB8GA1UdIwQY MBaAFI/mkmWK7wk9njYDEyuWW/G+B103MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvai1hU1pZcnZDVDJlTmdNVEs1WmI4YjRIWFRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8wYTliMzEtN2VkNy00OGNhLWEzMDQt YWVlNTY3MTczNjE1LzEveFhab0llc0lzVkxuYmJGVlM2dUQwdzFRT0NZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8wYTliMzEtN2VkNy00OGNhLWEzMDQtYWVlNTY3MTczNjE1 LzEvai1hU1pZcnZDVDJlTmdNVEs1WmI4YjRIWFRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA9I MA0GCSqGSIb3DQEBCwUAA4IBAQBwq4TNNQWZhi4xc6qLwk+7jwiX9ntXtzirBUHM sWidWTkkDajJ+qqipNjL45vlorNSYxe9dXiYCDn9ih9VLlQb3MpzV7uPoOxMY0Xh niJt+yhmNLmz6337ryMJ7BVyJzvSAmkBnoWjnvlzLiqff6OULishX6E5OCLfSzAB u45+PP/L3nd4sgyG/3GqBCd52l+LCPOp18kcCKB/IkH7iWmfxGpv/Jn7vwJERtkn rGhtrSzAX3DISzjGBnS0MYJjsHap/2PdfyAXUs5BTWf0+rS7dGPAx4YPm/8Nui3h 2tQ0d8bDwGkE2Q2mIuCOKQFWQmit4cylLak0cFrn4RZWPXK2 -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:16 2026 by rpki-client