This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/XBmkVeuFRD2uueboTgIjRhoEQuE.roa File: XBmkVeuFRD2uueboTgIjRhoEQuE.roa (raw, json) Hash identifier: v9V72yDsw7P8I61J+zB2Rok+f/g1fiD48qiwYR7onlg= Subject key identifier: 5C:19:A4:55:EB:85:44:3D:AE:B9:E6:E8:4E:02:23:46:1A:04:42:E1 Certificate issuer: /CN=f6af433974df373b70abd76b13e1c70c775f554b Certificate serial: 019B78348D970F4DAE9AF2590F302307BB82 Authority key identifier: F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/XBmkVeuFRD2uueboTgIjRhoEQuE.roa Signing time: Thu 01 Jan 2026 06:17:48 +0000 ROA not before: Thu 01 Jan 2026 06:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216081 IP address blocks: 2a12:3e80:600::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:8d:97:0f:4d:ae:9a:f2:59:0f:30:23:07:bb:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6af433974df373b70abd76b13e1c70c775f554b Validity Not Before: Jan 1 06:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c19a455eb85443daeb9e6e84e0223461a0442e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e8:d6:36:2c:6d:91:63:33:1d:b9:d9:ba:ec: 7d:85:2b:93:82:c3:75:b1:d8:b8:e8:d6:71:7e:9c: 97:c8:1a:07:44:1e:31:df:ec:89:86:9a:dc:94:56: 91:1f:6e:f4:5d:08:52:b2:ad:b1:42:36:1f:d9:8d: 7b:8c:f0:74:13:8f:9d:b5:87:2c:7e:1f:2b:5f:06: 62:7b:2a:c5:e7:de:20:d6:91:ca:e2:3a:ff:f1:95: 62:a4:cb:99:1f:6d:2e:1e:52:0a:95:a4:b0:51:7e: 35:50:a8:86:2d:09:02:38:55:a8:01:94:38:d4:63: da:51:6a:63:d4:9f:ff:2c:e4:03:5c:74:74:27:b7: 84:b4:79:b0:b7:53:69:30:91:7f:7b:04:78:d4:46: 7c:b4:73:45:e3:b1:63:11:6f:b0:be:19:81:f5:52: 8f:ca:05:8e:e9:4f:f8:1b:10:2e:4f:be:49:3e:ed: 99:25:5a:4c:c0:be:3d:7e:3e:10:2e:65:be:1e:22: cb:f2:65:1c:45:5d:e2:47:d9:f1:8d:54:06:7e:5c: 25:da:5d:de:68:05:7d:47:6b:57:8d:00:6a:c1:ab: 48:6b:a2:45:f7:25:49:33:62:34:d3:bc:47:55:5a: c5:2d:ea:0a:99:e7:f3:74:37:75:10:45:dd:e9:b0: 47:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:19:A4:55:EB:85:44:3D:AE:B9:E6:E8:4E:02:23:46:1A:04:42:E1 X509v3 Authority Key Identifier: keyid:F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/XBmkVeuFRD2uueboTgIjRhoEQuE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:3e80:600::/40 Signature Algorithm: sha256WithRSAEncryption 23:39:1f:86:e3:47:0a:82:e4:1a:2d:26:f4:04:96:dc:66:f2: e8:1c:51:4c:29:9f:fd:8d:b1:01:37:49:0e:1c:f5:3f:c1:04: 7b:29:78:fb:eb:b8:22:59:db:56:2d:6f:9c:2c:31:5e:05:c0: 34:a4:32:b3:de:4f:0f:87:19:27:06:af:39:67:85:be:cb:df: f3:5c:09:8b:2c:c4:29:3f:22:f9:27:d0:8e:fb:1a:11:8b:c3: 63:36:59:14:fb:83:20:21:cc:86:b2:92:98:77:61:5b:40:91: 6d:a5:33:30:19:a8:1e:ac:a6:b6:67:13:d2:b4:e2:1d:37:95: 2a:89:de:73:bc:9d:74:cd:d8:7c:25:05:a8:dc:9d:42:3b:0d: 1b:bd:5d:a2:f4:85:98:a9:6b:d3:9a:16:7d:5a:d6:f3:b5:49: 02:58:c2:24:83:79:9b:ef:d4:e7:3c:2f:d1:5b:89:fc:f5:db: 26:1d:6c:0d:c3:18:87:7d:f9:58:2a:f6:37:5e:20:b7:e8:30: 06:75:7e:19:63:c0:7d:f1:ae:27:54:81:4d:5a:93:d5:49:7c: fd:9b:ca:4f:7b:7e:16:72:3c:71:50:6f:16:91:5a:f4:b4:de: a7:63:c4:44:62:99:f4:ee:0d:7c:a9:10:1b:43:00:b1:3f:4c: 0f:03:26:58 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt4NI2XD02umvJZDzAjB7uCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YWY0MzM5NzRkZjM3M2I3MGFiZDc2YjEzZTFjNzBjNzc1 ZjU1NGIwHhcNMjYwMTAxMDYxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzE5YTQ1NWViODU0NDNkYWViOWU2ZTg0ZTAyMjM0NjFhMDQ0MmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApejWNixtkWMzHbnZuux9hSuTgsN1 sdi46NZxfpyXyBoHRB4x3+yJhprclFaRH270XQhSsq2xQjYf2Y17jPB0E4+dtYcs fh8rXwZieyrF594g1pHK4jr/8ZVipMuZH20uHlIKlaSwUX41UKiGLQkCOFWoAZQ4 1GPaUWpj1J//LOQDXHR0J7eEtHmwt1NpMJF/ewR41EZ8tHNF47FjEW+wvhmB9VKP ygWO6U/4GxAuT75JPu2ZJVpMwL49fj4QLmW+HiLL8mUcRV3iR9nxjVQGflwl2l3e aAV9R2tXjQBqwatIa6JF9yVJM2I007xHVVrFLeoKmefzdDd1EEXd6bBHqwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFFwZpFXrhUQ9rrnm6E4CI0YaBELhMB8GA1UdIwQY MBaAFPavQzl03zc7cKvXaxPhxwx3X1VLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXE5RE9YVGZOenR3cTlkckUtSEhESGRmVlVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mOWNhZjAtMmMyZS00ODk3LThhM2It YTI2YmM2NTNiMDZiLzEvWEJta1ZldUZSRDJ1dWVib1RnSWpSaG9FUXVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9mOWNhZjAtMmMyZS00ODk3LThhM2ItYTI2YmM2NTNiMDZi LzEvOXE5RE9YVGZOenR3cTlkckUtSEhESGRmVlVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhI+gAYw DQYJKoZIhvcNAQELBQADggEBACM5H4bjRwqC5BotJvQEltxm8ugcUUwpn/2NsQE3 SQ4c9T/BBHspePvruCJZ21Ytb5wsMV4FwDSkMrPeTw+HGScGrzlnhb7L3/NcCYss xCk/Ivkn0I77GhGLw2M2WRT7gyAhzIaykph3YVtAkW2lMzAZqB6sprZnE9K04h03 lSqJ3nO8nXTN2HwlBajcnUI7DRu9XaL0hZipa9OaFn1a1vO1SQJYwiSDeZvv1Oc8 L9Fbifz12yYdbA3DGId9+Vgq9jdeILfoMAZ1fhljwH3xridUgU1ak9VJfP2byk97 fhZyPHFQbxaRWvS03qdjxERimfTuDXypEBtDALE/TA8DJlg= -----END CERTIFICATE-----Generated at Wed Jan 21 10:12:02 2026 by rpki-client