This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/_0bL5lQ7jv2gajeFa3wxL4gw8Z8.roa File: _0bL5lQ7jv2gajeFa3wxL4gw8Z8.roa (raw, json) Hash identifier: ADpiFGuv8IPUbfDka343+Lqwl1ayN75paCbYU312bg4= Subject key identifier: FF:46:CB:E6:54:3B:8E:FD:A0:6A:37:85:6B:7C:31:2F:88:30:F1:9F Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA757E1F4D8737A8C34B27310535B83 Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/_0bL5lQ7jv2gajeFa3wxL4gw8Z8.roa Signing time: Fri 02 Jan 2026 12:20:54 +0000 ROA not before: Fri 02 Jan 2026 12:20:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8629 IP address blocks: 84.253.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:57:e1:f4:d8:73:7a:8c:34:b2:73:10:53:5b:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:20:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff46cbe6543b8efda06a37856b7c312f8830f19f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:05:29:90:8a:6d:f1:29:33:43:1c:b1:0b:17: 47:0b:f8:71:5f:75:6f:15:cf:c1:76:c2:c2:08:80: 04:aa:75:29:34:30:5c:fb:5d:81:3e:13:39:75:d2: 1e:c7:20:f1:c0:3c:1e:9d:02:e3:6b:83:40:16:bd: 76:e5:52:34:04:03:0d:78:bd:ec:d6:50:60:df:38: 56:29:93:6c:4c:7e:38:c1:7e:92:f5:33:de:e3:15: 0d:3f:dd:6a:88:81:be:56:02:55:ab:cb:65:56:35: 11:6f:c5:f9:fa:83:ca:b3:1c:8e:81:1b:50:85:97: 43:c9:0d:ed:0f:44:37:65:c7:de:d9:99:1d:45:ee: 1d:9d:5a:9b:4a:96:7b:64:8f:19:02:58:3f:74:68: 9e:a6:01:c9:45:e9:64:79:76:cd:29:6c:1d:32:ef: 71:29:83:64:84:d7:97:a1:fa:08:db:49:26:89:22: c2:c9:fc:d5:98:28:0b:79:a6:d3:1f:12:90:27:b0: 8a:02:85:68:fc:3d:3c:47:46:f4:b7:c7:e8:44:0b: f8:e7:39:ec:ca:a6:1d:4a:9f:1a:22:2e:83:1d:bb: 53:68:12:af:71:6d:19:e1:93:f3:78:47:d3:20:4c: d9:e3:c7:05:cd:dc:f7:47:17:1e:d7:bb:3b:c5:63: a9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:46:CB:E6:54:3B:8E:FD:A0:6A:37:85:6B:7C:31:2F:88:30:F1:9F X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/_0bL5lQ7jv2gajeFa3wxL4gw8Z8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.253.96.0/19 Signature Algorithm: sha256WithRSAEncryption 80:16:46:13:0f:2d:32:3f:06:38:4f:8c:ec:87:9f:a5:d2:1e: 73:12:ef:60:9e:c0:87:c5:af:4b:6b:1a:26:0f:d5:2a:e5:7f: c2:c2:29:80:0b:9d:b1:32:65:e9:fd:d9:8f:fb:a2:64:45:45: 93:22:1c:ee:33:b9:8e:1f:d3:e5:c8:a9:36:f8:96:62:77:ea: 17:25:04:a1:04:a8:55:7d:57:9f:1f:cd:e6:68:b9:fd:63:28: 34:44:a4:66:34:e3:1f:16:2a:63:52:70:1a:0c:0a:43:a4:d7: 61:ee:f0:66:ce:0d:09:28:19:26:ab:60:48:92:26:8f:95:e0: 53:32:f8:7d:7d:ac:45:e0:7d:a8:4f:a0:e5:a6:56:27:96:13: 86:3a:a4:9b:86:86:14:dc:27:85:12:4c:6c:41:fe:35:6c:cb: 72:50:3e:8b:be:11:5f:62:9b:60:d0:66:9e:6f:52:03:c4:87: 7b:0e:aa:ca:06:61:b4:8d:bd:da:d9:20:e0:0e:5a:c4:50:75: 59:eb:19:24:83:11:6e:12:38:af:37:1b:9c:be:15:cc:1c:a3: b4:0f:f6:c4:16:86:6e:48:52:6d:26:04:7e:b6:c3:45:ba:58: 78:63:04:1a:2e:f7:c2:ca:2a:e2:0d:be:10:60:a3:3e:5d:c6: fc:46:78:43 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p1fh9Nhzeow0snMQU1uDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjQ2Y2JlNjU0M2I4ZWZkYTA2YTM3ODU2YjdjMzEyZjg4MzBmMTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgUpkIpt8SkzQxyxCxdHC/hxX3Vv Fc/BdsLCCIAEqnUpNDBc+12BPhM5ddIexyDxwDwenQLja4NAFr125VI0BAMNeL3s 1lBg3zhWKZNsTH44wX6S9TPe4xUNP91qiIG+VgJVq8tlVjURb8X5+oPKsxyOgRtQ hZdDyQ3tD0Q3Zcfe2ZkdRe4dnVqbSpZ7ZI8ZAlg/dGiepgHJRelkeXbNKWwdMu9x KYNkhNeXofoI20kmiSLCyfzVmCgLeabTHxKQJ7CKAoVo/D08R0b0t8foRAv45zns yqYdSp8aIi6DHbtTaBKvcW0Z4ZPzeEfTIEzZ48cFzdz3Rxce17s7xWOpnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP9Gy+ZUO479oGo3hWt8MS+IMPGfMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvXzBiTDVsUTdqdjJnYWplRmEzd3hMNGd3OFo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFVP1gMA0G CSqGSIb3DQEBCwUAA4IBAQCAFkYTDy0yPwY4T4zsh5+l0h5zEu9gnsCHxa9Laxom D9Uq5X/CwimAC52xMmXp/dmP+6JkRUWTIhzuM7mOH9PlyKk2+JZid+oXJQShBKhV fVefH83maLn9Yyg0RKRmNOMfFipjUnAaDApDpNdh7vBmzg0JKBkmq2BIkiaPleBT Mvh9faxF4H2oT6DlplYnlhOGOqSbhoYU3CeFEkxsQf41bMtyUD6LvhFfYptg0Gae b1IDxId7DqrKBmG0jb3a2SDgDlrEUHVZ6xkkgxFuEjivNxucvhXMHKO0D/bEFoZu SFJtJgR+tsNFulh4YwQaLvfCyiriDb4QYKM+Xcb8RnhD -----END CERTIFICATE-----Generated at Mon Jan 26 10:13:37 2026 by rpki-client