This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/XYRNb8RlbC5Pb0RNv6tIdYCJyR8.roa File: XYRNb8RlbC5Pb0RNv6tIdYCJyR8.roa (raw, json) Hash identifier: hMQFHe1mXrmhdj1oTi5j+sQ3nN266FTWORcZtmzfB1g= Subject key identifier: 5D:84:4D:6F:C4:65:6C:2E:4F:6F:44:4D:BF:AB:48:75:80:89:C9:1F Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EC045719B653FFFE813BF9568C712 Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/XYRNb8RlbC5Pb0RNv6tIdYCJyR8.roa Signing time: Thu 01 Jan 2026 12:18:28 +0000 ROA not before: Thu 01 Jan 2026 12:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215007 IP address blocks: 2a0e:aa07:e1a0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c0:45:71:9b:65:3f:ff:e8:13:bf:95:68:c7:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d844d6fc4656c2e4f6f444dbfab48758089c91f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:cd:74:e4:27:b0:12:40:a6:b8:08:c7:59:38: e0:ce:51:b9:48:f0:6a:f8:f2:aa:6d:e7:15:17:93: 40:16:45:d6:93:47:36:0d:de:0e:45:cc:94:a8:37: 15:c4:05:9e:f5:b3:2a:98:05:7e:5a:6f:f6:12:f1: 08:59:90:62:58:42:88:97:45:cf:ef:ea:9f:2d:ff: 44:f2:11:0b:8c:0a:7a:24:4e:6e:de:13:e2:1c:39: fc:99:09:e3:4a:2c:cd:4f:4e:61:a7:b8:a7:3a:c8: ba:7e:89:2f:6f:c3:38:b5:36:43:4e:fc:d6:f8:9e: 4d:81:18:b2:5b:75:c6:ac:69:8c:2a:93:a7:41:16: 21:92:c1:6e:2e:d8:fb:38:c1:14:87:69:3e:b8:92: 2b:02:d8:68:2c:46:26:de:a0:3e:dd:46:27:a0:1c: 30:9d:76:bf:ba:fe:b7:3d:de:63:05:25:6e:02:63: 99:44:fc:77:c5:09:f7:dd:77:ce:d9:95:59:9c:dc: b9:0c:ed:d0:d6:27:ab:55:96:b7:c1:51:b5:d1:0a: cf:c1:16:7b:8f:1a:2a:22:34:04:82:27:bd:ff:23: 25:fd:78:70:0d:05:86:03:fe:dd:2f:db:59:51:86: b3:ca:5a:b6:ca:75:9b:9f:c4:70:67:f5:ff:f4:b0: 96:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:84:4D:6F:C4:65:6C:2E:4F:6F:44:4D:BF:AB:48:75:80:89:C9:1F X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/XYRNb8RlbC5Pb0RNv6tIdYCJyR8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa07:e1a0::/44 Signature Algorithm: sha256WithRSAEncryption 07:49:ae:58:3f:ed:25:31:e6:92:56:b9:07:9b:77:60:ed:d5: fd:1f:08:ca:0c:15:9f:7c:62:3b:17:9c:84:10:b9:43:1d:73: d7:40:11:4e:e7:d4:92:ed:94:e7:39:14:c6:c2:91:d0:e6:aa: 92:69:4f:05:04:ba:7e:f3:2c:ff:65:d2:28:cd:1e:fe:bf:2c: 08:c6:32:ec:c6:ad:bd:65:f7:e6:8e:f7:a5:ee:62:bf:17:bf: ad:e6:8c:ca:2e:49:e1:4b:0a:7b:9a:1c:e1:bf:1c:47:d6:18: 17:13:0d:c8:07:89:4e:7d:19:6a:fd:fc:d8:2e:54:b4:82:cd: 23:30:0a:81:f8:06:9d:d3:6e:6b:37:d5:a2:c9:91:e9:5a:4c: 7c:ee:86:ec:16:6b:78:16:d3:a9:f3:20:14:d7:96:a7:b4:ad: f7:16:77:f1:97:46:8f:d5:a0:8f:89:90:42:3d:10:0a:35:a2: 77:d4:cc:58:20:f1:38:c4:53:9f:8e:28:35:34:9b:20:28:c9: e9:06:75:98:48:1b:a1:ca:84:a1:68:02:51:b6:ee:05:2a:a9: 1a:10:9e:37:52:b0:94:46:f0:25:9a:05:0d:69:e4:77:ed:66: 68:41:2f:42:b2:ff:14:f5:a0:1f:26:04:d8:c3:ab:75:61:f7: dc:1b:d0:59 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fsBFcZtlP//oE7+VaMcSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDg0NGQ2ZmM0NjU2YzJlNGY2ZjQ0NGRiZmFiNDg3NTgwODljOTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6s105CewEkCmuAjHWTjgzlG5SPBq +PKqbecVF5NAFkXWk0c2Dd4ORcyUqDcVxAWe9bMqmAV+Wm/2EvEIWZBiWEKIl0XP 7+qfLf9E8hELjAp6JE5u3hPiHDn8mQnjSizNT05hp7inOsi6fokvb8M4tTZDTvzW +J5NgRiyW3XGrGmMKpOnQRYhksFuLtj7OMEUh2k+uJIrAthoLEYm3qA+3UYnoBww nXa/uv63Pd5jBSVuAmOZRPx3xQn33XfO2ZVZnNy5DO3Q1ierVZa3wVG10QrPwRZ7 jxoqIjQEgie9/yMl/XhwDQWGA/7dL9tZUYazylq2ynWbn8RwZ/X/9LCWMwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFF2ETW/EZWwuT29ETb+rSHWAickfMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvWFlSTmI4UmxiQzVQYjBSTnY2dElkWUNKeVI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6qB+Gg MA0GCSqGSIb3DQEBCwUAA4IBAQAHSa5YP+0lMeaSVrkHm3dg7dX9HwjKDBWffGI7 F5yEELlDHXPXQBFO59SS7ZTnORTGwpHQ5qqSaU8FBLp+8yz/ZdIozR7+vywIxjLs xq29Zffmjvel7mK/F7+t5ozKLknhSwp7mhzhvxxH1hgXEw3IB4lOfRlq/fzYLlS0 gs0jMAqB+Aad025rN9WiyZHpWkx87obsFmt4FtOp8yAU15antK33Fnfxl0aP1aCP iZBCPRAKNaJ31MxYIPE4xFOfjig1NJsgKMnpBnWYSBuhyoShaAJRtu4FKqkaEJ43 UrCURvAlmgUNaeR37WZoQS9Csv8U9aAfJgTYw6t1YffcG9BZ -----END CERTIFICATE-----Generated at Tue Jan 6 21:31:20 2026 by rpki-client