This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/xEEpxssTUACNtxcJWa-lEFPF94A.roa File: xEEpxssTUACNtxcJWa-lEFPF94A.roa (raw, json) Hash identifier: qd5bjqc8/7RByV9KuR4O2AGi0iofsxfAscJuS3BP9PA= Subject key identifier: C4:41:29:C6:CB:13:50:00:8D:B7:17:09:59:AF:A5:10:53:C5:F7:80 Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Certificate serial: 019B7EA755AD04BC0C71994193DE5AE05D1D Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/xEEpxssTUACNtxcJWa-lEFPF94A.roa Signing time: Fri 02 Jan 2026 12:20:54 +0000 ROA not before: Fri 02 Jan 2026 12:20:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 2a05:9a40::/29 maxlen: 29 2a06:5fc0::/29 maxlen: 29 2a0b:ac00::/29 maxlen: 29 2a0f:9b40::/29 maxlen: 29 2a10:3f80::/29 maxlen: 29 2a10:77c0::/29 maxlen: 29 2a13:b4c1::/32 maxlen: 32 2a13:b9c0::/29 maxlen: 29 2a13:bb40::/29 maxlen: 29 2a13:c240::/29 maxlen: 29 2a13:c340::/29 maxlen: 29 2a13:c441::/32 maxlen: 32 2a14:1100::/32 maxlen: 32 2a14:1101::/32 maxlen: 32 2a14:1102::/32 maxlen: 32 2a14:1103::/32 maxlen: 32 2a14:1104::/32 maxlen: 32 2a14:1105::/32 maxlen: 32 2a14:1106::/32 maxlen: 32 2a14:1107::/32 maxlen: 32 2a14:42c0::/29 maxlen: 29 2a14:62c0::/29 maxlen: 29 2a14:6a40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:55:ad:04:bc:0c:71:99:41:93:de:5a:e0:5d:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Validity Not Before: Jan 2 12:20:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c44129c6cb1350008db7170959afa51053c5f780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f7:8f:87:4e:e5:b4:ef:fb:98:48:9c:85:02: 45:3e:b1:22:8e:9b:73:97:03:a6:f5:a1:32:18:97: 8b:5b:dc:da:39:bd:58:7c:74:a2:43:7e:96:71:92: 36:ef:b0:37:88:51:fb:19:4a:e6:14:13:28:ca:48: 71:e0:ec:0c:57:32:70:6b:b0:e1:46:f2:1d:77:b1: 5d:5d:39:4a:d4:69:4b:63:bf:5b:b3:ce:3b:c4:fc: 46:c3:95:44:49:ca:a3:62:a2:af:56:33:79:55:ab: 99:ae:8c:ba:2b:42:07:32:f1:03:85:d1:21:d2:79: 5b:24:b5:68:24:20:0e:71:07:fc:4c:c7:59:c0:ed: 8e:5e:76:7b:2f:83:48:b4:f3:d8:a0:39:7a:db:36: 41:2d:86:73:8d:80:cb:49:d0:27:15:8d:f9:99:10: 62:6c:b2:1b:da:94:0a:ec:0c:bd:01:3e:e9:d0:ef: ee:e3:45:e8:cc:06:02:62:f1:7b:82:4d:00:62:12: 4e:f5:6e:7a:e9:e2:08:5a:7a:1d:02:01:35:a1:37: b6:d2:5f:65:dd:04:89:9f:df:a0:a7:f7:35:cb:5d: b4:39:4a:79:da:99:c4:a5:a2:2f:ce:4d:97:f0:18: cf:4d:53:91:98:df:0f:e4:11:59:c4:a5:14:ff:fa: 81:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:41:29:C6:CB:13:50:00:8D:B7:17:09:59:AF:A5:10:53:C5:F7:80 X509v3 Authority Key Identifier: keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/xEEpxssTUACNtxcJWa-lEFPF94A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:9a40::/29 2a06:5fc0::/29 2a0b:ac00::/29 2a0f:9b40::/29 2a10:3f80::/29 2a10:77c0::/29 2a13:b4c1::/32 2a13:b9c0::/29 2a13:bb40::/29 2a13:c240::/29 2a13:c340::/29 2a13:c441::/32 2a14:1100::/29 2a14:42c0::/29 2a14:62c0::/29 2a14:6a40::/32 Signature Algorithm: sha256WithRSAEncryption d9:82:65:39:5e:5c:4f:53:2e:c7:2e:2c:22:16:e7:75:17:b7: 17:f0:46:e6:0d:eb:44:56:e6:12:3e:7f:a5:b6:5d:0d:6d:ca: 51:cc:7c:07:21:37:c5:00:0e:38:34:a2:d5:c2:08:b7:37:df: b7:7c:c4:96:82:67:cb:eb:37:59:66:aa:ca:bf:55:10:ef:a2: bd:de:32:b9:28:66:d1:23:b2:06:11:4a:ff:fb:3d:2c:7c:24: 84:ac:9a:6b:08:4e:e4:dc:10:e4:de:d4:e4:15:15:11:c3:5b: 54:c5:11:3f:c9:67:8a:a8:22:a8:bf:96:be:06:dd:6e:29:11: 81:55:52:1a:0a:fd:e3:b6:3d:7f:60:82:ba:14:2e:86:aa:3b: 73:a1:99:67:0f:93:92:9a:a1:2a:e1:9b:45:43:ff:6b:5a:5c: 57:c2:f6:af:66:5b:39:58:d3:78:3d:71:a5:91:d6:fb:34:f7: d2:2c:89:13:00:0f:2c:61:75:4a:98:8f:8d:ce:9f:0f:ee:16: be:aa:1c:70:61:2e:14:9f:43:e8:73:f1:eb:0b:ab:92:7d:70: 4f:44:7d:e9:6c:3b:5e:c1:70:ad:52:e3:27:98:5f:89:a2:99: a4:29:7f:94:23:53:5f:e4:6c:95:da:41:80:a1:23:c9:2c:13: e9:84:33:11 -----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgISAZt+p1WtBLwMcZlBk95a4F0dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0 ZGIwYTUwHhcNMjYwMTAyMTIyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDQxMjljNmNiMTM1MDAwOGRiNzE3MDk1OWFmYTUxMDUzYzVmNzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fePh07ltO/7mEichQJFPrEijptz lwOm9aEyGJeLW9zaOb1YfHSiQ36WcZI277A3iFH7GUrmFBMoykhx4OwMVzJwa7Dh RvIdd7FdXTlK1GlLY79bs847xPxGw5VEScqjYqKvVjN5VauZroy6K0IHMvEDhdEh 0nlbJLVoJCAOcQf8TMdZwO2OXnZ7L4NItPPYoDl62zZBLYZzjYDLSdAnFY35mRBi bLIb2pQK7Ay9AT7p0O/u40XozAYCYvF7gk0AYhJO9W566eIIWnodAgE1oTe20l9l 3QSJn9+gp/c1y120OUp52pnEpaIvzk2X8BjPTVORmN8P5BFZxKUU//qBAwIDAQAB o4ICdDCCAnAwHQYDVR0OBBYEFMRBKcbLE1AAjbcXCVmvpRBTxfeAMB8GA1UdIwQY MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt YmFmYmRmYzgxMzJhLzEveEVFcHhzc1RVQUNOdHhjSldhLWxFRlBGOTRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGJBggrBgEFBQcBBwEB/wR6MHgwdgQCAAIwcAMFAyoFmkAD BQMqBl/AAwUDKgusAAMFAyoPm0ADBQMqED+AAwUDKhB3wAMFACoTtMEDBQMqE7nA AwUDKhO7QAMFAyoTwkADBQMqE8NAAwUAKhPEQQMFAyoUEQADBQMqFELAAwUDKhRi wAMFACoUakAwDQYJKoZIhvcNAQELBQADggEBANmCZTleXE9TLscuLCIW53UXtxfw RuYN60RW5hI+f6W2XQ1tylHMfAchN8UADjg0otXCCLc337d8xJaCZ8vrN1lmqsq/ VRDvor3eMrkoZtEjsgYRSv/7PSx8JISsmmsITuTcEOTe1OQVFRHDW1TFET/JZ4qo Iqi/lr4G3W4pEYFVUhoK/eO2PX9ggroULoaqO3OhmWcPk5KaoSrhm0VD/2taXFfC 9q9mWzlY03g9caWR1vs099IsiRMADyxhdUqYj43Onw/uFr6qHHBhLhSfQ+hz8esL q5J9cE9EfelsO17BcK1S4yeYX4mimaQpf5QjU1/kbJXaQYChI8ksE+mEMxE= -----END CERTIFICATE-----Generated at Sat Jan 3 18:57:47 2026 by rpki-client