This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/XOJiaLeJCz3ytdO00WBq937piI0.roa File: XOJiaLeJCz3ytdO00WBq937piI0.roa (raw, json) Hash identifier: v2vqT1L2zCbVq2R1hKoPt/8mcKtO7ZRpN5eQuLPaByE= Subject key identifier: 5C:E2:62:68:B7:89:0B:3D:F2:B5:D3:B4:D1:60:6A:F7:7E:E9:88:8D Certificate issuer: /CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81 Certificate serial: 019B7EA6CA99A3B05B09272F786DFB36BBEB Authority key identifier: 69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/XOJiaLeJCz3ytdO00WBq937piI0.roa Signing time: Fri 02 Jan 2026 12:20:18 +0000 ROA not before: Fri 02 Jan 2026 12:20:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 54852 IP address blocks: 2a01:e281:f4::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:ca:99:a3:b0:5b:09:27:2f:78:6d:fb:36:bb:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81 Validity Not Before: Jan 2 12:20:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ce26268b7890b3df2b5d3b4d1606af77ee9888d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ba:07:b5:04:e0:dd:f1:21:2a:1c:7b:62:57: d1:8f:04:64:d1:72:f1:da:4e:c1:36:ea:da:c4:9a: d9:1e:d6:f2:f4:b8:70:1b:78:c5:f2:8a:c7:f0:6d: 79:3f:e2:13:d8:52:95:57:ca:7e:67:14:1f:1e:c2: 66:19:26:02:da:26:7a:64:20:2d:92:4b:14:ad:d1: 4c:fa:e2:d9:56:a1:8c:b7:07:7a:a3:40:f9:f0:3d: 36:0d:65:26:52:f3:fb:2d:8c:d3:9e:ae:a2:06:d8: 8a:d0:35:be:89:bc:3e:ce:76:5d:2a:b6:6f:9e:5b: f0:5c:2e:05:95:a5:a0:2c:74:13:bb:06:77:59:a3: d6:af:9b:fb:35:16:89:3d:c9:2b:7e:d9:dd:12:e6: e7:85:52:0b:cf:16:10:2e:a4:94:af:5f:77:33:2c: 89:43:31:c2:41:fa:6e:51:f0:a9:fe:aa:b8:69:15: 80:b1:9c:a2:40:fc:ec:16:c2:cb:b7:07:f4:33:46: c1:e1:d4:85:13:07:76:9a:fd:c5:1e:5c:0a:13:8c: 4f:34:f6:2d:51:5f:36:30:c5:42:a2:d5:c0:7d:79: 28:4c:d8:11:db:4f:26:2c:34:be:84:ec:c0:8c:55: 73:2e:78:36:53:de:3b:62:af:79:2d:e3:55:00:ca: f8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E2:62:68:B7:89:0B:3D:F2:B5:D3:B4:D1:60:6A:F7:7E:E9:88:8D X509v3 Authority Key Identifier: keyid:69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/XOJiaLeJCz3ytdO00WBq937piI0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:e281:f4::/48 Signature Algorithm: sha256WithRSAEncryption 5a:47:f0:cb:bd:96:cb:23:40:19:cc:04:ee:22:87:28:5f:8f: df:43:10:f9:c6:36:89:db:3a:b8:8c:e1:83:94:06:42:e2:4b: 0e:d2:45:49:08:bc:30:75:da:07:e5:ac:44:75:0e:aa:90:5d: 3d:7b:44:51:08:7a:47:bc:5a:c7:b2:9e:81:44:6a:30:85:b9: 34:ea:cb:03:bd:db:d3:e8:32:f4:f6:32:68:db:dd:18:c1:7e: 41:5a:1b:98:62:65:82:f7:7b:a2:64:22:bc:d6:ca:9b:1d:c5: 58:1e:0c:15:23:73:00:b9:0b:d2:6b:ee:ae:6f:0d:29:46:36: 49:75:88:49:ac:06:e8:85:f9:5e:4d:e7:dd:ea:f4:08:cf:d5: c1:b1:b6:72:38:d4:78:73:39:96:7b:d1:15:89:85:01:b9:48: 00:d5:f6:0e:bb:fa:3d:bc:95:e1:22:b0:94:0d:28:70:3e:1a: ca:4c:26:0d:69:64:0e:b5:8a:7e:08:a5:82:b8:1a:17:c1:86: ab:ef:13:a0:79:02:2e:e2:9e:33:45:19:15:17:ab:41:88:43: f3:1f:47:ff:44:6c:97:04:67:6c:0e:f3:3d:41:46:18:ec:04: c7:f9:28:c2:0e:d2:72:a1:66:36:7c:dd:d4:ab:26:dd:1b:39: b9:60:3b:c3 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+psqZo7BbCScveG37NrvrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZGJlMWU3ZDllODdkNjg3MDFhNDAzNWE3NmM1MWJmZWNk ODhkODEwHhcNMjYwMTAyMTIyMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2UyNjI2OGI3ODkwYjNkZjJiNWQzYjRkMTYwNmFmNzdlZTk4ODhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLoHtQTg3fEhKhx7YlfRjwRk0XLx 2k7BNuraxJrZHtby9LhwG3jF8orH8G15P+IT2FKVV8p+ZxQfHsJmGSYC2iZ6ZCAt kksUrdFM+uLZVqGMtwd6o0D58D02DWUmUvP7LYzTnq6iBtiK0DW+ibw+znZdKrZv nlvwXC4FlaWgLHQTuwZ3WaPWr5v7NRaJPckrftndEubnhVILzxYQLqSUr193MyyJ QzHCQfpuUfCp/qq4aRWAsZyiQPzsFsLLtwf0M0bB4dSFEwd2mv3FHlwKE4xPNPYt UV82MMVCotXAfXkoTNgR208mLDS+hOzAjFVzLng2U947Yq95LeNVAMr42wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFziYmi3iQs98rXTtNFgavd+6YiNMB8GA1UdIwQY MBaAFGnb4efZ6H1ocBpANadsUb/s2I2BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWR2aDU5bm9mV2h3R2tBMXAyeFJ2LXpZallFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83MjcwMTUtZTE0ZS00ZDQxLWIwNWIt OGQ5NDU1M2I3NWUxLzEvWE9KaWFMZUpDejN5dGRPMDBXQnE5MzdwaUkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC83MjcwMTUtZTE0ZS00ZDQxLWIwNWItOGQ5NDU1M2I3NWUx LzEvYWR2aDU5bm9mV2h3R2tBMXAyeFJ2LXpZallFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgHigQD0 MA0GCSqGSIb3DQEBCwUAA4IBAQBaR/DLvZbLI0AZzATuIocoX4/fQxD5xjaJ2zq4 jOGDlAZC4ksO0kVJCLwwddoH5axEdQ6qkF09e0RRCHpHvFrHsp6BRGowhbk06ssD vdvT6DL09jJo290YwX5BWhuYYmWC93uiZCK81sqbHcVYHgwVI3MAuQvSa+6ubw0p RjZJdYhJrAbohfleTefd6vQIz9XBsbZyONR4czmWe9EViYUBuUgA1fYOu/o9vJXh IrCUDShwPhrKTCYNaWQOtYp+CKWCuBoXwYar7xOgeQIu4p4zRRkVF6tBiEPzH0f/ RGyXBGdsDvM9QUYY7ATH+SjCDtJyoWY2fN3UqybdGzm5YDvD -----END CERTIFICATE-----Generated at Mon Jan 26 14:17:27 2026 by rpki-client