This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/xAqWyuVJfTBU5sO6tZYwZQPSFtM.roa File: xAqWyuVJfTBU5sO6tZYwZQPSFtM.roa (raw, json) Hash identifier: MWM191D6m++4D2OGJ0Gjx6X+AoLdVo9Xw0WCymZXSQ4= Subject key identifier: C4:0A:96:CA:E5:49:7D:30:54:E6:C3:BA:B5:96:30:65:03:D2:16:D3 Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071 Certificate serial: 019B7E38A1ED99E91F42FC6665A121030F33 Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/xAqWyuVJfTBU5sO6tZYwZQPSFtM.roa Signing time: Fri 02 Jan 2026 10:19:59 +0000 ROA not before: Fri 02 Jan 2026 10:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198687 IP address blocks: 2a07:3501:1090::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 19:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:a1:ed:99:e9:1f:42:fc:66:65:a1:21:03:0f:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071 Validity Not Before: Jan 2 10:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c40a96cae5497d3054e6c3bab596306503d216d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:63:2e:ab:7c:a2:55:22:aa:d1:e7:bd:07:b6: 41:2a:ae:da:0d:0a:12:75:c7:c2:bf:26:55:79:62: 41:f9:6c:34:f9:1a:68:b5:c1:bf:65:b2:aa:7e:d2: 54:3f:fa:f8:0f:33:5a:cb:21:db:40:a9:3b:45:1a: 9d:65:98:98:13:0b:66:64:9f:c2:ec:35:90:6f:74: 2b:13:b9:bb:a1:69:3b:96:c6:a4:9f:9c:5d:05:bd: ba:e9:91:23:a6:07:61:8d:9c:73:b0:a4:ef:72:53: 1f:74:b5:38:c0:7b:04:60:33:23:79:50:8a:3d:41: f5:1a:25:e6:3d:de:8c:2c:26:ee:77:0e:32:e2:58: 74:22:f0:1c:f1:71:c1:3a:42:b5:af:db:0f:bb:03: 57:13:85:a0:0b:a8:cd:79:8b:76:c5:3d:0a:a4:b7: 3f:a4:56:cb:cf:da:b5:66:17:4f:53:55:d0:9f:bd: c4:56:77:58:3e:74:88:21:62:5b:b7:0e:8b:9b:2d: 68:81:35:3b:e6:d3:20:91:9b:d9:7c:c0:f8:7e:9d: f0:51:76:00:2d:6d:a5:f7:a1:0b:80:9c:90:05:9d: 78:4c:bd:e7:15:2a:f8:b7:f0:e2:40:90:94:17:e5: 63:6b:1a:77:4d:c0:ea:da:27:01:ea:1e:83:6d:4f: 94:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:0A:96:CA:E5:49:7D:30:54:E6:C3:BA:B5:96:30:65:03:D2:16:D3 X509v3 Authority Key Identifier: keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/xAqWyuVJfTBU5sO6tZYwZQPSFtM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:3501:1090::/48 Signature Algorithm: sha256WithRSAEncryption b9:50:d5:ff:84:90:54:f4:5e:01:6b:00:bc:d3:4f:72:5d:b3: 19:a0:e3:cd:f4:a0:72:78:16:a0:cd:ae:0b:10:41:41:f5:b5: 34:f0:19:f8:0f:3f:8c:0b:b0:fd:66:78:3c:0c:ca:c4:b5:c4: f6:f8:dd:9b:59:4f:5e:90:e5:43:32:af:08:6c:36:57:48:a1: 87:cf:a8:18:17:2c:a0:47:e8:cb:8c:af:4c:ef:13:c4:61:0e: 7e:6c:ee:eb:bd:62:42:a4:92:f4:16:9e:09:32:9f:76:c1:eb: fa:39:9c:d6:22:27:71:2a:72:f6:75:1e:85:aa:67:6f:c9:7d: c5:67:95:c4:91:63:0c:52:a4:11:4a:4b:0d:e2:dd:a1:4b:1a: 41:29:fd:16:4a:fe:7b:45:27:a8:9a:8b:36:61:f1:46:70:ad: 4e:6e:51:1e:fb:5f:32:d3:1b:f6:ff:78:69:c4:ff:05:af:af: a9:78:9b:22:79:01:96:a0:42:a2:5c:7f:54:52:ce:98:c8:cf: e5:5e:70:54:b6:97:76:02:42:c0:68:9f:b2:9f:da:6c:74:4b: 8d:8d:49:9c:d9:9f:3c:66:10:15:e3:7a:93:95:73:87:36:c7: a5:68:34:ff:ad:ab:44:36:50:2a:1f:93:9a:4b:b7:f8:de:fa: b9:6b:d4:ea -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OKHtmekfQvxmZaEhAw8zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNWQyOGQxNjYyNmJjNWRjYWJmMmU5MTU0MzU3ODJiOTZl MTQwNzEwHhcNMjYwMTAyMTAxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDBhOTZjYWU1NDk3ZDMwNTRlNmMzYmFiNTk2MzA2NTAzZDIxNmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGMuq3yiVSKq0ee9B7ZBKq7aDQoS dcfCvyZVeWJB+Ww0+RpotcG/ZbKqftJUP/r4DzNayyHbQKk7RRqdZZiYEwtmZJ/C 7DWQb3QrE7m7oWk7lsakn5xdBb266ZEjpgdhjZxzsKTvclMfdLU4wHsEYDMjeVCK PUH1GiXmPd6MLCbudw4y4lh0IvAc8XHBOkK1r9sPuwNXE4WgC6jNeYt2xT0KpLc/ pFbLz9q1ZhdPU1XQn73EVndYPnSIIWJbtw6Lmy1ogTU75tMgkZvZfMD4fp3wUXYA LW2l96ELgJyQBZ14TL3nFSr4t/DiQJCUF+Vjaxp3TcDq2icB6h6DbU+URQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMQKlsrlSX0wVObDurWWMGUD0hbTMB8GA1UdIwQY MBaAFLBdKNFmJrxdyr8ukVQ1eCuW4UBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEt YWQ1NzU1MjJiMzY1LzEveEFxV3l1VkpmVEJVNXNPNnRaWXdaUVBTRnRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEtYWQ1NzU1MjJiMzY1 LzEvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgc1ARCQ MA0GCSqGSIb3DQEBCwUAA4IBAQC5UNX/hJBU9F4BawC8009yXbMZoOPN9KByeBag za4LEEFB9bU08Bn4Dz+MC7D9Zng8DMrEtcT2+N2bWU9ekOVDMq8IbDZXSKGHz6gY FyygR+jLjK9M7xPEYQ5+bO7rvWJCpJL0Fp4JMp92wev6OZzWIidxKnL2dR6Fqmdv yX3FZ5XEkWMMUqQRSksN4t2hSxpBKf0WSv57RSeomos2YfFGcK1OblEe+18y0xv2 /3hpxP8Fr6+peJsieQGWoEKiXH9UUs6YyM/lXnBUtpd2AkLAaJ+yn9psdEuNjUmc 2Z88ZhAV43qTlXOHNselaDT/ratENlAqH5OaS7f43vq5a9Tq -----END CERTIFICATE-----Generated at Tue Jan 20 04:48:50 2026 by rpki-client