This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/XdlGzRcUNVDEpnO9YL0X7aJRffs.roa File: XdlGzRcUNVDEpnO9YL0X7aJRffs.roa (raw, json) Hash identifier: RnuPqv8dWz+ZenQXL5WqtuXV26S9E5sAUavYLyGE+b0= Subject key identifier: 5D:D9:46:CD:17:14:35:50:C4:A6:73:BD:60:BD:17:ED:A2:51:7D:FB Certificate issuer: /CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984 Certificate serial: 019BC3348A147D60BC2A57E8A7DA249393ED Authority key identifier: 95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/XdlGzRcUNVDEpnO9YL0X7aJRffs.roa Signing time: Thu 15 Jan 2026 19:49:18 +0000 ROA not before: Thu 15 Jan 2026 19:49:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 2a03:efc0:7200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c3:34:8a:14:7d:60:bc:2a:57:e8:a7:da:24:93:93:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984 Validity Not Before: Jan 15 19:49:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5dd946cd17143550c4a673bd60bd17eda2517dfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:8a:29:4b:0a:69:50:29:c6:dc:63:48:95:b9: 0f:7b:0c:c2:61:44:79:6f:47:5a:4d:84:15:38:f5: d9:67:69:eb:50:c9:ed:da:be:cf:aa:3d:7d:af:e3: a5:d9:99:32:fe:6d:ba:f4:ef:20:e9:4b:72:f8:e6: 4a:5b:97:7c:d0:f0:bf:5a:c5:5b:1c:32:1a:e2:bc: c4:2b:91:50:39:4b:0a:a0:63:c0:02:b0:4b:28:16: 3d:7f:2a:6d:70:eb:8a:0b:43:27:99:49:bb:55:d5: 21:7f:ba:75:26:e0:8d:7c:c2:a0:66:7d:24:3d:b8: 5b:f4:1a:43:c8:54:92:3b:2f:aa:f7:da:ee:74:0b: 57:6c:e7:2d:bb:77:b7:a6:0e:8b:5f:45:e4:12:38: 24:d2:43:bd:0e:18:54:b3:be:d7:aa:95:03:be:bd: f9:55:83:3d:02:de:7c:ac:5b:b0:e1:79:c0:19:8a: 31:44:6f:6b:fd:33:41:fa:ef:2f:b5:61:cd:69:02: c7:23:79:b0:b2:4b:17:82:64:59:62:6f:50:be:4c: d4:e3:84:9f:34:54:04:52:2c:1b:89:50:de:31:e0: 1c:9a:1e:99:98:3f:2b:d6:e4:c5:bd:f9:17:f8:93: 1f:62:18:3e:0b:8a:8f:af:b2:04:c5:52:10:41:98: 7a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D9:46:CD:17:14:35:50:C4:A6:73:BD:60:BD:17:ED:A2:51:7D:FB X509v3 Authority Key Identifier: keyid:95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/XdlGzRcUNVDEpnO9YL0X7aJRffs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:efc0:7200::/40 Signature Algorithm: sha256WithRSAEncryption 82:06:7e:06:a6:14:04:43:e8:c1:13:e8:74:7f:43:26:a6:0f: 02:8b:39:6f:39:55:13:af:cd:03:e5:76:a0:d3:dd:46:46:ab: 62:33:00:cd:69:89:b1:6c:c8:08:ed:03:be:99:65:34:aa:a9: fa:ba:7a:10:00:ff:60:74:66:0a:a1:de:ef:72:0e:10:40:7e: be:18:a0:ca:44:57:66:44:25:4a:d0:23:54:e0:55:2c:60:24: f1:3c:a1:22:29:27:3f:3a:ac:c3:ee:32:23:63:99:69:18:d6: f3:09:e7:35:fe:b1:52:2f:f4:a7:97:e8:71:72:f5:ed:2e:28: 5a:67:b2:ff:77:16:15:7a:1a:d5:60:12:4f:0e:1d:b4:db:86: a7:35:04:ad:3d:c9:da:7e:30:26:80:2a:d1:18:65:a4:64:77: 94:4f:e4:46:09:c2:68:4e:5a:2a:6d:4f:e8:ce:c5:5d:a2:e4: d4:a3:27:3b:b0:db:16:f9:19:52:3d:c6:45:6e:31:4f:68:b4: e0:31:bf:63:b6:9f:cc:a7:33:53:ef:3e:e6:72:28:b5:f9:3f: dd:a3:50:3b:d7:6c:fa:64:bf:a7:ae:c4:f6:d7:81:e7:b5:e4: ff:4f:cb:16:c1:fb:3d:9d:8c:5a:3d:d4:f0:6c:12:11:90:6a: c4:f4:68:5b -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZvDNIoUfWC8Klfop9okk5PtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MDJkOGI4MjY5YzZiMDdmODE0YWNmMGM3ZWQ3MjliM2Y0 YjU5ODQwHhcNMjYwMTE1MTk0OTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZGQ5NDZjZDE3MTQzNTUwYzRhNjczYmQ2MGJkMTdlZGEyNTE3ZGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4YopSwppUCnG3GNIlbkPewzCYUR5 b0daTYQVOPXZZ2nrUMnt2r7Pqj19r+Ol2Zky/m269O8g6Uty+OZKW5d80PC/WsVb HDIa4rzEK5FQOUsKoGPAArBLKBY9fyptcOuKC0MnmUm7VdUhf7p1JuCNfMKgZn0k Pbhb9BpDyFSSOy+q99rudAtXbOctu3e3pg6LX0XkEjgk0kO9DhhUs77XqpUDvr35 VYM9At58rFuw4XnAGYoxRG9r/TNB+u8vtWHNaQLHI3mwsksXgmRZYm9QvkzU44Sf NFQEUiwbiVDeMeAcmh6ZmD8r1uTFvfkX+JMfYhg+C4qPr7IExVIQQZh6ewIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFF3ZRs0XFDVQxKZzvWC9F+2iUX37MB8GA1UdIwQY MBaAFJUC2LgmnGsH+BSs8Mftcps/S1mEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFFMWXVDYWNhd2Y0Rkt6d3gtMXltejlMV1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85ZGVjYWYtNDdlYi00MzQ5LTllODYt MDFiOGJiNmFkOTBhLzEvWGRsR3pSY1VOVkRFcG5POVlMMFg3YUpSZmZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS85ZGVjYWYtNDdlYi00MzQ5LTllODYtMDFiOGJiNmFkOTBh LzEvbFFMWXVDYWNhd2Y0Rkt6d3gtMXltejlMV1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgPvwHIw DQYJKoZIhvcNAQELBQADggEBAIIGfgamFARD6MET6HR/QyamDwKLOW85VROvzQPl dqDT3UZGq2IzAM1pibFsyAjtA76ZZTSqqfq6ehAA/2B0Zgqh3u9yDhBAfr4YoMpE V2ZEJUrQI1TgVSxgJPE8oSIpJz86rMPuMiNjmWkY1vMJ5zX+sVIv9KeX6HFy9e0u KFpnsv93FhV6GtVgEk8OHbTbhqc1BK09ydp+MCaAKtEYZaRkd5RP5EYJwmhOWipt T+jOxV2i5NSjJzuw2xb5GVI9xkVuMU9otOAxv2O2n8ynM1PvPuZyKLX5P92jUDvX bPpkv6euxPbXgee15P9PyxbB+z2djFo91PBsEhGQasT0aFs= -----END CERTIFICATE-----Generated at Sun Jan 25 15:13:23 2026 by rpki-client