This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/xzDsmiUqleZ3an0dKwF9YKrCXbo.roa File: xzDsmiUqleZ3an0dKwF9YKrCXbo.roa (raw, json) Hash identifier: uzVprCxWmkZJHSRd+F/qEhtG6NAb2goZTSDgkRcdqMo= Subject key identifier: C7:30:EC:9A:25:2A:95:E6:77:6A:7D:1D:2B:01:7D:60:AA:C2:5D:BA Certificate issuer: /CN=41c0f12d7b7e3d24ffdacda62329088adf822c65 Certificate serial: 019B9D8C9355C874FC3AD5CB92F8BAD9C74B Authority key identifier: 41:C0:F1:2D:7B:7E:3D:24:FF:DA:CD:A6:23:29:08:8A:DF:82:2C:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcDxLXt-PST_2s2mIykIit-CLGU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/xzDsmiUqleZ3an0dKwF9YKrCXbo.roa Signing time: Thu 08 Jan 2026 12:19:54 +0000 ROA not before: Thu 08 Jan 2026 12:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215137 IP address blocks: 2a04:1ac0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.crl rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft rsync://rpki.ripe.net/repository/DEFAULT/QcDxLXt-PST_2s2mIykIit-CLGU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9d:8c:93:55:c8:74:fc:3a:d5:cb:92:f8:ba:d9:c7:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41c0f12d7b7e3d24ffdacda62329088adf822c65 Validity Not Before: Jan 8 12:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c730ec9a252a95e6776a7d1d2b017d60aac25dba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:28:31:65:fb:aa:b7:e0:46:92:5f:f7:eb:e8: 96:06:67:d9:d7:1a:92:f6:c2:e8:bd:17:0e:5a:cb: 5b:3e:33:ce:bc:a8:46:b9:d6:27:ee:e0:80:95:97: e5:2a:a3:bd:fb:70:36:99:d5:35:46:8a:03:e0:cb: 3e:b6:cd:6c:ba:a7:03:ba:ac:69:41:55:f0:d9:9b: 75:ed:19:57:e8:6d:97:51:1a:59:f7:18:cf:61:12: 8e:b0:5c:53:52:1f:e1:f5:31:94:7a:40:ff:f2:ac: c1:b1:a3:1b:35:e6:96:bf:17:12:de:b3:7d:87:fd: 2d:89:21:5d:6e:ab:6f:60:62:26:bd:fb:4b:42:20: 19:f9:d3:34:68:61:8f:2f:2a:64:f1:3f:c5:9c:ef: 2f:0e:c6:3c:45:2d:89:71:32:8b:ff:1f:d0:79:e3: 59:00:c8:f7:30:54:7b:64:20:45:3a:ce:61:27:65: 84:2d:27:db:15:88:fa:1d:7b:7d:a1:b0:6d:f5:a9: 29:3b:7b:46:c4:f9:48:7c:b3:08:91:17:c0:74:dd: 24:b0:9f:93:e5:7d:c9:be:bd:2a:68:3e:4d:8d:c1: 73:45:a5:af:9c:84:a1:59:cd:03:4d:87:df:ed:8f: 96:80:fd:64:3c:0c:14:c3:e4:96:bd:26:b8:cc:8d: f3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:30:EC:9A:25:2A:95:E6:77:6A:7D:1D:2B:01:7D:60:AA:C2:5D:BA X509v3 Authority Key Identifier: keyid:41:C0:F1:2D:7B:7E:3D:24:FF:DA:CD:A6:23:29:08:8A:DF:82:2C:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcDxLXt-PST_2s2mIykIit-CLGU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/xzDsmiUqleZ3an0dKwF9YKrCXbo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:1ac0::/29 Signature Algorithm: sha256WithRSAEncryption 6f:ab:bf:a4:80:d9:df:eb:66:ae:e0:5f:bd:63:57:ab:12:3b: 75:99:56:bd:26:9f:6e:7e:40:c5:24:73:92:d6:c8:82:b2:dd: 6a:38:3a:64:b5:60:95:a6:9a:c5:25:a0:39:29:26:5f:0e:af: 1f:59:de:20:6a:90:33:83:7b:33:28:30:86:b9:63:8e:1c:cb: 57:8b:b7:ea:34:09:f2:ba:88:fc:b0:92:b8:5c:fb:3f:51:c2: ae:ac:30:b2:7f:7b:f8:2f:e3:e5:96:7d:f6:b5:58:e7:53:22: 9b:b1:a9:16:54:20:ef:4f:b7:8f:5e:3c:b7:32:88:00:0e:67: 6c:67:60:49:03:fb:12:af:01:17:b7:dd:00:46:33:4f:53:dc: e5:52:90:14:23:76:16:45:7f:2f:dc:12:e1:c9:11:2c:79:03: 77:1c:8e:c0:08:e3:65:d9:06:66:a7:67:8a:8a:f2:3c:5f:5a: e1:54:65:b5:47:80:52:6b:e2:af:5c:f9:6b:c0:6a:8b:6b:c7: 41:f0:60:bd:90:c2:88:0c:5a:0c:7e:b1:2a:8e:ee:a7:c5:05: 4f:45:95:90:45:e9:3a:81:2a:f6:fd:34:67:2f:50:01:75:d3: a2:95:49:36:91:04:42:a6:7b:65:61:64:68:53:f8:a4:2d:8a: 56:32:74:9a -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZudjJNVyHT8OtXLkvi62cdLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxYzBmMTJkN2I3ZTNkMjRmZmRhY2RhNjIzMjkwODhhZGY4 MjJjNjUwHhcNMjYwMTA4MTIxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzMwZWM5YTI1MmE5NWU2Nzc2YTdkMWQyYjAxN2Q2MGFhYzI1ZGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwygxZfuqt+BGkl/36+iWBmfZ1xqS 9sLovRcOWstbPjPOvKhGudYn7uCAlZflKqO9+3A2mdU1RooD4Ms+ts1suqcDuqxp QVXw2Zt17RlX6G2XURpZ9xjPYRKOsFxTUh/h9TGUekD/8qzBsaMbNeaWvxcS3rN9 h/0tiSFdbqtvYGImvftLQiAZ+dM0aGGPLypk8T/FnO8vDsY8RS2JcTKL/x/QeeNZ AMj3MFR7ZCBFOs5hJ2WELSfbFYj6HXt9obBt9akpO3tGxPlIfLMIkRfAdN0ksJ+T 5X3Jvr0qaD5NjcFzRaWvnIShWc0DTYff7Y+WgP1kPAwUw+SWvSa4zI3z7QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFMcw7JolKpXmd2p9HSsBfWCqwl26MB8GA1UdIwQY MBaAFEHA8S17fj0k/9rNpiMpCIrfgixlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWNEeExYdC1QU1RfMnMybUl5a0lpdC1DTEdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS85OWE4ZmQtYmY2ZS00MWRhLWI5MmUt Y2U5ZWQ5MjVlNTFiLzEveHpEc21pVXFsZVozYW4wZEt3RjlZS3JDWGJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS85OWE4ZmQtYmY2ZS00MWRhLWI5MmUtY2U5ZWQ5MjVlNTFi LzEvUWNEeExYdC1QU1RfMnMybUl5a0lpdC1DTEdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgQawDAN BgkqhkiG9w0BAQsFAAOCAQEAb6u/pIDZ3+tmruBfvWNXqxI7dZlWvSafbn5AxSRz ktbIgrLdajg6ZLVglaaaxSWgOSkmXw6vH1neIGqQM4N7MygwhrljjhzLV4u36jQJ 8rqI/LCSuFz7P1HCrqwwsn97+C/j5ZZ99rVY51Mim7GpFlQg70+3j148tzKIAA5n bGdgSQP7Eq8BF7fdAEYzT1Pc5VKQFCN2FkV/L9wS4ckRLHkDdxyOwAjjZdkGZqdn ioryPF9a4VRltUeAUmvir1z5a8Bqi2vHQfBgvZDCiAxaDH6xKo7up8UFT0WVkEXp OoEq9v00Zy9QAXXTopVJNpEEQqZ7ZWFkaFP4pC2KVjJ0mg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:20 2026 by rpki-client