This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/xSm2GKIgX-TmmwbUisQJTzmDs1I.roa File: xSm2GKIgX-TmmwbUisQJTzmDs1I.roa (raw, json) Hash identifier: j3pUj/jhxDiPVEhKH0jvS5PVLx5Hu8suAOO9hIjMPQQ= Subject key identifier: C5:29:B6:18:A2:20:5F:E4:E6:9B:06:D4:8A:C4:09:4F:39:83:B3:52 Certificate issuer: /CN=599a740f4bc30a2c04cdcb3344af0d6a2d05a481 Certificate serial: 019B7910586FEAD4E3C87AEEE3D7CC98B5C0 Authority key identifier: 59:9A:74:0F:4B:C3:0A:2C:04:CD:CB:33:44:AF:0D:6A:2D:05:A4:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/xSm2GKIgX-TmmwbUisQJTzmDs1I.roa Signing time: Thu 01 Jan 2026 10:17:52 +0000 ROA not before: Thu 01 Jan 2026 10:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57295 IP address blocks: 2001:67c:2ba8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:58:6f:ea:d4:e3:c8:7a:ee:e3:d7:cc:98:b5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=599a740f4bc30a2c04cdcb3344af0d6a2d05a481 Validity Not Before: Jan 1 10:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c529b618a2205fe4e69b06d48ac4094f3983b352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:40:73:05:ce:15:19:f8:2b:5e:40:26:8f:b4: e4:a8:f1:23:ad:37:b2:6e:3a:49:3f:ea:ef:ad:20: 27:4f:d2:73:f0:aa:83:4f:2f:b3:fe:10:97:f4:b9: 85:87:19:4f:9a:44:e1:97:6a:d4:83:6f:07:6e:21: 01:80:be:f2:0a:2e:f1:ed:a6:9f:10:9d:17:67:86: 7a:96:47:dc:87:db:8b:5c:a1:45:7e:4b:f1:b4:4c: a1:63:ae:3a:f0:2f:56:95:a1:bb:e5:9b:95:44:bb: 01:d7:0f:78:fc:6a:3c:42:d0:6b:06:c7:71:aa:fd: 3e:80:b4:16:55:46:fe:a2:cb:d2:31:15:f9:13:ea: 13:c8:cb:15:06:f7:89:fa:8d:78:5e:a9:d4:30:83: 88:7f:d3:c2:e1:2c:fa:3f:f1:ac:df:c7:e3:32:02: c0:e6:8d:15:90:8c:a1:31:e6:55:82:31:47:57:01: d4:d7:fa:3d:c9:51:c7:3d:ec:13:b2:03:da:ed:e5: ad:54:e4:a6:6e:ed:eb:88:4f:49:09:d4:f3:58:a4: 26:00:84:6f:da:95:4c:5d:e4:d0:b3:63:77:fa:77: 0c:0f:97:07:33:d8:0c:1e:69:04:00:eb:35:e8:d8: 85:6d:4e:eb:dd:07:1e:84:2e:da:fd:5a:c7:2d:a0: 18:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:29:B6:18:A2:20:5F:E4:E6:9B:06:D4:8A:C4:09:4F:39:83:B3:52 X509v3 Authority Key Identifier: keyid:59:9A:74:0F:4B:C3:0A:2C:04:CD:CB:33:44:AF:0D:6A:2D:05:A4:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/xSm2GKIgX-TmmwbUisQJTzmDs1I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2ba8::/48 Signature Algorithm: sha256WithRSAEncryption 56:f2:91:e8:16:c9:15:e5:58:54:c4:2e:ee:07:ee:62:09:f6: a6:15:2a:67:55:7a:b1:18:dc:0a:92:c0:e2:32:28:94:c3:5b: 2f:a0:00:49:05:f8:6f:c2:2e:3b:1d:fc:ec:f2:57:13:10:4b: 7e:3b:6d:2c:d0:df:d0:c3:00:49:8e:c9:d4:56:2e:ab:c6:b3: 0f:27:3c:3e:ab:07:a6:c1:29:81:9c:17:f5:bf:9d:e4:4a:db: 53:c8:f3:91:57:56:00:b3:43:cc:42:5c:2f:56:ef:94:59:44: 0c:4b:5d:26:ad:fc:b7:19:fb:1d:39:10:95:82:02:a9:31:1b: 34:f7:76:f1:43:49:38:a6:9d:ec:66:a1:07:27:6b:ba:60:f5: e9:93:21:56:b1:7e:69:14:42:18:69:8d:38:1d:fd:90:33:a0: 57:32:25:0e:bf:60:be:43:52:d7:da:b4:3e:9b:79:3f:96:f9: 95:5e:5e:7c:f2:57:56:af:62:da:8c:a7:42:ad:7b:01:f8:55: 09:10:74:91:d1:c5:e6:9e:d9:2b:37:61:67:31:0b:e3:62:93: 92:64:d6:9f:a6:6f:1c:90:18:e8:a6:33:05:60:3b:b0:de:62: 7b:97:87:85:72:dd:be:94:fd:3b:c6:1c:94:a8:bb:9b:33:20: cb:de:e3:50 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EFhv6tTjyHru49fMmLXAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5OWE3NDBmNGJjMzBhMmMwNGNkY2IzMzQ0YWYwZDZhMmQw NWE0ODEwHhcNMjYwMTAxMTAxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTI5YjYxOGEyMjA1ZmU0ZTY5YjA2ZDQ4YWM0MDk0ZjM5ODNiMzUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA80BzBc4VGfgrXkAmj7TkqPEjrTey bjpJP+rvrSAnT9Jz8KqDTy+z/hCX9LmFhxlPmkThl2rUg28HbiEBgL7yCi7x7aaf EJ0XZ4Z6lkfch9uLXKFFfkvxtEyhY6468C9WlaG75ZuVRLsB1w94/Go8QtBrBsdx qv0+gLQWVUb+osvSMRX5E+oTyMsVBveJ+o14XqnUMIOIf9PC4Sz6P/Gs38fjMgLA 5o0VkIyhMeZVgjFHVwHU1/o9yVHHPewTsgPa7eWtVOSmbu3riE9JCdTzWKQmAIRv 2pVMXeTQs2N3+ncMD5cHM9gMHmkEAOs16NiFbU7r3QcehC7a/VrHLaAYJQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMUpthiiIF/k5psG1IrECU85g7NSMB8GA1UdIwQY MBaAFFmadA9LwwosBM3LM0SvDWotBaSBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1pwMEQwdkRDaXdFemNzelJLOE5haTBGcElFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8zNmUzY2ItNDc3ZS00ZjVlLWJkNTYt OTEwMmMzYzA1MTM4LzEveFNtMkdLSWdYLVRtbXdiVWlzUUpUem1EczFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8zNmUzY2ItNDc3ZS00ZjVlLWJkNTYtOTEwMmMzYzA1MTM4 LzEvV1pwMEQwdkRDaXdFemNzelJLOE5haTBGcElFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCuo MA0GCSqGSIb3DQEBCwUAA4IBAQBW8pHoFskV5VhUxC7uB+5iCfamFSpnVXqxGNwK ksDiMiiUw1svoABJBfhvwi47Hfzs8lcTEEt+O20s0N/QwwBJjsnUVi6rxrMPJzw+ qwemwSmBnBf1v53kSttTyPORV1YAs0PMQlwvVu+UWUQMS10mrfy3GfsdORCVggKp MRs093bxQ0k4pp3sZqEHJ2u6YPXpkyFWsX5pFEIYaY04Hf2QM6BXMiUOv2C+Q1LX 2rQ+m3k/lvmVXl588ldWr2LajKdCrXsB+FUJEHSR0cXmntkrN2FnMQvjYpOSZNaf pm8ckBjopjMFYDuw3mJ7l4eFct2+lP07xhyUqLubMyDL3uNQ -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:57 2026 by rpki-client