This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/XYSNXgOWe9IJpoL46YepINiKd84.roa File: XYSNXgOWe9IJpoL46YepINiKd84.roa (raw, json) Hash identifier: Vk6ebMhk8Rq6oT3qnZ5N5JfY89bnsqXHeAMLjYKa7co= Subject key identifier: 5D:84:8D:5E:03:96:7B:D2:09:A6:82:F8:E9:87:A9:20:D8:8A:77:CE Certificate issuer: /CN=663a24480f04d1318bf1a70dabffa4b27ef32da2 Certificate serial: 019B7CED6FCE4118B2CF070309A454FCFFD9 Authority key identifier: 66:3A:24:48:0F:04:D1:31:8B:F1:A7:0D:AB:FF:A4:B2:7E:F3:2D:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/XYSNXgOWe9IJpoL46YepINiKd84.roa Signing time: Fri 02 Jan 2026 04:18:13 +0000 ROA not before: Fri 02 Jan 2026 04:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207748 IP address blocks: 2a14:a901::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:6f:ce:41:18:b2:cf:07:03:09:a4:54:fc:ff:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=663a24480f04d1318bf1a70dabffa4b27ef32da2 Validity Not Before: Jan 2 04:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d848d5e03967bd209a682f8e987a920d88a77ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a4:d1:3e:ad:42:ac:a6:c0:ef:bf:a6:9c:15: e3:af:97:a8:e0:fb:8d:e9:12:fc:02:08:89:e3:71: 20:51:cf:b5:7c:a5:2e:a5:77:41:af:e1:3a:a1:47: c0:8c:b2:08:be:50:74:e6:93:e2:66:ec:ba:6e:5f: b7:d9:75:a7:22:04:98:b5:ff:a6:3c:5c:b7:02:96: ec:7c:ca:be:cf:df:0e:a9:3d:53:53:73:77:4a:d2: 66:f4:77:56:bb:e7:66:cd:38:ad:3e:12:c7:9a:6e: 56:99:5f:83:23:ce:aa:d8:8b:12:90:8d:2c:ee:bb: dc:5e:3f:7e:ae:ff:06:cc:ae:d5:4b:aa:95:0c:ca: a6:2b:fb:54:b0:6d:3f:d9:75:69:e8:8f:4b:49:2b: 5e:6a:5a:89:69:41:69:f3:18:00:45:bd:08:17:2a: 1a:ea:1f:e2:b9:5d:43:cf:26:64:30:c9:6e:86:49: 00:b3:ad:9c:fe:fa:56:58:b8:b7:cc:7e:f8:0d:e7: 3b:c3:61:7c:f0:9b:9c:7d:33:1d:01:bf:51:37:d0: f0:b4:d3:24:69:93:1e:93:4a:e1:9a:81:eb:a5:a3: a9:12:75:08:66:3f:69:d9:c8:34:ac:bc:72:ac:4d: 4d:f4:bd:3c:a3:74:7d:82:d8:71:d8:3f:4a:28:6f: 27:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:84:8D:5E:03:96:7B:D2:09:A6:82:F8:E9:87:A9:20:D8:8A:77:CE X509v3 Authority Key Identifier: keyid:66:3A:24:48:0F:04:D1:31:8B:F1:A7:0D:AB:FF:A4:B2:7E:F3:2D:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/XYSNXgOWe9IJpoL46YepINiKd84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:a901::/44 Signature Algorithm: sha256WithRSAEncryption d0:5f:fe:66:16:7d:a8:da:67:62:a0:e6:43:1a:67:b9:71:bb: b4:4f:9c:a3:e6:d0:61:19:69:29:d4:ea:a5:cb:80:74:0d:71: 42:e5:f5:3f:d5:52:1d:93:4e:ed:38:a2:ce:98:10:0c:c8:af: fc:a2:a1:a9:cb:c1:1a:cb:17:8d:6f:cc:9b:3c:0a:8c:ba:28: b3:fd:78:d9:fe:1e:76:ce:bb:e8:03:ed:f5:4c:3e:0a:fc:86: a6:87:7c:54:39:62:2c:c7:74:4b:6e:60:c0:01:10:46:62:d7: 08:43:f4:17:31:9e:f0:4d:1c:27:d2:1b:ea:9c:fc:6f:35:f3: 32:a3:a0:46:29:ca:69:03:49:ad:02:31:32:66:48:ee:6b:17: 94:38:c0:be:04:16:49:be:c4:3f:38:77:4b:ea:ea:a6:66:61: e6:24:af:2c:96:34:2f:8a:c8:d0:fc:b9:13:15:51:d8:84:60: 6c:f5:2d:ea:fe:07:af:f6:65:a9:e7:d8:3e:e8:48:1b:09:f2: 7d:05:37:dc:35:78:b2:7d:a6:b0:b0:95:98:6d:68:27:64:d8: d8:b8:b4:87:35:fc:a2:f8:ae:14:e6:6b:46:b9:bd:c7:fb:a5: a0:15:d8:5e:9c:33:4d:28:9e:35:1e:48:ce:5e:97:9e:a5:ff: 95:24:e4:14 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt87W/OQRiyzwcDCaRU/P/ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2M2EyNDQ4MGYwNGQxMzE4YmYxYTcwZGFiZmZhNGIyN2Vm MzJkYTIwHhcNMjYwMTAyMDQxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDg0OGQ1ZTAzOTY3YmQyMDlhNjgyZjhlOTg3YTkyMGQ4OGE3N2NlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6TRPq1CrKbA77+mnBXjr5eo4PuN 6RL8AgiJ43EgUc+1fKUupXdBr+E6oUfAjLIIvlB05pPiZuy6bl+32XWnIgSYtf+m PFy3ApbsfMq+z98OqT1TU3N3StJm9HdWu+dmzTitPhLHmm5WmV+DI86q2IsSkI0s 7rvcXj9+rv8GzK7VS6qVDMqmK/tUsG0/2XVp6I9LSStealqJaUFp8xgARb0IFyoa 6h/iuV1DzyZkMMluhkkAs62c/vpWWLi3zH74Dec7w2F88JucfTMdAb9RN9DwtNMk aZMek0rhmoHrpaOpEnUIZj9p2cg0rLxyrE1N9L08o3R9gthx2D9KKG8n7wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFF2EjV4DlnvSCaaC+OmHqSDYinfOMB8GA1UdIwQY MBaAFGY6JEgPBNExi/GnDav/pLJ+8y2iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmpva1NBOEUwVEdMOGFjTnFfLWtzbjd6TGFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi82ZjgwYTgtNmI2YS00ZDk2LWJmNDkt Nzc1ZjVmNzRkNTgxLzEvWFlTTlhnT1dlOUlKcG9MNDZZZXBJTmlLZDg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi82ZjgwYTgtNmI2YS00ZDk2LWJmNDktNzc1ZjVmNzRkNTgx LzEvWmpva1NBOEUwVEdMOGFjTnFfLWtzbjd6TGFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhSpAQAA MA0GCSqGSIb3DQEBCwUAA4IBAQDQX/5mFn2o2mdioOZDGme5cbu0T5yj5tBhGWkp 1Oqly4B0DXFC5fU/1VIdk07tOKLOmBAMyK/8oqGpy8EayxeNb8ybPAqMuiiz/XjZ /h52zrvoA+31TD4K/Iamh3xUOWIsx3RLbmDAARBGYtcIQ/QXMZ7wTRwn0hvqnPxv NfMyo6BGKcppA0mtAjEyZkjuaxeUOMC+BBZJvsQ/OHdL6uqmZmHmJK8sljQvisjQ /LkTFVHYhGBs9S3q/gev9mWp59g+6EgbCfJ9BTfcNXiyfaawsJWYbWgnZNjYuLSH Nfyi+K4U5mtGub3H+6WgFdhenDNNKJ41HkjOXpeepf+VJOQU -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:51 2026 by rpki-client