This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/xa9xrZNhkrb1go6zH6OKw-38u0I.roa File: xa9xrZNhkrb1go6zH6OKw-38u0I.roa (raw, json) Hash identifier: 3ps/xuw6rQo0GiTBuWC3tdYfVBGy86dcxldZD3sHZwo= Subject key identifier: C5:AF:71:AD:93:61:92:B6:F5:82:8E:B3:1F:A3:8A:C3:ED:FC:BB:42 Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7 Certificate serial: 019B7CEDE912E8F047231DDEB202FAEE0687 Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/xa9xrZNhkrb1go6zH6OKw-38u0I.roa Signing time: Fri 02 Jan 2026 04:18:45 +0000 ROA not before: Fri 02 Jan 2026 04:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207994 IP address blocks: 62.72.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:e9:12:e8:f0:47:23:1d:de:b2:02:fa:ee:06:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7 Validity Not Before: Jan 2 04:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5af71ad936192b6f5828eb31fa38ac3edfcbb42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6c:b7:6b:50:43:07:e0:af:eb:25:cb:63:7f: de:c2:f8:8d:b9:ab:3b:e5:b5:d6:1d:60:68:51:5b: ae:29:50:60:5e:56:41:34:52:c7:30:6d:39:2c:aa: f2:d2:3c:ad:9b:b6:67:de:40:d3:38:45:84:c9:1f: c2:54:f9:2a:c5:09:24:f3:24:23:db:fa:64:21:19: 75:9d:4d:bf:0e:6c:6f:23:ff:41:4f:80:9c:2a:f7: 8b:6b:d6:22:a5:fb:cc:37:2d:6d:f2:71:6c:7e:07: 51:d4:26:17:13:df:36:cb:ed:da:ef:13:d5:73:ab: 5f:15:9c:45:ce:76:f2:61:45:86:ed:d4:b0:d8:06: 70:cb:99:a1:4a:87:29:8d:77:b2:d5:d6:ae:6d:46: 37:d1:62:8b:b7:96:1e:be:9c:56:16:be:e3:0a:2c: c0:d3:bc:42:60:12:ec:b7:48:f8:5c:e9:55:8d:c8: 3d:f9:14:da:20:d6:96:25:dc:49:74:ea:c4:f8:37: fe:0a:db:f7:2c:a3:a8:80:1c:5c:c7:5f:a3:df:13: 39:46:71:fd:98:b6:22:1c:c1:b4:42:c4:90:4e:37: 9b:ca:24:ce:09:19:15:34:1d:07:d2:91:8b:53:23: f1:cd:f9:b2:2c:4e:f4:48:e3:8b:7e:26:5f:0b:12: d6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:AF:71:AD:93:61:92:B6:F5:82:8E:B3:1F:A3:8A:C3:ED:FC:BB:42 X509v3 Authority Key Identifier: keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/xa9xrZNhkrb1go6zH6OKw-38u0I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.72.177.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:4c:ec:7b:7a:c7:a1:be:17:bc:68:4a:fb:ab:97:bb:8d:4c: 4e:65:13:50:a2:86:85:06:fa:94:e8:6a:46:5a:93:6b:31:8b: f9:b5:d0:bf:e2:22:73:89:ea:3e:5e:49:ac:62:41:dc:18:87: 34:a7:d4:a2:db:61:6c:4f:8d:b0:b9:62:7d:2e:0b:2e:8f:c5: d3:d7:91:e9:d0:38:1d:fe:38:ec:bc:4d:18:e7:41:5b:c4:c5: 63:33:57:f7:e4:59:0e:ac:87:ad:66:73:f6:d9:05:a4:e6:63: c9:63:48:b5:07:e1:20:19:df:dc:09:9d:79:ad:6f:bd:5b:65: 92:8e:3b:80:d1:d2:20:15:b0:f1:ff:dc:56:d6:b1:1b:81:a8: 87:84:14:cb:c0:f7:8a:60:8c:de:0c:43:df:4f:40:98:d7:a6: 63:28:19:c0:e2:51:e5:14:ca:40:a7:55:75:05:89:e5:e2:e3: 67:70:5a:a3:a8:c8:be:b4:38:3d:7d:e0:4e:04:10:fb:f5:4a: 1a:01:49:36:26:85:87:17:60:0f:b1:a1:33:6f:11:33:52:8b: 4f:8e:c8:0f:78:9b:fd:3e:ae:27:21:13:b4:15:cd:f1:77:2f: e0:51:73:ba:a7:6a:7e:d3:28:7c:b1:b3:af:75:9f:a6:94:55: ec:2a:df:6d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87ekS6PBHIx3esgL67gaHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl ZTQ2ZDcwHhcNMjYwMTAyMDQxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNWFmNzFhZDkzNjE5MmI2ZjU4MjhlYjMxZmEzOGFjM2VkZmNiYjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2y3a1BDB+Cv6yXLY3/ewviNuas7 5bXWHWBoUVuuKVBgXlZBNFLHMG05LKry0jytm7Zn3kDTOEWEyR/CVPkqxQkk8yQj 2/pkIRl1nU2/DmxvI/9BT4CcKveLa9YipfvMNy1t8nFsfgdR1CYXE982y+3a7xPV c6tfFZxFznbyYUWG7dSw2AZwy5mhSocpjXey1daubUY30WKLt5YevpxWFr7jCizA 07xCYBLst0j4XOlVjcg9+RTaINaWJdxJdOrE+Df+Ctv3LKOogBxcx1+j3xM5RnH9 mLYiHMG0QsSQTjebyiTOCRkVNB0H0pGLUyPxzfmyLE70SOOLfiZfCxLWNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMWvca2TYZK29YKOsx+jisPt/LtCMB8GA1UdIwQY MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt NTYyNDRmNDMwZGNjLzEveGE5eHJaTmhrcmIxZ282ekg2T0t3LTM4dTBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPkixMA0G CSqGSIb3DQEBCwUAA4IBAQAvTOx7esehvhe8aEr7q5e7jUxOZRNQooaFBvqU6GpG WpNrMYv5tdC/4iJzieo+XkmsYkHcGIc0p9Si22FsT42wuWJ9Lgsuj8XT15Hp0Dgd /jjsvE0Y50FbxMVjM1f35FkOrIetZnP22QWk5mPJY0i1B+EgGd/cCZ15rW+9W2WS jjuA0dIgFbDx/9xW1rEbgaiHhBTLwPeKYIzeDEPfT0CY16ZjKBnA4lHlFMpAp1V1 BYnl4uNncFqjqMi+tDg9feBOBBD79UoaAUk2JoWHF2APsaEzbxEzUotPjsgPeJv9 Pq4nIRO0Fc3xdy/gUXO6p2p+0yh8sbOvdZ+mlFXsKt9t -----END CERTIFICATE-----Generated at Fri Jan 2 17:53:51 2026 by rpki-client