This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8ef6b9-d851-43a4-8977-df3545b44c0b/1/XCXL6tXhJ071vkeNMORNlpxzCuY.roa File: XCXL6tXhJ071vkeNMORNlpxzCuY.roa (raw, json) Hash identifier: dQDGVzQSTYMoleKklgkYU+qVDH84olTQRNM1qoDrhIc= Subject key identifier: 5C:25:CB:EA:D5:E1:27:4E:F5:BE:47:8D:30:E4:4D:96:9C:73:0A:E6 Certificate issuer: /CN=11c7eaf1bf50f141d5651d8909ac76c9d480a696 Certificate serial: 019B7DCA769BF85A5E0FCB20B6C2DEB240B0 Authority key identifier: 11:C7:EA:F1:BF:50:F1:41:D5:65:1D:89:09:AC:76:C9:D4:80:A6:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ecfq8b9Q8UHVZR2JCax2ydSAppY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8ef6b9-d851-43a4-8977-df3545b44c0b/1/XCXL6tXhJ071vkeNMORNlpxzCuY.roa Signing time: Fri 02 Jan 2026 08:19:39 +0000 ROA not before: Fri 02 Jan 2026 08:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25387 IP address blocks: 62.88.128.0/17 maxlen: 17 2a03:7080::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8ef6b9-d851-43a4-8977-df3545b44c0b/1/Ecfq8b9Q8UHVZR2JCax2ydSAppY.crl rsync://rpki.ripe.net/repository/DEFAULT/51/8ef6b9-d851-43a4-8977-df3545b44c0b/1/Ecfq8b9Q8UHVZR2JCax2ydSAppY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ecfq8b9Q8UHVZR2JCax2ydSAppY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:76:9b:f8:5a:5e:0f:cb:20:b6:c2:de:b2:40:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11c7eaf1bf50f141d5651d8909ac76c9d480a696 Validity Not Before: Jan 2 08:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c25cbead5e1274ef5be478d30e44d969c730ae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4c:c2:fa:b8:cf:08:7e:8b:a6:b6:43:dd:97: e1:cf:c0:48:eb:ae:b9:9a:e6:c9:0e:89:50:98:99: 25:7c:73:15:9e:21:6b:76:ed:26:1b:53:3a:18:e9: 24:4b:5e:3a:7d:48:a3:b5:c0:c9:9b:fc:48:ff:1c: c0:0c:32:c6:6c:5d:5f:87:b9:ad:4b:53:a5:52:3b: d4:27:85:1a:de:72:96:dd:3d:47:d6:a5:a9:e6:00: e0:af:af:57:3c:d1:10:ff:f5:75:72:84:5c:50:8e: 05:a2:f0:d1:4e:52:7d:b8:4b:cc:d8:c8:ff:f5:ee: 9a:2e:48:5d:46:de:a6:96:4e:aa:4c:2d:58:2e:71: b1:a0:93:2e:ec:76:23:d2:0a:bb:99:d4:b8:11:d1: bb:ec:0a:7d:7f:fa:c1:75:e9:70:89:b5:e2:34:d9: 15:5a:71:d5:c0:39:e1:44:3a:a0:cb:10:6b:f2:82: 7d:69:c4:89:87:08:6b:e9:4d:c3:81:1c:a2:9b:2e: 8c:0b:47:6b:e4:f3:8b:51:ac:71:70:ea:9f:65:09: 13:b0:6e:e1:2d:80:00:16:a8:49:0f:de:21:1d:57: 4a:89:f3:76:1c:6b:d1:44:47:27:96:80:41:5b:2e: 6d:b0:c1:ae:a7:d1:06:91:71:84:45:cd:60:20:67: 7a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:25:CB:EA:D5:E1:27:4E:F5:BE:47:8D:30:E4:4D:96:9C:73:0A:E6 X509v3 Authority Key Identifier: keyid:11:C7:EA:F1:BF:50:F1:41:D5:65:1D:89:09:AC:76:C9:D4:80:A6:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ecfq8b9Q8UHVZR2JCax2ydSAppY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8ef6b9-d851-43a4-8977-df3545b44c0b/1/XCXL6tXhJ071vkeNMORNlpxzCuY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8ef6b9-d851-43a4-8977-df3545b44c0b/1/Ecfq8b9Q8UHVZR2JCax2ydSAppY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.88.128.0/17 IPv6: 2a03:7080::/32 Signature Algorithm: sha256WithRSAEncryption 8a:10:18:6c:f8:c2:cc:8b:ec:fe:f2:d5:af:dc:b9:27:d7:e5: 80:ec:79:80:df:74:3a:86:86:31:74:bc:e2:e4:9f:e9:85:f4: 3b:2d:91:b7:47:f5:7f:55:b0:bc:cb:c2:2a:57:7e:42:97:ca: fa:2c:ed:73:96:25:6c:0b:94:a9:eb:00:5d:cc:cf:f0:c4:aa: 7c:25:4f:c9:6d:e1:45:dd:5a:3a:fe:f5:81:5f:06:32:df:fa: 12:05:e1:c5:7e:28:bd:1e:7f:16:3e:ca:4c:b7:99:9e:f1:b1: f7:0e:b5:22:57:cc:40:ed:50:b1:60:4b:06:bf:d4:c5:6a:2e: c3:21:b5:99:0f:f8:8a:9f:a5:df:92:42:4c:66:79:30:ce:d9: 15:fd:08:62:a4:24:c4:61:00:3c:00:84:14:c8:7b:c2:4e:79: 26:81:b7:cc:7c:4e:36:7e:8d:1e:d9:45:05:d5:33:7d:52:ef: ba:b7:68:8d:d3:2b:5a:0f:6c:48:66:2a:eb:b3:ae:34:1c:14: 7c:63:71:2f:8e:3c:a4:f2:66:16:5e:e0:52:81:54:fa:c2:25: d7:1c:bf:13:5d:c2:c4:42:0c:25:c0:61:b5:02:ce:2e:a6:c5: a1:d0:19:e0:d1:8b:06:59:d6:48:56:dc:e6:d6:bc:43:c1:27: 8a:af:40:e5 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9ynab+FpeD8sgtsLeskCwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYzdlYWYxYmY1MGYxNDFkNTY1MWQ4OTA5YWM3NmM5ZDQ4 MGE2OTYwHhcNMjYwMTAyMDgxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzI1Y2JlYWQ1ZTEyNzRlZjViZTQ3OGQzMGU0NGQ5NjljNzMwYWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00zC+rjPCH6LprZD3Zfhz8BI6665 mubJDolQmJklfHMVniFrdu0mG1M6GOkkS146fUijtcDJm/xI/xzADDLGbF1fh7mt S1OlUjvUJ4Ua3nKW3T1H1qWp5gDgr69XPNEQ//V1coRcUI4FovDRTlJ9uEvM2Mj/ 9e6aLkhdRt6mlk6qTC1YLnGxoJMu7HYj0gq7mdS4EdG77Ap9f/rBdelwibXiNNkV WnHVwDnhRDqgyxBr8oJ9acSJhwhr6U3DgRyimy6MC0dr5POLUaxxcOqfZQkTsG7h LYAAFqhJD94hHVdKifN2HGvRREcnloBBWy5tsMGup9EGkXGERc1gIGd6OQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFwly+rV4SdO9b5HjTDkTZaccwrmMB8GA1UdIwQY MBaAFBHH6vG/UPFB1WUdiQmsdsnUgKaWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWNmcThiOVE4VUhWWlIySkNheDJ5ZFNBcHBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84ZWY2YjktZDg1MS00M2E0LTg5Nzct ZGYzNTQ1YjQ0YzBiLzEvWENYTDZ0WGhKMDcxdmtlTk1PUk5scHh6Q3VZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS84ZWY2YjktZDg1MS00M2E0LTg5NzctZGYzNTQ1YjQ0YzBi LzEvRWNmcThiOVE4VUhWWlIySkNheDJ5ZFNBcHBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQHPliAMA0E AgACMAcDBQAqA3CAMA0GCSqGSIb3DQEBCwUAA4IBAQCKEBhs+MLMi+z+8tWv3Lkn 1+WA7HmA33Q6hoYxdLzi5J/phfQ7LZG3R/V/VbC8y8IqV35Cl8r6LO1zliVsC5Sp 6wBdzM/wxKp8JU/JbeFF3Vo6/vWBXwYy3/oSBeHFfii9Hn8WPspMt5me8bH3DrUi V8xA7VCxYEsGv9TFai7DIbWZD/iKn6XfkkJMZnkwztkV/QhipCTEYQA8AIQUyHvC TnkmgbfMfE42fo0e2UUF1TN9Uu+6t2iN0ytaD2xIZirrs640HBR8Y3Evjjyk8mYW XuBSgVT6wiXXHL8TXcLEQgwlwGG1As4upsWh0Bng0YsGWdZIVtzm1rxDwSeKr0Dl -----END CERTIFICATE-----Generated at Mon Feb 9 22:24:55 2026 by rpki-client