This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/xdd7SEG9mLRxhUdaoUG1DLRpkPI.roa File: xdd7SEG9mLRxhUdaoUG1DLRpkPI.roa (raw, json) Hash identifier: GW2iR1Svx+wKk5VPTDs/4jldiJuhITkDvE5OyBpw0WA= Subject key identifier: C5:D7:7B:48:41:BD:98:B4:71:85:47:5A:A1:41:B5:0C:B4:69:90:F2 Certificate issuer: /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2 Certificate serial: 019B7BA36E6FA0097F50B9321D4ED42A7C8A Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/xdd7SEG9mLRxhUdaoUG1DLRpkPI.roa Signing time: Thu 01 Jan 2026 22:17:46 +0000 ROA not before: Thu 01 Jan 2026 22:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210864 IP address blocks: 2a01:e901:12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:6e:6f:a0:09:7f:50:b9:32:1d:4e:d4:2a:7c:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2 Validity Not Before: Jan 1 22:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5d77b4841bd98b47185475aa141b50cb46990f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:af:58:3c:d9:98:1c:c8:a2:69:ef:62:4b:61: c6:4a:2b:01:67:b0:b6:fa:cb:db:5e:77:19:70:bd: 6b:ec:04:fd:84:8d:61:22:9d:ed:4b:11:38:ff:2b: 1a:ff:f6:e4:6a:b1:85:91:5c:30:e9:15:5d:58:c8: 5d:33:0e:2e:bc:af:65:5b:a0:44:4a:97:e4:06:4e: 32:92:20:95:34:f7:5d:0a:fd:82:df:9b:7e:f9:21: b2:bb:0a:f5:8a:37:a5:24:05:93:95:2d:c1:fb:97: c7:b5:09:98:ce:a3:71:b6:3b:22:c9:4e:8c:0d:f4: 72:c2:9c:23:4f:cc:e3:64:bb:84:5e:57:63:b5:9a: 3f:15:11:05:82:d2:fa:32:8a:36:7a:bc:5f:e4:39: e8:d0:5b:29:43:ab:b5:d0:63:11:10:4c:2b:9e:98: 02:88:e5:bc:a6:4c:ef:24:7a:0b:32:1d:88:54:85: 1d:f8:08:bd:8f:22:1d:e8:80:78:17:75:2c:d2:37: a3:a6:2f:34:32:bd:43:1c:b1:2a:65:3e:7d:03:ee: 9a:1b:a9:8f:50:a0:8c:ea:a6:14:f3:f1:af:d4:51: 43:b7:2b:fc:bd:7c:5a:52:58:f1:49:b5:f0:0a:3b: 3b:a9:8b:d5:4e:74:c3:c7:df:c2:b3:a2:b5:fc:3e: dc:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D7:7B:48:41:BD:98:B4:71:85:47:5A:A1:41:B5:0C:B4:69:90:F2 X509v3 Authority Key Identifier: keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/xdd7SEG9mLRxhUdaoUG1DLRpkPI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:e901:12::/48 Signature Algorithm: sha256WithRSAEncryption b6:24:00:ab:e1:80:3b:8b:2a:f7:4a:88:09:42:38:ba:29:53: 45:be:66:fc:11:c3:10:6a:e3:66:fd:a2:e3:6d:b0:24:99:47: 51:fa:df:6e:90:19:b5:61:98:a3:f6:fa:17:e6:44:31:bc:24: aa:71:d5:3e:8b:ec:d7:0f:a1:29:9f:4c:1b:3f:c4:13:63:08: c3:bf:1d:96:d3:70:38:53:f2:52:23:26:d5:51:b8:c4:04:4c: 26:e3:c0:7e:58:01:e6:d8:49:0e:5d:64:dc:94:03:26:27:fa: 36:86:88:43:1c:a0:e1:ba:1d:e3:88:4e:9a:8b:9b:6f:0b:5a: ba:d9:58:05:2a:f8:20:98:73:37:ee:e0:8c:7c:42:83:28:c0: 81:ce:dd:6c:b0:5f:0d:65:eb:da:fb:de:b2:45:22:56:f4:7a: 71:c2:a1:3e:73:c6:fb:2d:3b:03:35:98:fe:f1:7c:73:22:bb: 53:02:03:9f:ce:84:30:ff:5d:bc:a8:7e:8d:53:a2:db:d9:a7: 24:21:77:aa:2b:fd:69:da:4b:9a:39:d7:9e:40:43:78:43:e1: 4a:93:94:b5:2f:4c:8b:a2:b3:8b:8d:8e:5a:d3:fe:2c:46:09: a4:42:25:c0:cb:6f:7c:93:5c:f4:a1:a2:a0:5c:e9:72:52:b8: 26:c6:a6:4b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7o25voAl/ULkyHU7UKnyKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NjhiNGUwZWY4MTA2ZjBlMTJhYjhlNTAxZDJhYTRlMzZi NzgzYzIwHhcNMjYwMTAxMjIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNWQ3N2I0ODQxYmQ5OGI0NzE4NTQ3NWFhMTQxYjUwY2I0Njk5MGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAta9YPNmYHMiiae9iS2HGSisBZ7C2 +svbXncZcL1r7AT9hI1hIp3tSxE4/ysa//bkarGFkVww6RVdWMhdMw4uvK9lW6BE SpfkBk4ykiCVNPddCv2C35t++SGyuwr1ijelJAWTlS3B+5fHtQmYzqNxtjsiyU6M DfRywpwjT8zjZLuEXldjtZo/FREFgtL6Moo2erxf5Dno0FspQ6u10GMREEwrnpgC iOW8pkzvJHoLMh2IVIUd+Ai9jyId6IB4F3Us0jejpi80Mr1DHLEqZT59A+6aG6mP UKCM6qYU8/Gv1FFDtyv8vXxaUljxSbXwCjs7qYvVTnTDx9/Cs6K1/D7c6wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMXXe0hBvZi0cYVHWqFBtQy0aZDyMB8GA1UdIwQY MBaAFClotODvgQbw4Sq45QHSqk42t4PCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1dpMDRPLUJCdkRoS3JqbEFkS3FUamEzZzhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80ODE2MzctNmMxYy00NWU4LThmYmQt NDRmOGVkNWQ2MWQ3LzEveGRkN1NFRzltTFJ4aFVkYW9VRzFETFJwa1BJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy80ODE2MzctNmMxYy00NWU4LThmYmQtNDRmOGVkNWQ2MWQ3 LzEvS1dpMDRPLUJCdkRoS3JqbEFkS3FUamEzZzhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgHpAQAS MA0GCSqGSIb3DQEBCwUAA4IBAQC2JACr4YA7iyr3SogJQji6KVNFvmb8EcMQauNm /aLjbbAkmUdR+t9ukBm1YZij9voX5kQxvCSqcdU+i+zXD6Epn0wbP8QTYwjDvx2W 03A4U/JSIybVUbjEBEwm48B+WAHm2EkOXWTclAMmJ/o2hohDHKDhuh3jiE6ai5tv C1q62VgFKvggmHM37uCMfEKDKMCBzt1ssF8NZeva+96yRSJW9HpxwqE+c8b7LTsD NZj+8XxzIrtTAgOfzoQw/128qH6NU6Lb2ackIXeqK/1p2kuaOdeeQEN4Q+FKk5S1 L0yLorOLjY5a0/4sRgmkQiXAy298k1z0oaKgXOlyUrgmxqZL -----END CERTIFICATE-----Generated at Mon Jan 26 23:22:44 2026 by rpki-client