This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/xehj5Em4-aZuqclVAlzpzKvC6hc.roa File: xehj5Em4-aZuqclVAlzpzKvC6hc.roa (raw, json) Hash identifier: 6wuADDCEbwDf490Wgk0Vq7px+7XHcKgHXEBX1F0JtHI= Subject key identifier: C5:E8:63:E4:49:B8:F9:A6:6E:A9:C9:55:02:5C:E9:CC:AB:C2:EA:17 Certificate issuer: /CN=183ae8f8887a1309ba54bc4d2761b4b30ea28e49 Certificate serial: 019B7A5A9D1D971F4CA059FFE86F09EFD3BC Authority key identifier: 18:3A:E8:F8:88:7A:13:09:BA:54:BC:4D:27:61:B4:B3:0E:A2:8E:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/xehj5Em4-aZuqclVAlzpzKvC6hc.roa Signing time: Thu 01 Jan 2026 16:18:37 +0000 ROA not before: Thu 01 Jan 2026 16:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 54058 IP address blocks: 2a05:2200::/29 maxlen: 29 2a07:4e40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.crl rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.mft rsync://rpki.ripe.net/repository/DEFAULT/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:9d:1d:97:1f:4c:a0:59:ff:e8:6f:09:ef:d3:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=183ae8f8887a1309ba54bc4d2761b4b30ea28e49 Validity Not Before: Jan 1 16:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5e863e449b8f9a66ea9c955025ce9ccabc2ea17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:79:87:1d:31:de:f1:26:66:cd:a5:97:31:52: cb:b5:67:73:1c:5f:02:bb:13:f2:01:58:97:ce:f5: 46:f6:e3:7d:0d:36:ab:01:c1:d7:82:3b:a9:91:90: d4:4e:93:a2:7a:e9:4d:7a:ff:67:26:af:60:12:bc: 9d:dc:11:02:79:b6:db:b0:3b:db:05:52:b5:fc:dc: df:47:b4:3f:a8:17:64:77:be:96:f2:3c:54:f0:f4: c6:45:8b:d6:62:2c:bc:4d:a2:fe:00:64:5a:46:19: 16:bf:05:4b:2d:2d:88:d2:04:3c:8e:e0:d2:d1:8f: 9b:d5:8a:89:ad:10:6d:dc:c4:cd:01:89:b8:20:26: a2:3c:66:ca:02:8c:b0:8f:9e:db:69:e1:5f:52:1f: 61:68:63:92:8b:e7:c7:1e:eb:fc:69:2c:d7:59:16: 02:88:8a:04:f7:97:21:f0:3a:66:35:50:c6:07:bf: 93:12:2f:21:73:27:b3:bc:02:ef:aa:a3:33:1c:e4: 81:81:02:fc:10:fb:40:12:e4:8e:1d:8d:66:74:77: 0f:60:8a:bd:3e:2f:ba:79:39:c2:77:9c:fb:f5:22: 8b:1c:fd:51:70:2f:a8:e0:4b:bf:96:95:f0:b8:ae: fc:6a:e8:4e:4b:68:e7:04:09:75:0a:53:71:f2:fc: 58:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E8:63:E4:49:B8:F9:A6:6E:A9:C9:55:02:5C:E9:CC:AB:C2:EA:17 X509v3 Authority Key Identifier: keyid:18:3A:E8:F8:88:7A:13:09:BA:54:BC:4D:27:61:B4:B3:0E:A2:8E:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/xehj5Em4-aZuqclVAlzpzKvC6hc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:2200::/29 2a07:4e40::/29 Signature Algorithm: sha256WithRSAEncryption c2:5a:94:63:c8:82:ae:05:ff:13:b2:48:42:36:e8:2e:ba:ae: 6b:38:c3:cb:c6:35:3a:57:48:7d:1a:4b:de:e0:f3:e7:44:62: 8c:73:a1:90:8b:f4:c2:fc:4d:56:02:96:e4:9f:e6:82:27:45: 84:8a:4b:59:75:51:7a:af:9c:14:89:c8:d6:de:a2:e8:5b:19: 6c:29:8b:a2:ab:cc:09:58:9b:66:b4:b7:af:40:af:27:26:74: b5:80:f1:e9:03:47:8b:09:3f:63:8e:99:75:cb:25:44:10:ac: ea:cd:6c:86:43:9a:d0:d0:bc:f2:6b:bb:28:76:d3:34:c6:e5: a9:94:53:da:53:a9:71:f9:46:46:7d:0c:0a:1e:23:5e:e1:2e: 8e:fb:07:2a:ea:95:5d:7e:71:e3:17:60:8c:f5:bd:86:e7:26: 2d:18:c7:e3:ea:cc:8c:6f:04:68:b5:62:b1:8b:a8:93:6d:61: ca:72:f7:7f:97:4e:ae:2e:d2:39:8c:a1:79:11:67:84:5d:48: e6:3c:4e:44:ac:a0:06:c2:ac:b9:3b:5c:cd:02:23:6c:0c:9e: 6c:25:4f:33:b4:24:cf:09:88:c8:08:1b:99:3d:f4:6b:cb:df: 7d:e9:f8:33:d1:0b:5c:e6:fd:e4:75:7e:94:05:48:bb:35:f9: 96:96:75:96 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt6Wp0dlx9MoFn/6G8J79O8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4M2FlOGY4ODg3YTEzMDliYTU0YmM0ZDI3NjFiNGIzMGVh MjhlNDkwHhcNMjYwMTAxMTYxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNWU4NjNlNDQ5YjhmOWE2NmVhOWM5NTUwMjVjZTljY2FiYzJlYTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonmHHTHe8SZmzaWXMVLLtWdzHF8C uxPyAViXzvVG9uN9DTarAcHXgjupkZDUTpOieulNev9nJq9gEryd3BECebbbsDvb BVK1/NzfR7Q/qBdkd76W8jxU8PTGRYvWYiy8TaL+AGRaRhkWvwVLLS2I0gQ8juDS 0Y+b1YqJrRBt3MTNAYm4ICaiPGbKAoywj57baeFfUh9haGOSi+fHHuv8aSzXWRYC iIoE95ch8DpmNVDGB7+TEi8hcyezvALvqqMzHOSBgQL8EPtAEuSOHY1mdHcPYIq9 Pi+6eTnCd5z79SKLHP1RcC+o4Eu/lpXwuK78auhOS2jnBAl1ClNx8vxYGwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFMXoY+RJuPmmbqnJVQJc6cyrwuoXMB8GA1UdIwQY MBaAFBg66PiIehMJulS8TSdhtLMOoo5JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0Ryby1JaDZFd202Vkx4TkoyRzBzdzZpamtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9lZGQ5ODQtOWIzZS00Nzg2LWIxY2Yt NjBmNmZhODgxODQ1LzEveGVoajVFbTQtYVp1cWNsVkFsenB6S3ZDNmhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9lZGQ5ODQtOWIzZS00Nzg2LWIxY2YtNjBmNmZhODgxODQ1 LzEvR0Ryby1JaDZFd202Vkx4TkoyRzBzdzZpamtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDKgUiAAMF AyoHTkAwDQYJKoZIhvcNAQELBQADggEBAMJalGPIgq4F/xOySEI26C66rms4w8vG NTpXSH0aS97g8+dEYoxzoZCL9ML8TVYCluSf5oInRYSKS1l1UXqvnBSJyNbeouhb GWwpi6KrzAlYm2a0t69ArycmdLWA8ekDR4sJP2OOmXXLJUQQrOrNbIZDmtDQvPJr uyh20zTG5amUU9pTqXH5RkZ9DAoeI17hLo77ByrqlV1+ceMXYIz1vYbnJi0Yx+Pq zIxvBGi1YrGLqJNtYcpy93+XTq4u0jmMoXkRZ4RdSOY8TkSsoAbCrLk7XM0CI2wM nmwlTzO0JM8JiMgIG5k99GvL333p+DPRC1zm/eR1fpQFSLs1+ZaWdZY= -----END CERTIFICATE-----Generated at Tue Feb 10 04:31:22 2026 by rpki-client