This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/xIYF8mI26v6vzxb3X_nxcD6q9Q8.roa File: xIYF8mI26v6vzxb3X_nxcD6q9Q8.roa (raw, json) Hash identifier: f2x35r/ZRXZy2klzCvK8jZiQ1j2C+y+64vR3ljojbc0= Subject key identifier: C4:86:05:F2:62:36:EA:FE:AF:CF:16:F7:5F:F9:F1:70:3E:AA:F5:0F Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a Certificate serial: 019B79EC0A45E3E4036E238EC7B15BD33373 Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/xIYF8mI26v6vzxb3X_nxcD6q9Q8.roa Signing time: Thu 01 Jan 2026 14:17:50 +0000 ROA not before: Thu 01 Jan 2026 14:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212271 IP address blocks: 2a05:4140::/29 maxlen: 48 2a05:4140:3::/48 maxlen: 48 2a05:4140:4::/48 maxlen: 48 2a05:4140:8::/48 maxlen: 48 2a05:4140:9::/48 maxlen: 48 2a05:4140:10::/48 maxlen: 48 2a05:4140:15::/48 maxlen: 48 2a05:4140:28::/48 maxlen: 48 2a05:4140:29::/48 maxlen: 48 2a05:4140:30::/48 maxlen: 48 2a05:4140:31::/48 maxlen: 48 2a05:4140:32::/48 maxlen: 48 2a05:4140:33::/48 maxlen: 48 2a05:4140:34::/48 maxlen: 48 2a05:4140:36::/48 maxlen: 48 2a05:4140:37::/48 maxlen: 48 2a05:4140:48::/48 maxlen: 48 2a05:4140:50::/48 maxlen: 48 2a05:4140:100::/40 maxlen: 48 2a05:4140:187::/48 maxlen: 48 2a05:4140:190::/48 maxlen: 48 2a05:4140:300::/40 maxlen: 40 2a05:4140:400::/40 maxlen: 48 2a05:4145::/32 maxlen: 32 2a05:4147::/32 maxlen: 32 2a11:e100::/29 maxlen: 48 2a11:e103::/32 maxlen: 32 2a11:e107::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:0a:45:e3:e4:03:6e:23:8e:c7:b1:5b:d3:33:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a Validity Not Before: Jan 1 14:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c48605f26236eafeafcf16f75ff9f1703eaaf50f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:15:1e:eb:cb:dd:d0:c6:7c:39:16:af:5b:5e: 26:90:2d:a9:8f:fa:7e:ea:c2:a2:61:60:91:c6:1e: b4:4f:20:28:4d:02:35:8e:b3:ba:9f:cc:34:b0:4f: 84:bb:12:7d:b1:5b:8a:53:fa:13:49:47:33:65:74: bd:6c:9c:ae:80:e2:98:e5:bf:e7:c7:f1:49:5d:6e: fc:c0:2e:ac:07:7b:ff:29:0f:d8:b2:ae:d6:ad:b0: 81:e4:a9:33:cb:b6:e9:86:e8:2b:03:8f:88:57:c8: c9:6a:75:61:29:4b:b0:36:56:e6:e0:31:69:a9:1e: a7:58:6f:6e:9c:7e:ce:6b:68:dc:79:c4:40:3e:9d: 90:21:26:d2:a6:27:44:78:47:87:e5:6e:db:57:f9: 37:7b:a2:95:eb:1f:2a:54:98:24:e3:34:b0:11:c1: a0:b2:5a:81:b6:ab:f8:8b:c4:aa:7b:65:8a:00:72: a8:83:c6:72:2b:2d:69:35:a8:19:33:50:1c:18:1a: f2:31:9b:3e:be:b7:03:df:ae:b0:28:63:b3:90:71: 63:1f:5e:90:df:c8:96:2c:43:16:84:f7:65:e0:df: 2b:b4:fc:e1:42:c3:64:80:61:0a:60:68:2b:1d:71: 91:6b:bf:47:0a:ca:7f:82:37:c6:10:b7:e8:9e:37: f5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:86:05:F2:62:36:EA:FE:AF:CF:16:F7:5F:F9:F1:70:3E:AA:F5:0F X509v3 Authority Key Identifier: keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/xIYF8mI26v6vzxb3X_nxcD6q9Q8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:4140::/29 2a11:e100::/29 Signature Algorithm: sha256WithRSAEncryption 4e:d7:6c:58:7d:eb:8a:4a:b4:fb:5f:94:53:6f:9f:83:22:3d: 91:89:5e:36:d3:af:ad:ec:1d:d4:ab:8d:00:0a:42:a1:77:1e: 32:80:4e:20:a7:89:75:b6:0a:f2:f6:15:ef:12:57:d5:3c:9a: 66:53:46:b6:8b:28:ed:76:de:81:36:63:1e:1a:0c:74:5c:3e: 75:84:a9:1b:5e:00:8e:41:6b:d2:d3:a9:db:dc:67:4c:ea:91: 2d:91:2c:e2:6f:81:d9:86:68:fc:16:10:3c:43:a2:58:ff:49: 17:98:c4:7a:48:f3:ba:16:0e:f8:6f:3a:de:f9:f9:a5:3d:90: 5c:98:42:f4:7e:d4:dd:3d:82:9a:b6:21:79:d7:9f:61:4e:8d: b8:77:17:e4:24:4b:af:d0:4a:f7:1a:33:1c:ed:3d:00:3e:8a: dc:ea:b9:21:e0:07:6f:04:52:df:3f:fa:10:e9:32:df:e2:34: 89:d5:0e:49:7a:6c:44:76:7c:46:fd:c4:3d:62:af:9b:77:c2: d2:2a:48:62:df:f9:33:5a:1e:3a:d4:8e:a7:03:97:ca:06:9d: 4b:62:4e:12:c5:06:a0:41:93:03:70:f1:27:c4:84:f0:7c:cd: 3b:6a:08:a8:22:ad:ac:a4:fa:e7:cb:63:b1:92:e7:25:aa:d9: 22:72:7f:ef -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt57ApF4+QDbiOOx7Fb0zNzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NGM2MGFkZWIwY2Q1NzY4Y2Y3NTZmNTYyYjFiNWNjNWI5 YzE4MGEwHhcNMjYwMTAxMTQxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDg2MDVmMjYyMzZlYWZlYWZjZjE2Zjc1ZmY5ZjE3MDNlYWFmNTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRUe68vd0MZ8ORavW14mkC2pj/p+ 6sKiYWCRxh60TyAoTQI1jrO6n8w0sE+EuxJ9sVuKU/oTSUczZXS9bJyugOKY5b/n x/FJXW78wC6sB3v/KQ/Ysq7WrbCB5Kkzy7bphugrA4+IV8jJanVhKUuwNlbm4DFp qR6nWG9unH7Oa2jcecRAPp2QISbSpidEeEeH5W7bV/k3e6KV6x8qVJgk4zSwEcGg slqBtqv4i8Sqe2WKAHKog8ZyKy1pNagZM1AcGBryMZs+vrcD366wKGOzkHFjH16Q 38iWLEMWhPdl4N8rtPzhQsNkgGEKYGgrHXGRa79HCsp/gjfGELfonjf1IwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFMSGBfJiNur+r88W91/58XA+qvUPMB8GA1UdIwQY MBaAFMdMYK3rDNV2jPdW9WKxtcxbnBgKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMt ODg1ZTg0ZTc1MTJlLzEveElZRjhtSTI2djZ2enhiM1hfbnhjRDZxOVE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMtODg1ZTg0ZTc1MTJl LzEveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDKgVBQAMF AyoR4QAwDQYJKoZIhvcNAQELBQADggEBAE7XbFh964pKtPtflFNvn4MiPZGJXjbT r63sHdSrjQAKQqF3HjKATiCniXW2CvL2Fe8SV9U8mmZTRraLKO123oE2Yx4aDHRc PnWEqRteAI5Ba9LTqdvcZ0zqkS2RLOJvgdmGaPwWEDxDolj/SReYxHpI87oWDvhv Ot75+aU9kFyYQvR+1N09gpq2IXnXn2FOjbh3F+QkS6/QSvcaMxztPQA+itzquSHg B28EUt8/+hDpMt/iNInVDkl6bER2fEb9xD1ir5t3wtIqSGLf+TNaHjrUjqcDl8oG nUtiThLFBqBBkwNw8SfEhPB8zTtqCKgirayk+ufLY7GS5yWq2SJyf+8= -----END CERTIFICATE-----Generated at Wed Jan 21 16:16:40 2026 by rpki-client