This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/xksFClp7QfIH3pADZiO0gm8iUnk.roa File: xksFClp7QfIH3pADZiO0gm8iUnk.roa (raw, json) Hash identifier: 8kr8zlC55C9ByG91b3AYila/3I+NYvv23V4oM6AK9As= Subject key identifier: C6:4B:05:0A:5A:7B:41:F2:07:DE:90:03:66:23:B4:82:6F:22:52:79 Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511 Certificate serial: 019B7C800EF27FC82947F43548E4D49F7B58 Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/xksFClp7QfIH3pADZiO0gm8iUnk.roa Signing time: Fri 02 Jan 2026 02:18:45 +0000 ROA not before: Fri 02 Jan 2026 02:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15830 IP address blocks: 90.84.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 20:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:0e:f2:7f:c8:29:47:f4:35:48:e4:d4:9f:7b:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511 Validity Not Before: Jan 2 02:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c64b050a5a7b41f207de90036623b4826f225279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e9:7d:cf:1a:41:d2:45:3f:c8:ca:63:57:14: 46:0b:44:1c:4e:0a:59:c2:55:f7:84:13:d2:67:ba: 39:96:e0:48:c3:d0:9b:c2:1e:5a:05:9d:5c:36:65: 64:42:aa:37:c0:5f:3b:ff:fd:43:62:2b:69:12:a8: a4:b0:10:cb:15:a5:72:0c:f3:c3:d6:6b:98:d8:92: 46:75:ac:73:ce:46:a7:2e:ed:93:ca:38:49:01:13: 46:fe:6d:2c:20:2f:c4:83:2d:c3:d6:2d:d1:af:74: ff:6a:f8:a9:ba:40:ac:af:ed:77:37:c4:ad:d0:fd: 16:de:6b:99:2d:b8:0e:3c:ed:76:35:1c:85:4f:9f: 73:c9:a9:57:df:58:d1:04:9c:5a:8c:43:50:3a:53: 68:6e:27:c5:6f:1f:8f:3c:a2:d8:08:f9:66:81:6e: 1d:cb:7d:cc:a4:6a:5f:d8:10:b7:64:61:cd:51:41: b7:65:39:d1:c8:1d:c0:9b:ea:ad:91:46:51:d8:2e: 05:5f:04:3c:61:66:b0:cc:bf:d5:9c:96:c0:9b:f5: 44:d3:5b:00:63:ba:2e:f6:f5:15:29:66:51:b0:8f: 18:e6:24:05:08:6e:c4:8e:90:a2:54:05:20:d1:5f: 9c:8e:b9:28:b5:09:4f:7f:94:dc:8a:9d:71:96:9e: b4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:4B:05:0A:5A:7B:41:F2:07:DE:90:03:66:23:B4:82:6F:22:52:79 X509v3 Authority Key Identifier: keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/xksFClp7QfIH3pADZiO0gm8iUnk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 90.84.10.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:73:b9:41:ff:08:ff:c7:57:df:ab:97:d3:75:97:bb:2b:be: a8:08:98:de:1b:a5:d5:35:e5:00:dc:a6:6f:df:67:eb:e6:f9: 79:d8:19:87:2c:52:7b:36:2c:24:61:32:b0:2d:cf:ba:0a:d9: 88:f0:f0:e3:8e:f9:25:ae:db:23:31:b9:75:3f:28:59:3f:26: 61:a4:f8:32:68:89:6d:c4:4f:0a:d8:4f:6a:21:9a:80:50:d3: 0c:3d:91:35:8b:7c:ab:9b:31:ed:e8:52:01:0b:cf:f0:12:d4: 1c:5c:d9:2c:41:29:f0:f8:05:55:14:9e:d9:67:72:d4:ef:cb: a3:e5:3d:34:1f:b5:e0:d6:a7:69:1f:ca:1a:dd:76:83:37:85: a8:e7:0a:50:df:b8:d7:a2:ff:a1:23:d5:02:98:c8:27:57:c2: 6b:57:48:a3:01:33:ba:39:2b:8a:06:2e:cb:b4:43:54:7e:7b: 11:2b:ca:8e:96:b1:c0:46:4d:c0:3d:7e:6e:a1:4d:ca:7c:3f: 49:33:76:5b:5b:da:0a:dc:0b:af:56:90:56:6f:04:88:4f:de: 2d:e8:b8:71:4f:50:14:05:2c:07:91:46:bf:8e:5a:66:99:40: 7b:3f:5c:b0:0d:e5:9b:e4:e6:0a:de:aa:51:91:31:e6:64:af: ef:76:2c:4a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gA7yf8gpR/Q1SOTUn3tYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh MTA1MTEwHhcNMjYwMTAyMDIxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjRiMDUwYTVhN2I0MWYyMDdkZTkwMDM2NjIzYjQ4MjZmMjI1Mjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ul9zxpB0kU/yMpjVxRGC0QcTgpZ wlX3hBPSZ7o5luBIw9Cbwh5aBZ1cNmVkQqo3wF87//1DYitpEqiksBDLFaVyDPPD 1muY2JJGdaxzzkanLu2TyjhJARNG/m0sIC/Egy3D1i3Rr3T/avipukCsr+13N8St 0P0W3muZLbgOPO12NRyFT59zyalX31jRBJxajENQOlNobifFbx+PPKLYCPlmgW4d y33MpGpf2BC3ZGHNUUG3ZTnRyB3Am+qtkUZR2C4FXwQ8YWawzL/VnJbAm/VE01sA Y7ou9vUVKWZRsI8Y5iQFCG7EjpCiVAUg0V+cjrkotQlPf5Tcip1xlp60gwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMZLBQpae0HyB96QA2YjtIJvIlJ5MB8GA1UdIwQY MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt NDU5MzVmNTA2YTEyLzEveGtzRkNscDdRZklIM3BBRFppTzBnbThpVW5rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWlQKMA0G CSqGSIb3DQEBCwUAA4IBAQAqc7lB/wj/x1ffq5fTdZe7K76oCJjeG6XVNeUA3KZv 32fr5vl52BmHLFJ7NiwkYTKwLc+6CtmI8PDjjvklrtsjMbl1PyhZPyZhpPgyaIlt xE8K2E9qIZqAUNMMPZE1i3yrmzHt6FIBC8/wEtQcXNksQSnw+AVVFJ7ZZ3LU78uj 5T00H7Xg1qdpH8oa3XaDN4Wo5wpQ37jXov+hI9UCmMgnV8JrV0ijATO6OSuKBi7L tENUfnsRK8qOlrHARk3APX5uoU3KfD9JM3ZbW9oK3AuvVpBWbwSIT94t6LhxT1AU BSwHkUa/jlpmmUB7P1ywDeWb5OYK3qpRkTHmZK/vdixK -----END CERTIFICATE-----Generated at Sat Jan 3 04:59:30 2026 by rpki-client