This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/XHs1m3SRKcYSslJybhJTMzxM9-c.roa File: XHs1m3SRKcYSslJybhJTMzxM9-c.roa (raw, json) Hash identifier: A0erFAS1Db0vVamA672kEgwbEmWDzDENo+wHPI/ufmU= Subject key identifier: 5C:7B:35:9B:74:91:29:C6:12:B2:52:72:6E:12:53:33:3C:4C:F7:E7 Certificate issuer: /CN=2d2d7d9743de2efa2f633378a268f58f2aa16050 Certificate serial: 019B791068EF38B84D9F0D28224668E397A4 Authority key identifier: 2D:2D:7D:97:43:DE:2E:FA:2F:63:33:78:A2:68:F5:8F:2A:A1:60:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LS19l0PeLvovYzN4omj1jyqhYFA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/XHs1m3SRKcYSslJybhJTMzxM9-c.roa Signing time: Thu 01 Jan 2026 10:17:57 +0000 ROA not before: Thu 01 Jan 2026 10:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20766 IP address blocks: 2a0f:e580:b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.crl rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.mft rsync://rpki.ripe.net/repository/DEFAULT/LS19l0PeLvovYzN4omj1jyqhYFA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:68:ef:38:b8:4d:9f:0d:28:22:46:68:e3:97:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d2d7d9743de2efa2f633378a268f58f2aa16050 Validity Not Before: Jan 1 10:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c7b359b749129c612b252726e1253333c4cf7e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ff:a3:b4:b4:79:41:79:ca:91:23:a3:ac:0c: da:ba:d3:18:ca:6f:bc:cc:a5:7c:86:5e:da:38:cc: 8c:48:93:5b:dd:27:7e:bd:35:b9:55:37:80:4d:2b: 8e:65:5d:69:4b:65:46:a7:80:84:45:e0:7c:81:72: 5a:cd:cf:ca:8c:93:81:7a:69:3f:76:df:5e:b0:ec: 46:5e:9e:8a:39:e1:f4:e6:7a:9f:af:67:79:ec:f1: a8:c5:49:b5:e6:c3:93:70:57:99:d7:2d:e9:55:90: 03:d9:82:6e:7c:59:4e:cc:eb:57:f1:be:0b:85:74: ee:e6:2b:45:f2:68:37:5a:ac:36:e6:33:17:9b:a8: 73:a0:b1:a3:33:c7:e0:19:8a:1e:03:9a:a2:be:99: d1:2d:71:b7:08:71:08:33:e7:89:ad:4d:7c:ec:16: 4a:7b:ea:f8:90:82:ec:bd:07:df:0b:9e:f5:34:3f: e2:20:b0:a3:80:cf:9c:f6:b5:5a:3f:cb:a7:9f:6e: 7b:95:28:1b:3f:6d:5f:7c:8c:56:e0:88:b6:55:cd: 8a:e0:22:c2:1e:86:cb:6e:5d:9d:1c:eb:03:35:78: e0:b9:49:e9:26:39:23:26:f1:be:01:69:a6:74:28: 15:48:37:f0:0f:27:db:53:1d:75:89:19:17:60:75: c8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:7B:35:9B:74:91:29:C6:12:B2:52:72:6E:12:53:33:3C:4C:F7:E7 X509v3 Authority Key Identifier: keyid:2D:2D:7D:97:43:DE:2E:FA:2F:63:33:78:A2:68:F5:8F:2A:A1:60:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LS19l0PeLvovYzN4omj1jyqhYFA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/XHs1m3SRKcYSslJybhJTMzxM9-c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:e580:b::/48 Signature Algorithm: sha256WithRSAEncryption 8d:45:c4:8c:40:ff:67:77:92:4b:51:ea:da:ca:9d:7d:07:e0: 80:42:5e:20:e5:69:32:58:62:df:47:93:b7:27:15:78:d1:d9: 44:d9:64:1d:57:50:5c:ed:65:59:10:7d:b1:db:97:11:65:c1: a2:c6:c4:08:cc:8f:3f:bc:12:7e:15:49:df:87:b8:71:13:5c: f9:03:01:44:1d:68:3c:d6:ab:74:c3:15:1d:2d:ca:ef:f3:63: e7:2b:22:2d:fd:7f:a0:ab:b8:d8:7e:4d:a9:a7:ec:ee:7e:8e: 88:52:fd:f4:71:bb:57:e1:98:50:24:aa:cc:c8:6c:5b:8f:d2: ed:28:a2:6a:01:f4:f4:1b:ba:b9:88:cb:9d:8a:cb:ef:71:64: 77:9a:ab:ec:c2:7b:16:91:d4:2c:e8:fa:44:3c:59:e7:50:cc: 4b:4e:8f:e3:34:87:cd:5e:9d:99:52:d8:d0:44:f1:1c:ac:09: 69:d9:77:1b:de:a7:14:9f:6c:13:ad:b5:3d:1c:44:6d:f0:53: e1:5e:5f:de:03:94:0c:81:0f:1e:4d:40:1e:c9:f2:11:9c:cf: ec:65:67:53:4e:9b:fb:55:25:e5:76:54:19:f9:36:eb:19:4a: 79:90:73:d6:66:bf:63:ab:db:9e:39:a1:aa:be:5d:44:3a:ae: 5a:b4:ea:20 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EGjvOLhNnw0oIkZo45ekMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMmQ3ZDk3NDNkZTJlZmEyZjYzMzM3OGEyNjhmNThmMmFh MTYwNTAwHhcNMjYwMTAxMTAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzdiMzU5Yjc0OTEyOWM2MTJiMjUyNzI2ZTEyNTMzMzNjNGNmN2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlv+jtLR5QXnKkSOjrAzautMYym+8 zKV8hl7aOMyMSJNb3Sd+vTW5VTeATSuOZV1pS2VGp4CEReB8gXJazc/KjJOBemk/ dt9esOxGXp6KOeH05nqfr2d57PGoxUm15sOTcFeZ1y3pVZAD2YJufFlOzOtX8b4L hXTu5itF8mg3Wqw25jMXm6hzoLGjM8fgGYoeA5qivpnRLXG3CHEIM+eJrU187BZK e+r4kILsvQffC571ND/iILCjgM+c9rVaP8unn257lSgbP21ffIxW4Ii2Vc2K4CLC HobLbl2dHOsDNXjguUnpJjkjJvG+AWmmdCgVSDfwDyfbUx11iRkXYHXIdwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFx7NZt0kSnGErJScm4SUzM8TPfnMB8GA1UdIwQY MBaAFC0tfZdD3i76L2MzeKJo9Y8qoWBQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFMxOWwwUGVMdm92WXpONG9tajFqeXFoWUZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9jZjdjMTktMWM3ZC00ZWJlLWI0ZGQt Y2JjY2Y5MDQ1NWZlLzEvWEhzMW0zU1JLY1lTc2xKeWJoSlRNenhNOS1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My9jZjdjMTktMWM3ZC00ZWJlLWI0ZGQtY2JjY2Y5MDQ1NWZl LzEvTFMxOWwwUGVMdm92WXpONG9tajFqeXFoWUZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg/lgAAL MA0GCSqGSIb3DQEBCwUAA4IBAQCNRcSMQP9nd5JLUerayp19B+CAQl4g5WkyWGLf R5O3JxV40dlE2WQdV1Bc7WVZEH2x25cRZcGixsQIzI8/vBJ+FUnfh7hxE1z5AwFE HWg81qt0wxUdLcrv82PnKyIt/X+gq7jYfk2pp+zufo6IUv30cbtX4ZhQJKrMyGxb j9LtKKJqAfT0G7q5iMudisvvcWR3mqvswnsWkdQs6PpEPFnnUMxLTo/jNIfNXp2Z UtjQRPEcrAlp2Xcb3qcUn2wTrbU9HERt8FPhXl/eA5QMgQ8eTUAeyfIRnM/sZWdT Tpv7VSXldlQZ+TbrGUp5kHPWZr9jq9ueOaGqvl1EOq5atOog -----END CERTIFICATE-----Generated at Mon Jan 26 10:23:11 2026 by rpki-client