This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/XWgjxxWl37vkgz5Tkyz0InhvwPo.roa File: XWgjxxWl37vkgz5Tkyz0InhvwPo.roa (raw, json) Hash identifier: 2ssvyN1VD0Xm61SWVl2RgAdWEWkXIQdwwyX5nwXRu/M= Subject key identifier: 5D:68:23:C7:15:A5:DF:BB:E4:83:3E:53:93:2C:F4:22:78:6F:C0:FA Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511 Certificate serial: 019B7C7FFEA8C2E22B4CCCC1CB5799A91A07 Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/XWgjxxWl37vkgz5Tkyz0InhvwPo.roa Signing time: Fri 02 Jan 2026 02:18:41 +0000 ROA not before: Fri 02 Jan 2026 02:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2281 IP address blocks: 2a01:c9c0:8020::/48 maxlen: 64 2a01:c9c0:802f::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:fe:a8:c2:e2:2b:4c:cc:c1:cb:57:99:a9:1a:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511 Validity Not Before: Jan 2 02:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d6823c715a5dfbbe4833e53932cf422786fc0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:28:5f:fb:a4:10:a7:ff:bb:8e:db:e4:5a:b0: 64:75:5c:97:84:d7:14:a2:93:a1:33:74:cf:00:c0: ed:1a:26:df:7c:b0:3f:1c:66:40:97:c6:b1:f7:ad: 82:1d:98:44:f1:56:42:cc:1f:8c:b1:43:94:39:ef: a6:b3:21:84:a1:04:f4:20:d0:84:e5:df:fd:b0:6e: cf:f8:ee:79:d1:fc:16:6c:b8:11:74:20:25:88:f3: f5:ba:a8:91:1f:63:a4:54:21:65:99:89:22:02:c2: a5:c1:f3:f9:cf:09:3a:a4:e3:b9:04:6d:0d:29:f6: bc:0a:35:05:7c:ab:e7:d8:fb:52:d3:62:39:fb:97: 37:48:8c:ce:2c:fd:42:7a:29:84:f0:66:29:29:10: b8:56:00:de:34:ae:72:53:55:4f:b8:d8:8f:b4:74: 92:69:8c:5c:62:1a:0b:30:7c:22:20:2f:0f:8c:09: 0c:63:14:c5:93:c4:70:64:b3:97:24:f8:7c:b9:51: 87:bd:c1:a6:a5:e8:e4:ee:32:48:2a:21:21:63:97: b9:a1:a7:43:bf:d3:98:0d:27:25:70:c2:52:f0:eb: 92:83:fe:51:5d:26:39:09:f2:7c:a1:0a:82:8c:c3: c7:64:bd:b9:47:67:8c:fe:b3:0c:e4:c3:ba:c0:21: aa:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:68:23:C7:15:A5:DF:BB:E4:83:3E:53:93:2C:F4:22:78:6F:C0:FA X509v3 Authority Key Identifier: keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/XWgjxxWl37vkgz5Tkyz0InhvwPo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:c9c0:8020::/48 2a01:c9c0:802f::/48 Signature Algorithm: sha256WithRSAEncryption 20:21:e3:46:ad:9f:5a:6d:e5:07:3d:e0:b8:f2:84:82:3c:59: 3c:57:ee:5a:c7:28:02:db:0d:26:0f:57:67:88:38:a7:39:ac: 1c:95:27:fe:54:3f:2d:45:27:5e:61:99:bd:2d:8b:f5:c6:65: 7e:85:d4:b6:c1:b7:6c:f0:bd:e0:aa:b1:54:d8:d4:00:5d:52: 5a:4c:a3:70:32:e6:f9:ae:67:e7:6b:5b:89:79:bd:00:64:32: 9f:2e:06:bc:66:0a:11:07:23:2a:66:3d:c1:42:9c:f4:6f:7d: 3d:2c:51:88:03:0e:d3:55:75:4d:c4:b5:77:69:fc:4b:e8:86: a9:14:2d:bb:82:79:6e:66:09:68:a1:f8:45:c5:bd:ce:15:e5: 16:5c:a4:73:ab:ae:5e:c9:27:37:77:4e:1e:c3:f6:51:39:14: 48:94:53:eb:64:f9:5d:78:5e:e0:74:26:bd:0c:d4:3f:63:85: 44:b8:e7:0e:64:21:61:34:ad:a0:2f:6a:66:ef:e0:7f:71:60: ab:e8:49:e0:db:1a:83:8c:de:12:a0:98:94:ef:21:90:5c:7d: 76:00:e5:51:7a:62:94:b9:19:80:58:d0:84:82:4c:f1:cd:9d: 3f:81:a9:e7:cd:62:f9:1d:51:27:5f:b9:88:96:de:a0:3b:a8: 1a:db:ad:94 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8f/6owuIrTMzBy1eZqRoHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh MTA1MTEwHhcNMjYwMTAyMDIxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDY4MjNjNzE1YTVkZmJiZTQ4MzNlNTM5MzJjZjQyMjc4NmZjMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyihf+6QQp/+7jtvkWrBkdVyXhNcU opOhM3TPAMDtGibffLA/HGZAl8ax962CHZhE8VZCzB+MsUOUOe+msyGEoQT0INCE 5d/9sG7P+O550fwWbLgRdCAliPP1uqiRH2OkVCFlmYkiAsKlwfP5zwk6pOO5BG0N Kfa8CjUFfKvn2PtS02I5+5c3SIzOLP1CeimE8GYpKRC4VgDeNK5yU1VPuNiPtHSS aYxcYhoLMHwiIC8PjAkMYxTFk8RwZLOXJPh8uVGHvcGmpejk7jJIKiEhY5e5oadD v9OYDSclcMJS8OuSg/5RXSY5CfJ8oQqCjMPHZL25R2eM/rMM5MO6wCGqxwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFF1oI8cVpd+75IM+U5Ms9CJ4b8D6MB8GA1UdIwQY MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt NDU5MzVmNTA2YTEyLzEvWFdnanh4V2wzN3ZrZ3o1VGt5ejBJbmh2d1BvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgHJwIAg AwcAKgHJwIAvMA0GCSqGSIb3DQEBCwUAA4IBAQAgIeNGrZ9abeUHPeC48oSCPFk8 V+5axygC2w0mD1dniDinOawclSf+VD8tRSdeYZm9LYv1xmV+hdS2wbds8L3gqrFU 2NQAXVJaTKNwMub5rmfna1uJeb0AZDKfLga8ZgoRByMqZj3BQpz0b309LFGIAw7T VXVNxLV3afxL6IapFC27gnluZgloofhFxb3OFeUWXKRzq65eySc3d04ew/ZRORRI lFPrZPldeF7gdCa9DNQ/Y4VEuOcOZCFhNK2gL2pm7+B/cWCr6Eng2xqDjN4SoJiU 7yGQXH12AOVRemKUuRmAWNCEgkzxzZ0/gannzWL5HVEnX7mIlt6gO6ga262U -----END CERTIFICATE-----Generated at Sun Jan 25 19:01:06 2026 by rpki-client