This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/XiJSnqUnbwsKfWxUtA9oWKzznIk.roa File: XiJSnqUnbwsKfWxUtA9oWKzznIk.roa (raw, json) Hash identifier: il5+2Wom7vPDCFPGBRmCP1wr3fGf4op2yuM4yZALCHs= Subject key identifier: 5E:22:52:9E:A5:27:6F:0B:0A:7D:6C:54:B4:0F:68:58:AC:F3:9C:89 Certificate issuer: /CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d Certificate serial: 019B7FF2503E8AD877D62B9E3CD73EA901F0 Authority key identifier: FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/XiJSnqUnbwsKfWxUtA9oWKzznIk.roa Signing time: Fri 02 Jan 2026 18:22:25 +0000 ROA not before: Fri 02 Jan 2026 18:22:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215568 IP address blocks: 2a10:3580::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:50:3e:8a:d8:77:d6:2b:9e:3c:d7:3e:a9:01:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d Validity Not Before: Jan 2 18:22:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e22529ea5276f0b0a7d6c54b40f6858acf39c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ff:8f:70:6b:fe:71:61:20:5a:3a:7b:dd:6b: 4f:6a:73:39:51:ea:cc:a6:00:b8:fa:80:69:ec:24: 27:d5:f3:5c:0f:15:af:82:98:d9:a8:8e:c0:e3:8b: cc:fa:34:a3:04:48:25:ac:a8:34:1a:b0:0b:90:c9: 29:da:9d:b4:3f:10:74:78:7e:c5:49:53:a1:53:21: f5:87:f8:48:25:fa:b1:a4:ae:fd:93:34:13:5c:3e: 0b:04:9d:d9:a1:13:51:cd:7f:ea:9d:8d:80:19:a6: 2b:90:d2:99:f4:03:70:86:1e:da:55:82:ca:6b:d3: ca:de:1f:ae:f7:71:bd:96:61:f2:87:96:86:8b:75: 4a:92:76:06:2c:13:e3:d6:a0:a4:0b:7a:ca:a4:ef: 5d:31:ed:21:ff:93:d1:a4:8a:ff:d5:67:b5:0f:89: 1d:cc:f6:7c:ec:de:7d:ab:b0:ac:ce:02:de:07:85: 77:cd:db:bc:25:d3:3d:66:4f:cf:78:9d:fb:a7:2c: ad:81:79:11:4a:44:bb:2a:fa:58:d4:71:8e:52:1b: 62:c9:0e:5e:a8:ed:9b:58:49:15:a2:db:fa:73:d7: 2d:43:37:b7:6e:1a:07:ee:1f:06:33:57:cd:fc:f1: af:c0:fd:85:91:30:98:1e:ba:0a:7c:cd:13:99:a2: 7d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:22:52:9E:A5:27:6F:0B:0A:7D:6C:54:B4:0F:68:58:AC:F3:9C:89 X509v3 Authority Key Identifier: keyid:FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/XiJSnqUnbwsKfWxUtA9oWKzznIk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:3580::/29 Signature Algorithm: sha256WithRSAEncryption ae:ba:8f:b2:95:2f:af:da:51:4b:4d:11:9c:68:63:94:63:95: bd:9a:10:ba:b3:8a:4e:e9:2e:6c:5d:87:a1:7e:bf:c7:ea:aa: 22:84:b2:1c:7a:31:2c:0c:e4:d0:89:8b:76:ae:ea:32:f2:b3: 60:7a:7e:9f:13:2d:0f:ed:f7:bc:41:3f:04:74:da:3a:65:3b: 3a:64:89:92:2e:9f:80:5d:82:7d:e8:18:42:ee:55:f7:85:7a: 12:cb:59:9a:9d:c9:e7:db:ca:d3:b2:6b:2c:5f:e1:d7:5b:42: a4:8d:ad:f6:13:c3:40:6b:f8:70:0a:bd:5d:fb:cf:8d:e4:32: da:91:0f:37:5d:f9:37:ec:1e:79:1e:61:87:02:6a:9d:88:80: 61:da:8e:29:b3:c4:f2:e6:e7:dd:80:99:db:62:12:2e:d8:53: a5:43:a1:b2:ba:ba:5e:9f:3d:dc:e1:15:88:88:9d:93:23:87: 4a:50:84:ff:13:ee:b3:d8:36:9b:fb:18:71:04:a0:a4:da:c9: db:81:4c:32:ce:c1:1c:ea:b1:73:75:20:96:f7:9a:2d:c5:75: c8:16:6b:49:16:43:42:2a:35:31:7a:4e:1a:ab:8d:34:91:a9: 98:08:62:91:6a:6a:8b:96:7e:da:06:70:ba:3f:74:bc:38:4a: df:c3:90:2c -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/8lA+ith31iuePNc+qQHwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZGJmYmRiNmU5NzVkZGNhOGY2ZGQ5NjhjMzdhN2Q1NTYw ZTY5MWQwHhcNMjYwMTAyMTgyMjI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTIyNTI5ZWE1Mjc2ZjBiMGE3ZDZjNTRiNDBmNjg1OGFjZjM5Yzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5v+PcGv+cWEgWjp73WtPanM5UerM pgC4+oBp7CQn1fNcDxWvgpjZqI7A44vM+jSjBEglrKg0GrALkMkp2p20PxB0eH7F SVOhUyH1h/hIJfqxpK79kzQTXD4LBJ3ZoRNRzX/qnY2AGaYrkNKZ9ANwhh7aVYLK a9PK3h+u93G9lmHyh5aGi3VKknYGLBPj1qCkC3rKpO9dMe0h/5PRpIr/1We1D4kd zPZ87N59q7CszgLeB4V3zdu8JdM9Zk/PeJ37pyytgXkRSkS7KvpY1HGOUhtiyQ5e qO2bWEkVotv6c9ctQze3bhoH7h8GM1fN/PGvwP2FkTCYHroKfM0TmaJ9TQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFF4iUp6lJ28LCn1sVLQPaFis85yJMB8GA1UdIwQY MBaAFP/b+9tul13cqPbdlow3p9VWDmkdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzl2NzIyNlhYZHlvOXQyV2pEZW4xVllPYVIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi82NmZmZjMtYmZhOS00NzMyLWI0YjUt MTk3NjlmNTc4ZWZkLzEvWGlKU25xVW5id3NLZld4VXRBOW9XS3p6bklrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi82NmZmZjMtYmZhOS00NzMyLWI0YjUtMTk3NjlmNTc4ZWZk LzEvXzl2NzIyNlhYZHlvOXQyV2pEZW4xVllPYVIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhA1gDAN BgkqhkiG9w0BAQsFAAOCAQEArrqPspUvr9pRS00RnGhjlGOVvZoQurOKTukubF2H oX6/x+qqIoSyHHoxLAzk0ImLdq7qMvKzYHp+nxMtD+33vEE/BHTaOmU7OmSJki6f gF2CfegYQu5V94V6EstZmp3J59vK07JrLF/h11tCpI2t9hPDQGv4cAq9XfvPjeQy 2pEPN135N+weeR5hhwJqnYiAYdqOKbPE8ubn3YCZ22ISLthTpUOhsrq6Xp893OEV iIidkyOHSlCE/xPus9g2m/sYcQSgpNrJ24FMMs7BHOqxc3UglveaLcV1yBZrSRZD Qio1MXpOGquNNJGpmAhikWpqi5Z+2gZwuj90vDhK38OQLA== -----END CERTIFICATE-----Generated at Sun Jan 25 03:14:27 2026 by rpki-client