This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/XZIT4mz51jD1izsMWrQJwLfXS-8.roa File: XZIT4mz51jD1izsMWrQJwLfXS-8.roa (raw, json) Hash identifier: yiRkLloYeF9h+dnFM7VisVhQsDlbyeKSWeZ2d4FwPG4= Subject key identifier: 5D:92:13:E2:6C:F9:D6:30:F5:8B:3B:0C:5A:B4:09:C0:B7:D7:4B:EF Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B79108F3E1CEC6B337AB91593A3673B1D Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/XZIT4mz51jD1izsMWrQJwLfXS-8.roa Signing time: Thu 01 Jan 2026 10:18:06 +0000 ROA not before: Thu 01 Jan 2026 10:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198699 IP address blocks: 2a12:bec0:320::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:8f:3e:1c:ec:6b:33:7a:b9:15:93:a3:67:3b:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d9213e26cf9d630f58b3b0c5ab409c0b7d74bef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:72:3d:ad:88:7b:d7:7e:c4:8d:94:b3:d4:a4: 2c:d1:2a:27:47:2f:5a:5d:c2:5c:7c:ae:5e:63:24: f4:63:87:83:b9:0f:cd:06:53:49:db:8a:d1:7f:9d: 4f:d3:a0:01:0f:6e:56:4f:92:3d:54:05:cc:22:d9: 8a:1b:00:5e:f5:d2:6c:ea:f3:60:7c:41:d1:de:41: 18:60:1f:05:b1:be:c9:c2:a5:bb:3a:9a:70:ce:44: 63:32:23:55:ed:e3:b2:bc:de:e0:52:98:fa:2f:cb: 82:99:8e:5c:64:52:cb:3e:a2:4c:be:6f:dc:80:e9: dc:74:25:e2:b5:27:88:50:d4:3c:4e:66:85:87:19: 8c:11:5e:24:fe:16:a0:35:2f:36:82:99:26:9a:12: b1:b6:8f:4a:9d:fe:10:8f:79:5c:6b:e8:25:db:ee: 14:ed:f6:94:53:90:7d:d2:ec:f8:75:b7:b5:28:eb: c1:1d:da:ee:72:cb:4c:13:0c:65:47:e0:0f:87:5d: b4:b9:2a:65:29:58:bb:6e:99:cc:b2:2b:6e:f2:69: 26:42:7c:93:6d:4f:75:f3:a5:f8:2e:75:d9:e3:c3: 5d:f3:78:c9:97:57:3f:7a:75:fc:e6:98:cf:51:a0: 85:80:5e:72:1f:69:be:68:1c:17:9b:30:13:3f:b7: 59:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:92:13:E2:6C:F9:D6:30:F5:8B:3B:0C:5A:B4:09:C0:B7:D7:4B:EF X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/XZIT4mz51jD1izsMWrQJwLfXS-8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec0:320::/44 Signature Algorithm: sha256WithRSAEncryption 30:a4:c6:4e:49:7e:f9:5c:d1:c7:5a:0a:d2:d7:15:06:68:37: 03:8b:91:70:1c:e5:63:ec:b0:7c:f7:dd:4d:aa:e8:b1:8c:2e: cf:ac:14:af:81:39:24:f5:d5:18:fe:f5:3e:a5:3f:d0:49:4a: 8e:7d:99:c7:3a:de:7e:87:0a:bd:32:6e:cd:ba:5d:0a:49:00: 2f:82:71:16:5a:89:c2:b5:bb:a4:cd:63:15:55:e7:b5:06:4e: b6:4c:e1:c6:b2:7e:36:ed:06:ff:1b:72:9e:d5:d8:c1:f0:c3: 72:14:f2:dd:af:58:db:51:7b:c2:97:ab:d8:84:ce:ce:0b:a3: 7e:d7:9b:b5:d1:18:75:05:14:0a:f7:76:11:b6:6d:18:9e:72: 26:02:bc:d0:43:53:31:c9:fc:23:8a:d1:09:b9:bf:ba:d7:5f: d0:f0:7c:d7:a2:c3:a5:7a:af:e6:eb:e5:9a:60:70:44:6f:6a: 14:bb:7d:00:37:d1:8c:5d:ca:26:6d:85:e8:71:c5:85:42:d1: 9f:b7:d0:1e:ec:6b:7a:77:74:27:62:4a:22:72:52:75:37:6e: 49:62:9a:41:9a:6e:55:77:9a:4d:b3:ec:64:26:15:31:2d:98: a5:c0:d0:10:80:45:42:4b:7f:c8:11:f8:f9:df:e2:01:d5:cd: 20:17:ae:7d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EI8+HOxrM3q5FZOjZzsdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDkyMTNlMjZjZjlkNjMwZjU4YjNiMGM1YWI0MDljMGI3ZDc0YmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3I9rYh7137EjZSz1KQs0SonRy9a XcJcfK5eYyT0Y4eDuQ/NBlNJ24rRf51P06ABD25WT5I9VAXMItmKGwBe9dJs6vNg fEHR3kEYYB8Fsb7JwqW7OppwzkRjMiNV7eOyvN7gUpj6L8uCmY5cZFLLPqJMvm/c gOncdCXitSeIUNQ8TmaFhxmMEV4k/hagNS82gpkmmhKxto9Knf4Qj3lca+gl2+4U 7faUU5B90uz4dbe1KOvBHdrucstMEwxlR+APh120uSplKVi7bpnMsitu8mkmQnyT bU9186X4LnXZ48Nd83jJl1c/enX85pjPUaCFgF5yH2m+aBwXmzATP7dZxwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFF2SE+Js+dYw9Ys7DFq0CcC310vvMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvWFpJVDRtejUxakQxaXpzTVdyUUp3TGZYUy04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+wAMg MA0GCSqGSIb3DQEBCwUAA4IBAQAwpMZOSX75XNHHWgrS1xUGaDcDi5FwHOVj7LB8 991NquixjC7PrBSvgTkk9dUY/vU+pT/QSUqOfZnHOt5+hwq9Mm7Nul0KSQAvgnEW WonCtbukzWMVVee1Bk62TOHGsn427Qb/G3Ke1djB8MNyFPLdr1jbUXvCl6vYhM7O C6N+15u10Rh1BRQK93YRtm0YnnImArzQQ1MxyfwjitEJub+611/Q8HzXosOleq/m 6+WaYHBEb2oUu30AN9GMXcombYXoccWFQtGft9Ae7Gt6d3QnYkoiclJ1N25JYppB mm5Vd5pNs+xkJhUxLZilwNAQgEVCS3/IEfj53+IB1c0gF659 -----END CERTIFICATE-----Generated at Tue Jan 20 02:49:03 2026 by rpki-client