This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/x_qwW5fCUEp6cCaxXizX8uADxks.roa File: x_qwW5fCUEp6cCaxXizX8uADxks.roa (raw, json) Hash identifier: /RJv3xyXxJo1VKsy+QfDb0MKoLCdSZnJEbKs6B+/EVk= Subject key identifier: C7:FA:B0:5B:97:C2:50:4A:7A:70:26:B1:5E:2C:D7:F2:E0:03:C6:4B Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA772132320781E01BB2F9CE1AC13BF Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/x_qwW5fCUEp6cCaxXizX8uADxks.roa Signing time: Fri 02 Jan 2026 12:21:01 +0000 ROA not before: Fri 02 Jan 2026 12:21:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39229 IP address blocks: 2a00:1e88:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:72:13:23:20:78:1e:01:bb:2f:9c:e1:ac:13:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:21:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7fab05b97c2504a7a7026b15e2cd7f2e003c64b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:00:9b:09:cc:2d:10:86:c4:52:35:11:f0:dc: 00:49:aa:b9:30:7d:04:c7:ec:7c:9d:9d:84:8d:4a: dc:b7:ad:98:d4:0c:19:d9:bd:a2:ea:f3:12:ca:b7: 09:7b:ed:72:85:6c:a2:e8:74:39:b5:ff:1c:e3:ee: 7a:e1:f7:ef:c6:b5:2d:ed:01:35:9a:ac:b5:38:fb: b3:9b:23:14:85:18:5d:9c:17:21:e6:51:34:79:c2: f1:c9:f6:0d:39:5d:cd:7a:18:87:03:e9:f8:52:15: c4:fa:c1:b9:de:97:81:a0:d9:98:b8:13:00:f5:35: 5d:88:76:f7:fc:41:f2:ed:93:61:9a:cc:f7:eb:9e: f3:8c:6d:17:ad:b7:2d:70:be:95:37:68:b3:7f:f9: 1b:d4:d9:fb:af:e4:52:01:45:e4:bc:65:23:0f:04: 14:3b:ef:8c:b6:cb:65:af:08:d9:6c:fe:9b:3d:54: 78:0f:d7:5a:79:34:22:63:10:c7:21:f5:a4:3d:49: ca:99:8b:0d:ba:f3:28:b0:a6:e4:78:32:2f:69:3c: ce:68:6b:80:6f:d0:5a:6c:b3:55:98:1c:06:cc:8b: a2:be:45:ab:1c:a5:05:35:73:c0:7c:aa:61:08:aa: 21:e0:36:62:9e:16:fe:98:cc:34:8a:0f:af:2e:78: da:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:FA:B0:5B:97:C2:50:4A:7A:70:26:B1:5E:2C:D7:F2:E0:03:C6:4B X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/x_qwW5fCUEp6cCaxXizX8uADxks.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:1e88:8::/48 Signature Algorithm: sha256WithRSAEncryption 15:be:46:68:72:3b:ad:06:c9:aa:4a:9e:b7:f2:9e:90:2a:ca: 9c:ac:a1:06:c6:a6:9d:b3:42:3e:ec:b5:61:49:54:a7:10:4c: f8:3e:f4:6c:af:7d:93:0a:d6:6e:b4:db:d8:8e:e8:63:e6:a0: 21:85:fb:5c:0a:51:c3:1d:25:31:66:7a:40:5a:6f:b4:88:77: c3:12:e4:57:b7:fd:ff:f0:32:5b:f0:12:91:9a:ae:22:57:f2: d7:fe:bd:a9:8e:b2:1b:7b:04:e5:95:13:4f:93:a0:fc:63:7c: 56:aa:97:0a:aa:18:2e:ee:e8:86:73:1e:15:c1:f8:a8:c4:95: c6:ce:be:5d:81:24:51:bd:71:1f:f6:27:cc:b5:e1:9c:2d:2a: 79:ac:c2:be:51:4b:00:eb:87:b4:7e:ed:39:62:92:03:71:c3: 6a:ec:e5:12:eb:4c:32:27:d1:aa:31:91:24:a1:35:1b:89:6f: 83:c3:9b:9f:9b:1a:5c:df:ff:67:38:33:fc:b3:15:f8:5d:71: a5:9d:21:0a:f6:63:a3:d4:83:ac:c7:bc:1f:07:95:75:61:d5: 06:c8:c5:7d:8a:27:17:ee:28:69:f1:0f:4d:0e:1a:17:80:11: 21:54:4f:7f:f9:c7:d0:31:56:d1:f8:3b:db:5c:23:df:dc:01: 21:44:2e:bd -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+p3ITIyB4HgG7L5zhrBO/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjN2ZhYjA1Yjk3YzI1MDRhN2E3MDI2YjE1ZTJjZDdmMmUwMDNjNjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtACbCcwtEIbEUjUR8NwASaq5MH0E x+x8nZ2EjUrct62Y1AwZ2b2i6vMSyrcJe+1yhWyi6HQ5tf8c4+564ffvxrUt7QE1 mqy1OPuzmyMUhRhdnBch5lE0ecLxyfYNOV3NehiHA+n4UhXE+sG53peBoNmYuBMA 9TVdiHb3/EHy7ZNhmsz3657zjG0XrbctcL6VN2izf/kb1Nn7r+RSAUXkvGUjDwQU O++MtstlrwjZbP6bPVR4D9daeTQiYxDHIfWkPUnKmYsNuvMosKbkeDIvaTzOaGuA b9BabLNVmBwGzIuivkWrHKUFNXPAfKphCKoh4DZinhb+mMw0ig+vLnjacQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMf6sFuXwlBKenAmsV4s1/LgA8ZLMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEveF9xd1c1ZkNVRXA2Y0NheFhpelg4dUFEeGtzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgAeiAAI MA0GCSqGSIb3DQEBCwUAA4IBAQAVvkZocjutBsmqSp638p6QKsqcrKEGxqads0I+ 7LVhSVSnEEz4PvRsr32TCtZutNvYjuhj5qAhhftcClHDHSUxZnpAWm+0iHfDEuRX t/3/8DJb8BKRmq4iV/LX/r2pjrIbewTllRNPk6D8Y3xWqpcKqhgu7uiGcx4Vwfio xJXGzr5dgSRRvXEf9ifMteGcLSp5rMK+UUsA64e0fu05YpIDccNq7OUS60wyJ9Gq MZEkoTUbiW+Dw5ufmxpc3/9nODP8sxX4XXGlnSEK9mOj1IOsx7wfB5V1YdUGyMV9 iicX7ihp8Q9NDhoXgBEhVE9/+cfQMVbR+DvbXCPf3AEhRC69 -----END CERTIFICATE-----Generated at Mon Jan 26 10:14:10 2026 by rpki-client