This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/XIo_9-qFy5wjas20w7MdEaNT8T8.roa File: XIo_9-qFy5wjas20w7MdEaNT8T8.roa (raw, json) Hash identifier: mjSD46sU4dPzZBYqQEdjYI8aGEpVPeI7VUJMRwMVNGY= Subject key identifier: 5C:8A:3F:F7:EA:85:CB:9C:23:6A:CD:B4:C3:B3:1D:11:A3:53:F1:3F Certificate issuer: /CN=2c3b0ae5b7f781122c709a2650adf9729187e1e1 Certificate serial: 019B7DCB5A8FB76257CFA940B8D9FACAEA3B Authority key identifier: 2C:3B:0A:E5:B7:F7:81:12:2C:70:9A:26:50:AD:F9:72:91:87:E1:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/XIo_9-qFy5wjas20w7MdEaNT8T8.roa Signing time: Fri 02 Jan 2026 08:20:37 +0000 ROA not before: Fri 02 Jan 2026 08:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 2a00:dc80::/33 maxlen: 48 2a00:dc87:8000::/33 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 14:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:5a:8f:b7:62:57:cf:a9:40:b8:d9:fa:ca:ea:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c3b0ae5b7f781122c709a2650adf9729187e1e1 Validity Not Before: Jan 2 08:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c8a3ff7ea85cb9c236acdb4c3b31d11a353f13f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:af:2b:bf:72:da:fa:25:ef:03:33:e4:5e:02: 29:22:40:16:a5:1c:23:77:eb:05:b6:09:93:30:dc: 58:71:23:c1:fd:66:ac:1c:12:c7:8d:a5:f2:74:62: 2d:92:33:c1:bd:36:1b:06:e8:38:17:6f:cc:df:3a: 19:24:3b:67:70:41:5a:f6:b8:2a:05:0f:f8:7d:b6: f3:46:e8:73:67:5a:b9:3b:57:f6:bf:2e:df:d8:ed: 96:52:07:ed:97:61:5b:f0:6d:32:67:99:7d:7d:3f: 6b:4f:e7:1d:4f:07:c4:70:af:b3:42:42:5f:10:70: 24:72:c7:0e:f7:ce:78:33:9f:2c:ef:f3:b7:ba:d4: 0d:ec:60:f9:46:cd:77:ea:d0:89:f4:97:d4:c6:50: c0:51:58:6f:45:b5:1d:0f:73:a9:a6:6c:a4:33:ca: fd:61:dc:a0:08:08:6c:b3:f3:56:73:d0:a1:5c:05: 04:94:b8:4d:39:91:ee:64:68:0a:cc:56:05:c4:60: a9:cb:ad:ff:8d:f5:c8:6a:db:0f:9d:77:50:d8:d9: 87:96:40:bc:d7:71:b3:ff:a4:c3:2f:ac:72:7c:b0: 56:30:85:4f:2a:97:c1:6b:f5:6c:41:8f:5c:9e:81: 85:9c:fa:3a:5c:db:9e:f6:35:72:57:da:fd:1a:60: 6b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:8A:3F:F7:EA:85:CB:9C:23:6A:CD:B4:C3:B3:1D:11:A3:53:F1:3F X509v3 Authority Key Identifier: keyid:2C:3B:0A:E5:B7:F7:81:12:2C:70:9A:26:50:AD:F9:72:91:87:E1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/XIo_9-qFy5wjas20w7MdEaNT8T8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:dc80::/33 2a00:dc87:8000::/33 Signature Algorithm: sha256WithRSAEncryption 97:a5:88:ee:f8:ee:52:32:f5:e8:f2:5a:00:ed:46:38:f3:a0: 0a:8d:f5:87:64:f0:3c:e4:81:1d:63:6d:0a:00:99:a2:88:89: 16:d6:4f:be:f3:db:5a:d5:bd:b5:57:5b:f7:e5:41:ce:89:27: e7:eb:85:95:15:3e:14:c1:b3:24:65:3e:d8:b8:0f:03:7a:53: f8:c6:e4:bb:f2:66:8e:62:e5:03:2c:af:0a:ee:a0:d7:04:01: 9e:dc:a5:c3:01:b9:e1:79:fc:a0:d7:82:0b:02:4b:7d:8c:a1: 8c:73:8e:ca:e6:e6:ef:b5:77:5f:7b:e8:40:39:f9:88:1d:00: 45:7c:1e:e1:ce:52:aa:2a:4f:08:2f:08:a4:c6:62:e4:e7:6f: e8:0f:23:5e:b5:ce:1a:a2:cf:2f:e6:9c:16:18:fa:bd:45:05: 64:9c:59:e3:c3:be:56:13:90:d9:14:e4:45:59:0f:3a:44:bc: c9:06:7b:d4:6e:76:62:f1:44:53:53:e5:f7:e5:1b:25:9b:2e: e8:21:2d:a5:a0:dd:ee:d2:5e:80:da:ce:f7:4e:1e:5b:42:1e: ea:8f:63:69:a4:d4:81:83:d0:8d:66:e0:49:bb:d4:7a:6b:c6: 48:02:b6:4a:6f:8a:4b:62:b9:c5:86:1e:41:a7:6c:50:60:20: 3b:10:b8:bb -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgISAZt9y1qPt2JXz6lAuNn6yuo7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjM2IwYWU1YjdmNzgxMTIyYzcwOWEyNjUwYWRmOTcyOTE4 N2UxZTEwHhcNMjYwMTAyMDgyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzhhM2ZmN2VhODVjYjljMjM2YWNkYjRjM2IzMWQxMWEzNTNmMTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqq8rv3La+iXvAzPkXgIpIkAWpRwj d+sFtgmTMNxYcSPB/WasHBLHjaXydGItkjPBvTYbBug4F2/M3zoZJDtncEFa9rgq BQ/4fbbzRuhzZ1q5O1f2vy7f2O2WUgftl2Fb8G0yZ5l9fT9rT+cdTwfEcK+zQkJf EHAkcscO9854M58s7/O3utQN7GD5Rs136tCJ9JfUxlDAUVhvRbUdD3OppmykM8r9 YdygCAhss/NWc9ChXAUElLhNOZHuZGgKzFYFxGCpy63/jfXIatsPnXdQ2NmHlkC8 13Gz/6TDL6xyfLBWMIVPKpfBa/VsQY9cnoGFnPo6XNue9jVyV9r9GmBroQIDAQAB o4ICEzCCAg8wHQYDVR0OBBYEFFyKP/fqhcucI2rNtMOzHRGjU/E/MB8GA1UdIwQY MBaAFCw7CuW394ESLHCaJlCt+XKRh+HhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTERzSzViZjNnUklzY0pvbVVLMzVjcEdINGVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi81M2UyNmItZTdlZS00NzNlLWE1NGEt ZmZjY2EzZTFmMTdmLzEvWElvXzktcUZ5NXdqYXMyMHc3TWRFYU5UOFQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi81M2UyNmItZTdlZS00NzNlLWE1NGEtZmZjY2EzZTFmMTdm LzEvTERzSzViZjNnUklzY0pvbVVLMzVjcEdINGVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwYHKgDcgAAD BgcqANyHgDANBgkqhkiG9w0BAQsFAAOCAQEAl6WI7vjuUjL16PJaAO1GOPOgCo31 h2TwPOSBHWNtCgCZooiJFtZPvvPbWtW9tVdb9+VBzokn5+uFlRU+FMGzJGU+2LgP A3pT+Mbku/JmjmLlAyyvCu6g1wQBntylwwG54Xn8oNeCCwJLfYyhjHOOyubm77V3 X3voQDn5iB0ARXwe4c5SqipPCC8IpMZi5Odv6A8jXrXOGqLPL+acFhj6vUUFZJxZ 48O+VhOQ2RTkRVkPOkS8yQZ71G52YvFEU1Pl9+UbJZsu6CEtpaDd7tJegNrO904e W0Ie6o9jaaTUgYPQjWbgSbvUemvGSAK2Sm+KS2K5xYYeQadsUGAgOxC4uw== -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:45 2026 by rpki-client