This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/xq71p7B5JhzS3WAOwXJUDzUQhDY.roa File: xq71p7B5JhzS3WAOwXJUDzUQhDY.roa (raw, json) Hash identifier: K4qJgsFuVW5+aIjRJoLHaK1iRIJo0BkxMyUqYLBnbro= Subject key identifier: C6:AE:F5:A7:B0:79:26:1C:D2:DD:60:0E:C1:72:54:0F:35:10:84:36 Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Certificate serial: 019B7EA75B56A31723BA5CE862667BF965E0 Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/xq71p7B5JhzS3WAOwXJUDzUQhDY.roa Signing time: Fri 02 Jan 2026 12:20:55 +0000 ROA not before: Fri 02 Jan 2026 12:20:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208340 IP address blocks: 2a06:e881:5608::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:5b:56:a3:17:23:ba:5c:e8:62:66:7b:f9:65:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Validity Not Before: Jan 2 12:20:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6aef5a7b079261cd2dd600ec172540f35108436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8d:6f:97:17:07:79:81:39:93:e6:3b:4d:09: e7:8e:b5:32:0d:d7:fe:9d:2d:71:ab:b0:33:49:ac: d6:6b:9c:6e:5c:fa:de:ab:79:d4:24:9c:03:30:7e: 41:6c:69:c6:3a:32:c5:d7:78:d4:36:eb:d1:2f:d1: f9:ee:c7:9f:95:8b:16:2e:18:d6:22:5e:54:53:b3: 02:78:5b:fb:f1:b8:ec:fb:3a:e0:62:e7:af:6c:8c: 7f:a8:c6:bf:be:b5:b4:3a:d7:e7:80:0c:be:ee:38: 7c:90:c2:da:b9:60:76:c7:57:9c:b0:9d:0d:eb:2c: 28:ed:19:13:97:70:33:59:c3:a8:ed:fd:34:d9:79: 87:d2:36:cc:bf:e0:d3:42:8a:62:b6:27:0c:35:d5: c1:df:e6:e2:a1:8f:97:ba:55:be:25:af:3b:17:99: ec:d8:ae:0b:79:82:62:20:a3:62:79:3d:be:6b:b1: 3f:04:d5:fc:43:ff:1c:38:66:cd:c4:76:ef:69:25: bc:fe:6b:e8:86:3c:8c:5d:a1:36:0f:21:17:fc:2e: b8:c8:4f:77:b6:16:3b:c2:19:13:96:26:5b:67:be: 2f:68:68:4e:66:cf:93:3c:c9:d2:97:23:ee:05:2c: fc:c3:b5:2d:13:00:bc:0a:f4:43:84:73:46:16:c1: 31:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:AE:F5:A7:B0:79:26:1C:D2:DD:60:0E:C1:72:54:0F:35:10:84:36 X509v3 Authority Key Identifier: keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/xq71p7B5JhzS3WAOwXJUDzUQhDY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:e881:5608::/48 Signature Algorithm: sha256WithRSAEncryption 5d:d1:4b:97:37:1b:33:78:82:a6:b9:f7:b4:df:ad:ff:d8:35: 6b:0c:ca:0e:6f:d2:08:e9:af:ba:98:f4:ec:43:76:c4:ed:45: 67:3b:1b:43:94:20:1e:ae:36:b1:8d:a2:5d:87:c3:9c:54:2f: a1:d5:36:07:a6:8a:fe:8f:2b:68:d8:6c:bb:65:f4:89:b0:6f: b3:0e:5b:a7:37:36:34:98:4f:79:95:1c:a6:d2:80:8b:49:33: ea:ed:be:e4:92:a5:33:32:d2:62:36:85:99:9c:ac:33:4e:0b: 74:c3:2f:8a:54:c1:46:49:c4:e3:56:0e:0e:33:56:0a:f0:49: f8:99:bb:76:9f:e2:22:e4:b6:52:aa:dc:96:28:c9:ba:29:48: fb:52:74:aa:7c:39:77:0e:a6:21:38:cf:0f:a1:f5:1a:17:d1: 05:da:b6:f2:0c:f4:23:5f:f7:cb:6c:82:70:70:c2:02:9c:d0: fc:32:f8:ab:31:73:39:2d:4e:e0:80:62:8e:f4:0a:58:4b:d9: 34:e2:3f:67:6f:8a:30:d0:60:4a:a0:67:74:d1:51:c1:48:ed: c2:26:d0:8f:db:ad:90:3d:29:66:25:5d:ac:82:6d:82:3a:e5: 9c:7a:85:f2:4c:5c:23:15:14:cd:9f:54:b3:25:04:2f:7b:b1: de:cc:4c:db -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+p1tWoxcjulzoYmZ7+WXgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl ZDc5NTQwHhcNMjYwMTAyMTIyMDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmFlZjVhN2IwNzkyNjFjZDJkZDYwMGVjMTcyNTQwZjM1MTA4NDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuo1vlxcHeYE5k+Y7TQnnjrUyDdf+ nS1xq7AzSazWa5xuXPreq3nUJJwDMH5BbGnGOjLF13jUNuvRL9H57seflYsWLhjW Il5UU7MCeFv78bjs+zrgYuevbIx/qMa/vrW0OtfngAy+7jh8kMLauWB2x1ecsJ0N 6ywo7RkTl3AzWcOo7f002XmH0jbMv+DTQopiticMNdXB3+bioY+XulW+Ja87F5ns 2K4LeYJiIKNieT2+a7E/BNX8Q/8cOGbNxHbvaSW8/mvohjyMXaE2DyEX/C64yE93 thY7whkTliZbZ74vaGhOZs+TPMnSlyPuBSz8w7UtEwC8CvRDhHNGFsExzwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMau9aeweSYc0t1gDsFyVA81EIQ2MB8GA1UdIwQY MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt M2Q5MWVkZTViMmIxLzEveHE3MXA3QjVKaHpTM1dBT3dYSlVEelVRaERZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgbogVYI MA0GCSqGSIb3DQEBCwUAA4IBAQBd0UuXNxszeIKmufe0363/2DVrDMoOb9II6a+6 mPTsQ3bE7UVnOxtDlCAerjaxjaJdh8OcVC+h1TYHpor+jyto2Gy7ZfSJsG+zDlun NzY0mE95lRym0oCLSTPq7b7kkqUzMtJiNoWZnKwzTgt0wy+KVMFGScTjVg4OM1YK 8En4mbt2n+Ii5LZSqtyWKMm6KUj7UnSqfDl3DqYhOM8PofUaF9EF2rbyDPQjX/fL bIJwcMICnND8MvirMXM5LU7ggGKO9ApYS9k04j9nb4ow0GBKoGd00VHBSO3CJtCP 262QPSlmJV2sgm2COuWceoXyTFwjFRTNn1SzJQQve7HezEzb -----END CERTIFICATE-----Generated at Tue Jan 20 21:16:50 2026 by rpki-client