This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/XqiRKaxBcNOZ6QrHfX2W_Daq8Jw.roa File: XqiRKaxBcNOZ6QrHfX2W_Daq8Jw.roa (raw, json) Hash identifier: 9D1n2hS3XYjGY8GXXjerV9UuVCCe8aNpStKNFnwOrUc= Subject key identifier: 5E:A8:91:29:AC:41:70:D3:99:E9:0A:C7:7D:7D:96:FC:36:AA:F0:9C Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Certificate serial: 019B7EA75C6EC5F93BEC87BF84C8EF094A35 Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/XqiRKaxBcNOZ6QrHfX2W_Daq8Jw.roa Signing time: Fri 02 Jan 2026 12:20:55 +0000 ROA not before: Fri 02 Jan 2026 12:20:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208682 IP address blocks: 2a0d:6f80:3309::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:5c:6e:c5:f9:3b:ec:87:bf:84:c8:ef:09:4a:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Validity Not Before: Jan 2 12:20:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ea89129ac4170d399e90ac77d7d96fc36aaf09c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e2:2b:de:f4:2f:b0:3c:45:2a:86:86:59:32: 7e:9c:dd:98:e2:63:f0:69:1f:b9:00:4b:c8:b6:c2: dc:56:e2:b6:17:39:fa:70:78:04:f1:3d:67:c9:5f: 49:ea:6f:de:e1:f8:82:03:38:6a:94:12:77:84:c5: 5b:8d:9a:58:03:1d:4c:9f:ad:51:78:3d:49:f5:fa: 90:a5:49:91:d1:28:d0:db:73:a0:0a:60:e7:65:99: 55:cb:47:f1:c7:0d:a3:a9:74:31:de:ed:57:0c:f9: 54:4a:08:a8:4f:30:3f:e1:16:1a:5f:7e:95:92:c9: 03:e8:f0:54:a4:29:d8:8d:ec:02:8f:1c:1b:06:72: 36:58:c3:4c:e1:57:1a:2e:d4:07:9b:90:c6:1e:08: d1:36:a6:d3:24:5a:57:3c:0f:99:0e:09:66:94:cd: 06:1c:82:ad:53:36:89:cf:64:8e:2b:82:16:cc:ca: 0d:8f:92:94:be:28:41:68:5c:34:4f:92:36:67:bd: d0:04:27:58:f8:01:bb:95:64:ea:9d:c4:b2:38:c2: c3:b7:7b:0d:bd:9c:80:f0:57:83:c4:d5:f0:81:b5: fb:00:43:83:50:3c:60:d8:79:72:7e:ff:b6:56:92: 39:36:61:5d:37:30:90:10:dd:f8:30:9c:5e:e3:e8: e6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:A8:91:29:AC:41:70:D3:99:E9:0A:C7:7D:7D:96:FC:36:AA:F0:9C X509v3 Authority Key Identifier: keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/XqiRKaxBcNOZ6QrHfX2W_Daq8Jw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:6f80:3309::/48 Signature Algorithm: sha256WithRSAEncryption 92:98:ab:74:57:26:cc:71:5c:00:8d:1b:7d:af:41:fb:34:1d: 10:dd:25:8f:de:54:53:eb:85:08:49:f8:7a:de:f0:a8:76:5b: 33:0b:41:a2:31:59:4d:34:84:16:54:98:24:37:f8:57:fa:59: 9b:cc:f7:c2:7d:f8:5e:c0:85:ca:95:dd:71:9d:d9:09:72:26: 1b:9e:bc:0e:ba:56:9e:81:72:91:97:6a:27:fe:76:cf:c6:1b: 56:dc:0f:6e:22:40:68:58:48:1c:73:fd:b8:f3:3c:63:22:24: 88:08:0e:bf:dd:cc:b8:c6:dd:a7:85:01:91:3d:1f:08:4a:35: e2:35:31:56:21:41:34:87:8e:ed:94:40:22:ec:6c:77:6f:af: 0b:10:e5:f6:29:a7:97:14:aa:8c:7b:67:08:67:e8:0c:3c:54: 5f:6e:fd:1f:07:e8:a8:c2:9a:55:a2:d8:22:e4:43:2d:ef:d4: c2:76:58:bb:7b:18:07:32:b1:a3:dd:33:61:b5:93:99:56:f8: 3b:da:4e:f8:7d:08:c8:36:4b:5f:bd:1f:f2:d5:f9:38:3c:73: 4e:98:7e:38:28:f7:32:72:b0:b5:ce:45:d4:b6:19:3e:a3:d2: 21:2a:10:16:32:40:9e:92:de:11:f3:d0:21:26:18:e6:79:7a: 77:c1:dd:61 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+p1xuxfk77Ie/hMjvCUo1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0 ZGIwYTUwHhcNMjYwMTAyMTIyMDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZWE4OTEyOWFjNDE3MGQzOTllOTBhYzc3ZDdkOTZmYzM2YWFmMDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+Ir3vQvsDxFKoaGWTJ+nN2Y4mPw aR+5AEvItsLcVuK2Fzn6cHgE8T1nyV9J6m/e4fiCAzhqlBJ3hMVbjZpYAx1Mn61R eD1J9fqQpUmR0SjQ23OgCmDnZZlVy0fxxw2jqXQx3u1XDPlUSgioTzA/4RYaX36V kskD6PBUpCnYjewCjxwbBnI2WMNM4VcaLtQHm5DGHgjRNqbTJFpXPA+ZDglmlM0G HIKtUzaJz2SOK4IWzMoNj5KUvihBaFw0T5I2Z73QBCdY+AG7lWTqncSyOMLDt3sN vZyA8FeDxNXwgbX7AEODUDxg2Hlyfv+2VpI5NmFdNzCQEN34MJxe4+jm9wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFF6okSmsQXDTmekKx319lvw2qvCcMB8GA1UdIwQY MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt YmFmYmRmYzgxMzJhLzEvWHFpUktheEJjTk9aNlFySGZYMldfRGFxOEp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg1vgDMJ MA0GCSqGSIb3DQEBCwUAA4IBAQCSmKt0VybMcVwAjRt9r0H7NB0Q3SWP3lRT64UI Sfh63vCodlszC0GiMVlNNIQWVJgkN/hX+lmbzPfCffhewIXKld1xndkJciYbnrwO ulaegXKRl2on/nbPxhtW3A9uIkBoWEgcc/248zxjIiSICA6/3cy4xt2nhQGRPR8I SjXiNTFWIUE0h47tlEAi7Gx3b68LEOX2KaeXFKqMe2cIZ+gMPFRfbv0fB+iowppV otgi5EMt79TCdli7exgHMrGj3TNhtZOZVvg72k74fQjINktfvR/y1fk4PHNOmH44 KPcycrC1zkXUthk+o9IhKhAWMkCekt4R89AhJhjmeXp3wd1h -----END CERTIFICATE-----Generated at Sat Jan 3 18:59:59 2026 by rpki-client