This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/xerBMxNW-woKiA8KHx0KcXB634A.roa File: xerBMxNW-woKiA8KHx0KcXB634A.roa (raw, json) Hash identifier: AR2Ndl4ICAGHIwDUvuX6ce4+Y2SPrh5ql1qQ6H1YP74= Subject key identifier: C5:EA:C1:33:13:56:FB:0A:0A:88:0F:0A:1F:1D:0A:71:70:7A:DF:80 Certificate issuer: /CN=317bf260bcda302be2c207628cfb164478614fe5 Certificate serial: 019B7D5C84D426504F14138B3FA03045EB6E Authority key identifier: 31:7B:F2:60:BC:DA:30:2B:E2:C2:07:62:8C:FB:16:44:78:61:4F:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/xerBMxNW-woKiA8KHx0KcXB634A.roa Signing time: Fri 02 Jan 2026 06:19:33 +0000 ROA not before: Fri 02 Jan 2026 06:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207716 IP address blocks: 2001:67c:988::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.crl rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:84:d4:26:50:4f:14:13:8b:3f:a0:30:45:eb:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=317bf260bcda302be2c207628cfb164478614fe5 Validity Not Before: Jan 2 06:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5eac1331356fb0a0a880f0a1f1d0a71707adf80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2e:70:13:03:52:f5:bd:0a:8b:4c:a2:d8:a7: 08:04:2a:e7:c9:b1:18:ad:54:4f:33:05:3e:c1:7f: 52:8b:0b:d8:fd:ff:64:3d:11:7d:bc:c3:a4:27:c7: 9c:11:6e:b0:24:61:9d:db:8d:94:4a:42:d9:fb:02: 38:bd:e0:7c:0c:d8:24:20:ef:54:1e:b3:ad:39:6b: fa:2b:07:91:0f:61:49:8d:d7:74:51:c1:4f:47:ba: 49:9c:4e:d4:3b:3d:b3:ee:83:d3:a4:e4:57:b0:ff: 63:06:3f:63:ab:07:e4:88:b3:7c:b1:b2:bc:f3:5a: 69:ed:af:63:f5:dc:83:07:b9:b7:a6:2e:7b:42:ed: 2d:de:9e:47:ad:85:b8:aa:50:e9:ce:63:ef:b6:31: fd:8e:2c:70:63:27:50:49:04:70:17:45:1b:99:70: ab:81:22:51:11:75:09:55:b5:e0:b1:e3:2c:e6:b0: 59:a7:ec:5c:cb:10:c8:4f:82:c0:80:b9:b9:63:d5: 20:ea:80:7f:c8:16:bc:76:fa:d9:93:bb:cf:c5:60: a7:c7:b1:32:9f:f4:7d:85:1f:30:81:37:1f:36:99: ab:fa:94:13:68:84:33:ef:a1:13:de:be:ee:9d:24: 36:aa:79:2b:b9:50:2d:cf:88:9b:83:8d:c6:b9:87: 5b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:EA:C1:33:13:56:FB:0A:0A:88:0F:0A:1F:1D:0A:71:70:7A:DF:80 X509v3 Authority Key Identifier: keyid:31:7B:F2:60:BC:DA:30:2B:E2:C2:07:62:8C:FB:16:44:78:61:4F:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/xerBMxNW-woKiA8KHx0KcXB634A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:988::/48 Signature Algorithm: sha256WithRSAEncryption ae:b2:cb:e7:09:4e:43:a4:71:5d:89:04:1c:d2:1f:8c:f4:87: 83:05:91:d6:d4:90:94:33:f1:63:7d:c4:dc:75:2e:dd:05:8a: 5a:17:41:93:40:d6:f0:21:fd:3e:6e:98:35:60:00:8b:80:eb: 89:9b:69:1d:77:c3:8f:d8:c8:57:f8:10:42:88:fb:d9:00:da: 56:99:9d:d3:c4:90:92:da:31:9c:60:52:32:a0:9b:40:68:9e: 38:d2:cc:1f:81:ea:80:8d:e6:d7:da:75:5f:97:f1:fc:a0:9f: 03:aa:ed:a9:83:c6:b1:73:a3:f2:a0:f4:ba:54:d1:be:46:ac: b0:d9:90:cd:97:38:58:66:88:f1:ee:76:2d:51:1a:3f:01:7b: ab:7f:31:6a:97:68:f1:59:65:17:53:d3:f2:85:67:67:60:ff: fc:99:27:4c:64:f1:a3:0a:f3:46:f1:fe:18:c3:b4:79:aa:0c: 1f:bb:78:67:1a:63:ba:79:8b:d4:8e:34:5e:36:d8:9f:e6:1e: f2:6b:36:ed:af:76:54:79:e8:25:75:b1:91:dd:05:18:de:24: b2:53:60:d4:97:5a:03:ae:de:ac:68:fe:7b:48:4c:b1:0e:dd: f6:be:7c:31:59:db:e8:03:c5:7e:60:77:ed:8b:91:c0:ef:f2: 9b:ba:84:49 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XITUJlBPFBOLP6AwRetuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxN2JmMjYwYmNkYTMwMmJlMmMyMDc2MjhjZmIxNjQ0Nzg2 MTRmZTUwHhcNMjYwMTAyMDYxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNWVhYzEzMzEzNTZmYjBhMGE4ODBmMGExZjFkMGE3MTcwN2FkZjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApi5wEwNS9b0Ki0yi2KcIBCrnybEY rVRPMwU+wX9SiwvY/f9kPRF9vMOkJ8ecEW6wJGGd242USkLZ+wI4veB8DNgkIO9U HrOtOWv6KweRD2FJjdd0UcFPR7pJnE7UOz2z7oPTpORXsP9jBj9jqwfkiLN8sbK8 81pp7a9j9dyDB7m3pi57Qu0t3p5HrYW4qlDpzmPvtjH9jixwYydQSQRwF0UbmXCr gSJREXUJVbXgseMs5rBZp+xcyxDIT4LAgLm5Y9Ug6oB/yBa8dvrZk7vPxWCnx7Ey n/R9hR8wgTcfNpmr+pQTaIQz76ET3r7unSQ2qnkruVAtz4ibg43GuYdbLQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMXqwTMTVvsKCogPCh8dCnFwet+AMB8GA1UdIwQY MBaAFDF78mC82jAr4sIHYoz7FkR4YU/lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVh2eVlMemFNQ3Zpd2dkaWpQc1dSSGhoVC1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8wN2QxNDYtZWYyMi00ZTVjLWJkNWMt NDJlZDNlMzczNjc5LzEveGVyQk14Tlctd29LaUE4S0h4MEtjWEI2MzRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8wN2QxNDYtZWYyMi00ZTVjLWJkNWMtNDJlZDNlMzczNjc5 LzEvTVh2eVlMemFNQ3Zpd2dkaWpQc1dSSGhoVC1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAmI MA0GCSqGSIb3DQEBCwUAA4IBAQCussvnCU5DpHFdiQQc0h+M9IeDBZHW1JCUM/Fj fcTcdS7dBYpaF0GTQNbwIf0+bpg1YACLgOuJm2kdd8OP2MhX+BBCiPvZANpWmZ3T xJCS2jGcYFIyoJtAaJ440swfgeqAjebX2nVfl/H8oJ8Dqu2pg8axc6PyoPS6VNG+ Rqyw2ZDNlzhYZojx7nYtURo/AXurfzFql2jxWWUXU9PyhWdnYP/8mSdMZPGjCvNG 8f4Yw7R5qgwfu3hnGmO6eYvUjjReNtif5h7yazbtr3ZUeegldbGR3QUY3iSyU2DU l1oDrt6saP57SEyxDt32vnwxWdvoA8V+YHfti5HA7/KbuoRJ -----END CERTIFICATE-----Generated at Sun Jan 25 21:04:36 2026 by rpki-client