This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/xe57pNkOwTWSUGNF8UIEoEduU54.roa File: xe57pNkOwTWSUGNF8UIEoEduU54.roa (raw, json) Hash identifier: zBDWDrkIwaQkkFGZ8gEh2OgP8GVyE2SsL8caaKS4W5M= Subject key identifier: C5:EE:7B:A4:D9:0E:C1:35:92:50:63:45:F1:42:04:A0:47:6E:53:9E Certificate issuer: /CN=7f6bd1a6b04625c571d830f878b1c0238247408c Certificate serial: 019B7DC9515114F6CB55402FB3505B51246B Authority key identifier: 7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/xe57pNkOwTWSUGNF8UIEoEduU54.roa Signing time: Fri 02 Jan 2026 08:18:23 +0000 ROA not before: Fri 02 Jan 2026 08:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7018 IP address blocks: 2a0b:d500::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:51:51:14:f6:cb:55:40:2f:b3:50:5b:51:24:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f6bd1a6b04625c571d830f878b1c0238247408c Validity Not Before: Jan 2 08:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5ee7ba4d90ec13592506345f14204a0476e539e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c7:b1:a9:38:9f:e8:8b:18:50:26:d2:79:60: 12:93:49:2e:75:d7:ed:9e:a0:38:80:ff:6d:7c:18: ed:39:ca:20:08:e9:5b:a5:ff:09:02:bc:4c:5f:2b: 00:ec:04:9b:a2:ab:e5:d5:98:49:23:75:6c:7a:40: e0:52:e4:e9:e7:e1:a4:6d:18:73:c6:fc:fc:dd:d0: 1b:4a:2e:46:5e:49:2f:23:77:a7:34:22:71:fe:c9: d0:a3:51:78:7c:b3:d3:62:91:7b:3a:01:9f:ea:d9: 3f:68:10:30:1e:6d:bb:51:46:47:f3:30:f6:80:00: 0f:a0:7b:12:c1:69:92:61:75:88:87:5d:fa:49:f1: 44:ad:2c:88:c7:e0:d8:58:20:88:c1:a0:8a:10:ff: cf:5c:13:c2:67:53:f7:de:e4:5d:da:d9:43:1e:3a: 67:7d:21:ab:b7:59:34:01:7d:0d:ef:c9:3a:e2:01: 64:a6:47:45:d5:98:ae:5a:40:df:a4:b0:d5:d5:e5: aa:ed:1a:63:e6:74:15:5a:10:a1:83:c2:7a:1a:d5: 12:be:ed:d6:10:01:b9:51:af:ab:00:6b:5e:6f:45: ea:62:00:4c:f9:43:f2:6f:cb:33:28:ce:3d:b2:e0: ec:28:d3:dc:b9:87:44:e3:0c:24:ec:60:1c:d5:24: ed:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:EE:7B:A4:D9:0E:C1:35:92:50:63:45:F1:42:04:A0:47:6E:53:9E X509v3 Authority Key Identifier: keyid:7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/xe57pNkOwTWSUGNF8UIEoEduU54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:d500::/29 Signature Algorithm: sha256WithRSAEncryption 8c:f0:0e:87:88:6c:fb:68:f1:33:fa:07:81:e9:48:44:ca:cb: 0b:ba:0f:d5:bc:3b:76:96:89:75:57:48:16:66:14:b7:4d:c2: fd:d2:58:1d:67:4c:63:94:46:f4:6c:0a:97:cc:c0:9b:12:01: ca:60:c2:dc:81:01:76:a8:e6:cb:e5:0d:f0:0b:be:30:a8:68: a6:aa:26:a6:e7:24:da:c8:d8:88:bd:16:32:43:2d:71:60:65: 63:ac:a3:8a:7d:41:31:dd:8f:eb:b7:41:92:2f:22:66:36:d9: f6:b2:e7:7c:b4:0b:e0:ad:6b:17:9b:fa:45:85:d6:f9:86:30: 5a:7c:07:95:01:2b:59:5c:f4:42:b9:c8:14:db:2b:69:95:4b: 14:6a:aa:31:b2:5f:d6:07:60:f5:73:14:45:b8:30:ce:16:35: 6d:56:1a:dc:1c:57:ab:02:d4:71:b0:5b:de:d7:6b:cf:7f:0a: 2c:6c:69:4b:c0:14:8f:60:17:50:2c:26:b5:c9:5e:05:51:1d: f5:3b:29:25:75:54:5d:e5:4f:7c:79:00:aa:e5:f6:04:93:a7: 85:f0:0d:02:74:7f:79:cc:02:e3:81:aa:94:4c:2b:f7:c1:ab: 71:e0:e3:97:0b:25:a5:15:f1:33:28:69:61:d8:1e:91:44:9b: 7f:fe:1f:3d -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9yVFRFPbLVUAvs1BbUSRrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNmJkMWE2YjA0NjI1YzU3MWQ4MzBmODc4YjFjMDIzODI0 NzQwOGMwHhcNMjYwMTAyMDgxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNWVlN2JhNGQ5MGVjMTM1OTI1MDYzNDVmMTQyMDRhMDQ3NmU1MzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsexqTif6IsYUCbSeWASk0kuddft nqA4gP9tfBjtOcogCOlbpf8JArxMXysA7ASboqvl1ZhJI3VsekDgUuTp5+GkbRhz xvz83dAbSi5GXkkvI3enNCJx/snQo1F4fLPTYpF7OgGf6tk/aBAwHm27UUZH8zD2 gAAPoHsSwWmSYXWIh136SfFErSyIx+DYWCCIwaCKEP/PXBPCZ1P33uRd2tlDHjpn fSGrt1k0AX0N78k64gFkpkdF1ZiuWkDfpLDV1eWq7Rpj5nQVWhChg8J6GtUSvu3W EAG5Ua+rAGteb0XqYgBM+UPyb8szKM49suDsKNPcuYdE4wwk7GAc1STtUwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFMXue6TZDsE1klBjRfFCBKBHblOeMB8GA1UdIwQY MBaAFH9r0aawRiXFcdgw+HixwCOCR0CMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9iYzY2ZDctNTdhYi00NzVkLTk2YmEt ODliNmMzMjMxNWMyLzEveGU1N3BOa093VFdTVUdORjhVSUVvRWR1VTU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9iYzY2ZDctNTdhYi00NzVkLTk2YmEtODliNmMzMjMxNWMy LzEvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgvVADAN BgkqhkiG9w0BAQsFAAOCAQEAjPAOh4hs+2jxM/oHgelIRMrLC7oP1bw7dpaJdVdI FmYUt03C/dJYHWdMY5RG9GwKl8zAmxIBymDC3IEBdqjmy+UN8Au+MKhopqompuck 2sjYiL0WMkMtcWBlY6yjin1BMd2P67dBki8iZjbZ9rLnfLQL4K1rF5v6RYXW+YYw WnwHlQErWVz0QrnIFNsraZVLFGqqMbJf1gdg9XMURbgwzhY1bVYa3BxXqwLUcbBb 3tdrz38KLGxpS8AUj2AXUCwmtcleBVEd9TspJXVUXeVPfHkAquX2BJOnhfANAnR/ ecwC44GqlEwr98GrceDjlwslpRXxMyhpYdgekUSbf/4fPQ== -----END CERTIFICATE-----Generated at Sun Jan 18 11:03:52 2026 by rpki-client