This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/xCNgymZVUUpM_01GHVD15z6gb2Q.roa File: xCNgymZVUUpM_01GHVD15z6gb2Q.roa (raw, json) Hash identifier: JtRUWqBQj9ZhCiHnc1kOwEu9k1hF/HnbLI0t181N/Ac= Subject key identifier: C4:23:60:CA:66:55:51:4A:4C:FF:4D:46:1D:50:F5:E7:3E:A0:6F:64 Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EB9C1A12B5FB1AFE96C05C314AF12 Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/xCNgymZVUUpM_01GHVD15z6gb2Q.roa Signing time: Thu 01 Jan 2026 12:18:26 +0000 ROA not before: Thu 01 Jan 2026 12:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212705 IP address blocks: 2a0e:aa07:e019::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:b9:c1:a1:2b:5f:b1:af:e9:6c:05:c3:14:af:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c42360ca6655514a4cff4d461d50f5e73ea06f64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:cf:93:cb:f6:9a:e4:9d:d7:3a:d8:0d:fe:c6: bd:93:c9:54:f1:6f:20:11:a6:2c:f8:41:da:f0:e7: 22:2c:af:6a:15:55:99:44:3d:5a:41:da:97:54:31: 00:2d:85:e9:2a:7c:95:b5:1d:58:0e:35:ed:ad:63: 6c:68:dc:80:03:8e:e1:23:5a:80:08:9d:78:38:8d: c6:fe:48:2e:80:fb:fe:b8:4d:d1:c1:a7:87:f2:a5: 3b:b6:93:a1:a9:7c:b7:38:75:ed:05:09:ba:50:d2: aa:a5:3a:b3:d1:c4:7a:94:a8:d3:fe:04:5d:88:da: 25:40:0b:2d:22:09:9c:54:77:df:36:46:2a:29:b1: cd:88:4c:9e:e1:70:72:14:c0:99:b4:e9:ea:c7:94: 08:32:59:94:78:09:72:ae:a8:ff:c2:94:da:a9:dd: 7c:95:04:31:9e:01:20:2b:a6:42:e2:f9:74:fd:d8: ef:53:fa:ad:8e:ff:1e:d8:5d:33:d6:56:a0:95:3c: 27:d2:5f:e2:c0:ba:c1:db:bf:3b:74:c4:df:8b:e4: 8e:dc:3c:c5:f5:5a:68:c6:7f:53:1d:21:0c:c1:25: 36:ba:26:3b:0f:1c:7d:f3:11:f3:24:60:6b:46:3e: 84:45:98:c2:c4:50:d2:4a:d6:e3:bc:f2:e1:b7:28: 52:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:23:60:CA:66:55:51:4A:4C:FF:4D:46:1D:50:F5:E7:3E:A0:6F:64 X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/xCNgymZVUUpM_01GHVD15z6gb2Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa07:e019::/48 Signature Algorithm: sha256WithRSAEncryption bc:e0:c3:0f:fe:74:76:be:18:75:b1:79:2a:0b:d0:21:39:f2: 40:d7:bb:a5:95:4d:ba:06:ae:ff:fb:4b:9b:a7:ce:c5:97:e0: 9b:e4:d2:23:00:3c:68:3e:c6:7d:ca:2a:03:6b:66:ee:6c:b6: b3:06:9c:b0:0f:52:23:0c:6e:67:d2:a4:1d:09:c7:f0:c6:56: 55:6d:23:ee:fb:a8:07:91:5d:70:cd:7b:c6:97:9f:43:ae:32: 4d:5f:4f:43:aa:79:60:48:35:4a:fc:35:85:4a:c6:03:0f:61: ac:fe:fe:8b:d2:5a:03:11:70:0a:84:d4:1b:96:40:13:ad:0a: 90:7b:51:9b:9e:eb:66:f4:17:74:d8:22:2c:1b:6c:b0:f3:67: eb:06:38:53:97:65:3a:b2:9e:c0:97:9a:98:3a:60:fc:fe:2e: 62:2f:58:a2:ed:39:8a:bc:b0:6f:ae:b7:02:d0:98:c9:b3:a8: da:d0:9f:c8:c0:8e:4b:ba:e8:79:f6:7c:9e:63:69:0b:25:73: ff:44:e1:71:a2:61:8a:e9:ee:62:e3:83:1d:d9:cf:5b:e4:b6: 0c:18:c2:07:e5:e1:b7:b1:c4:2d:83:f9:7b:4e:4d:af:de:41: d9:a0:85:c5:d3:27:60:1c:15:c5:ae:3b:54:8c:a0:4b:ab:55: d7:91:8c:22 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5frnBoStfsa/pbAXDFK8SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDIzNjBjYTY2NTU1MTRhNGNmZjRkNDYxZDUwZjVlNzNlYTA2ZjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAic+Ty/aa5J3XOtgN/sa9k8lU8W8g EaYs+EHa8OciLK9qFVWZRD1aQdqXVDEALYXpKnyVtR1YDjXtrWNsaNyAA47hI1qA CJ14OI3G/kgugPv+uE3RwaeH8qU7tpOhqXy3OHXtBQm6UNKqpTqz0cR6lKjT/gRd iNolQAstIgmcVHffNkYqKbHNiEye4XByFMCZtOnqx5QIMlmUeAlyrqj/wpTaqd18 lQQxngEgK6ZC4vl0/djvU/qtjv8e2F0z1laglTwn0l/iwLrB2787dMTfi+SO3DzF 9Vpoxn9THSEMwSU2uiY7Dxx98xHzJGBrRj6ERZjCxFDSStbjvPLhtyhSsQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMQjYMpmVVFKTP9NRh1Q9ec+oG9kMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEveENOZ3ltWlZVVXBNXzAxR0hWRDE1ejZnYjJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6qB+AZ MA0GCSqGSIb3DQEBCwUAA4IBAQC84MMP/nR2vhh1sXkqC9AhOfJA17ullU26Bq7/ +0ubp87Fl+Cb5NIjADxoPsZ9yioDa2bubLazBpywD1IjDG5n0qQdCcfwxlZVbSPu +6gHkV1wzXvGl59DrjJNX09DqnlgSDVK/DWFSsYDD2Gs/v6L0loDEXAKhNQblkAT rQqQe1Gbnutm9Bd02CIsG2yw82frBjhTl2U6sp7Al5qYOmD8/i5iL1ii7TmKvLBv rrcC0JjJs6ja0J/IwI5Luuh59nyeY2kLJXP/ROFxomGK6e5i44Md2c9b5LYMGMIH 5eG3scQtg/l7Tk2v3kHZoIXF0ydgHBXFrjtUjKBLq1XXkYwi -----END CERTIFICATE-----Generated at Tue Jan 6 21:32:10 2026 by rpki-client