This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/XjeIsOy8EYlWCVQMLwou73VfW44.roa File: XjeIsOy8EYlWCVQMLwou73VfW44.roa (raw, json) Hash identifier: 7WirNr2kPCUSWYssJBgppakE3zxJGWl5z2bQa6MA4lU= Subject key identifier: 5E:37:88:B0:EC:BC:11:89:56:09:54:0C:2F:0A:2E:EF:75:5F:5B:8E Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B7C802E56C619F3BE5F721D4DF0A94F42 Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/XjeIsOy8EYlWCVQMLwou73VfW44.roa Signing time: Fri 02 Jan 2026 02:18:53 +0000 ROA not before: Fri 02 Jan 2026 02:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214715 IP address blocks: 2a0f:7803:fa60::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:2e:56:c6:19:f3:be:5f:72:1d:4d:f0:a9:4f:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Jan 2 02:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e3788b0ecbc11895609540c2f0a2eef755f5b8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9b:0d:fd:a0:ff:42:39:fe:9f:ab:4c:ce:bc: 90:a7:e3:ba:99:41:ec:9f:b7:d8:92:11:e9:5e:d6: 86:dc:5b:52:4a:9d:3f:a7:d1:00:58:c7:03:af:a8: d9:27:24:7e:0b:87:0e:63:a4:32:6a:98:61:9f:6d: 2a:06:07:61:2b:52:67:7d:46:41:de:ef:4d:4d:ca: 64:f7:60:ad:45:18:ea:de:48:63:8b:dd:24:7a:1d: d7:21:e8:e8:62:6e:3d:33:62:86:ca:be:5a:1b:6a: 46:6d:29:5b:67:33:7c:25:57:3f:51:41:ee:1f:ee: 94:b1:e6:4e:c1:13:b0:54:48:8d:79:58:b4:62:f1: 1a:bf:a8:0b:c2:92:2d:6e:02:24:da:64:88:84:c0: e6:14:e8:63:8d:3f:7c:39:9a:c6:af:67:ea:7d:16: 71:ce:9e:09:8e:ba:b9:25:2c:7b:df:1c:9b:09:b0: 84:89:fd:28:ce:45:4c:b0:80:10:e4:03:86:0d:3a: 46:bd:76:6e:91:47:4f:8b:0e:40:b2:21:01:7b:97: 4d:af:b7:20:37:ab:d6:3e:de:05:a0:df:99:4a:38: 80:8f:4a:3a:40:ec:53:8b:66:3f:60:a8:18:42:22: 56:53:3a:c1:81:b1:b6:c3:90:eb:ee:cf:a8:89:fe: 73:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:37:88:B0:EC:BC:11:89:56:09:54:0C:2F:0A:2E:EF:75:5F:5B:8E X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/XjeIsOy8EYlWCVQMLwou73VfW44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7803:fa60::/44 Signature Algorithm: sha256WithRSAEncryption 90:7a:3c:a4:01:22:da:1d:37:74:0d:01:08:3c:18:77:5b:89: aa:52:89:1a:06:d4:f9:09:21:f2:d7:f4:74:3f:ec:3e:d4:d4: cb:78:d2:2e:9e:62:a5:6c:1b:0d:47:47:2c:1a:a9:cf:30:af: e1:17:1c:11:f3:8d:79:7e:28:dc:35:9b:1a:50:a3:8f:44:09: 4b:b3:77:ff:8c:ab:bd:1f:b9:b5:00:8e:4e:05:da:df:ba:63: d9:3c:57:6c:2d:45:fb:30:61:24:e5:8a:8d:a9:fc:e8:fa:99: 69:96:94:8b:ca:5e:d5:fc:e8:38:3b:d4:a4:23:8a:a4:1f:7d: cd:f5:6f:02:19:90:63:ab:7e:ab:91:5b:61:9d:82:87:31:90: 9c:2a:30:72:ce:e8:d3:c7:fb:28:56:da:78:56:cd:07:11:d7: 9a:80:51:66:48:7d:a8:ba:8f:17:ee:19:82:c0:6e:c1:bb:aa: fc:7f:5f:98:56:af:32:2b:34:18:c6:c6:85:92:7f:cd:a2:de: f1:e2:bc:ef:f1:4d:94:d5:74:13:25:ac:eb:5f:84:5a:b7:88: 3e:43:04:96:11:5c:4e:7a:db:27:3f:2d:93:b5:d2:5e:76:2e: 64:9d:fd:c2:de:60:22:38:c5:b7:0c:8d:22:a3:67:9a:e0:2e: 58:df:17:52 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8gC5Wxhnzvl9yHU3wqU9CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjYwMTAyMDIxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTM3ODhiMGVjYmMxMTg5NTYwOTU0MGMyZjBhMmVlZjc1NWY1YjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZsN/aD/Qjn+n6tMzryQp+O6mUHs n7fYkhHpXtaG3FtSSp0/p9EAWMcDr6jZJyR+C4cOY6Qyaphhn20qBgdhK1JnfUZB 3u9NTcpk92CtRRjq3khji90keh3XIejoYm49M2KGyr5aG2pGbSlbZzN8JVc/UUHu H+6UseZOwROwVEiNeVi0YvEav6gLwpItbgIk2mSIhMDmFOhjjT98OZrGr2fqfRZx zp4Jjrq5JSx73xybCbCEif0ozkVMsIAQ5AOGDTpGvXZukUdPiw5AsiEBe5dNr7cg N6vWPt4FoN+ZSjiAj0o6QOxTi2Y/YKgYQiJWUzrBgbG2w5Dr7s+oif5zDQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFF43iLDsvBGJVglUDC8KLu91X1uOMB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvWGplSXNPeThFWWxXQ1ZRTUx3b3U3M1ZmVzQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg94A/pg MA0GCSqGSIb3DQEBCwUAA4IBAQCQejykASLaHTd0DQEIPBh3W4mqUokaBtT5CSHy 1/R0P+w+1NTLeNIunmKlbBsNR0csGqnPMK/hFxwR8415fijcNZsaUKOPRAlLs3f/ jKu9H7m1AI5OBdrfumPZPFdsLUX7MGEk5YqNqfzo+plplpSLyl7V/Og4O9SkI4qk H33N9W8CGZBjq36rkVthnYKHMZCcKjByzujTx/soVtp4Vs0HEdeagFFmSH2ouo8X 7hmCwG7Bu6r8f1+YVq8yKzQYxsaFkn/Not7x4rzv8U2U1XQTJazrX4Rat4g+QwSW EVxOetsnPy2TtdJedi5knf3C3mAiOMW3DI0io2ea4C5Y3xdS -----END CERTIFICATE-----Generated at Wed Jan 21 16:58:59 2026 by rpki-client