This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/xnIV9lSRlUBIwsXt0rhBAj2FpKc.roa File: xnIV9lSRlUBIwsXt0rhBAj2FpKc.roa (raw, json) Hash identifier: cvHuJPxiNYfhnN5IvufGhGrZKzw6FzUojqlP7L5juw4= Subject key identifier: C6:72:15:F6:54:91:95:40:48:C2:C5:ED:D2:B8:41:02:3D:85:A4:A7 Certificate issuer: /CN=f8a966664ec96edbd12e8e82e940bfb9faec105e Certificate serial: 019B7A5BA244D15BE6DA14CD2857C5F27263 Authority key identifier: F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/xnIV9lSRlUBIwsXt0rhBAj2FpKc.roa Signing time: Thu 01 Jan 2026 16:19:44 +0000 ROA not before: Thu 01 Jan 2026 16:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209347 IP address blocks: 2a0a:4587:2030::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:a2:44:d1:5b:e6:da:14:cd:28:57:c5:f2:72:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8a966664ec96edbd12e8e82e940bfb9faec105e Validity Not Before: Jan 1 16:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c67215f65491954048c2c5edd2b841023d85a4a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f3:14:9e:8a:64:5f:54:34:b2:e5:56:cc:5e: 55:78:7a:cf:1f:62:e7:23:73:01:53:eb:68:f1:af: 06:5c:98:17:5d:65:8e:24:ad:ae:30:90:e8:bf:72: 86:00:af:98:b4:f2:c7:89:d8:cf:14:c5:2a:9b:d4: a0:13:cc:30:f3:ed:e1:ab:85:53:95:1d:19:1c:3e: 8c:74:b6:04:f6:fe:73:ca:01:44:d8:4a:77:a7:3d: e1:59:20:39:cd:70:35:0f:1d:bd:ad:d2:36:66:97: da:95:ba:f7:3f:71:40:d3:6a:e9:80:82:4e:5a:cd: bd:e5:15:5d:7a:92:19:01:8e:25:41:8b:7d:b8:bd: 0e:29:02:19:e9:93:09:5e:73:06:46:71:7a:ef:00: 10:8f:5c:08:d7:3b:9b:25:38:51:f9:c7:da:1f:a9: b5:fd:e3:de:4b:e1:f7:69:7a:2c:27:3f:12:87:9f: bc:e2:ea:b9:fa:78:7e:73:78:97:48:f4:d4:59:13: 6b:50:c8:52:a6:b1:2b:f6:e7:26:5c:45:d5:e6:59: e3:77:88:3f:45:f6:d4:0a:cd:cd:6a:70:05:9b:ce: 52:cf:85:00:8f:bf:d6:a7:75:a6:43:53:aa:e2:c2: 5a:3c:af:5c:15:ad:bf:2a:1f:37:d2:5d:c9:51:22: 68:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:72:15:F6:54:91:95:40:48:C2:C5:ED:D2:B8:41:02:3D:85:A4:A7 X509v3 Authority Key Identifier: keyid:F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/xnIV9lSRlUBIwsXt0rhBAj2FpKc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:4587:2030::/46 Signature Algorithm: sha256WithRSAEncryption 8f:80:85:19:0c:29:be:06:71:d7:bc:06:21:20:d1:ba:04:85: ad:68:99:fc:50:54:60:85:13:ab:01:26:cc:75:26:8d:41:e9: 10:4a:23:8e:c0:53:18:ec:61:eb:a8:10:bf:3c:03:f6:e5:1d: 10:50:b9:48:8b:93:bd:25:80:20:fc:9d:fe:4d:b4:2b:e9:fe: c3:78:b1:5f:ed:eb:5c:f7:a3:c9:01:dd:14:13:87:9d:63:32: da:9d:5e:61:6a:31:ff:9b:6a:a0:76:88:27:76:14:82:70:f8: 4b:05:61:fd:31:25:41:39:0b:9d:c1:1c:33:2e:73:98:fa:ea: cb:48:d3:78:46:9b:3c:96:2d:be:16:a8:cd:e7:d2:76:54:db: 79:cb:27:20:b3:6d:5b:c9:a7:f5:23:0d:fd:50:98:4c:1e:64: c8:96:e6:92:6c:0e:a0:eb:d9:e6:fe:a5:38:81:12:6e:de:c1: 78:f9:e7:22:f3:03:d9:21:00:2b:73:86:73:1b:89:ab:f5:3c: 62:c3:9b:cd:2c:79:91:09:09:b0:21:6b:34:75:b7:74:3c:77: 83:49:73:73:b8:8b:a4:d8:37:a8:c4:8b:72:cc:3e:b2:d5:23: cb:7d:b7:d8:e8:c0:9e:c3:a4:cf:e3:30:ab:f5:15:f5:a6:ac: 2b:2c:bc:5a -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgISAZt6W6JE0Vvm2hTNKFfF8nJjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YTk2NjY2NGVjOTZlZGJkMTJlOGU4MmU5NDBiZmI5ZmFl YzEwNWUwHhcNMjYwMTAxMTYxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjcyMTVmNjU0OTE5NTQwNDhjMmM1ZWRkMmI4NDEwMjNkODVhNGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/MUnopkX1Q0suVWzF5VeHrPH2Ln I3MBU+to8a8GXJgXXWWOJK2uMJDov3KGAK+YtPLHidjPFMUqm9SgE8ww8+3hq4VT lR0ZHD6MdLYE9v5zygFE2Ep3pz3hWSA5zXA1Dx29rdI2Zpfalbr3P3FA02rpgIJO Ws295RVdepIZAY4lQYt9uL0OKQIZ6ZMJXnMGRnF67wAQj1wI1zubJThR+cfaH6m1 /ePeS+H3aXosJz8Sh5+84uq5+nh+c3iXSPTUWRNrUMhSprEr9ucmXEXV5lnjd4g/ RfbUCs3NanAFm85Sz4UAj7/Wp3WmQ1Oq4sJaPK9cFa2/Kh830l3JUSJoswIDAQAB o4ICDjCCAgowHQYDVR0OBBYEFMZyFfZUkZVASMLF7dK4QQI9haSnMB8GA1UdIwQY MBaAFPipZmZOyW7b0S6OgulAv7n67BBeMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LbG1aazdKYnR2UkxvNkM2VUNfdWZyc0VGNC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUvNjRhYjk5LTQ5YWEtNGFhZS04ZGQ1 LTM4MjM1NWZjMmZmMS8xL3huSVY5bFNSbFVCSXdzWHQwcmhCQWoyRnBLYy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNDUvNjRhYjk5LTQ5YWEtNGFhZS04ZGQ1LTM4MjM1NWZjMmZm MS8xLzEtS2xtWms3SmJ0dlJMbzZDNlVDX3VmcnNFRjQuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwIqCkWH IDAwDQYJKoZIhvcNAQELBQADggEBAI+AhRkMKb4Gcde8BiEg0boEha1omfxQVGCF E6sBJsx1Jo1B6RBKI47AUxjsYeuoEL88A/blHRBQuUiLk70lgCD8nf5NtCvp/sN4 sV/t61z3o8kB3RQTh51jMtqdXmFqMf+baqB2iCd2FIJw+EsFYf0xJUE5C53BHDMu c5j66stI03hGmzyWLb4WqM3n0nZU23nLJyCzbVvJp/UjDf1QmEweZMiW5pJsDqDr 2eb+pTiBEm7ewXj55yLzA9khACtzhnMbiav1PGLDm80seZEJCbAhazR1t3Q8d4NJ c3O4i6TYN6jEi3LMPrLVI8t9t9jowJ7DpM/jMKv1FfWmrCssvFo= -----END CERTIFICATE-----Generated at Mon Jan 26 02:43:53 2026 by rpki-client