This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/XqoE4QEKfS73tFedkyMBR2t2Chw.roa File: XqoE4QEKfS73tFedkyMBR2t2Chw.roa (raw, json) Hash identifier: 7QBQTr9lxf/H18imnUvnw9PKGfAGMos7jRs0YTyffvE= Subject key identifier: 5E:AA:04:E1:01:0A:7D:2E:F7:B4:57:9D:93:23:01:47:6B:76:0A:1C Certificate issuer: /CN=9ce94757ac3f70b40f369307d365ebc9657bab69 Certificate serial: 019B77590FF31528176AB61627DF55FFC488 Authority key identifier: 9C:E9:47:57:AC:3F:70:B4:0F:36:93:07:D3:65:EB:C9:65:7B:AB:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/XqoE4QEKfS73tFedkyMBR2t2Chw.roa Signing time: Thu 01 Jan 2026 02:18:03 +0000 ROA not before: Thu 01 Jan 2026 02:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34572 IP address blocks: 156.28.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.crl rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:0f:f3:15:28:17:6a:b6:16:27:df:55:ff:c4:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ce94757ac3f70b40f369307d365ebc9657bab69 Validity Not Before: Jan 1 02:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5eaa04e1010a7d2ef7b4579d932301476b760a1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f3:15:13:00:33:55:3e:e3:c5:55:cd:08:7b: 67:95:83:ab:83:7a:64:dc:fc:16:39:0c:fe:da:35: 60:04:23:5a:35:6f:b6:40:ec:dd:73:e5:88:3d:95: ff:73:10:93:b4:07:e4:2d:c9:2a:e2:15:b7:6a:b0: 4a:72:6c:01:f4:81:20:5f:6e:41:c3:54:56:22:ca: 0b:1d:9e:0d:30:83:f1:e3:b3:e7:cc:6f:1c:96:7a: ba:3a:bb:b4:45:6e:e5:25:4b:e9:a8:94:9e:4c:06: d5:d3:fc:f8:a0:64:83:da:b6:98:75:76:af:06:f4: 98:a6:b1:49:81:ab:20:11:8d:02:df:65:e5:86:e7: 72:dc:3b:08:7f:1e:a7:08:03:0d:85:79:74:b6:fc: 9d:5e:32:f0:8f:21:ea:94:a3:15:26:2d:f4:0e:8e: 56:7a:b9:35:59:30:06:37:ba:28:a9:de:41:88:0d: 6e:b1:c8:cc:49:1f:bd:63:f1:bc:c3:b3:6b:e2:e4: 9a:02:8b:ef:d5:f5:6c:e1:5b:39:98:91:5f:62:78: de:29:43:38:03:3e:eb:29:b9:b1:22:47:41:3f:51: ad:35:99:a8:f2:4c:df:15:96:fd:28:2e:b0:2a:78: 54:e1:87:f4:6a:36:e7:78:3a:1c:c6:04:fa:f4:5f: a3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:AA:04:E1:01:0A:7D:2E:F7:B4:57:9D:93:23:01:47:6B:76:0A:1C X509v3 Authority Key Identifier: keyid:9C:E9:47:57:AC:3F:70:B4:0F:36:93:07:D3:65:EB:C9:65:7B:AB:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/XqoE4QEKfS73tFedkyMBR2t2Chw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 156.28.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0c:b1:0a:78:ac:c7:55:f2:22:dc:f5:16:3f:b5:d4:1d:f5:55: 50:0e:13:58:9b:22:93:ac:1f:b8:f4:0e:ac:40:c4:bd:ba:b8: 91:8f:5f:bf:6c:20:88:3b:26:ca:ae:d4:63:aa:46:5f:09:7f: a1:e9:a1:ad:cf:d8:3b:db:01:25:e7:31:25:e5:60:d2:2a:73: 82:b0:d5:18:74:6e:58:e9:d3:cd:0e:b9:51:14:42:4a:02:f4: b9:6c:c9:58:c6:3a:8e:75:0c:a7:8f:55:a1:9e:c5:9f:9c:be: d0:bb:cb:e2:58:e5:14:3b:9e:29:5d:37:df:8f:c6:00:b3:09: 36:00:69:87:bd:d9:d9:42:c8:e6:5f:9e:dd:af:02:86:68:80: 2f:f1:7a:7f:84:7a:2f:95:f8:5a:75:53:c5:52:1f:01:97:93: f2:d2:ef:fb:9c:97:82:9f:bc:f9:26:74:49:bd:04:a8:85:ff: 63:fa:a9:2a:3d:8f:86:12:c4:47:8b:25:13:ce:ea:9a:23:7b: 67:f0:fb:17:06:c2:ba:47:b7:db:2f:e1:e7:62:ce:45:20:97: 06:97:6a:07:2e:53:bb:78:e2:db:68:48:72:6a:47:03:aa:5a: 33:76:1d:e7:22:a3:99:2e:dc:ef:15:e1:38:82:61:bf:b7:77: 6c:1d:a8:b9 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt3WQ/zFSgXarYWJ99V/8SIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljZTk0NzU3YWMzZjcwYjQwZjM2OTMwN2QzNjVlYmM5NjU3 YmFiNjkwHhcNMjYwMTAxMDIxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZWFhMDRlMTAxMGE3ZDJlZjdiNDU3OWQ5MzIzMDE0NzZiNzYwYTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/MVEwAzVT7jxVXNCHtnlYOrg3pk 3PwWOQz+2jVgBCNaNW+2QOzdc+WIPZX/cxCTtAfkLckq4hW3arBKcmwB9IEgX25B w1RWIsoLHZ4NMIPx47PnzG8clnq6Oru0RW7lJUvpqJSeTAbV0/z4oGSD2raYdXav BvSYprFJgasgEY0C32Xlhudy3DsIfx6nCAMNhXl0tvydXjLwjyHqlKMVJi30Do5W erk1WTAGN7ooqd5BiA1uscjMSR+9Y/G8w7Nr4uSaAovv1fVs4Vs5mJFfYnjeKUM4 Az7rKbmxIkdBP1GtNZmo8kzfFZb9KC6wKnhU4Yf0ajbneDocxgT69F+j7QIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFF6qBOEBCn0u97RXnZMjAUdrdgocMB8GA1UdIwQY MBaAFJzpR1esP3C0DzaTB9Nl68lle6tpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbk9sSFY2d19jTFFQTnBNSDAyWHJ5V1Y3cTJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80ODEyNjktZGJkYi00MjVlLTk2NDIt ZTFlYTQxYzlhMmU2LzEvWHFvRTRRRUtmUzczdEZlZGt5TUJSMnQyQ2h3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS80ODEyNjktZGJkYi00MjVlLTk2NDItZTFlYTQxYzlhMmU2 LzEvbk9sSFY2d19jTFFQTnBNSDAyWHJ5V1Y3cTJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnBwwDQYJ KoZIhvcNAQELBQADggEBAAyxCnisx1XyItz1Fj+11B31VVAOE1ibIpOsH7j0DqxA xL26uJGPX79sIIg7Jsqu1GOqRl8Jf6Hpoa3P2DvbASXnMSXlYNIqc4Kw1Rh0bljp 080OuVEUQkoC9LlsyVjGOo51DKePVaGexZ+cvtC7y+JY5RQ7nildN9+PxgCzCTYA aYe92dlCyOZfnt2vAoZogC/xen+Eei+V+Fp1U8VSHwGXk/LS7/ucl4KfvPkmdEm9 BKiF/2P6qSo9j4YSxEeLJRPO6poje2fw+xcGwrpHt9sv4edizkUglwaXagcuU7t4 4ttoSHJqRwOqWjN2Hecio5ku3O8V4TiCYb+3d2wdqLk= -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:10 2026 by rpki-client