This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/xprf9hKWmDKmzxOI9xfKALFxhlg.roa File: xprf9hKWmDKmzxOI9xfKALFxhlg.roa (raw, json) Hash identifier: hsTTKyf96bo2EPivv2gWUEgt0xfeks/ANKB2DMdcXyI= Subject key identifier: C6:9A:DF:F6:12:96:98:32:A6:CF:13:88:F7:17:CA:00:B1:71:86:58 Certificate issuer: /CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb Certificate serial: 019B797EBABDF8EB14782FAC7DDB79D19A7A Authority key identifier: 8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/xprf9hKWmDKmzxOI9xfKALFxhlg.roa Signing time: Thu 01 Jan 2026 12:18:27 +0000 ROA not before: Thu 01 Jan 2026 12:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 786 IP address blocks: 160.6.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:ba:bd:f8:eb:14:78:2f:ac:7d:db:79:d1:9a:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb Validity Not Before: Jan 1 12:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c69adff612969832a6cf1388f717ca00b1718658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2f:46:47:15:bb:55:72:3c:98:3d:a2:3d:72: 46:cf:64:d2:8d:12:e0:c1:d8:ce:12:0a:f6:6a:1d: 72:1c:38:c5:4d:34:1b:26:8d:7c:cc:8d:5a:3a:86: 8b:56:5a:6c:a2:3c:d6:c7:9b:49:bc:ee:eb:1c:8f: 8d:b2:cb:61:a0:92:c2:90:e5:87:67:a1:90:41:79: 62:05:74:08:3c:2b:5e:0a:58:f5:b7:47:c3:79:53: 9e:c0:b8:d4:ab:9f:52:7b:f4:a2:44:e6:5a:24:b5: 64:48:4f:20:35:c4:68:fb:45:93:10:11:68:76:88: 7d:b2:18:1e:4d:d9:62:cc:aa:44:c8:58:ca:63:2e: 65:95:5c:a5:06:81:e3:5c:7e:64:04:c3:7c:c5:32: ec:cf:84:8c:49:f5:6b:ff:15:f8:ef:11:92:0c:6b: cd:18:44:fc:b3:58:db:25:9e:c0:f0:89:9c:2c:33: 20:74:aa:e8:2a:8f:fc:ea:7a:13:c6:8c:cb:93:28: 8a:43:51:d5:8b:aa:8e:86:8f:40:21:7d:46:82:86: 0d:08:bb:61:89:5f:1c:1d:25:dd:6c:29:d7:b1:7f: bc:82:c8:fe:e9:5e:6e:bf:ec:89:57:7d:de:eb:1a: 61:2f:12:b2:0c:01:90:da:30:1c:1f:62:e3:43:52: a3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:9A:DF:F6:12:96:98:32:A6:CF:13:88:F7:17:CA:00:B1:71:86:58 X509v3 Authority Key Identifier: keyid:8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/xprf9hKWmDKmzxOI9xfKALFxhlg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.6.0.0/16 Signature Algorithm: sha256WithRSAEncryption 16:3b:2a:fc:c3:41:49:4a:65:6e:28:51:83:cb:ef:c2:b6:7b: e7:b0:61:63:8f:0e:f6:af:95:8a:63:b4:d0:f3:63:95:cb:2d: c4:f0:bd:f1:90:59:29:02:54:1c:26:49:3f:85:1a:9b:04:01: 50:f0:84:18:d5:91:28:86:78:1e:c8:d2:7b:89:fa:e7:32:49: d4:69:a8:bf:a6:93:3b:a8:4f:b2:81:24:fd:e3:13:32:6b:e6: 67:46:e5:04:03:52:d5:e7:7b:00:59:02:45:1b:46:19:f3:de: 68:91:a5:01:c2:7e:56:3b:a7:14:45:3f:13:bd:63:fe:3e:10: 50:d2:d5:14:1a:f5:66:c4:85:34:77:f9:d9:30:8d:a9:a0:73: 45:4f:52:d2:dd:17:4d:27:61:98:3d:dd:d9:57:fe:e3:54:aa: f2:07:cf:51:37:d1:20:d8:fd:b2:97:f2:bd:7f:df:f9:70:9f: e6:4c:b4:6e:61:b6:e0:d3:b5:1c:fc:a9:74:f9:5b:8d:e1:8c: 19:54:e1:8c:93:2e:0f:23:fb:d5:6d:87:da:0b:8a:97:29:64: 43:3d:eb:8b:a1:da:91:1f:27:f4:cd:20:4b:b0:4f:93:7e:94: 3f:b0:6c:f2:1f:ae:6a:0a:08:4b:bc:48:bd:b1:bb:a5:30:cd: 31:c3:83:a2 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt5frq9+OsUeC+sfdt50Zp6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMGNkNjk2YWRhODkxMTMwMjU2M2JhNGU0NDJlNmNmYTZh MjhmZmIwHhcNMjYwMTAxMTIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjlhZGZmNjEyOTY5ODMyYTZjZjEzODhmNzE3Y2EwMGIxNzE4NjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxC9GRxW7VXI8mD2iPXJGz2TSjRLg wdjOEgr2ah1yHDjFTTQbJo18zI1aOoaLVlpsojzWx5tJvO7rHI+NssthoJLCkOWH Z6GQQXliBXQIPCteClj1t0fDeVOewLjUq59Se/SiROZaJLVkSE8gNcRo+0WTEBFo doh9shgeTdlizKpEyFjKYy5llVylBoHjXH5kBMN8xTLsz4SMSfVr/xX47xGSDGvN GET8s1jbJZ7A8ImcLDMgdKroKo/86noTxozLkyiKQ1HVi6qOho9AIX1GgoYNCLth iV8cHSXdbCnXsX+8gsj+6V5uv+yJV33e6xphLxKyDAGQ2jAcH2LjQ1KjLQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFMaa3/YSlpgyps8TiPcXygCxcYZYMB8GA1UdIwQY MBaAFIsM1patqJETAlY7pORC5s+moo/7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXd6V2xxMm9rUk1DVmp1azVFTG16NmFpal9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9iM2M0NDMtYjE5OS00MDQxLTgyNDct YjQwM2QxMGMzZTkxLzEveHByZjloS1dtREttenhPSTl4ZktBTEZ4aGxnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9iM2M0NDMtYjE5OS00MDQxLTgyNDctYjQwM2QxMGMzZTkx LzEvaXd6V2xxMm9rUk1DVmp1azVFTG16NmFpal9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAoAYwDQYJ KoZIhvcNAQELBQADggEBABY7KvzDQUlKZW4oUYPL78K2e+ewYWOPDvavlYpjtNDz Y5XLLcTwvfGQWSkCVBwmST+FGpsEAVDwhBjVkSiGeB7I0nuJ+ucySdRpqL+mkzuo T7KBJP3jEzJr5mdG5QQDUtXnewBZAkUbRhnz3miRpQHCflY7pxRFPxO9Y/4+EFDS 1RQa9WbEhTR3+dkwjamgc0VPUtLdF00nYZg93dlX/uNUqvIHz1E30SDY/bKX8r1/ 3/lwn+ZMtG5htuDTtRz8qXT5W43hjBlU4YyTLg8j+9Vth9oLipcpZEM964uh2pEf J/TNIEuwT5N+lD+wbPIfrmoKCEu8SL2xu6UwzTHDg6I= -----END CERTIFICATE-----Generated at Mon Jan 26 06:03:20 2026 by rpki-client