This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Xi81bFNWt071_9AJDA1jYrSuIWc.roa File: Xi81bFNWt071_9AJDA1jYrSuIWc.roa (raw, json) Hash identifier: Q1Lh2oQu+XoWPZVMt6kcsRyoQLY+H1YeL7gOK1qMRwk= Subject key identifier: 5E:2F:35:6C:53:56:B7:4E:F5:FF:D0:09:0C:0D:63:62:B4:AE:21:67 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D1314B6745DFA1F91C395F067905B Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Xi81bFNWt071_9AJDA1jYrSuIWc.roa Signing time: Fri 02 Jan 2026 06:20:10 +0000 ROA not before: Fri 02 Jan 2026 06:20:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208223 IP address blocks: 2a0e:b107:1a30::/48 maxlen: 48 2a0e:b107:1a31::/48 maxlen: 48 2a0e:b107:1a32::/48 maxlen: 48 2a0e:b107:1a33::/48 maxlen: 48 2a0e:b107:1a34::/48 maxlen: 48 2a0e:b107:1a35::/48 maxlen: 48 2a0e:b107:1a36::/48 maxlen: 48 2a0e:b107:1a37::/48 maxlen: 48 2a0e:b107:1a38::/48 maxlen: 48 2a0e:b107:1a39::/48 maxlen: 48 2a0e:b107:1a3a::/48 maxlen: 48 2a0e:b107:1a3b::/48 maxlen: 48 2a0e:b107:1a3c::/48 maxlen: 48 2a0e:b107:1a3d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:13:14:b6:74:5d:fa:1f:91:c3:95:f0:67:90:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e2f356c5356b74ef5ffd0090c0d6362b4ae2167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c8:07:9d:4a:9a:f7:a3:b1:2d:f2:f6:85:62: ab:4f:7a:4a:c9:f1:25:8a:85:8b:65:20:55:3f:1c: 44:03:31:a9:95:7e:d7:c0:86:fc:93:28:60:c8:18: a8:bf:91:b6:65:fe:c6:29:60:fb:1a:26:0a:d1:b2: de:f6:21:42:29:7b:d5:ac:76:5d:60:fd:a5:0d:40: c8:a4:5d:5d:f1:65:ee:50:21:c1:cf:a7:2f:80:87: a1:70:87:22:69:fe:db:70:a3:8d:dd:de:ab:d5:32: 0c:2e:9f:98:dd:e8:a8:2f:1d:f4:e0:44:84:91:02: 42:c7:95:1c:e2:04:52:87:55:64:b1:c7:b5:40:33: f9:c3:ca:59:6f:65:8a:c9:6c:43:aa:0b:f4:0d:3d: bb:9b:99:ef:b0:03:26:4f:e1:1a:83:c5:ba:77:7c: 83:dc:2b:fc:42:c4:20:4a:b7:54:0f:c0:d6:84:ff: 9d:b5:56:1a:14:56:e6:54:3e:8d:18:52:ab:ac:64: 48:54:5e:4e:e4:bc:b9:6b:4a:59:93:90:fe:ea:b6: ca:21:cd:95:f5:ec:31:d5:19:01:18:bc:27:16:3a: f0:ad:af:bf:7b:2d:09:10:ae:f8:dd:bf:c7:45:d7: 64:6c:f1:1d:f6:88:52:6d:69:c6:f3:29:30:8f:a2: 29:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:2F:35:6C:53:56:B7:4E:F5:FF:D0:09:0C:0D:63:62:B4:AE:21:67 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Xi81bFNWt071_9AJDA1jYrSuIWc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:1a30::-2a0e:b107:1a3d:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 8c:d8:12:42:b2:3a:b6:f4:c1:17:3f:ad:bf:40:fc:90:94:d9: 28:23:0c:e9:ba:ba:24:26:74:6f:63:5a:af:d2:f9:a0:e3:16: 1e:1d:ba:78:47:f8:96:d0:7d:9c:6e:13:b1:52:7f:40:3b:20: 41:87:d8:c2:88:e4:3f:da:2b:04:3f:d0:f6:54:30:a7:5b:59: 62:25:b4:55:b2:e7:8f:66:6d:e3:23:a2:52:96:8a:47:c1:0c: 26:cb:e5:e4:0e:7e:80:ba:4b:81:27:50:37:c9:1c:fa:cf:89: 23:64:6a:d8:95:aa:62:b9:77:59:1f:fd:a5:8b:d7:55:75:d0: 4c:6e:2d:ca:4e:f2:2c:49:fe:25:ca:d7:6f:21:c3:c6:1a:b3: f0:91:cd:7b:35:2a:4d:fd:85:52:cb:b8:3b:d9:bf:4a:43:4f: b6:65:0e:c8:93:40:64:21:8c:4f:d6:7f:b8:73:cb:73:b6:ec: bb:b9:05:6e:56:9a:82:14:7a:3a:de:fb:92:6c:07:7e:3c:0a: 67:99:17:8a:3d:ef:e9:11:88:ce:9c:94:28:e1:e7:a5:98:d1: 91:2c:0c:91:9c:f8:86:26:b5:83:c3:bc:a4:35:ab:64:e7:9f: d3:0f:d4:f6:64:06:04:91:74:31:d1:3e:62:c7:a1:61:1d:d7: e0:1e:d4:b5 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt9XRMUtnRd+h+Rw5XwZ5BbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTJmMzU2YzUzNTZiNzRlZjVmZmQwMDkwYzBkNjM2MmI0YWUyMTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcgHnUqa96OxLfL2hWKrT3pKyfEl ioWLZSBVPxxEAzGplX7XwIb8kyhgyBiov5G2Zf7GKWD7GiYK0bLe9iFCKXvVrHZd YP2lDUDIpF1d8WXuUCHBz6cvgIehcIciaf7bcKON3d6r1TIMLp+Y3eioLx304ESE kQJCx5Uc4gRSh1Vksce1QDP5w8pZb2WKyWxDqgv0DT27m5nvsAMmT+Eag8W6d3yD 3Cv8QsQgSrdUD8DWhP+dtVYaFFbmVD6NGFKrrGRIVF5O5Ly5a0pZk5D+6rbKIc2V 9ewx1RkBGLwnFjrwra+/ey0JEK743b/HRddkbPEd9ohSbWnG8ykwj6Ip4wIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFF4vNWxTVrdO9f/QCQwNY2K0riFnMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvWGk4MWJGTld0MDcxXzlBSkRBMWpZclN1SVdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwQqDrEH GjADBwEqDrEHGjwwDQYJKoZIhvcNAQELBQADggEBAIzYEkKyOrb0wRc/rb9A/JCU 2SgjDOm6uiQmdG9jWq/S+aDjFh4dunhH+JbQfZxuE7FSf0A7IEGH2MKI5D/aKwQ/ 0PZUMKdbWWIltFWy549mbeMjolKWikfBDCbL5eQOfoC6S4EnUDfJHPrPiSNkatiV qmK5d1kf/aWL11V10ExuLcpO8ixJ/iXK128hw8Yas/CRzXs1Kk39hVLLuDvZv0pD T7ZlDsiTQGQhjE/Wf7hzy3O27Lu5BW5WmoIUejre+5JsB348CmeZF4o97+kRiM6c lCjh56WY0ZEsDJGc+IYmtYPDvKQ1q2Tnn9MP1PZkBgSRdDHRPmLHoWEd1+Ae1LU= -----END CERTIFICATE-----Generated at Fri Jan 9 13:11:59 2026 by rpki-client