This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/xFV6naJ395ubjh_EqiAHvE__j48.roa File: xFV6naJ395ubjh_EqiAHvE__j48.roa (raw, json) Hash identifier: dsSN+lLUWUY5SoV96p6VvWfy7nH7ZF5X9LmWDzJivP0= Subject key identifier: C4:55:7A:9D:A2:77:F7:9B:9B:8E:1F:C4:AA:20:07:BC:4F:FF:8F:8F Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1 Certificate serial: 019B7E380CF94FD8F5AECF7D473299DC05B6 Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/xFV6naJ395ubjh_EqiAHvE__j48.roa Signing time: Fri 02 Jan 2026 10:19:21 +0000 ROA not before: Fri 02 Jan 2026 10:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207083 IP address blocks: 2a0a:c3c5:9000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 13:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:0c:f9:4f:d8:f5:ae:cf:7d:47:32:99:dc:05:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1 Validity Not Before: Jan 2 10:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4557a9da277f79b9b8e1fc4aa2007bc4fff8f8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b8:ac:35:97:37:16:72:a2:a9:b5:f2:64:8a: e1:4f:37:31:2d:e7:7e:8d:85:29:44:26:6c:7d:bb: ef:eb:da:65:70:51:f5:27:e8:a6:08:c3:de:df:8d: 74:a5:5b:5a:b4:b5:1e:e0:be:c5:41:38:a0:82:1e: a2:47:aa:69:1c:f7:31:85:f0:bf:a3:29:f3:f2:ed: 1c:97:0e:f4:05:27:88:a8:da:5c:de:5b:a5:f9:ac: cd:f1:4a:51:8f:77:2d:a2:c1:55:10:99:ce:13:93: 29:fe:53:f3:99:e5:f7:f2:2d:b1:bd:38:61:6b:39: dd:c1:fa:c4:40:a1:f9:4b:ea:5e:e5:f8:4b:31:59: 64:d8:7d:f2:01:40:5e:4d:48:3f:a0:9a:3e:44:af: 4f:0b:44:d7:05:17:b4:60:b8:85:25:55:6f:de:c1: 1a:d6:bc:07:8c:c8:8b:6a:15:05:83:51:eb:45:4b: 77:3d:3f:01:be:b4:fc:81:8b:d5:e1:55:45:8c:7b: 35:03:a6:81:a7:92:a2:c3:04:85:98:0d:f2:a1:15: a0:75:8c:3f:ba:84:fd:5d:a5:f7:87:b5:b5:32:b5: f9:85:22:f2:4d:25:bc:51:3e:1a:f8:7c:9a:f4:61: 07:2a:52:6d:73:7f:44:0f:8a:71:91:59:c5:36:c6: 9e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:55:7A:9D:A2:77:F7:9B:9B:8E:1F:C4:AA:20:07:BC:4F:FF:8F:8F X509v3 Authority Key Identifier: keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/xFV6naJ395ubjh_EqiAHvE__j48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:c3c5:9000::/36 Signature Algorithm: sha256WithRSAEncryption 92:f1:37:a0:91:16:38:bd:75:e8:3f:a5:3b:ec:50:d5:7f:e7: 18:d9:c7:e2:d4:1a:83:8e:19:03:3d:a2:c9:ea:c3:1d:cf:5b: a0:bb:0f:88:c1:80:0c:d0:69:17:ff:22:00:c3:b8:24:87:2d: a6:33:0a:52:86:3a:fb:bf:ad:de:18:66:2e:06:b1:5d:c2:30: 27:c6:a7:9b:e3:c7:73:2b:87:5e:a3:14:39:5c:3b:bf:17:07: 2f:7c:59:65:22:32:49:72:1a:04:d8:15:02:b9:28:dd:4d:7a: 00:4b:08:21:8d:42:d2:73:4c:90:55:22:34:df:08:74:1e:dd: a3:ca:87:a5:27:ca:66:60:42:e1:35:f8:0f:6c:b0:de:a4:80: cb:0a:3e:be:fa:29:db:6a:a9:14:f3:12:e5:42:de:8c:2e:3b: 59:f6:98:14:5a:f0:61:8e:74:6b:0e:81:b0:f0:c1:fa:73:5d: 7d:11:7e:e5:a3:d7:8c:0c:07:d2:8b:97:4f:89:f7:32:48:87: 92:ed:fd:e6:8b:d0:0d:f7:07:7d:69:0b:9b:a9:ed:17:80:ed: b5:5b:27:01:cd:b2:19:a6:bf:77:b1:05:de:c7:f6:26:e2:a4: 54:56:5c:46:04:b6:0a:93:df:a5:6d:94:f3:89:82:70:fe:ee: bd:f6:70:ad -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+OAz5T9j1rs99RzKZ3AW2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTllYzJhNWZkNTM5MDljNTIzOWY0Y2M4ZDZkMzI5YTI3 NzliYjEwHhcNMjYwMTAyMTAxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDU1N2E5ZGEyNzdmNzliOWI4ZTFmYzRhYTIwMDdiYzRmZmY4ZjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLisNZc3FnKiqbXyZIrhTzcxLed+ jYUpRCZsfbvv69plcFH1J+imCMPe3410pVtatLUe4L7FQTiggh6iR6ppHPcxhfC/ oynz8u0clw70BSeIqNpc3lul+azN8UpRj3ctosFVEJnOE5Mp/lPzmeX38i2xvThh azndwfrEQKH5S+pe5fhLMVlk2H3yAUBeTUg/oJo+RK9PC0TXBRe0YLiFJVVv3sEa 1rwHjMiLahUFg1HrRUt3PT8BvrT8gYvV4VVFjHs1A6aBp5KiwwSFmA3yoRWgdYw/ uoT9XaX3h7W1MrX5hSLyTSW8UT4a+Hya9GEHKlJtc39ED4pxkVnFNsaeDQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFMRVep2id/ebm44fxKogB7xP/4+PMB8GA1UdIwQY MBaAFERZ7Cpf1TkJxSOfTMjW0ymid5uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTkt NmI0MzcyNjAyMDk2LzEveEZWNm5hSjM5NXViamhfRXFpQUh2RV9fajQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTktNmI0MzcyNjAyMDk2 LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgrDxZAw DQYJKoZIhvcNAQELBQADggEBAJLxN6CRFji9deg/pTvsUNV/5xjZx+LUGoOOGQM9 osnqwx3PW6C7D4jBgAzQaRf/IgDDuCSHLaYzClKGOvu/rd4YZi4GsV3CMCfGp5vj x3Mrh16jFDlcO78XBy98WWUiMklyGgTYFQK5KN1NegBLCCGNQtJzTJBVIjTfCHQe 3aPKh6UnymZgQuE1+A9ssN6kgMsKPr76KdtqqRTzEuVC3owuO1n2mBRa8GGOdGsO gbDwwfpzXX0RfuWj14wMB9KLl0+J9zJIh5Lt/eaL0A33B31pC5up7ReA7bVbJwHN shmmv3exBd7H9ibipFRWXEYEtgqT36VtlPOJgnD+7r32cK0= -----END CERTIFICATE-----Generated at Tue Jan 20 17:19:12 2026 by rpki-client