This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/XAe1D-UfnccOxjr0BZ8NMJhUIRY.roa File: XAe1D-UfnccOxjr0BZ8NMJhUIRY.roa (raw, json) Hash identifier: J/R1zb6aQ5p1OEoahc9Oc76aJRSMz4QrbKyCD2+fCrk= Subject key identifier: 5C:07:B5:0F:E5:1F:9D:C7:0E:C6:3A:F4:05:9F:0D:30:98:54:21:16 Certificate issuer: /CN=fb486a0ba9b9b09f4de47962e2c2ae41fc557686 Certificate serial: 019B7A5B8767060A6F21154660F7919508D6 Authority key identifier: FB:48:6A:0B:A9:B9:B0:9F:4D:E4:79:62:E2:C2:AE:41:FC:55:76:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/XAe1D-UfnccOxjr0BZ8NMJhUIRY.roa Signing time: Thu 01 Jan 2026 16:19:37 +0000 ROA not before: Thu 01 Jan 2026 16:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12727 IP address blocks: 31.24.240.0/21 maxlen: 21 130.185.184.0/21 maxlen: 24 185.39.140.0/22 maxlen: 24 188.64.240.0/21 maxlen: 21 213.166.192.0/19 maxlen: 21 2a03:d600::/31 maxlen: 31 2a03:d604::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.crl rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:87:67:06:0a:6f:21:15:46:60:f7:91:95:08:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb486a0ba9b9b09f4de47962e2c2ae41fc557686 Validity Not Before: Jan 1 16:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c07b50fe51f9dc70ec63af4059f0d3098542116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:85:45:4d:41:93:59:d2:aa:5d:00:ce:60:cf: 43:87:83:5c:4d:e4:ea:06:66:3d:d0:24:f0:a8:91: fc:64:73:82:b8:e1:93:62:7c:16:d8:17:78:d8:75: aa:0b:61:b1:93:f3:2e:b9:22:10:18:57:5c:5f:cd: 8e:1f:ae:28:a0:e4:6e:38:9b:bc:92:f7:f5:e2:46: f2:da:fa:3f:35:b8:25:d8:e7:e4:61:f9:da:7b:62: 50:48:44:3b:8f:bd:d4:11:f4:0c:5e:ba:b2:56:2a: b7:b3:0c:bc:c5:dd:e5:16:df:90:c7:41:c0:b0:c5: 35:9f:93:6c:bc:47:72:6a:c0:47:74:12:a1:74:9c: 2f:15:bf:f1:f8:bd:af:36:82:11:66:6a:be:62:a5: 30:ab:07:0d:d4:4b:5e:4b:69:28:3f:db:9f:fb:7e: 87:10:f6:1d:40:59:df:4b:16:94:1e:8d:a4:bc:1c: 4c:f4:af:64:80:1f:40:41:b9:e2:08:25:a0:d5:52: 77:c7:d0:85:e2:c5:69:27:e1:80:27:73:80:d3:fd: 62:8c:b2:ae:f0:86:53:65:7e:d8:d4:84:42:ca:b4: 63:ac:79:22:fd:4e:a4:95:21:90:75:56:93:5d:f3: ec:53:da:71:dd:ed:d9:9f:0f:1c:ef:c7:9f:d6:1e: b7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:07:B5:0F:E5:1F:9D:C7:0E:C6:3A:F4:05:9F:0D:30:98:54:21:16 X509v3 Authority Key Identifier: keyid:FB:48:6A:0B:A9:B9:B0:9F:4D:E4:79:62:E2:C2:AE:41:FC:55:76:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/XAe1D-UfnccOxjr0BZ8NMJhUIRY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.24.240.0/21 130.185.184.0/21 185.39.140.0/22 188.64.240.0/21 213.166.192.0/19 IPv6: 2a03:d600::/31 2a03:d604::/31 Signature Algorithm: sha256WithRSAEncryption 38:c6:cb:93:1f:e1:b4:a0:25:af:6f:24:2a:dd:d7:14:76:79: ab:ee:0c:00:f2:b7:dc:7b:79:e9:b7:e2:db:16:09:ea:5d:a6: e5:38:9e:ba:fe:61:7f:ac:ec:87:1e:d7:4e:d3:de:22:76:44: 1a:3b:ed:32:4e:6d:43:3d:a6:17:1c:70:7a:0e:16:7e:8c:99: 96:bb:d2:78:c7:94:67:e7:d9:a1:7a:6a:99:6a:50:c8:a8:e9: e1:2c:01:3b:5b:86:ec:4a:25:2b:bc:ee:96:c7:fe:55:6b:8e: 8a:c5:97:b6:8e:4f:7e:ab:f9:55:e5:2f:0b:ef:43:12:ba:5d: bd:39:16:fc:b8:13:2e:75:75:1b:d9:3d:21:5f:6f:a6:af:c9: b3:fb:e4:2f:69:d2:19:93:a8:c8:d1:ae:c4:28:61:07:9d:86: 27:1b:ce:ad:56:8f:9a:ed:c8:4c:18:ae:d5:17:e4:31:7d:ed: 6c:92:58:66:f0:d6:a6:24:53:33:52:8c:57:57:d3:52:ee:c1: 7c:22:e4:a1:ba:01:70:7a:74:3e:5a:78:ed:5a:a2:00:5b:64: dd:37:4d:9d:39:84:1f:34:97:ff:f0:8f:de:30:17:dd:c9:63: 02:d9:0c:57:34:ba:22:0c:50:86:0c:67:87:b0:78:ad:ab:39: 21:0f:e3:a3 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt6W4dnBgpvIRVGYPeRlQjWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiNDg2YTBiYTliOWIwOWY0ZGU0Nzk2MmUyYzJhZTQxZmM1 NTc2ODYwHhcNMjYwMTAxMTYxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzA3YjUwZmU1MWY5ZGM3MGVjNjNhZjQwNTlmMGQzMDk4NTQyMTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4VFTUGTWdKqXQDOYM9Dh4NcTeTq BmY90CTwqJH8ZHOCuOGTYnwW2Bd42HWqC2Gxk/MuuSIQGFdcX82OH64ooORuOJu8 kvf14kby2vo/Nbgl2OfkYfnae2JQSEQ7j73UEfQMXrqyViq3swy8xd3lFt+Qx0HA sMU1n5NsvEdyasBHdBKhdJwvFb/x+L2vNoIRZmq+YqUwqwcN1EteS2koP9uf+36H EPYdQFnfSxaUHo2kvBxM9K9kgB9AQbniCCWg1VJ3x9CF4sVpJ+GAJ3OA0/1ijLKu 8IZTZX7Y1IRCyrRjrHki/U6klSGQdVaTXfPsU9px3e3Znw8c78ef1h63vwIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFFwHtQ/lH53HDsY69AWfDTCYVCEWMB8GA1UdIwQY MBaAFPtIagupubCfTeR5YuLCrkH8VXaGMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS0waHFDNm01c0o5TjVIbGk0c0t1UWZ4VmRvWS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcvNmFjNGRhLWY1NmEtNGMxYi1iNWJk LWZhYWM5MDgwMjkwOC8xL1hBZTFELVVmbmNjT3hqcjBCWjhOTUpoVUlSWS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNTcvNmFjNGRhLWY1NmEtNGMxYi1iNWJkLWZhYWM5MDgwMjkw OC8xLzEtMGhxQzZtNXNKOU41SGxpNHNLdVFmeFZkb1kuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwTQYIKwYBBQUHAQcBAf8EPjA8MCQEAgABMB4DBAMfGPAD BAOCubgDBAK5J4wDBAO8QPADBAXVpsAwFAQCAAIwDgMFASoD1gADBQEqA9YEMA0G CSqGSIb3DQEBCwUAA4IBAQA4xsuTH+G0oCWvbyQq3dcUdnmr7gwA8rfce3npt+Lb FgnqXablOJ66/mF/rOyHHtdO094idkQaO+0yTm1DPaYXHHB6DhZ+jJmWu9J4x5Rn 59mhemqZalDIqOnhLAE7W4bsSiUrvO6Wx/5Va46KxZe2jk9+q/lV5S8L70MSul29 ORb8uBMudXUb2T0hX2+mr8mz++QvadIZk6jI0a7EKGEHnYYnG86tVo+a7chMGK7V F+Qxfe1sklhm8NamJFMzUoxXV9NS7sF8IuShugFwenQ+WnjtWqIAW2TdN02dOYQf NJf/8I/eMBfdyWMC2QxXNLoiDFCGDGeHsHitqzkhD+Oj -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:30 2026 by rpki-client