This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/ex_xJpK_CdSqACSQtdB9gjUSuD4.roa File: ex_xJpK_CdSqACSQtdB9gjUSuD4.roa (raw, json) Hash identifier: MIYxDXr1ZqH9Kq+ZDYqcGhxuESuPqOopC1Yf9yS3HhI= Subject key identifier: 7B:1F:F1:26:92:BF:09:D4:AA:00:24:90:B5:D0:7D:82:35:12:B8:3E Certificate issuer: /CN=6294db0b87f6aeecce7fb22fb1b1421d906a6350 Certificate serial: 019B7C1284B54F726253B973CFEBDAF64938 Authority key identifier: 62:94:DB:0B:87:F6:AE:EC:CE:7F:B2:2F:B1:B1:42:1D:90:6A:63:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YpTbC4f2ruzOf7IvsbFCHZBqY1A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/ex_xJpK_CdSqACSQtdB9gjUSuD4.roa Signing time: Fri 02 Jan 2026 00:19:06 +0000 ROA not before: Fri 02 Jan 2026 00:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 131199 IP address blocks: 2a0c:36c1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.crl rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft rsync://rpki.ripe.net/repository/DEFAULT/YpTbC4f2ruzOf7IvsbFCHZBqY1A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:84:b5:4f:72:62:53:b9:73:cf:eb:da:f6:49:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6294db0b87f6aeecce7fb22fb1b1421d906a6350 Validity Not Before: Jan 2 00:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b1ff12692bf09d4aa002490b5d07d823512b83e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1b:34:64:db:f0:13:a6:03:3f:f1:56:85:da: 06:89:33:5c:68:45:31:f7:cb:39:ed:d9:61:3d:c6: 0a:3b:16:e1:61:99:b7:6c:dd:a6:57:f9:36:b6:62: bd:8b:ee:64:9d:fd:d5:b8:8a:5a:1e:04:5e:2b:25: 27:40:08:fd:7c:8d:70:3d:60:76:4c:c2:2f:82:92: 77:25:7e:15:77:62:30:72:43:52:c0:77:dc:47:ff: ea:31:af:67:51:db:19:1e:3f:34:11:c4:c3:a0:5f: a1:ae:7c:8f:7f:1e:0a:09:45:d5:9f:14:85:d4:6b: 52:2d:86:a6:63:54:83:a5:4a:13:1e:65:b3:bb:45: 5c:53:60:ef:db:98:94:8b:54:0e:e1:9c:26:b1:b9: b6:29:4c:53:25:27:90:e1:9b:05:83:33:31:8b:dd: 6e:c3:f9:f9:98:b4:1b:a6:33:a6:ae:fb:bb:0f:6d: 29:3a:71:39:a4:96:04:cc:66:e4:9d:06:be:a5:06: b0:25:0a:f0:f9:38:56:1f:29:ce:d7:0b:fd:b4:97: 2b:f7:e0:80:a8:6d:ff:53:89:f4:50:54:34:d2:dd: 49:f4:08:cf:8f:b8:5f:95:61:9b:13:d0:1f:00:da: 42:13:01:3f:1e:c7:2a:e6:50:11:f2:fd:94:32:49: af:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:1F:F1:26:92:BF:09:D4:AA:00:24:90:B5:D0:7D:82:35:12:B8:3E X509v3 Authority Key Identifier: keyid:62:94:DB:0B:87:F6:AE:EC:CE:7F:B2:2F:B1:B1:42:1D:90:6A:63:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpTbC4f2ruzOf7IvsbFCHZBqY1A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/ex_xJpK_CdSqACSQtdB9gjUSuD4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:36c1::/32 Signature Algorithm: sha256WithRSAEncryption 98:34:eb:78:0c:cb:44:e6:f2:26:f5:33:66:22:72:0e:14:86: cd:72:53:e4:db:7b:61:e2:41:80:c7:4b:92:43:ba:ec:35:3f: 6c:f9:85:46:bf:6a:5f:69:8b:fd:ba:3d:56:0e:5e:cc:03:1a: 78:3c:42:aa:da:89:11:9b:f0:c2:bb:f8:80:ee:ac:d1:fc:d8: 68:a5:f5:76:93:46:47:fe:ba:96:2c:e1:0c:e9:f9:97:f2:0f: af:30:13:7c:6e:b0:ae:c1:81:b1:b1:5e:d9:dc:38:4f:7e:37: 61:a9:1d:6e:db:6b:b9:a1:e3:42:02:79:62:9d:a4:a5:22:c7: 70:9f:88:80:93:8b:97:ba:5c:23:fe:5b:48:a9:42:26:da:4a: 70:b0:94:41:b4:f5:c9:3f:93:96:b2:24:1c:ea:8b:62:36:3f: 94:d5:23:86:75:b0:bb:5e:27:59:1a:7d:27:a3:73:6c:45:24: 85:ef:3a:33:cf:c0:84:dd:45:9b:51:3c:23:0e:e0:78:53:f1: 43:c8:35:3a:71:d3:4a:a7:3e:66:03:e3:2c:1d:20:2b:f7:5a: 22:94:42:45:60:65:26:3c:b0:2f:65:6f:c3:cc:fa:1b:81:0f: 37:38:c0:3e:15:92:53:9a:6a:70:d5:f3:a7:77:b6:7f:d3:1d: 9f:00:2f:e2 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8EoS1T3JiU7lzz+va9kk4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyOTRkYjBiODdmNmFlZWNjZTdmYjIyZmIxYjE0MjFkOTA2 YTYzNTAwHhcNMjYwMTAyMDAxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjFmZjEyNjkyYmYwOWQ0YWEwMDI0OTBiNWQwN2Q4MjM1MTJiODNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRs0ZNvwE6YDP/FWhdoGiTNcaEUx 98s57dlhPcYKOxbhYZm3bN2mV/k2tmK9i+5knf3VuIpaHgReKyUnQAj9fI1wPWB2 TMIvgpJ3JX4Vd2IwckNSwHfcR//qMa9nUdsZHj80EcTDoF+hrnyPfx4KCUXVnxSF 1GtSLYamY1SDpUoTHmWzu0VcU2Dv25iUi1QO4Zwmsbm2KUxTJSeQ4ZsFgzMxi91u w/n5mLQbpjOmrvu7D20pOnE5pJYEzGbknQa+pQawJQrw+ThWHynO1wv9tJcr9+CA qG3/U4n0UFQ00t1J9AjPj7hflWGbE9AfANpCEwE/Hscq5lAR8v2UMkmvjwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFHsf8SaSvwnUqgAkkLXQfYI1Erg+MB8GA1UdIwQY MBaAFGKU2wuH9q7szn+yL7GxQh2QamNQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXBUYkM0ZjJydXpPZjdJdnNiRkNIWkJxWTFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81M2QxYTUtOWM2MS00ZmYyLWIyMWIt NzBjOTUyMDlmZTg5LzEvZXhfeEpwS19DZFNxQUNTUXRkQjlnalVTdUQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81M2QxYTUtOWM2MS00ZmYyLWIyMWItNzBjOTUyMDlmZTg5 LzEvWXBUYkM0ZjJydXpPZjdJdnNiRkNIWkJxWTFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgw2wTAN BgkqhkiG9w0BAQsFAAOCAQEAmDTreAzLRObyJvUzZiJyDhSGzXJT5Nt7YeJBgMdL kkO67DU/bPmFRr9qX2mL/bo9Vg5ezAMaeDxCqtqJEZvwwrv4gO6s0fzYaKX1dpNG R/66lizhDOn5l/IPrzATfG6wrsGBsbFe2dw4T343YakdbttruaHjQgJ5Yp2kpSLH cJ+IgJOLl7pcI/5bSKlCJtpKcLCUQbT1yT+TlrIkHOqLYjY/lNUjhnWwu14nWRp9 J6NzbEUkhe86M8/AhN1Fm1E8Iw7geFPxQ8g1OnHTSqc+ZgPjLB0gK/daIpRCRWBl JjywL2Vvw8z6G4EPNzjAPhWSU5pqcNXzp3e2f9MdnwAv4g== -----END CERTIFICATE-----Generated at Tue Feb 10 05:47:25 2026 by rpki-client