This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/XB8Sx4gXFtSF9eD_Muj5zmcQYkQ.roa File: XB8Sx4gXFtSF9eD_Muj5zmcQYkQ.roa (raw, json) Hash identifier: VwvUl3dbol/6rYiUWuSw58SxJ+3XyZanUyUwXdcrLrA= Subject key identifier: 5C:1F:12:C7:88:17:16:D4:85:F5:E0:FF:32:E8:F9:CE:67:10:62:44 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019AD156F787C8C637D2E117481EEB156D66 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/XB8Sx4gXFtSF9eD_Muj5zmcQYkQ.roa Signing time: Sat 29 Nov 2025 20:38:48 +0000 ROA not before: Sat 29 Nov 2025 20:38:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215574 IP address blocks: 2a0c:9a40:88c0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d1:56:f7:87:c8:c6:37:d2:e1:17:48:1e:eb:15:6d:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Nov 29 20:38:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5c1f12c7881716d485f5e0ff32e8f9ce67106244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e8:ab:f8:d0:d6:d8:81:eb:34:64:6a:f5:73: ee:da:e3:c8:d8:cc:43:d0:7b:a6:9c:af:ae:42:e1: 2b:be:e8:95:2a:ae:00:c3:57:f8:65:8d:ec:ba:1c: 25:80:b7:ce:6f:1c:52:f9:43:c4:3d:f6:8e:ca:15: 4c:5d:3a:f1:e4:7a:40:95:ee:b9:b8:e9:89:ad:f5: da:9a:42:04:98:10:13:9a:fb:89:cb:52:54:50:f7: 52:d1:ac:44:d5:f7:07:ad:95:c1:76:16:cd:27:4a: 80:e0:3c:3e:55:ac:63:b1:d9:40:ed:63:fd:d1:43: c5:e0:60:bc:49:0e:81:d9:82:1e:27:bd:4c:b8:0b: 70:84:e6:8d:c7:78:2a:7c:c4:c8:a4:9e:f1:85:19: 19:8c:c7:ba:a0:94:e4:32:6b:9a:da:e6:6b:29:e3: c0:e9:de:dc:13:f0:13:c4:14:a0:8e:18:39:29:f8: ad:d5:ba:b0:ab:7f:b8:62:2f:4b:40:25:1a:bd:c5: 39:32:ec:b4:6b:48:87:3a:6c:e8:df:21:c8:e8:34: f9:95:f3:41:81:53:de:4f:d8:07:17:b1:57:f7:65: 09:18:0b:b2:96:21:79:64:f4:9c:3f:b8:14:95:c8: 9e:84:9f:a9:70:03:d6:6d:6d:d3:73:2e:92:02:3a: 5c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:1F:12:C7:88:17:16:D4:85:F5:E0:FF:32:E8:F9:CE:67:10:62:44 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/XB8Sx4gXFtSF9eD_Muj5zmcQYkQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:88c0::/44 Signature Algorithm: sha256WithRSAEncryption c5:6d:da:42:97:2f:c1:3b:af:fa:2b:83:e6:3a:bc:51:1b:70: cc:e6:cd:28:49:dd:43:4d:83:4b:4a:6c:46:d8:f6:f3:e8:18: ed:e9:65:7f:c6:76:0d:36:b6:d9:97:85:42:c9:cd:cb:e8:bb: 0e:53:2d:72:6c:bf:a8:1d:e7:a2:ee:d8:b5:69:34:6d:5f:b9: 12:7c:9b:56:17:91:c8:7c:fc:00:a0:e8:d8:81:65:30:54:6e: b7:c7:74:a8:f3:57:83:6f:5e:4b:43:89:27:a5:c1:4d:7a:fb: 19:0d:58:32:39:3d:0e:e7:9c:0a:f9:a5:bd:35:0c:2a:47:ab: 6f:6f:67:cc:fe:da:4f:49:1f:01:f9:a2:4e:6d:2a:7f:b2:29: 8e:ee:a1:20:49:e5:69:e2:34:aa:dc:98:3c:05:29:cb:1d:39: 20:36:cd:d4:df:1f:a1:d9:2f:d1:31:df:af:6e:e2:09:2e:3f: 63:16:05:e1:a1:c9:55:6a:aa:26:20:48:d8:01:1a:3b:ae:b5: 33:47:3e:88:fd:2a:96:9d:c6:a2:45:2b:87:aa:9c:d2:bf:7f: 43:25:b6:e5:2f:87:0d:31:b7:0e:ab:6e:23:08:93:3b:5f:19: 8c:47:db:cf:54:7a:5d:94:d0:76:cd:46:d0:89:e1:0d:9f:6d: 9f:2f:ee:1b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZrRVveHyMY30uEXSB7rFW1mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjUxMTI5MjAzODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzFmMTJjNzg4MTcxNmQ0ODVmNWUwZmYzMmU4ZjljZTY3MTA2MjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+ir+NDW2IHrNGRq9XPu2uPI2MxD 0HumnK+uQuErvuiVKq4Aw1f4ZY3suhwlgLfObxxS+UPEPfaOyhVMXTrx5HpAle65 uOmJrfXamkIEmBATmvuJy1JUUPdS0axE1fcHrZXBdhbNJ0qA4Dw+VaxjsdlA7WP9 0UPF4GC8SQ6B2YIeJ71MuAtwhOaNx3gqfMTIpJ7xhRkZjMe6oJTkMmua2uZrKePA 6d7cE/ATxBSgjhg5Kfit1bqwq3+4Yi9LQCUavcU5Muy0a0iHOmzo3yHI6DT5lfNB gVPeT9gHF7FX92UJGAuyliF5ZPScP7gUlciehJ+pcAPWbW3Tcy6SAjpccwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFwfEseIFxbUhfXg/zLo+c5nEGJEMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvWEI4U3g0Z1hGdFNGOWVEX011ajV6bWNRWWtRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgyaQIjA MA0GCSqGSIb3DQEBCwUAA4IBAQDFbdpCly/BO6/6K4PmOrxRG3DM5s0oSd1DTYNL SmxG2Pbz6Bjt6WV/xnYNNrbZl4VCyc3L6LsOUy1ybL+oHeei7ti1aTRtX7kSfJtW F5HIfPwAoOjYgWUwVG63x3So81eDb15LQ4knpcFNevsZDVgyOT0O55wK+aW9NQwq R6tvb2fM/tpPSR8B+aJObSp/simO7qEgSeVp4jSq3Jg8BSnLHTkgNs3U3x+h2S/R Md+vbuIJLj9jFgXhoclVaqomIEjYARo7rrUzRz6I/SqWncaiRSuHqpzSv39DJbbl L4cNMbcOq24jCJM7XxmMR9vPVHpdlNB2zUbQieENn22fL+4b -----END CERTIFICATE-----Generated at Sat Dec 6 17:18:14 2025 by rpki-client