This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/xT5fDO0Cv_aQByArGbDGjigd_jI.roa File: xT5fDO0Cv_aQByArGbDGjigd_jI.roa (raw, json) Hash identifier: Xhmyi95iJcM4YdZQa7mRk6VSa9PBHCFE7QUUL5ySwJM= Subject key identifier: C5:3E:5F:0C:ED:02:BF:F6:90:07:20:2B:19:B0:C6:8E:28:1D:FE:32 Certificate issuer: /CN=7b11318d4bdd3ec5943386e701d7d02bd68300ad Certificate serial: 019B7F811A48151131894D6ECD91B63F099A Authority key identifier: 7B:11:31:8D:4B:DD:3E:C5:94:33:86:E7:01:D7:D0:2B:D6:83:00:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exExjUvdPsWUM4bnAdfQK9aDAK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/xT5fDO0Cv_aQByArGbDGjigd_jI.roa Signing time: Fri 02 Jan 2026 16:18:45 +0000 ROA not before: Fri 02 Jan 2026 16:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136501 IP address blocks: 2a14:60c7:8100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.crl rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft rsync://rpki.ripe.net/repository/DEFAULT/exExjUvdPsWUM4bnAdfQK9aDAK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:1a:48:15:11:31:89:4d:6e:cd:91:b6:3f:09:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b11318d4bdd3ec5943386e701d7d02bd68300ad Validity Not Before: Jan 2 16:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c53e5f0ced02bff69007202b19b0c68e281dfe32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:7f:41:37:62:0c:08:fb:ba:2b:30:e6:3f:ca: ff:2b:c9:ba:2d:03:ae:d9:34:1b:d5:15:52:40:a4: 14:cf:79:d4:ba:80:b4:cb:bf:02:04:44:e1:21:23: 0d:63:fd:94:ff:94:1c:37:29:dd:11:8a:3f:6c:35: 7a:85:50:9b:74:c3:af:76:50:4a:5a:cc:9e:d6:63: 23:25:58:c6:14:55:21:5d:53:d0:dc:d6:6c:a9:3c: 7c:a1:78:d8:f3:97:c4:f3:a4:93:10:20:a3:f5:21: 21:7a:de:05:b0:40:e5:11:02:04:c8:f6:99:72:cd: 2e:43:f7:76:ca:a6:8e:9a:59:f6:17:a5:cb:33:66: d1:79:c1:0c:61:7c:76:e8:a6:35:d7:fb:84:67:9d: a4:67:fc:93:5f:f7:e0:dd:70:30:11:a9:29:7f:20: a4:b9:fd:93:16:e5:74:17:b0:0c:fe:df:26:7e:6d: 63:24:2c:5c:1f:06:6e:2b:76:71:90:61:8e:f0:19: 7e:97:65:c5:77:da:bc:fa:ce:ba:85:61:4d:f9:50: 89:90:55:51:40:14:a1:36:5d:77:8c:e9:97:3a:ca: 38:2e:cd:3a:aa:3b:a2:6e:ad:c3:ed:ed:2c:d2:4a: 6e:f9:45:92:83:06:50:89:43:00:a3:55:56:c9:42: a0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:3E:5F:0C:ED:02:BF:F6:90:07:20:2B:19:B0:C6:8E:28:1D:FE:32 X509v3 Authority Key Identifier: keyid:7B:11:31:8D:4B:DD:3E:C5:94:33:86:E7:01:D7:D0:2B:D6:83:00:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exExjUvdPsWUM4bnAdfQK9aDAK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/xT5fDO0Cv_aQByArGbDGjigd_jI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:60c7:8100::/48 Signature Algorithm: sha256WithRSAEncryption 1f:bb:05:5b:50:7e:b3:1f:05:34:93:29:65:75:44:13:d5:13: ad:4a:e7:e1:b1:71:01:48:23:09:3f:83:d3:22:3b:93:0c:b7: 5d:62:1d:ea:47:ed:40:2a:75:31:fd:3b:46:1f:4a:2e:bc:9a: 63:83:f1:ea:34:dc:37:dc:0e:9e:35:bd:6e:01:bc:3c:b5:93: a8:ff:aa:ec:56:18:93:64:ee:55:bd:a1:0d:8d:f0:28:42:91: 96:25:86:05:ec:18:8e:a2:d2:23:f5:4c:3a:25:7a:5e:47:d9: 58:76:e5:cc:45:42:6d:e6:f3:5a:64:48:7f:6a:04:12:36:10: cc:04:a8:7f:77:28:38:b7:eb:ee:89:eb:03:96:3e:42:bf:f3: 7b:c7:d6:d1:eb:8c:d4:bc:8c:9d:07:0f:9f:74:c2:54:d4:d7: 5a:10:34:27:56:91:b2:67:25:82:47:7c:1d:e0:74:16:65:1d: aa:27:5f:8d:8c:e1:91:f6:dc:d9:95:52:71:74:79:b3:2c:05: ea:a1:76:bb:cb:52:a4:68:9c:d8:2b:53:d0:1c:e7:31:11:db: 9a:10:a7:8b:46:5e:ce:f9:36:b1:dd:21:6d:b0:50:a4:e2:f8: b7:41:4e:0d:2d:e5:1e:06:54:d6:6f:08:39:8b:b1:ec:94:92: cf:02:b9:2d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/gRpIFRExiU1uzZG2PwmaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMTEzMThkNGJkZDNlYzU5NDMzODZlNzAxZDdkMDJiZDY4 MzAwYWQwHhcNMjYwMTAyMTYxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTNlNWYwY2VkMDJiZmY2OTAwNzIwMmIxOWIwYzY4ZTI4MWRmZTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjX9BN2IMCPu6KzDmP8r/K8m6LQOu 2TQb1RVSQKQUz3nUuoC0y78CBEThISMNY/2U/5QcNyndEYo/bDV6hVCbdMOvdlBK Wsye1mMjJVjGFFUhXVPQ3NZsqTx8oXjY85fE86STECCj9SEhet4FsEDlEQIEyPaZ cs0uQ/d2yqaOmln2F6XLM2bRecEMYXx26KY11/uEZ52kZ/yTX/fg3XAwEakpfyCk uf2TFuV0F7AM/t8mfm1jJCxcHwZuK3ZxkGGO8Bl+l2XFd9q8+s66hWFN+VCJkFVR QBShNl13jOmXOso4Ls06qjuibq3D7e0s0kpu+UWSgwZQiUMAo1VWyUKgRQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMU+XwztAr/2kAcgKxmwxo4oHf4yMB8GA1UdIwQY MBaAFHsRMY1L3T7FlDOG5wHX0CvWgwCtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXhFeGpVdmRQc1dVTTRibkFkZlFLOWFEQUswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9jOWMzNzAtNzEyMy00MDgxLWI5NTYt ODhlYzU3OWY4OGNhLzEveFQ1ZkRPMEN2X2FRQnlBckdiREdqaWdkX2pJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni9jOWMzNzAtNzEyMy00MDgxLWI5NTYtODhlYzU3OWY4OGNh LzEvZXhFeGpVdmRQc1dVTTRibkFkZlFLOWFEQUswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhRgx4EA MA0GCSqGSIb3DQEBCwUAA4IBAQAfuwVbUH6zHwU0kylldUQT1ROtSufhsXEBSCMJ P4PTIjuTDLddYh3qR+1AKnUx/TtGH0ouvJpjg/HqNNw33A6eNb1uAbw8tZOo/6rs VhiTZO5VvaENjfAoQpGWJYYF7BiOotIj9Uw6JXpeR9lYduXMRUJt5vNaZEh/agQS NhDMBKh/dyg4t+vuiesDlj5Cv/N7x9bR64zUvIydBw+fdMJU1NdaEDQnVpGyZyWC R3wd4HQWZR2qJ1+NjOGR9tzZlVJxdHmzLAXqoXa7y1KkaJzYK1PQHOcxEduaEKeL Rl7O+Tax3SFtsFCk4vi3QU4NLeUeBlTWbwg5i7HslJLPArkt -----END CERTIFICATE-----Generated at Sun Jan 25 06:37:04 2026 by rpki-client