This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/xc2N92zCzE8dOyiUB1DKEECW9u0.roa File: xc2N92zCzE8dOyiUB1DKEECW9u0.roa (raw, json) Hash identifier: zdTFoZAtDppROLcUt1HO+ZMDOiFUGUnqXWfKYmpZP6k= Subject key identifier: C5:CD:8D:F7:6C:C2:CC:4F:1D:3B:28:94:07:50:CA:10:40:96:F6:ED Certificate issuer: /CN=d4f92129df7aaa7157e15973c24753e118c9057d Certificate serial: 019B7910305E7AAF949C2C77BC5188FB21DB Authority key identifier: D4:F9:21:29:DF:7A:AA:71:57:E1:59:73:C2:47:53:E1:18:C9:05:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/xc2N92zCzE8dOyiUB1DKEECW9u0.roa Signing time: Thu 01 Jan 2026 10:17:42 +0000 ROA not before: Thu 01 Jan 2026 10:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31424 IP address blocks: 2001:67c:2c08::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.crl rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:30:5e:7a:af:94:9c:2c:77:bc:51:88:fb:21:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4f92129df7aaa7157e15973c24753e118c9057d Validity Not Before: Jan 1 10:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5cd8df76cc2cc4f1d3b28940750ca104096f6ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:86:0e:f3:65:0a:52:8a:c0:7a:0e:8c:87:e0: 4e:2e:8e:a6:69:c9:fe:5b:5d:23:c5:ec:a1:88:33: 17:24:50:15:9b:92:2a:d2:ef:46:e7:62:7a:18:e7: 5d:08:61:4f:54:2c:c3:76:fa:f2:14:ed:39:78:c4: 51:e6:e4:5f:48:8d:93:d8:68:32:86:28:bb:e4:8e: 1c:19:1b:e7:fd:c3:b1:e4:75:91:73:0e:3b:ac:71: dd:74:7f:28:ea:bf:91:6d:3c:4f:01:2a:7d:67:19: 17:08:ef:b4:ec:73:e0:f3:e9:e5:e8:0b:6d:62:b2: 94:e1:94:18:d7:12:dc:2b:8d:bd:ac:1f:19:0c:e0: c9:a5:a6:04:d6:69:93:c9:ba:53:1f:e0:2f:8e:a6: ef:71:30:99:48:0a:31:1e:81:40:eb:30:64:0f:ff: 50:76:c7:52:5e:a9:cb:42:7c:d1:12:2f:4e:53:5e: 09:4b:7c:76:14:4e:e7:b4:9e:76:ed:ea:e4:fb:90: 2d:31:ac:2d:4e:bf:26:7d:76:06:74:08:4c:d2:8b: 5a:6d:7c:e0:71:db:dc:b9:f0:6d:f1:d2:a4:bf:76: 2f:90:af:6b:08:25:e5:3d:2d:f1:cb:1d:6d:79:05: 40:cb:d6:35:96:97:95:29:01:fa:af:7a:5d:5c:12: c7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:CD:8D:F7:6C:C2:CC:4F:1D:3B:28:94:07:50:CA:10:40:96:F6:ED X509v3 Authority Key Identifier: keyid:D4:F9:21:29:DF:7A:AA:71:57:E1:59:73:C2:47:53:E1:18:C9:05:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/xc2N92zCzE8dOyiUB1DKEECW9u0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2c08::/48 Signature Algorithm: sha256WithRSAEncryption 5f:9f:e8:06:1e:54:cc:18:ba:89:3b:83:af:6e:7e:77:ec:1c: 35:40:9e:6b:f7:a2:ed:d1:fc:94:0c:0e:44:78:49:2b:56:c5: 2c:89:d8:52:a9:be:16:d1:cd:74:a0:71:81:ca:5d:be:99:ad: 5a:48:d7:b1:55:05:0d:f3:ba:9b:70:12:e7:f0:ed:c5:be:b0: ab:08:6d:88:48:a5:27:a6:64:93:e1:55:b5:15:c8:99:c7:02: 08:bf:42:30:7d:03:1d:a3:d4:a8:f5:b6:1b:82:5a:b3:dc:38: 60:f2:8c:c4:61:20:8b:20:5f:d6:04:8f:aa:47:48:1d:e5:07: 7f:5f:f2:e0:32:6c:f7:62:15:39:06:0e:64:7e:24:a7:71:9f: bb:a1:d6:c6:26:49:f8:71:44:a8:ed:f3:38:63:11:10:fb:74: df:44:3e:c4:30:42:35:ce:a1:61:66:0f:23:95:a9:ac:22:31: 37:2a:7e:72:5e:ff:d3:e6:a3:c3:3d:75:9f:0a:7e:54:b3:0b: 0a:9b:73:7a:94:27:04:3f:13:51:cc:39:63:89:79:c8:38:b7: b8:7c:e7:a6:82:f9:72:a6:50:4c:1c:b8:7d:27:50:97:b3:e6: ba:d3:9c:ac:59:f0:e0:57:0b:00:e2:64:a5:a7:a2:09:01:8b: 06:63:94:6c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EDBeeq+UnCx3vFGI+yHbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ZjkyMTI5ZGY3YWFhNzE1N2UxNTk3M2MyNDc1M2UxMThj OTA1N2QwHhcNMjYwMTAxMTAxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNWNkOGRmNzZjYzJjYzRmMWQzYjI4OTQwNzUwY2ExMDQwOTZmNmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoYO82UKUorAeg6Mh+BOLo6macn+ W10jxeyhiDMXJFAVm5Iq0u9G52J6GOddCGFPVCzDdvryFO05eMRR5uRfSI2T2Ggy hii75I4cGRvn/cOx5HWRcw47rHHddH8o6r+RbTxPASp9ZxkXCO+07HPg8+nl6Att YrKU4ZQY1xLcK429rB8ZDODJpaYE1mmTybpTH+AvjqbvcTCZSAoxHoFA6zBkD/9Q dsdSXqnLQnzREi9OU14JS3x2FE7ntJ527erk+5AtMawtTr8mfXYGdAhM0otabXzg cdvcufBt8dKkv3YvkK9rCCXlPS3xyx1teQVAy9Y1lpeVKQH6r3pdXBLHJQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMXNjfdswsxPHTsolAdQyhBAlvbtMB8GA1UdIwQY MBaAFNT5ISnfeqpxV+FZc8JHU+EYyQV9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVBraEtkOTZxbkZYNFZsendrZFQ0UmpKQlgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC85Y2ZlNWQtNTc3MC00YjVkLTg5MzUt OWYzOGM4YjhhOTI4LzEveGMyTjkyekN6RThkT3lpVUIxREtFRUNXOXUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC85Y2ZlNWQtNTc3MC00YjVkLTg5MzUtOWYzOGM4YjhhOTI4 LzEvMVBraEtkOTZxbkZYNFZsendrZFQ0UmpKQlgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCwI MA0GCSqGSIb3DQEBCwUAA4IBAQBfn+gGHlTMGLqJO4Ovbn537Bw1QJ5r96Lt0fyU DA5EeEkrVsUsidhSqb4W0c10oHGByl2+ma1aSNexVQUN87qbcBLn8O3FvrCrCG2I SKUnpmST4VW1FciZxwIIv0IwfQMdo9So9bYbglqz3Dhg8ozEYSCLIF/WBI+qR0gd 5Qd/X/LgMmz3YhU5Bg5kfiSncZ+7odbGJkn4cUSo7fM4YxEQ+3TfRD7EMEI1zqFh Zg8jlamsIjE3Kn5yXv/T5qPDPXWfCn5UswsKm3N6lCcEPxNRzDljiXnIOLe4fOem gvlyplBMHLh9J1CXs+a605ysWfDgVwsA4mSlp6IJAYsGY5Rs -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:37 2026 by rpki-client