This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/xWgeHrBabwKC9j1gFQF6dyTiLmU.roa File: xWgeHrBabwKC9j1gFQF6dyTiLmU.roa (raw, json) Hash identifier: GOhrNNl8E/mCzBOUxg5ss/ENFD2Oh/jd2wDEDsDxkbY= Subject key identifier: C5:68:1E:1E:B0:5A:6F:02:82:F6:3D:60:15:01:7A:77:24:E2:2E:65 Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B7910AC017850E5B0C94FC906844740C0 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/xWgeHrBabwKC9j1gFQF6dyTiLmU.roa Signing time: Thu 01 Jan 2026 10:18:14 +0000 ROA not before: Thu 01 Jan 2026 10:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213535 IP address blocks: 2a12:bec4:1560::/44 maxlen: 44 2a12:bec4:16f0::/44 maxlen: 44 2a12:bec4:1910::/44 maxlen: 44 2a12:bec4:1ab0::/44 maxlen: 44 2a12:bec4:1b10::/44 maxlen: 44 2a12:bec4:1b70::/44 maxlen: 44 2a12:bec4:1be0::/48 maxlen: 48 2a12:bec4:1c00::/44 maxlen: 48 2a12:bec4:1cb0::/44 maxlen: 44 2a12:bec4:1d40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:ac:01:78:50:e5:b0:c9:4f:c9:06:84:47:40:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5681e1eb05a6f0282f63d6015017a7724e22e65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:04:e5:f0:04:c4:30:b0:b1:b6:bb:2f:58:0c: ad:28:81:0e:b6:f6:4c:4e:bc:a9:b2:23:d5:cf:aa: 0c:f7:57:32:33:62:e3:9b:b4:ed:7f:2d:ec:30:41: 47:d7:53:9b:c5:34:1c:56:e2:bd:91:dc:51:18:0f: 71:ec:21:08:47:db:06:c6:ec:af:1e:e1:dd:b6:ef: 2d:38:8e:97:2c:39:c1:ea:b4:35:8a:e4:6e:1f:66: 89:34:97:05:6d:47:67:93:75:69:6f:24:b0:c1:5d: 70:6e:b2:87:bd:30:72:9f:01:73:31:6f:8a:36:ba: 36:58:5c:aa:a0:3d:1c:df:5e:81:33:bf:99:cc:51: 53:1d:71:56:3a:e9:26:2c:0d:9b:f7:0d:7f:7a:46: d8:de:4e:38:52:43:19:53:dc:ff:9f:26:0b:f5:ed: 1d:c5:4e:59:4b:96:e9:77:0c:0f:fe:b0:e6:ab:7e: 4e:cd:0b:2d:af:fb:06:35:2b:f2:d3:40:ff:88:f3: 4b:ae:e2:8f:6e:c3:9b:8f:74:ec:25:f6:6b:e2:2c: 4d:07:15:57:c6:dd:50:66:5e:bd:50:26:a1:55:ac: f1:c0:d1:2e:10:f1:57:37:35:b8:c2:80:d7:31:dd: c2:4b:92:30:ec:1a:9d:e9:80:93:85:9b:a0:93:19: 2a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:68:1E:1E:B0:5A:6F:02:82:F6:3D:60:15:01:7A:77:24:E2:2E:65 X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/xWgeHrBabwKC9j1gFQF6dyTiLmU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec4:1560::/44 2a12:bec4:16f0::/44 2a12:bec4:1910::/44 2a12:bec4:1ab0::/44 2a12:bec4:1b10::/44 2a12:bec4:1b70::/44 2a12:bec4:1be0::/48 2a12:bec4:1c00::/44 2a12:bec4:1cb0::/44 2a12:bec4:1d40::/48 Signature Algorithm: sha256WithRSAEncryption a3:f3:06:15:94:b9:0b:37:12:a9:58:f9:a3:b4:bc:f7:c5:40: c4:44:ca:e8:4f:a9:98:e1:bd:ea:bc:ac:29:7c:ab:72:fa:42: 69:40:7f:e6:64:09:14:32:fd:0f:92:9a:e3:f8:2f:8a:77:b8: a6:79:23:f1:71:26:ae:25:82:5e:25:b9:59:31:e1:14:fa:a3: 1d:04:ff:d7:b8:c2:89:ef:d0:2e:af:64:58:dd:77:0c:b2:17: 49:e2:70:e4:9e:59:98:e1:97:f5:84:99:f9:b6:42:e0:cb:c2: bf:59:98:13:84:ab:37:39:7a:74:46:42:8c:44:af:ec:6c:b3: de:5d:f5:70:fe:da:c4:2a:c8:5a:b9:92:e2:79:58:1c:e2:40: f4:7b:b3:5f:80:84:9b:6d:5e:78:da:54:25:36:5e:5e:22:14: 44:84:38:09:8b:49:b3:49:b8:1f:14:b1:42:5a:76:19:b1:9e: 89:57:81:e2:20:98:87:a0:66:d6:ae:94:17:79:52:4a:a4:a0: 75:24:ae:8a:d9:ad:1d:c5:65:1b:64:ba:24:db:ce:07:08:6b: 45:0e:cc:dd:e2:61:eb:d6:2a:f5:13:7f:43:72:1e:b6:4e:cb: 57:71:e3:f1:ee:47:6a:47:eb:7f:6b:93:89:62:02:c0:a1:58: de:ab:b9:f0 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgISAZt5EKwBeFDlsMlPyQaER0DAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTY4MWUxZWIwNWE2ZjAyODJmNjNkNjAxNTAxN2E3NzI0ZTIyZTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwTl8ATEMLCxtrsvWAytKIEOtvZM TrypsiPVz6oM91cyM2Ljm7Ttfy3sMEFH11ObxTQcVuK9kdxRGA9x7CEIR9sGxuyv HuHdtu8tOI6XLDnB6rQ1iuRuH2aJNJcFbUdnk3VpbySwwV1wbrKHvTBynwFzMW+K Nro2WFyqoD0c316BM7+ZzFFTHXFWOukmLA2b9w1/ekbY3k44UkMZU9z/nyYL9e0d xU5ZS5bpdwwP/rDmq35OzQstr/sGNSvy00D/iPNLruKPbsObj3TsJfZr4ixNBxVX xt1QZl69UCahVazxwNEuEPFXNzW4woDXMd3CS5Iw7Bqd6YCThZugkxkqjwIDAQAB o4ICXTCCAlkwHQYDVR0OBBYEFMVoHh6wWm8CgvY9YBUBenck4i5lMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEveFdnZUhyQmFid0tDOWoxZ0ZRRjZkeVRpTG1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAAjBaAwcEKhK+xBVg AwcEKhK+xBbwAwcEKhK+xBkQAwcEKhK+xBqwAwcEKhK+xBsQAwcEKhK+xBtwAwcA KhK+xBvgAwcEKhK+xBwAAwcEKhK+xBywAwcAKhK+xB1AMA0GCSqGSIb3DQEBCwUA A4IBAQCj8wYVlLkLNxKpWPmjtLz3xUDERMroT6mY4b3qvKwpfKty+kJpQH/mZAkU Mv0Pkprj+C+Kd7imeSPxcSauJYJeJblZMeEU+qMdBP/XuMKJ79Aur2RY3XcMshdJ 4nDknlmY4Zf1hJn5tkLgy8K/WZgThKs3OXp0RkKMRK/sbLPeXfVw/trEKshauZLi eVgc4kD0e7NfgISbbV542lQlNl5eIhREhDgJi0mzSbgfFLFCWnYZsZ6JV4HiIJiH oGbWrpQXeVJKpKB1JK6K2a0dxWUbZLok284HCGtFDszd4mHr1ir1E39Dch62TstX cePx7kdqR+t/a5OJYgLAoVjeq7nw -----END CERTIFICATE-----Generated at Tue Jan 20 02:49:02 2026 by rpki-client