This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/XVFPYf9VpORhPNyE1bngdeIViS8.roa File: XVFPYf9VpORhPNyE1bngdeIViS8.roa (raw, json) Hash identifier: 6p1PZEYgwWuxiL43uHj1wsjRbjATc/cDsfLlKe5/a8Y= Subject key identifier: 5D:51:4F:61:FF:55:A4:E4:61:3C:DC:84:D5:B9:E0:75:E2:15:89:2F Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Certificate serial: 019B7EA7552CE1CDB7F9B4BA3982300132FE Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/XVFPYf9VpORhPNyE1bngdeIViS8.roa Signing time: Fri 02 Jan 2026 12:20:54 +0000 ROA not before: Fri 02 Jan 2026 12:20:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205634 IP address blocks: 2a0a:79c0:f00::/40 maxlen: 40 2a0a:79c0:f00::/48 maxlen: 48 2a0a:79c0:f01::/48 maxlen: 48 2a0a:79c0:f02::/48 maxlen: 48 2a0a:79c0:f03::/48 maxlen: 48 2a0a:79c0:f04::/46 maxlen: 46 2a0a:79c0:f04::/48 maxlen: 48 2a0a:79c0:f05::/48 maxlen: 48 2a0a:79c0:f06::/48 maxlen: 48 2a0a:79c0:f07::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:55:2c:e1:cd:b7:f9:b4:ba:39:82:30:01:32:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Validity Not Before: Jan 2 12:20:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d514f61ff55a4e4613cdc84d5b9e075e215892f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e4:52:ee:f0:37:4f:b7:2c:85:d9:80:e6:87: 18:c6:e2:a8:8b:3e:ff:78:4b:f4:0b:20:b3:49:be: 22:90:b9:4e:24:89:d1:c7:22:12:83:5b:81:4e:10: 36:11:29:ef:cd:00:e4:6c:ac:d6:ff:01:33:66:f5: b7:32:1e:58:d0:50:78:d5:e7:3f:b4:8c:f9:96:26: 99:67:87:25:78:10:5d:b6:42:ad:50:f7:3a:22:5d: d8:39:fa:3f:cc:29:0f:82:8f:f0:1e:29:5d:21:b3: d9:2a:4c:55:50:7d:37:1c:ea:84:f5:b1:cd:1a:e7: af:da:0f:00:32:0e:9e:f9:3a:51:37:89:fb:d0:00: fd:fd:75:ed:8f:97:f1:f7:d5:2f:d1:ae:e5:d7:db: ff:35:81:e3:1a:e4:04:19:4d:44:44:29:20:e1:e1: 0a:aa:54:07:4c:3b:e6:76:5c:33:29:1b:77:eb:a6: 40:87:78:70:67:b2:df:0e:c6:d7:eb:e0:76:09:b3: f9:a2:3b:5a:6a:0e:cc:e6:ff:5d:f9:b3:04:06:34: ee:bb:9e:6d:1b:9c:35:16:e1:0a:d9:07:ca:e3:2e: 57:21:bf:dd:b7:1d:b6:a8:93:1f:7b:3f:7e:11:d3: e0:02:27:9f:fa:d5:dc:09:d2:2c:b9:7a:bc:1a:20: df:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:51:4F:61:FF:55:A4:E4:61:3C:DC:84:D5:B9:E0:75:E2:15:89:2F X509v3 Authority Key Identifier: keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/XVFPYf9VpORhPNyE1bngdeIViS8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:79c0:f00::/40 Signature Algorithm: sha256WithRSAEncryption 55:7b:31:30:1d:2b:3f:09:ab:02:f0:dc:38:19:fc:ba:2c:69: f5:26:06:77:49:cf:35:05:27:12:7e:ec:06:26:ba:66:3e:59: 8d:9b:12:c6:7a:33:bd:79:31:6b:d5:7e:9b:4f:8f:46:76:0d: d5:60:2d:a5:27:d3:ff:9f:ac:da:ce:01:a1:cb:95:75:47:94: 67:92:86:fe:70:f4:53:41:5d:6a:a1:68:c4:6b:02:20:26:c9: ff:85:8a:da:f1:b1:88:6e:c8:9f:1f:1c:41:f9:ff:c3:bf:16: 61:7b:91:de:1e:17:06:cb:a1:c1:3a:10:07:f6:8c:6c:3e:82: bc:15:a7:03:0e:75:85:63:ec:c9:af:87:5a:d1:ec:cd:0d:9c: b5:a7:cb:1c:4d:23:68:22:94:66:9d:6e:b8:6a:26:64:66:7a: d4:0a:d4:2a:ca:a6:b2:f3:9b:cd:67:cd:c0:cf:f1:a2:87:7b: a9:ba:a0:64:ea:b0:89:e8:69:9b:28:bc:19:43:27:9d:e8:ba: 3a:96:bd:ce:10:fe:26:4d:ed:4d:f3:ba:d6:6d:68:63:3d:b2: 61:66:be:0a:83:18:44:fc:02:d5:9b:b5:47:80:bc:d7:66:1d: cb:72:ec:99:38:a8:2c:c2:e3:cc:b5:65:40:2f:42:78:dc:7a: ee:0d:78:e0 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+p1Us4c23+bS6OYIwATL+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl ZDc5NTQwHhcNMjYwMTAyMTIyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDUxNGY2MWZmNTVhNGU0NjEzY2RjODRkNWI5ZTA3NWUyMTU4OTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreRS7vA3T7cshdmA5ocYxuKoiz7/ eEv0CyCzSb4ikLlOJInRxyISg1uBThA2ESnvzQDkbKzW/wEzZvW3Mh5Y0FB41ec/ tIz5liaZZ4cleBBdtkKtUPc6Il3YOfo/zCkPgo/wHildIbPZKkxVUH03HOqE9bHN Guev2g8AMg6e+TpRN4n70AD9/XXtj5fx99Uv0a7l19v/NYHjGuQEGU1ERCkg4eEK qlQHTDvmdlwzKRt366ZAh3hwZ7LfDsbX6+B2CbP5ojtaag7M5v9d+bMEBjTuu55t G5w1FuEK2QfK4y5XIb/dtx22qJMfez9+EdPgAief+tXcCdIsuXq8GiDfsQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFF1RT2H/VaTkYTzchNW54HXiFYkvMB8GA1UdIwQY MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt M2Q5MWVkZTViMmIxLzEvWFZGUFlmOVZwT1JoUE55RTFibmdkZUlWaVM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgp5wA8w DQYJKoZIhvcNAQELBQADggEBAFV7MTAdKz8JqwLw3DgZ/LosafUmBndJzzUFJxJ+ 7AYmumY+WY2bEsZ6M715MWvVfptPj0Z2DdVgLaUn0/+frNrOAaHLlXVHlGeShv5w 9FNBXWqhaMRrAiAmyf+FitrxsYhuyJ8fHEH5/8O/FmF7kd4eFwbLocE6EAf2jGw+ grwVpwMOdYVj7Mmvh1rR7M0NnLWnyxxNI2gilGadbrhqJmRmetQK1CrKprLzm81n zcDP8aKHe6m6oGTqsInoaZsovBlDJ53oujqWvc4Q/iZN7U3zutZtaGM9smFmvgqD GET8AtWbtUeAvNdmHcty7Jk4qCzC48y1ZUAvQnjceu4NeOA= -----END CERTIFICATE-----Generated at Tue Jan 20 06:03:13 2026 by rpki-client