This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/xg2vmPZnFpWKOjIR5eQ7FMGT8aE.roa File: xg2vmPZnFpWKOjIR5eQ7FMGT8aE.roa (raw, json) Hash identifier: hPOQooNWczBMB25D+ekEfhNU7YNSFMQ+pTU+YyTaGew= Subject key identifier: C6:0D:AF:98:F6:67:16:95:8A:3A:32:11:E5:E4:3B:14:C1:93:F1:A1 Certificate issuer: /CN=69a28c2f84c75e8d0388694355152dd2b731f249 Certificate serial: 019B7910599E1E3BBFE47050E064AA654505 Authority key identifier: 69:A2:8C:2F:84:C7:5E:8D:03:88:69:43:55:15:2D:D2:B7:31:F2:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaKML4THXo0DiGlDVRUt0rcx8kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/xg2vmPZnFpWKOjIR5eQ7FMGT8aE.roa Signing time: Thu 01 Jan 2026 10:17:53 +0000 ROA not before: Thu 01 Jan 2026 10:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41783 IP address blocks: 217.26.16.0/21 maxlen: 21 2a00:7c00::/32 maxlen: 39 2a00:7c00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.mft rsync://rpki.ripe.net/repository/DEFAULT/aaKML4THXo0DiGlDVRUt0rcx8kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 04:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:59:9e:1e:3b:bf:e4:70:50:e0:64:aa:65:45:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69a28c2f84c75e8d0388694355152dd2b731f249 Validity Not Before: Jan 1 10:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c60daf98f66716958a3a3211e5e43b14c193f1a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c6:0e:43:e0:44:07:38:23:c7:9c:4f:1b:8c: 77:13:6b:5b:45:d3:93:a9:df:6d:2b:79:ad:0d:15: 2c:3b:ba:56:65:6d:9e:1b:de:ec:9b:eb:c8:fa:b5: c0:14:1e:c2:43:5b:28:8e:18:65:60:04:b9:0f:93: 5f:6a:e9:da:9a:96:e0:bf:74:39:cb:95:29:1f:aa: 3f:aa:72:08:be:fb:c7:0d:94:93:53:45:b5:ab:f9: de:86:9e:56:31:2d:be:e7:88:c2:fa:34:eb:93:02: 91:66:a2:12:4b:6a:89:a3:3a:ca:d4:b5:1f:45:67: 30:de:bf:8c:d9:13:e5:81:86:e3:57:11:5e:0f:2b: 56:f1:26:64:1e:d6:b3:9f:37:6c:3b:ef:d3:49:05: 82:f9:cb:76:12:70:81:9d:18:63:af:8f:3b:23:b6: e4:c2:7e:9e:8c:81:c6:44:0d:91:9b:e1:78:50:08: 2b:60:08:a4:54:ad:09:39:51:da:2d:c4:a3:9d:61: 7e:c1:f6:8a:b1:55:2f:23:56:50:55:2c:5f:bb:59: b8:22:16:80:de:1c:63:15:e8:e8:4a:64:b0:14:88: 46:93:d2:4c:f2:4a:f3:50:47:c9:c9:5c:4f:c1:3b: a3:dc:a6:03:19:2b:0c:05:5b:e7:ec:43:89:c4:1d: df:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:0D:AF:98:F6:67:16:95:8A:3A:32:11:E5:E4:3B:14:C1:93:F1:A1 X509v3 Authority Key Identifier: keyid:69:A2:8C:2F:84:C7:5E:8D:03:88:69:43:55:15:2D:D2:B7:31:F2:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaKML4THXo0DiGlDVRUt0rcx8kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/xg2vmPZnFpWKOjIR5eQ7FMGT8aE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.26.16.0/21 IPv6: 2a00:7c00::/32 Signature Algorithm: sha256WithRSAEncryption d3:c8:25:0e:24:fa:9f:da:d4:31:59:bf:90:de:0c:d6:25:81: 9e:c7:86:7c:86:ba:23:2f:9f:88:bd:be:ad:62:82:18:9a:51: 60:b9:c6:23:0e:a3:e5:6c:b8:07:b7:a6:ed:58:8b:c5:a5:74: 93:a2:97:6a:74:8c:c3:45:be:91:f2:db:ef:7e:e5:a3:3c:2a: 0b:c3:d7:af:4f:74:4b:4e:0a:48:5e:ad:ff:b0:20:bd:d6:1b: 72:1f:68:3c:f7:67:3f:bb:e8:78:41:cd:c9:43:43:3e:d2:4d: 12:54:46:6b:db:ca:db:74:3b:d5:65:b4:bd:0b:91:21:67:35: 30:80:34:50:1f:d5:a6:a2:ac:1a:42:fc:0a:54:57:81:a4:a5: 7c:f7:40:89:83:68:b3:ca:7f:ab:3f:aa:53:58:40:e8:4b:e8: 12:d3:c4:6d:ec:3c:59:b1:6b:9b:49:47:89:78:e7:8c:a8:f4: 7a:db:d1:50:c2:45:97:d9:6c:26:88:a5:de:18:d0:3b:92:4e: 36:77:5d:86:b8:ac:c7:e0:66:45:b5:55:d7:2c:0e:2f:c7:29: 27:03:0b:e0:5b:67:c4:07:1c:b3:0c:7f:50:1b:d8:83:a3:b2: 44:5c:10:ff:cb:5e:20:3a:2a:7d:eb:7c:71:1e:60:43:c1:b2: 4a:93:41:ad -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5EFmeHju/5HBQ4GSqZUUFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5YTI4YzJmODRjNzVlOGQwMzg4Njk0MzU1MTUyZGQyYjcz MWYyNDkwHhcNMjYwMTAxMTAxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjBkYWY5OGY2NjcxNjk1OGEzYTMyMTFlNWU0M2IxNGMxOTNmMWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucYOQ+BEBzgjx5xPG4x3E2tbRdOT qd9tK3mtDRUsO7pWZW2eG97sm+vI+rXAFB7CQ1sojhhlYAS5D5Nfaunampbgv3Q5 y5UpH6o/qnIIvvvHDZSTU0W1q/nehp5WMS2+54jC+jTrkwKRZqISS2qJozrK1LUf RWcw3r+M2RPlgYbjVxFeDytW8SZkHtaznzdsO+/TSQWC+ct2EnCBnRhjr487I7bk wn6ejIHGRA2Rm+F4UAgrYAikVK0JOVHaLcSjnWF+wfaKsVUvI1ZQVSxfu1m4IhaA 3hxjFejoSmSwFIhGk9JM8krzUEfJyVxPwTuj3KYDGSsMBVvn7EOJxB3fLQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMYNr5j2ZxaVijoyEeXkOxTBk/GhMB8GA1UdIwQY MBaAFGmijC+Ex16NA4hpQ1UVLdK3MfJJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWFLTUw0VEhYbzBEaUdsRFZSVXQwcmN4OGtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS84OWZmNDctMGI3Yi00MzA5LWE4YWYt MmNiZDU1ZjlhOGVlLzEveGcydm1QWm5GcFdLT2pJUjVlUTdGTUdUOGFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS84OWZmNDctMGI3Yi00MzA5LWE4YWYtMmNiZDU1ZjlhOGVl LzEvYWFLTUw0VEhYbzBEaUdsRFZSVXQwcmN4OGtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQD2RoQMA0E AgACMAcDBQAqAHwAMA0GCSqGSIb3DQEBCwUAA4IBAQDTyCUOJPqf2tQxWb+Q3gzW JYGex4Z8hrojL5+Ivb6tYoIYmlFgucYjDqPlbLgHt6btWIvFpXSTopdqdIzDRb6R 8tvvfuWjPCoLw9evT3RLTgpIXq3/sCC91htyH2g892c/u+h4Qc3JQ0M+0k0SVEZr 28rbdDvVZbS9C5EhZzUwgDRQH9WmoqwaQvwKVFeBpKV890CJg2izyn+rP6pTWEDo S+gS08Rt7DxZsWubSUeJeOeMqPR629FQwkWX2WwmiKXeGNA7kk42d12GuKzH4GZF tVXXLA4vxyknAwvgW2fEBxyzDH9QG9iDo7JEXBD/y14gOip963xxHmBDwbJKk0Gt -----END CERTIFICATE-----Generated at Mon Jan 26 12:55:10 2026 by rpki-client