This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/xlcC7OzJncwz3-3fDqQVCRiRUuA.roa File: xlcC7OzJncwz3-3fDqQVCRiRUuA.roa (raw, json) Hash identifier: +tBbtDRSVVjOD+h/7bnuccyOYojgyYfukEn9rcwiF1w= Subject key identifier: C6:57:02:EC:EC:C9:9D:CC:33:DF:ED:DF:0E:A4:15:09:18:91:52:E0 Certificate issuer: /CN=96545bad39625aea67903f8183f9fbbaeac6c88d Certificate serial: 019B79EC9EB6D7CCFADF3CEDD0ACD675A443 Authority key identifier: 96:54:5B:AD:39:62:5A:EA:67:90:3F:81:83:F9:FB:BA:EA:C6:C8:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llRbrTliWupnkD-Bg_n7uurGyI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/xlcC7OzJncwz3-3fDqQVCRiRUuA.roa Signing time: Thu 01 Jan 2026 14:18:28 +0000 ROA not before: Thu 01 Jan 2026 14:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 141.82.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.mft rsync://rpki.ripe.net/repository/DEFAULT/llRbrTliWupnkD-Bg_n7uurGyI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 02:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:9e:b6:d7:cc:fa:df:3c:ed:d0:ac:d6:75:a4:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96545bad39625aea67903f8183f9fbbaeac6c88d Validity Not Before: Jan 1 14:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c65702ececc99dcc33dfeddf0ea41509189152e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:51:e5:29:7c:d6:0f:6d:79:72:14:1e:27:17: f8:47:7a:2b:5a:39:0b:e2:46:08:65:47:b5:ba:3b: 23:1a:4c:ff:e6:b3:bc:8f:9c:e1:82:dd:83:18:6e: e7:53:fa:a7:a5:05:d8:87:3c:3f:8f:e1:08:92:8f: 72:85:db:31:0f:08:e6:9c:d0:90:83:07:34:ab:8a: 6f:46:b0:ea:84:8e:1e:62:eb:20:e1:9d:66:2d:34: 77:44:80:10:24:a5:40:71:9a:b1:c6:d1:c3:fe:61: c8:10:86:2d:35:f5:8f:c2:f9:f4:1d:f8:4b:dc:48: d4:57:23:15:64:f7:66:d7:03:fe:a9:2a:46:04:d3: dd:fb:21:91:61:1d:e7:75:ad:08:6e:d3:4f:65:62: 94:75:3e:03:4e:d8:15:93:cb:bd:89:83:0b:63:06: 1a:af:17:d1:4f:34:ca:ac:14:93:20:0e:a7:77:d7: cb:da:af:ea:89:c0:d7:f4:a1:90:95:a6:09:4c:7c: 19:cd:3b:bb:3a:71:33:28:d0:e8:9a:0e:00:45:2a: 7b:a4:8d:88:bf:57:1d:45:de:2d:65:2a:a5:d4:a6: 0a:b2:f5:86:04:43:c2:a0:98:17:71:2a:28:83:15: 81:98:f5:49:e1:c0:42:41:5f:00:44:6c:d5:48:a7: 57:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:57:02:EC:EC:C9:9D:CC:33:DF:ED:DF:0E:A4:15:09:18:91:52:E0 X509v3 Authority Key Identifier: keyid:96:54:5B:AD:39:62:5A:EA:67:90:3F:81:83:F9:FB:BA:EA:C6:C8:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llRbrTliWupnkD-Bg_n7uurGyI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/xlcC7OzJncwz3-3fDqQVCRiRUuA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.82.0.0/16 Signature Algorithm: sha256WithRSAEncryption 46:cd:0f:4f:a1:e2:c0:50:6a:14:33:27:e1:76:8f:c4:1f:87: 73:2b:81:9c:d9:1c:13:f0:50:bd:83:80:d2:13:99:11:3c:63: 79:b5:11:06:e6:16:59:6d:10:3d:ad:0c:8c:9a:c9:ba:95:2e: 59:f0:fd:db:f2:84:49:2f:6e:c1:80:3b:c2:3c:d4:9b:82:d0: 03:fe:e3:ed:c6:4f:42:03:26:32:e0:a4:af:7e:6b:75:b4:d4: 80:c1:3f:fc:44:c4:d8:26:a6:70:a1:91:95:15:b3:71:4f:15: c9:6a:3c:01:ee:65:d1:da:fd:6b:fc:ee:c4:c0:98:be:af:ca: b7:1d:70:28:96:af:e6:ea:a9:a8:9f:49:df:13:3d:ae:1f:6f: bb:b5:27:d2:04:eb:b4:5f:83:50:45:32:a9:ed:2e:7b:9a:d9: e6:e4:ba:03:d4:62:a7:51:9a:2c:b1:97:54:82:a5:5d:30:53: 36:53:c9:a3:ef:97:c0:12:35:a3:db:12:cb:09:b5:a8:3a:03: a1:de:1e:e6:8e:30:dd:6f:37:b3:75:08:1d:d5:05:d2:51:62: 9a:18:30:ac:20:33:cb:8c:08:40:20:5c:e9:44:68:0e:55:23: d7:2a:e6:25:79:07:ad:c3:64:2b:01:7f:78:16:7d:d0:9d:10: 66:41:2b:ed -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt57J6218z63zzt0KzWdaRDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2NTQ1YmFkMzk2MjVhZWE2NzkwM2Y4MTgzZjlmYmJhZWFj NmM4OGQwHhcNMjYwMTAxMTQxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjU3MDJlY2VjYzk5ZGNjMzNkZmVkZGYwZWE0MTUwOTE4OTE1MmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlHlKXzWD215chQeJxf4R3orWjkL 4kYIZUe1ujsjGkz/5rO8j5zhgt2DGG7nU/qnpQXYhzw/j+EIko9yhdsxDwjmnNCQ gwc0q4pvRrDqhI4eYusg4Z1mLTR3RIAQJKVAcZqxxtHD/mHIEIYtNfWPwvn0HfhL 3EjUVyMVZPdm1wP+qSpGBNPd+yGRYR3nda0IbtNPZWKUdT4DTtgVk8u9iYMLYwYa rxfRTzTKrBSTIA6nd9fL2q/qicDX9KGQlaYJTHwZzTu7OnEzKNDomg4ARSp7pI2I v1cdRd4tZSql1KYKsvWGBEPCoJgXcSoogxWBmPVJ4cBCQV8ARGzVSKdXZQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFMZXAuzsyZ3MM9/t3w6kFQkYkVLgMB8GA1UdIwQY MBaAFJZUW605YlrqZ5A/gYP5+7rqxsiNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGxSYnJUbGlXdXBua0QtQmdfbjd1dXJHeUkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9lZWI5OGYtY2YxMS00NDlkLWE5YmIt OGQ0NGRlNTRjZmE3LzEveGxjQzdPekpuY3d6My0zZkRxUVZDUmlSVXVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9lZWI5OGYtY2YxMS00NDlkLWE5YmItOGQ0NGRlNTRjZmE3 LzEvbGxSYnJUbGlXdXBua0QtQmdfbjd1dXJHeUkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjVIwDQYJ KoZIhvcNAQELBQADggEBAEbND0+h4sBQahQzJ+F2j8Qfh3MrgZzZHBPwUL2DgNIT mRE8Y3m1EQbmFlltED2tDIyaybqVLlnw/dvyhEkvbsGAO8I81JuC0AP+4+3GT0ID JjLgpK9+a3W01IDBP/xExNgmpnChkZUVs3FPFclqPAHuZdHa/Wv87sTAmL6vyrcd cCiWr+bqqaifSd8TPa4fb7u1J9IE67Rfg1BFMqntLnua2ebkugPUYqdRmiyxl1SC pV0wUzZTyaPvl8ASNaPbEssJtag6A6HeHuaOMN1vN7N1CB3VBdJRYpoYMKwgM8uM CEAgXOlEaA5VI9cq5iV5B63DZCsBf3gWfdCdEGZBK+0= -----END CERTIFICATE-----Generated at Tue Jan 27 11:26:01 2026 by rpki-client