This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/XFwhkREkiCuis-x8G3Sppv-Bqow.roa File: XFwhkREkiCuis-x8G3Sppv-Bqow.roa (raw, json) Hash identifier: OLOGsI2X7RE16wC+U4hSm6vZWwQ0fXQvkhO0lzPvMig= Subject key identifier: 5C:5C:21:91:11:24:88:2B:A2:B3:EC:7C:1B:74:A9:A6:FF:81:AA:8C Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071 Certificate serial: 019B7E38983A244FBB9F68B33EECDF1DAEC0 Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/XFwhkREkiCuis-x8G3Sppv-Bqow.roa Signing time: Fri 02 Jan 2026 10:19:56 +0000 ROA not before: Fri 02 Jan 2026 10:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24595 IP address blocks: 2a04:9a01:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 19:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:98:3a:24:4f:bb:9f:68:b3:3e:ec:df:1d:ae:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071 Validity Not Before: Jan 2 10:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c5c21911124882ba2b3ec7c1b74a9a6ff81aa8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f8:20:43:0c:cd:4a:65:7a:71:cc:13:34:ab: b3:7b:2a:1f:9b:88:86:b1:e7:63:46:74:00:e4:ba: 04:d4:0a:a2:81:5d:70:2f:25:82:af:18:df:c3:00: 37:d6:20:01:ee:be:36:5e:94:76:f6:99:47:e6:f5: 27:a5:81:aa:11:47:c3:ce:8d:ba:56:56:e3:7b:a5: d7:40:2c:a0:c5:4a:29:59:48:56:cd:74:e5:2c:44: 90:b7:ba:2d:53:89:43:fb:c7:d0:4e:f4:3b:e9:33: 66:9a:dd:d0:f4:e9:16:1e:c9:d5:e5:2b:07:b4:0a: 0b:77:ef:b1:37:49:f6:6f:2e:58:e5:84:9c:87:b6: 78:3c:1c:18:fe:d9:da:bd:ec:41:b7:61:77:d0:90: 5d:5b:47:cb:24:95:18:c1:2b:28:ec:35:c9:41:7b: 7b:20:77:f7:40:e0:13:af:c3:2e:0a:7b:ad:f8:3f: 96:88:7f:cb:95:9d:0d:87:99:9c:66:b0:c0:31:a5: 64:2b:fb:f7:ec:30:5e:9e:90:4c:bd:49:5e:ba:fe: 4d:47:0e:3e:70:21:81:1a:07:0a:44:89:e4:3b:a2: 06:4e:69:97:4f:c9:8c:8d:a8:3d:93:14:0c:71:dd: b7:e7:7a:23:69:d9:a9:56:eb:3e:5a:a7:0d:e4:28: e4:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:5C:21:91:11:24:88:2B:A2:B3:EC:7C:1B:74:A9:A6:FF:81:AA:8C X509v3 Authority Key Identifier: keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/XFwhkREkiCuis-x8G3Sppv-Bqow.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:9a01:1000::/36 Signature Algorithm: sha256WithRSAEncryption 95:ea:48:9e:61:f8:ac:77:2c:6f:b8:e7:85:2f:4d:76:98:14: de:98:95:26:46:60:02:5a:6a:31:62:b7:79:92:54:62:de:a1: 6d:2e:58:92:9d:ae:b1:9a:dd:e6:6a:fc:3f:be:66:d8:e8:4e: 29:b2:7c:69:34:c5:f7:bd:46:de:f6:73:0a:a0:4f:ea:b0:22: bb:56:2b:08:bf:33:b0:f2:19:24:2e:24:c6:b1:36:5f:5f:ca: 9d:40:b6:38:65:6f:ff:66:f9:7b:87:e3:3f:d2:55:3c:c1:89: 79:6c:a5:39:2a:a2:77:b0:34:62:e6:92:a6:2e:21:12:50:80: 6a:5f:e9:8a:79:01:01:fe:f4:96:14:5f:5e:55:7b:cb:a3:3b: 61:23:d5:f7:51:b5:cc:c0:65:c0:cb:f3:be:6f:aa:97:7c:07: bd:fd:90:3e:8e:09:76:ed:44:80:16:84:4b:20:9b:f9:ac:53: b0:8b:6d:b6:f1:8d:c3:1f:ba:75:a7:36:91:61:d1:b6:70:83: d6:a5:c1:2e:e0:35:fc:82:12:a0:10:4e:ce:35:d4:26:67:36: 94:d5:fd:38:93:02:60:18:bf:ea:d7:d8:1f:a8:30:23:84:71: ad:81:72:a2:3f:a5:c2:1d:c1:cd:bb:78:72:3d:e0:32:bc:38: 00:b9:a8:e0 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+OJg6JE+7n2izPuzfHa7AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNWQyOGQxNjYyNmJjNWRjYWJmMmU5MTU0MzU3ODJiOTZl MTQwNzEwHhcNMjYwMTAyMTAxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzVjMjE5MTExMjQ4ODJiYTJiM2VjN2MxYjc0YTlhNmZmODFhYThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/ggQwzNSmV6ccwTNKuzeyofm4iG sedjRnQA5LoE1AqigV1wLyWCrxjfwwA31iAB7r42XpR29plH5vUnpYGqEUfDzo26 Vlbje6XXQCygxUopWUhWzXTlLESQt7otU4lD+8fQTvQ76TNmmt3Q9OkWHsnV5SsH tAoLd++xN0n2by5Y5YSch7Z4PBwY/tnavexBt2F30JBdW0fLJJUYwSso7DXJQXt7 IHf3QOATr8MuCnut+D+WiH/LlZ0Nh5mcZrDAMaVkK/v37DBenpBMvUleuv5NRw4+ cCGBGgcKRInkO6IGTmmXT8mMjag9kxQMcd2353ojadmpVus+WqcN5CjkQQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFFxcIZERJIgrorPsfBt0qab/gaqMMB8GA1UdIwQY MBaAFLBdKNFmJrxdyr8ukVQ1eCuW4UBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEt YWQ1NzU1MjJiMzY1LzEvWEZ3aGtSRWtpQ3Vpcy14OEczU3Bwdi1CcW93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEtYWQ1NzU1MjJiMzY1 LzEvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgSaARAw DQYJKoZIhvcNAQELBQADggEBAJXqSJ5h+Kx3LG+454UvTXaYFN6YlSZGYAJaajFi t3mSVGLeoW0uWJKdrrGa3eZq/D++ZtjoTimyfGk0xfe9Rt72cwqgT+qwIrtWKwi/ M7DyGSQuJMaxNl9fyp1Atjhlb/9m+XuH4z/SVTzBiXlspTkqonewNGLmkqYuIRJQ gGpf6Yp5AQH+9JYUX15Ve8ujO2Ej1fdRtczAZcDL875vqpd8B739kD6OCXbtRIAW hEsgm/msU7CLbbbxjcMfunWnNpFh0bZwg9alwS7gNfyCEqAQTs411CZnNpTV/TiT AmAYv+rX2B+oMCOEca2BcqI/pcIdwc27eHI94DK8OAC5qOA= -----END CERTIFICATE-----Generated at Tue Jan 20 04:47:57 2026 by rpki-client