This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/xFb3afKCHZ5K-TLErHfTSuMJKOU.roa File: xFb3afKCHZ5K-TLErHfTSuMJKOU.roa (raw, json) Hash identifier: 6l4PHj5QdfEodyTxnZX/6jrZVq4xk62zNf4EfjYJEmo= Subject key identifier: C4:56:F7:69:F2:82:1D:9E:4A:F9:32:C4:AC:77:D3:4A:E3:09:28:E5 Certificate issuer: /CN=76a75826e991225a429ff8a1e7ffdc80466420df Certificate serial: 019B7E37F9847751B87C7BD89255E500FE6D Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/xFb3afKCHZ5K-TLErHfTSuMJKOU.roa Signing time: Fri 02 Jan 2026 10:19:16 +0000 ROA not before: Fri 02 Jan 2026 10:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199578 IP address blocks: 2a03:db80:3824::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:f9:84:77:51:b8:7c:7b:d8:92:55:e5:00:fe:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df Validity Not Before: Jan 2 10:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c456f769f2821d9e4af932c4ac77d34ae30928e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d4:89:85:21:3e:1a:92:83:e0:9c:a9:46:93: ef:41:06:15:9e:3a:65:92:23:3d:78:87:3e:7c:1d: 2d:47:39:65:41:d0:3d:11:d2:0b:a9:bd:6f:99:f3: c5:92:e3:fe:99:f9:9d:9b:17:23:8d:3a:2a:23:cd: fc:3a:73:70:54:34:78:f3:43:57:b4:7e:d1:f6:87: 62:55:c6:40:4d:2a:d3:c4:f0:c8:e2:1c:ca:fc:fb: 57:5e:39:ad:51:a1:0e:19:43:8c:99:3c:59:0d:42: 76:4f:d2:1b:a6:df:94:be:91:1b:07:b8:d3:3f:1a: f9:a5:27:01:71:5e:8c:4f:36:db:68:c1:44:52:da: f6:b9:ea:b7:41:60:ba:8b:18:7c:28:f9:29:89:31: ad:d0:13:be:2d:2b:05:c6:32:cb:cb:2c:25:96:73: 95:04:c2:bb:2d:f2:6f:04:37:2f:1d:b8:01:68:28: c2:cb:c1:2d:fa:80:32:30:34:fe:82:2d:7c:4d:7a: 28:a4:2f:53:85:a6:3c:63:80:76:f4:04:90:84:51: f1:ee:92:33:54:b9:20:d7:8c:da:38:75:39:cb:b8: d5:df:08:5c:04:1b:93:f9:41:49:7b:ff:c6:f7:99: 77:d6:88:1d:31:1f:c0:f2:04:f5:12:bc:69:c2:13: ae:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:56:F7:69:F2:82:1D:9E:4A:F9:32:C4:AC:77:D3:4A:E3:09:28:E5 X509v3 Authority Key Identifier: keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/xFb3afKCHZ5K-TLErHfTSuMJKOU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:db80:3824::/48 Signature Algorithm: sha256WithRSAEncryption 25:14:93:46:bf:2d:11:2e:74:bc:eb:06:92:29:73:8e:25:97: 82:bf:37:bb:10:82:a3:b9:69:2a:50:7e:39:7c:05:55:04:2f: 81:d1:4a:59:a1:65:28:91:e6:78:71:82:e7:6b:17:d9:bc:8c: f2:8f:c2:4e:31:fe:f3:4c:dc:7c:ac:dc:d4:83:14:38:96:34: c4:99:b7:3b:a9:72:bd:57:db:08:a2:db:12:e7:15:80:96:da: 6d:e9:6b:1b:9a:ef:4a:ae:cd:c4:50:93:65:99:9f:08:d9:06: be:0e:4a:63:05:92:2d:1f:f1:53:85:db:b6:4f:13:66:0c:e3: d7:3b:2f:eb:47:67:4d:28:08:9a:56:34:0c:2d:06:c6:d2:ee: 3e:2d:0e:82:da:6f:5e:c0:14:22:7c:a1:b5:17:16:1b:6b:62: 09:6a:4e:f4:33:e2:92:79:3f:3b:df:72:85:2f:82:53:28:47: 21:76:a5:61:ac:62:59:c1:87:9c:80:8c:36:cd:cb:d4:bd:0b: d8:8c:21:25:36:37:6b:b9:f8:c2:c2:af:f0:48:d4:0d:e8:ff: bc:e9:dc:6e:32:44:5f:19:1e:6a:78:b3:b9:85:60:98:34:b1: 7f:f2:89:a1:4b:e9:ac:e2:74:85:e4:68:29:63:fa:d6:44:88: b2:5d:be:79 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+N/mEd1G4fHvYklXlAP5tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2YTc1ODI2ZTk5MTIyNWE0MjlmZjhhMWU3ZmZkYzgwNDY2 NDIwZGYwHhcNMjYwMTAyMTAxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDU2Zjc2OWYyODIxZDllNGFmOTMyYzRhYzc3ZDM0YWUzMDkyOGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtSJhSE+GpKD4JypRpPvQQYVnjpl kiM9eIc+fB0tRzllQdA9EdILqb1vmfPFkuP+mfmdmxcjjToqI838OnNwVDR480NX tH7R9odiVcZATSrTxPDI4hzK/PtXXjmtUaEOGUOMmTxZDUJ2T9Ibpt+UvpEbB7jT Pxr5pScBcV6MTzbbaMFEUtr2ueq3QWC6ixh8KPkpiTGt0BO+LSsFxjLLyywllnOV BMK7LfJvBDcvHbgBaCjCy8Et+oAyMDT+gi18TXoopC9ThaY8Y4B29ASQhFHx7pIz VLkg14zaOHU5y7jV3whcBBuT+UFJe//G95l31ogdMR/A8gT1ErxpwhOuRwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMRW92nygh2eSvkyxKx300rjCSjlMB8GA1UdIwQY MBaAFHanWCbpkSJaQp/4oef/3IBGZCDfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHFkWUp1bVJJbHBDbl9paDVfX2NnRVprSU44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8xZDMzY2EtOGQxYy00OWMwLWJlOTct YWQ4ZmJlYWE4ZGQ5LzEveEZiM2FmS0NIWjVLLVRMRXJIZlRTdU1KS09VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS8xZDMzY2EtOGQxYy00OWMwLWJlOTctYWQ4ZmJlYWE4ZGQ5 LzEvZHFkWUp1bVJJbHBDbl9paDVfX2NnRVprSU44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgPbgDgk MA0GCSqGSIb3DQEBCwUAA4IBAQAlFJNGvy0RLnS86waSKXOOJZeCvze7EIKjuWkq UH45fAVVBC+B0UpZoWUokeZ4cYLnaxfZvIzyj8JOMf7zTNx8rNzUgxQ4ljTEmbc7 qXK9V9sIotsS5xWAltpt6Wsbmu9Krs3EUJNlmZ8I2Qa+DkpjBZItH/FThdu2TxNm DOPXOy/rR2dNKAiaVjQMLQbG0u4+LQ6C2m9ewBQifKG1FxYba2IJak70M+KSeT87 33KFL4JTKEchdqVhrGJZwYecgIw2zcvUvQvYjCElNjdrufjCwq/wSNQN6P+86dxu MkRfGR5qeLO5hWCYNLF/8omhS+ms4nSF5GgpY/rWRIiyXb55 -----END CERTIFICATE-----Generated at Wed Jan 21 14:40:58 2026 by rpki-client