This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/XO6sev2FSqLYRr5iJTi7ipxkMsw.roa File: XO6sev2FSqLYRr5iJTi7ipxkMsw.roa (raw, json) Hash identifier: elcbj3ZPXUwSlQ0W1VHvrn7ftkq6V4JJB3c4lvRA2B0= Subject key identifier: 5C:EE:AC:7A:FD:85:4A:A2:D8:46:BE:62:25:38:BB:8A:9C:64:32:CC Certificate issuer: /CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2 Certificate serial: 019B7910782CC60FBD52759076A5116D5AC5 Authority key identifier: CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/XO6sev2FSqLYRr5iJTi7ipxkMsw.roa Signing time: Thu 01 Jan 2026 10:18:01 +0000 ROA not before: Thu 01 Jan 2026 10:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 2a02:d21:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:78:2c:c6:0f:bd:52:75:90:76:a5:11:6d:5a:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2 Validity Not Before: Jan 1 10:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ceeac7afd854aa2d846be622538bb8a9c6432cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:76:68:aa:19:a1:61:ad:f1:a1:12:c0:0f:04: e7:60:73:9c:b2:fc:6f:4b:fd:8a:1b:e5:aa:90:6c: 13:58:ef:11:47:0b:8d:33:66:d8:02:04:ea:08:6c: 44:ed:b3:15:c1:73:58:36:62:7e:94:56:3d:b9:fc: c4:b2:c3:6d:e6:0b:83:76:49:d7:96:35:f1:90:c6: 40:ee:46:ad:6c:d2:b0:33:b0:15:f9:fa:cd:f5:f1: 9e:56:a3:12:7c:9c:ea:d9:05:2e:ce:a8:1e:f5:08: 49:b9:c8:59:e9:1b:d8:b4:b4:8d:ad:b6:e1:cf:e7: ed:80:ab:a1:9c:4f:f9:82:0f:b4:3a:f9:ee:93:9f: e4:c3:14:e3:07:2f:4d:0b:a4:05:0a:21:3e:52:bd: 53:c5:5c:70:7d:ab:8f:1f:6a:2d:a1:64:ae:85:b0: f9:70:7f:2c:3f:75:81:c7:11:14:e3:4c:90:17:cf: 71:a3:45:3c:ab:3f:97:ad:2f:4f:08:60:ea:ed:4f: 05:6e:ae:f0:3f:ed:9d:5f:a0:57:5f:7c:e3:8e:fe: 46:d0:6f:29:5b:0b:7a:40:cb:95:5f:f4:9c:11:cb: 78:1d:b0:3a:68:ea:5e:0e:fa:cd:e1:96:9d:ec:71: b3:d0:22:6a:d4:31:60:6c:02:de:c9:4d:4c:dd:04: a6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:EE:AC:7A:FD:85:4A:A2:D8:46:BE:62:25:38:BB:8A:9C:64:32:CC X509v3 Authority Key Identifier: keyid:CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/XO6sev2FSqLYRr5iJTi7ipxkMsw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:d21:1000::/48 Signature Algorithm: sha256WithRSAEncryption 8b:38:0b:6a:37:b6:6d:4c:de:b2:fc:7c:65:ce:5b:b6:74:88: 46:b2:65:3b:b0:3b:d3:a3:45:eb:4f:d2:21:62:11:35:fe:29: 75:ee:01:07:0e:c5:6b:f4:fc:d6:ef:a3:85:f2:4f:8e:bd:de: a7:fb:0e:db:88:b4:74:2d:e2:bb:83:19:6f:7d:77:df:b4:0b: 3a:7f:96:a2:d9:27:10:55:df:37:f9:66:de:d7:5d:65:a5:aa: 95:33:0a:a4:9e:be:ab:ce:18:a5:3c:d5:67:e3:6b:e9:17:f9: 8e:af:0b:99:c8:fb:cf:05:1c:63:97:d0:a1:f0:cf:aa:bb:9f: 98:2a:46:7a:0e:af:ac:06:fd:5b:4d:88:2e:79:19:93:64:ef: 17:92:69:6b:61:8c:16:e6:bb:b5:c9:e9:9a:8c:91:20:59:9a: 47:05:de:9c:c7:54:20:71:f6:66:03:aa:08:d8:fa:6b:d1:39: ea:08:bf:87:85:f6:3c:40:3c:17:c5:b5:75:fa:ff:69:b3:33: 0b:75:28:05:f6:ba:b3:c5:e8:8f:ae:4e:a3:91:0f:66:45:b0: 4d:79:b1:b8:b0:63:58:5b:e4:e3:c6:f1:1b:23:1f:0f:8f:50: b5:c7:82:ba:bd:ba:5a:f5:1a:5e:db:18:74:30:fd:f5:65:d7: f5:e9:46:b7 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EHgsxg+9UnWQdqURbVrFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNWJmNTIwMWYxOGI0MDJiOGU2MjhiYzc3ZjIyNTJmNzY5 ZTcwZjIwHhcNMjYwMTAxMTAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2VlYWM3YWZkODU0YWEyZDg0NmJlNjIyNTM4YmI4YTljNjQzMmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnZoqhmhYa3xoRLADwTnYHOcsvxv S/2KG+WqkGwTWO8RRwuNM2bYAgTqCGxE7bMVwXNYNmJ+lFY9ufzEssNt5guDdknX ljXxkMZA7katbNKwM7AV+frN9fGeVqMSfJzq2QUuzqge9QhJuchZ6RvYtLSNrbbh z+ftgKuhnE/5gg+0Ovnuk5/kwxTjBy9NC6QFCiE+Ur1TxVxwfauPH2otoWSuhbD5 cH8sP3WBxxEU40yQF89xo0U8qz+XrS9PCGDq7U8Fbq7wP+2dX6BXX3zjjv5G0G8p Wwt6QMuVX/ScEct4HbA6aOpeDvrN4Zad7HGz0CJq1DFgbALeyU1M3QSm5QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFzurHr9hUqi2Ea+YiU4u4qcZDLMMB8GA1UdIwQY MBaAFM5b9SAfGLQCuOYovHfyJS92nnDyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemx2MUlCOFl0QUs0NWlpOGRfSWxMM2FlY1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xYzc5MTctOGFhNi00YzQzLTkyZGQt NzQ3NmY0MmYyZDljLzEvWE82c2V2MkZTcUxZUnI1aUpUaTdpcHhrTXN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8xYzc5MTctOGFhNi00YzQzLTkyZGQtNzQ3NmY0MmYyZDlj LzEvemx2MUlCOFl0QUs0NWlpOGRfSWxMM2FlY1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgINIRAA MA0GCSqGSIb3DQEBCwUAA4IBAQCLOAtqN7ZtTN6y/Hxlzlu2dIhGsmU7sDvTo0Xr T9IhYhE1/il17gEHDsVr9PzW76OF8k+Ovd6n+w7biLR0LeK7gxlvfXfftAs6f5ai 2ScQVd83+Wbe111lpaqVMwqknr6rzhilPNVn42vpF/mOrwuZyPvPBRxjl9Ch8M+q u5+YKkZ6Dq+sBv1bTYgueRmTZO8XkmlrYYwW5ru1yemajJEgWZpHBd6cx1QgcfZm A6oI2Ppr0TnqCL+HhfY8QDwXxbV1+v9pszMLdSgF9rqzxeiPrk6jkQ9mRbBNebG4 sGNYW+TjxvEbIx8Pj1C1x4K6vbpa9Rpe2xh0MP31Zdf16Ua3 -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:09 2026 by rpki-client