This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/xPg3ixts576_t0Y2Dcdl16y63bo.roa File: xPg3ixts576_t0Y2Dcdl16y63bo.roa (raw, json) Hash identifier: H6jrNL+Kk9BCnloBNI5o9De2Xbd5ueQf5l8EejUb5Tw= Subject key identifier: C4:F8:37:8B:1B:6C:E7:BE:BF:B7:46:36:0D:C7:65:D7:AC:BA:DD:BA Certificate issuer: /CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7 Certificate serial: 019B7C800D030C55D42C132CC441D4CC3C38 Authority key identifier: AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/xPg3ixts576_t0Y2Dcdl16y63bo.roa Signing time: Fri 02 Jan 2026 02:18:45 +0000 ROA not before: Fri 02 Jan 2026 02:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34549 IP address blocks: 2a13:5681::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:0d:03:0c:55:d4:2c:13:2c:c4:41:d4:cc:3c:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7 Validity Not Before: Jan 2 02:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4f8378b1b6ce7bebfb746360dc765d7acbaddba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:51:36:bb:5d:d3:7f:7c:9b:6c:f5:e0:de:c3: e2:02:9f:3c:af:0c:16:13:8a:4e:94:6f:82:8f:72: a2:c2:45:f0:a0:0a:08:dc:7e:d6:a9:65:6f:0f:3d: 0c:c2:b2:5a:b8:ad:24:1f:26:28:bb:02:16:de:b8: 26:d2:ea:75:fd:85:6d:2d:c1:a4:d4:4a:9d:45:b3: 1d:0c:5d:5b:30:70:eb:b5:8f:74:a1:f8:56:b2:cc: d4:8d:6b:f5:03:85:c9:49:33:00:b7:a0:f3:66:bb: f3:59:44:93:1e:d5:5c:58:d4:57:80:fa:99:0a:55: 03:c1:1f:5f:3b:62:cf:e4:59:ce:29:e8:54:0b:07: 5f:14:87:57:b4:d5:0d:30:85:47:64:0e:2a:c8:0a: af:14:dd:00:88:23:75:13:f9:40:95:ed:21:80:8c: 2f:f5:1f:c0:f9:47:44:17:c5:e4:b0:cc:fa:64:5f: 78:4b:71:e5:ca:c5:d9:e8:09:ac:e4:4b:e2:36:f5: 4d:30:68:19:af:3f:59:b4:13:a9:de:4d:d7:51:72: c7:50:c3:75:cb:ce:30:80:96:62:8c:90:0d:d7:f6: da:4b:8f:03:d3:99:a8:c4:11:4a:0c:f9:11:28:ad: 63:00:c8:c8:2c:25:91:f4:8e:1f:1b:0a:47:3c:64: f2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:F8:37:8B:1B:6C:E7:BE:BF:B7:46:36:0D:C7:65:D7:AC:BA:DD:BA X509v3 Authority Key Identifier: keyid:AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/xPg3ixts576_t0Y2Dcdl16y63bo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:5681::/40 Signature Algorithm: sha256WithRSAEncryption 7f:ae:c1:4a:03:12:67:ca:11:3d:3e:93:86:15:be:e7:b1:4f: 73:ca:cd:b9:40:89:ce:a1:36:d2:a2:62:40:1a:de:20:28:72: d3:29:d5:c1:e0:59:78:a9:bb:73:25:ac:98:53:ed:ed:44:bb: 52:d4:42:cb:bb:a3:55:17:d6:35:42:c8:b4:63:0b:66:bf:c0: 58:97:25:56:74:fd:16:d1:00:00:b3:52:a7:28:96:44:b2:2d: f6:d6:82:55:b2:c7:4c:4d:1e:b9:83:3e:63:88:c1:97:cd:fb: dc:0d:e5:bc:e4:8c:c2:40:be:e2:6e:16:d5:18:21:ba:f8:bd: 71:b1:91:f4:61:ba:1c:80:87:c6:0d:1c:55:4c:21:ec:58:f1: 7a:0b:a8:fa:17:34:33:b1:76:d4:83:e4:c5:e2:f4:36:a9:e7: 85:32:ef:15:59:bc:d3:ca:f2:dd:f3:ab:a6:6a:31:72:0f:bd: 69:e2:bc:08:2e:4b:59:25:37:60:09:b2:4f:1b:e7:61:b2:1f: 56:4b:84:bd:5c:e7:31:1f:f2:b8:86:d8:ff:04:0b:a3:da:e5: d5:44:70:f0:ca:c1:13:58:24:fa:4c:e5:91:96:17:f2:4b:c6: bf:7d:45:2a:d8:df:ff:23:94:3c:70:11:2b:c9:c2:c7:bf:1d: a3:23:d2:cd -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt8gA0DDFXULBMsxEHUzDw4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiZDg3YmJlZjU5NDM1NDZiMmE4M2QzMWVjMmI5OWFkODgz ZDUxZDcwHhcNMjYwMTAyMDIxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNGY4Mzc4YjFiNmNlN2JlYmZiNzQ2MzYwZGM3NjVkN2FjYmFkZGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FE2u13Tf3ybbPXg3sPiAp88rwwW E4pOlG+Cj3KiwkXwoAoI3H7WqWVvDz0MwrJauK0kHyYouwIW3rgm0up1/YVtLcGk 1EqdRbMdDF1bMHDrtY90ofhWsszUjWv1A4XJSTMAt6DzZrvzWUSTHtVcWNRXgPqZ ClUDwR9fO2LP5FnOKehUCwdfFIdXtNUNMIVHZA4qyAqvFN0AiCN1E/lAle0hgIwv 9R/A+UdEF8XksMz6ZF94S3HlysXZ6Ams5EviNvVNMGgZrz9ZtBOp3k3XUXLHUMN1 y84wgJZijJAN1/baS48D05moxBFKDPkRKK1jAMjILCWR9I4fGwpHPGTyfQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFMT4N4sbbOe+v7dGNg3HZdesut26MB8GA1UdIwQY MBaAFKvYe771lDVGsqg9Mewrma2IPVHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTloN3Z2V1VOVWF5cUQweDdDdVpyWWc5VWRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84YWQyZTAtZTNmMC00YWJlLWJjYjYt MmY1Yzc0YzY5YWUxLzEveFBnM2l4dHM1NzZfdDBZMkRjZGwxNnk2M2JvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC84YWQyZTAtZTNmMC00YWJlLWJjYjYtMmY1Yzc0YzY5YWUx LzEvcTloN3Z2V1VOVWF5cUQweDdDdVpyWWc5VWRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhNWgQAw DQYJKoZIhvcNAQELBQADggEBAH+uwUoDEmfKET0+k4YVvuexT3PKzblAic6hNtKi YkAa3iAoctMp1cHgWXipu3MlrJhT7e1Eu1LUQsu7o1UX1jVCyLRjC2a/wFiXJVZ0 /RbRAACzUqcolkSyLfbWglWyx0xNHrmDPmOIwZfN+9wN5bzkjMJAvuJuFtUYIbr4 vXGxkfRhuhyAh8YNHFVMIexY8XoLqPoXNDOxdtSD5MXi9Dap54Uy7xVZvNPK8t3z q6ZqMXIPvWnivAguS1klN2AJsk8b52GyH1ZLhL1c5zEf8riG2P8EC6Pa5dVEcPDK wRNYJPpM5ZGWF/JLxr99RSrY3/8jlDxwESvJwse/HaMj0s0= -----END CERTIFICATE-----Generated at Wed Jan 21 21:48:59 2026 by rpki-client