This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/xyaLQZsDAvrm7P96t1P_1iQ01ug.roa File: xyaLQZsDAvrm7P96t1P_1iQ01ug.roa (raw, json) Hash identifier: 8WV+5vFShCRtn2TW6yJKkPCd8zXeEaaVVDKdZ+jH3aY= Subject key identifier: C7:26:8B:41:9B:03:02:FA:E6:EC:FF:7A:B7:53:FF:D6:24:34:D6:E8 Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Certificate serial: 019B7F8419AFC35CD50C87D19CC94E5BF5C5 Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/xyaLQZsDAvrm7P96t1P_1iQ01ug.roa Signing time: Fri 02 Jan 2026 16:22:02 +0000 ROA not before: Fri 02 Jan 2026 16:22:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397520 IP address blocks: 2a01:488:bb19::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:19:af:c3:5c:d5:0c:87:d1:9c:c9:4e:5b:f5:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Validity Not Before: Jan 2 16:22:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7268b419b0302fae6ecff7ab753ffd62434d6e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2e:79:67:c8:2f:23:d8:89:ea:a0:49:9f:e8: 76:9c:c8:c0:f7:c3:eb:8b:86:bf:a7:4e:a2:d3:05: c4:25:27:71:74:53:ba:d4:fa:3a:b9:37:3f:fb:09: 33:26:d6:25:40:98:01:04:11:26:93:f3:80:7c:6c: e9:ed:2e:e5:d7:9b:fb:f2:d3:25:94:5f:e5:91:d2: 69:15:7a:ae:e0:9d:4a:6a:59:f9:c2:67:3a:cc:71: 0b:65:b2:c1:58:ba:04:2d:b4:2d:c9:3f:84:75:95: 10:5a:52:ec:dd:03:06:4a:7a:e4:b1:69:9a:1a:8f: fd:d9:6e:7b:0e:e1:71:d4:14:26:2e:4e:61:98:f6: 06:03:b5:3b:0b:36:4c:ce:72:0c:89:2c:ed:8b:17: 8b:88:53:1a:a8:19:13:b4:f6:17:88:96:7b:36:88: 0e:b5:43:0d:3e:d3:a4:46:cb:4f:c6:99:a8:d3:30: 09:b7:de:4e:e0:91:aa:14:e7:4d:ad:ef:1a:1e:dc: 97:2d:82:08:c1:f4:17:e1:58:aa:4c:db:f0:69:1c: 5a:c3:02:9d:cc:3e:cb:4a:8c:e5:af:39:67:6a:e1: 16:cf:88:87:00:fe:00:86:4b:b9:79:1d:6a:d5:e6: 3e:4a:41:34:f9:77:f6:6a:f6:46:37:95:b1:69:f3: 0d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:26:8B:41:9B:03:02:FA:E6:EC:FF:7A:B7:53:FF:D6:24:34:D6:E8 X509v3 Authority Key Identifier: keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/xyaLQZsDAvrm7P96t1P_1iQ01ug.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:488:bb19::/48 Signature Algorithm: sha256WithRSAEncryption 90:f8:77:ad:7c:c0:81:88:96:8e:74:5e:48:b3:62:98:98:77: dd:d3:31:48:4d:50:18:54:aa:7d:10:fe:9e:24:b8:95:65:98: c3:0d:89:84:f1:41:cc:e4:f6:1f:9a:8f:2f:93:84:8f:b8:ed: 11:47:10:ca:45:62:bc:4f:47:80:9a:cc:3d:12:22:12:28:fb: 24:33:eb:3e:39:49:23:84:7d:1e:e8:6a:5b:6e:36:94:f7:6d: 79:ea:89:dc:20:c2:7f:ea:1a:22:38:8a:03:d8:1b:48:00:59: c0:cf:50:62:6e:f4:53:b9:23:5e:ac:34:6b:07:5b:d1:90:3d: 0c:4f:35:0a:06:3a:36:f5:f4:4b:5c:c7:d7:83:12:2b:a5:18: 6d:46:09:a9:0e:d7:0b:d6:b1:86:c5:58:d5:bd:71:8f:e2:4e: 5f:3b:ad:23:6a:f8:0e:0c:3f:9d:91:9b:5a:2c:2e:64:28:b5: 89:8c:2b:bc:00:fb:6d:9c:f7:87:c1:f9:ba:0e:67:f7:c5:d5: 72:82:10:e6:1d:24:ba:f5:fe:4f:8d:bd:da:b2:d2:8f:0d:e7: a6:14:41:7a:f9:95:5d:0c:eb:a1:16:11:f6:25:d8:78:a2:65: 5e:b5:59:54:de:06:b5:8b:42:ae:b1:10:10:c6:e3:cd:83:ae: eb:2b:cc:c5 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/hBmvw1zVDIfRnMlOW/XFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNmVkMGZiN2IzMjA4MzJhYzE1ODA1MzRjN2IyNjNmMzA0 ZTk4MWIwHhcNMjYwMTAyMTYyMjAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzI2OGI0MTliMDMwMmZhZTZlY2ZmN2FiNzUzZmZkNjI0MzRkNmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuy55Z8gvI9iJ6qBJn+h2nMjA98Pr i4a/p06i0wXEJSdxdFO61Po6uTc/+wkzJtYlQJgBBBEmk/OAfGzp7S7l15v78tMl lF/lkdJpFXqu4J1Kaln5wmc6zHELZbLBWLoELbQtyT+EdZUQWlLs3QMGSnrksWma Go/92W57DuFx1BQmLk5hmPYGA7U7CzZMznIMiSztixeLiFMaqBkTtPYXiJZ7NogO tUMNPtOkRstPxpmo0zAJt95O4JGqFOdNre8aHtyXLYIIwfQX4ViqTNvwaRxawwKd zD7LSozlrzlnauEWz4iHAP4Ahku5eR1q1eY+SkE0+Xf2avZGN5WxafMNVwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMcmi0GbAwL65uz/erdT/9YkNNboMB8GA1UdIwQY MBaAFLpu0Pt7MggyrBWAU0x7Jj8wTpgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQt MTYxZjM0MjM4N2QxLzEveHlhTFFac0RBdnJtN1A5NnQxUF8xaVEwMXVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQtMTYxZjM0MjM4N2Qx LzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgEEiLsZ MA0GCSqGSIb3DQEBCwUAA4IBAQCQ+HetfMCBiJaOdF5Is2KYmHfd0zFITVAYVKp9 EP6eJLiVZZjDDYmE8UHM5PYfmo8vk4SPuO0RRxDKRWK8T0eAmsw9EiISKPskM+s+ OUkjhH0e6GpbbjaU92156oncIMJ/6hoiOIoD2BtIAFnAz1BibvRTuSNerDRrB1vR kD0MTzUKBjo29fRLXMfXgxIrpRhtRgmpDtcL1rGGxVjVvXGP4k5fO60javgODD+d kZtaLC5kKLWJjCu8APttnPeHwfm6Dmf3xdVyghDmHSS69f5Pjb3astKPDeemFEF6 +ZVdDOuhFhH2Jdh4omVetVlU3ga1i0KusRAQxuPNg67rK8zF -----END CERTIFICATE-----Generated at Sun Jan 25 14:21:13 2026 by rpki-client