This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/x9kxYUUdYs3Vc1XQvx9EJnJhrDs.roa File: x9kxYUUdYs3Vc1XQvx9EJnJhrDs.roa (raw, json) Hash identifier: Xjj2UlUQT0tIyuN4wzeBBIdle7HnaFZ9oWTYHnJPnD4= Subject key identifier: C7:D9:31:61:45:1D:62:CD:D5:73:55:D0:BF:1F:44:26:72:61:AC:3B Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20 Certificate serial: 019B7834FAD7B6E613A9E26A52156EF37141 Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/x9kxYUUdYs3Vc1XQvx9EJnJhrDs.roa Signing time: Thu 01 Jan 2026 06:18:16 +0000 ROA not before: Thu 01 Jan 2026 06:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204093 IP address blocks: 2a0a:db80::/29 maxlen: 40 2a0a:db80::/48 maxlen: 48 2a0a:db80:f00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:fa:d7:b6:e6:13:a9:e2:6a:52:15:6e:f3:71:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20 Validity Not Before: Jan 1 06:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7d93161451d62cdd57355d0bf1f44267261ac3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:95:b1:05:7c:44:88:a3:3d:30:03:49:82:4d: f7:8d:da:ea:1e:bc:cc:11:de:2e:b4:3f:40:dc:38: 56:00:98:a2:7f:e4:5f:c9:4e:97:cf:4a:ea:58:14: 2b:f6:47:65:5b:ed:73:db:6c:0b:a0:3b:12:83:87: 75:a7:88:65:f3:31:6e:23:55:6c:d6:82:1c:8a:94: 33:dc:f2:4f:03:09:d7:68:80:2e:12:78:f5:2b:bb: 6d:c8:8a:d6:90:85:e1:f4:85:eb:10:d2:a2:2a:29: 6c:d1:d1:d6:a5:4f:ea:48:2d:46:fc:a0:ea:d4:99: 2a:02:34:a7:e8:f0:a1:06:98:f9:e8:cb:50:bc:81: 29:61:aa:6d:9c:8d:01:1c:ea:55:97:c9:3f:b3:82: d0:8a:1b:f1:dc:98:37:44:c5:df:e1:6a:4b:6b:3a: 7d:39:f7:47:d3:f7:89:99:d3:5e:86:8f:47:a9:57: f6:62:42:bb:0b:c9:91:cc:cb:9e:cb:38:17:e8:6d: f8:9e:9a:fc:48:a6:88:78:e6:1d:49:9d:a2:83:8b: 39:28:72:60:e9:f4:f4:d2:47:3a:ef:ad:d1:2b:9b: 8a:61:14:52:53:2c:df:79:93:32:5d:6b:ef:21:1f: 0e:d6:f2:16:c3:f0:59:18:16:d1:ad:08:d1:42:8b: 55:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D9:31:61:45:1D:62:CD:D5:73:55:D0:BF:1F:44:26:72:61:AC:3B X509v3 Authority Key Identifier: keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/x9kxYUUdYs3Vc1XQvx9EJnJhrDs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:db80::/29 Signature Algorithm: sha256WithRSAEncryption a5:3c:7c:c7:73:d4:3e:04:60:57:13:1f:81:ad:63:a2:c3:3e: 79:a2:9c:5c:73:f3:2b:b5:0b:61:0c:eb:74:d3:37:73:67:15: 18:62:5f:4c:40:f5:73:f7:75:60:b0:f2:d9:cb:75:b3:7d:83: f4:f4:ca:af:a7:08:d7:f5:f0:9c:ac:53:8f:fd:f5:f1:27:99: 1c:0a:24:4d:93:19:3a:96:2d:7e:92:36:c2:81:6f:a9:5e:58: d1:93:aa:0c:a1:47:fb:c1:2c:3d:0f:17:06:18:4f:5a:c7:27: c6:d8:59:1c:87:17:5a:5b:bc:f1:3d:1c:e5:07:bf:50:1c:e8: 9b:e0:4a:f4:fe:7c:29:d1:1c:1c:bc:48:5a:3d:bc:88:10:ec: 45:3a:c0:24:5f:ca:cf:05:9a:ce:3c:47:04:10:1b:a0:e2:74: e2:ac:c6:75:fd:47:c0:32:00:54:d7:7b:ea:9e:3c:aa:27:43: 84:a4:00:6a:f1:87:f7:15:1b:d7:88:b5:ec:b4:cb:8e:6f:5b: a1:06:21:15:fb:de:14:41:9c:0f:11:b9:a1:80:57:0a:39:c6: b6:7b:1f:6d:09:47:f3:77:45:12:61:19:b4:c7:df:14:34:a6: e1:ab:9b:53:ee:6a:09:85:be:71:a5:4b:f5:4e:15:a0:1a:f7: b2:bf:ba:76 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4NPrXtuYTqeJqUhVu83FBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNmI0MjAyMTg4NmQ4ZWVkYmFlOTBkOWU2YWIxZGU1MzNj NTBkMjAwHhcNMjYwMTAxMDYxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjN2Q5MzE2MTQ1MWQ2MmNkZDU3MzU1ZDBiZjFmNDQyNjcyNjFhYzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspWxBXxEiKM9MANJgk33jdrqHrzM Ed4utD9A3DhWAJiif+RfyU6Xz0rqWBQr9kdlW+1z22wLoDsSg4d1p4hl8zFuI1Vs 1oIcipQz3PJPAwnXaIAuEnj1K7ttyIrWkIXh9IXrENKiKils0dHWpU/qSC1G/KDq 1JkqAjSn6PChBpj56MtQvIEpYaptnI0BHOpVl8k/s4LQihvx3Jg3RMXf4WpLazp9 OfdH0/eJmdNeho9HqVf2YkK7C8mRzMueyzgX6G34npr8SKaIeOYdSZ2ig4s5KHJg 6fT00kc6763RK5uKYRRSUyzfeZMyXWvvIR8O1vIWw/BZGBbRrQjRQotV8QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFMfZMWFFHWLN1XNV0L8fRCZyYaw7MB8GA1UdIwQY MBaAFOxrQgIYhtju266Q2earHeUzxQ0gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQt YTY4NzNiMzc0ZTI2LzEveDlreFlVVWRZczNWYzFYUXZ4OUVKbkpockRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQtYTY4NzNiMzc0ZTI2 LzEvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgrbgDAN BgkqhkiG9w0BAQsFAAOCAQEApTx8x3PUPgRgVxMfga1josM+eaKcXHPzK7ULYQzr dNM3c2cVGGJfTED1c/d1YLDy2ct1s32D9PTKr6cI1/XwnKxTj/318SeZHAokTZMZ OpYtfpI2woFvqV5Y0ZOqDKFH+8EsPQ8XBhhPWscnxthZHIcXWlu88T0c5Qe/UBzo m+BK9P58KdEcHLxIWj28iBDsRTrAJF/KzwWazjxHBBAboOJ04qzGdf1HwDIAVNd7 6p48qidDhKQAavGH9xUb14i17LTLjm9boQYhFfveFEGcDxG5oYBXCjnGtnsfbQlH 83dFEmEZtMffFDSm4aubU+5qCYW+caVL9U4VoBr3sr+6dg== -----END CERTIFICATE-----Generated at Sun Jan 25 17:45:49 2026 by rpki-client