This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/xYoe99GmkL23ZMa2Tozkl_bKIqU.roa File: xYoe99GmkL23ZMa2Tozkl_bKIqU.roa (raw, json) Hash identifier: 405SceDsf9th40a7ckeVXHxvuDkWg8V20/2TYadqbnk= Subject key identifier: C5:8A:1E:F7:D1:A6:90:BD:B7:64:C6:B6:4E:8C:E4:97:F6:CA:22:A5 Certificate issuer: /CN=4662521eb58b45b0c5a2ccbe383315ce79d7eea5 Certificate serial: 019B797EDB3458B55CE338D73596079BB1C5 Authority key identifier: 46:62:52:1E:B5:8B:45:B0:C5:A2:CC:BE:38:33:15:CE:79:D7:EE:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/xYoe99GmkL23ZMa2Tozkl_bKIqU.roa Signing time: Thu 01 Jan 2026 12:18:35 +0000 ROA not before: Thu 01 Jan 2026 12:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 2a12:5980::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:db:34:58:b5:5c:e3:38:d7:35:96:07:9b:b1:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4662521eb58b45b0c5a2ccbe383315ce79d7eea5 Validity Not Before: Jan 1 12:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c58a1ef7d1a690bdb764c6b64e8ce497f6ca22a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1f:49:68:e5:9c:50:ab:b7:60:c3:9f:e2:19: 49:0d:da:a7:8d:28:18:80:18:f4:18:af:28:9d:bf: 0f:c3:f8:6c:3b:2a:52:73:1b:da:d8:ae:88:07:d0: 24:d6:36:7e:c6:4b:55:4f:b6:e3:33:46:b7:91:33: f7:a5:11:76:22:44:f2:2f:c3:1e:36:49:99:24:a5: a1:bc:41:eb:43:11:ed:54:b6:2a:2b:10:a8:8d:cc: f6:d6:82:53:07:e1:5d:6f:45:aa:4a:c4:6a:2c:6f: 94:f1:1a:46:bc:46:cc:88:5e:ec:9e:ba:9e:99:0e: 42:38:44:0b:e3:ff:0b:64:4e:51:57:87:cd:47:b8: bf:ec:5e:fd:55:a4:3c:d6:aa:97:ea:d3:4f:72:7e: df:81:b9:1e:89:14:9a:8c:ee:d2:41:4a:7c:a5:3c: 59:b7:dd:52:e3:d9:7f:ae:9e:c3:7a:68:a8:78:1f: aa:14:80:d5:93:b5:bb:c4:79:45:a2:c6:52:d3:5c: f8:0f:f6:5d:69:52:c9:e6:81:1c:09:54:7b:70:2c: f8:02:db:e7:93:c5:c3:1c:67:62:d6:f4:3f:2b:c3: cc:8b:f7:86:69:b5:8c:f2:a8:bc:93:11:c4:62:bd: 36:89:0d:78:a4:27:ab:f3:44:20:b7:89:b8:06:18: af:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:8A:1E:F7:D1:A6:90:BD:B7:64:C6:B6:4E:8C:E4:97:F6:CA:22:A5 X509v3 Authority Key Identifier: keyid:46:62:52:1E:B5:8B:45:B0:C5:A2:CC:BE:38:33:15:CE:79:D7:EE:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/xYoe99GmkL23ZMa2Tozkl_bKIqU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:5980::/29 Signature Algorithm: sha256WithRSAEncryption 7c:e7:84:c1:a2:52:0e:1f:5e:ee:dc:8c:49:bd:fd:c2:88:6c: b6:c7:a7:b4:f6:da:54:49:2f:fd:14:4e:4c:8d:6f:98:2a:45: 57:ac:e5:fa:0e:74:1f:bf:28:91:0e:51:ba:f2:0b:f3:16:60: f4:6a:dc:1e:0e:8b:22:f1:b2:fa:fc:d2:63:df:f9:b7:a0:a1: 41:89:09:f9:ed:03:6a:e4:5b:af:45:40:a9:87:95:6b:ee:c3: da:b7:5e:6b:ce:92:48:09:33:61:e2:7a:9d:9a:6b:5e:ca:16: 43:a4:3e:c2:b7:11:d8:3a:f8:41:69:cf:ad:76:bf:cc:74:53: c2:8c:96:e0:fc:52:e3:b2:18:4f:8c:b5:67:cc:71:6c:d6:e9: 15:1e:c6:86:67:b3:9b:fa:da:a9:fe:bd:81:49:4e:65:98:fd: 05:7b:e3:e0:7a:e3:94:45:8d:cd:5e:4c:1d:7e:f0:9f:be:59: fd:d3:91:55:eb:20:b0:f8:36:9b:c7:4e:54:f6:34:61:07:c2: c7:14:c6:40:0d:2c:54:2f:7f:b2:ab:68:72:28:a5:7b:ae:a4: 9e:d6:cd:af:ef:1e:80:85:f5:7f:f5:06:38:56:6a:d4:31:8f: 97:cb:29:16:75:a6:28:a1:93:58:3c:07:a5:be:00:5c:db:5a: 6c:4e:0d:1b -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt5fts0WLVc4zjXNZYHm7HFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NjI1MjFlYjU4YjQ1YjBjNWEyY2NiZTM4MzMxNWNlNzlk N2VlYTUwHhcNMjYwMTAxMTIxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNThhMWVmN2QxYTY5MGJkYjc2NGM2YjY0ZThjZTQ5N2Y2Y2EyMmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1h9JaOWcUKu3YMOf4hlJDdqnjSgY gBj0GK8onb8Pw/hsOypScxva2K6IB9Ak1jZ+xktVT7bjM0a3kTP3pRF2IkTyL8Me NkmZJKWhvEHrQxHtVLYqKxCojcz21oJTB+Fdb0WqSsRqLG+U8RpGvEbMiF7snrqe mQ5COEQL4/8LZE5RV4fNR7i/7F79VaQ81qqX6tNPcn7fgbkeiRSajO7SQUp8pTxZ t91S49l/rp7DemioeB+qFIDVk7W7xHlFosZS01z4D/ZdaVLJ5oEcCVR7cCz4Atvn k8XDHGdi1vQ/K8PMi/eGabWM8qi8kxHEYr02iQ14pCer80Qgt4m4BhivGQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFMWKHvfRppC9t2TGtk6M5Jf2yiKlMB8GA1UdIwQY MBaAFEZiUh61i0WwxaLMvjgzFc551+6lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm1KU0hyV0xSYkRGb3N5LU9ETVZ6bm5YN3FVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi83MmM5ODQtMTQxMC00NWVjLTg2YzUt OGFiODY5Mzc0MTBhLzEveFlvZTk5R21rTDIzWk1hMlRvemtsX2JLSXFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi83MmM5ODQtMTQxMC00NWVjLTg2YzUtOGFiODY5Mzc0MTBh LzEvUm1KU0hyV0xSYkRGb3N5LU9ETVZ6bm5YN3FVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhJZgDAN BgkqhkiG9w0BAQsFAAOCAQEAfOeEwaJSDh9e7tyMSb39wohstsentPbaVEkv/RRO TI1vmCpFV6zl+g50H78okQ5RuvIL8xZg9GrcHg6LIvGy+vzSY9/5t6ChQYkJ+e0D auRbr0VAqYeVa+7D2rdea86SSAkzYeJ6nZprXsoWQ6Q+wrcR2Dr4QWnPrXa/zHRT woyW4PxS47IYT4y1Z8xxbNbpFR7Ghmezm/raqf69gUlOZZj9BXvj4HrjlEWNzV5M HX7wn75Z/dORVesgsPg2m8dOVPY0YQfCxxTGQA0sVC9/sqtociile66kntbNr+8e gIX1f/UGOFZq1DGPl8spFnWmKKGTWDwHpb4AXNtabE4NGw== -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:02 2026 by rpki-client