This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/XM2xMAMOhRi0tJaGNvLsDA8gxfs.roa File: XM2xMAMOhRi0tJaGNvLsDA8gxfs.roa (raw, json) Hash identifier: iR+Q4hernJS31SzVb/MBGzpANeByVhThr/MhSAqyXUI= Subject key identifier: 5C:CD:B1:30:03:0E:85:18:B4:B4:96:86:36:F2:EC:0C:0F:20:C5:FB Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Certificate serial: 019B7F15116C9FE4BA2F2A6C5EC99A8B1C91 Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/XM2xMAMOhRi0tJaGNvLsDA8gxfs.roa Signing time: Fri 02 Jan 2026 14:20:45 +0000 ROA not before: Fri 02 Jan 2026 14:20:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208191 IP address blocks: 2a14:c380:160::/44 maxlen: 44 2a14:c380:170::/44 maxlen: 44 2a14:c380:180::/44 maxlen: 44 2a14:c380:190::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:11:6c:9f:e4:ba:2f:2a:6c:5e:c9:9a:8b:1c:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Validity Not Before: Jan 2 14:20:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ccdb130030e8518b4b4968636f2ec0c0f20c5fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4e:5d:d3:16:a2:6e:ef:02:74:49:ea:75:69: a9:13:04:58:a3:47:74:0e:6a:7e:d4:5d:d3:dc:31: ad:e4:1a:d3:dd:f1:fd:71:9f:35:17:0d:5f:eb:36: 49:83:bb:47:a3:ea:35:29:4e:15:85:2a:32:2f:ed: 81:73:9e:05:f2:64:c0:4c:94:a3:a4:56:81:56:55: 5e:0b:70:53:03:4d:a2:39:d4:3e:40:16:4f:f4:29: 62:a6:69:64:c1:60:e4:e8:d8:db:20:24:52:6c:5d: 72:b8:ff:96:2e:6e:d2:c5:4b:e7:30:8b:61:05:be: e6:c1:7b:df:b2:04:82:61:24:ab:a3:a1:a8:fe:6b: fe:e4:97:43:78:e1:44:f9:a3:63:77:cb:61:37:5d: b7:ec:92:d0:9f:58:1b:07:39:e3:0c:be:68:a4:7d: 9e:0d:48:6e:0f:ec:2a:4b:f8:d2:3e:97:ad:6f:75: 2a:08:33:b2:89:fb:94:7e:7e:0c:96:44:94:b7:69: e9:6c:5d:e9:12:bd:30:f6:1d:f4:eb:7b:74:b7:10: 11:4c:75:01:a1:7c:30:03:b8:12:45:79:d7:08:ea: e8:b0:16:86:3a:e8:04:8c:a7:0c:a3:97:2a:60:83: 73:7c:19:14:94:51:e3:23:08:16:e0:c4:d6:03:ed: 54:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:CD:B1:30:03:0E:85:18:B4:B4:96:86:36:F2:EC:0C:0F:20:C5:FB X509v3 Authority Key Identifier: keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/XM2xMAMOhRi0tJaGNvLsDA8gxfs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:c380:160::-2a14:c380:19f:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 78:18:64:97:ec:4c:1b:57:95:59:38:1e:0d:63:73:6b:38:1d: 00:1a:0a:c8:c0:cf:45:ea:dd:0c:34:40:86:c0:00:2d:6b:03: 1c:9c:24:ef:d1:68:65:e7:2d:72:c4:e8:3e:de:a5:5b:ab:29: 2e:d0:75:09:c1:73:86:20:a6:dd:ab:12:a5:3f:30:24:f2:f2: 33:49:55:fe:d1:aa:b7:22:d6:6a:58:66:cf:b8:76:38:a6:8d: 01:08:9c:87:e5:bf:74:cd:5c:f0:df:99:c8:c9:30:11:77:df: ee:19:e9:d1:07:1c:7e:7e:0c:33:0a:66:14:61:14:3e:1a:85: 1c:e0:96:8d:1f:87:42:0a:fe:31:d8:e1:8a:b8:6a:71:a9:75: 6a:db:b1:f5:a7:e1:0a:12:45:ea:58:b5:6e:db:e4:da:a6:e9: 5f:70:f3:64:b4:de:5b:00:e6:aa:a1:66:52:a2:15:57:4b:2a: 99:c7:1f:32:01:35:3f:68:98:0a:f5:ea:7d:2f:6f:7e:39:84: 30:0f:77:29:bd:e2:d3:8a:ae:8d:ac:4e:9f:dc:f6:2a:58:96: ab:75:f0:15:10:fa:22:51:46:08:66:4b:81:06:e1:88:10:f0: 6b:69:3d:84:c5:31:98:a7:8d:63:3d:51:22:e1:e5:37:3a:f4: 22:e7:72:99 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt/FRFsn+S6LypsXsmaixyRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YjNkZTVmOWFkYjUwZmU0MWY2ZGM3OGZmZDBhMmM5MDg2 ZDI1MTIwHhcNMjYwMTAyMTQyMDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2NkYjEzMDAzMGU4NTE4YjRiNDk2ODYzNmYyZWMwYzBmMjBjNWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApk5d0xaibu8CdEnqdWmpEwRYo0d0 Dmp+1F3T3DGt5BrT3fH9cZ81Fw1f6zZJg7tHo+o1KU4VhSoyL+2Bc54F8mTATJSj pFaBVlVeC3BTA02iOdQ+QBZP9ClipmlkwWDk6NjbICRSbF1yuP+WLm7SxUvnMIth Bb7mwXvfsgSCYSSro6Go/mv+5JdDeOFE+aNjd8thN1237JLQn1gbBznjDL5opH2e DUhuD+wqS/jSPpetb3UqCDOyifuUfn4MlkSUt2npbF3pEr0w9h3063t0txARTHUB oXwwA7gSRXnXCOrosBaGOugEjKcMo5cqYINzfBkUlFHjIwgW4MTWA+1U5QIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFFzNsTADDoUYtLSWhjby7AwPIMX7MB8GA1UdIwQY MBaAFFiz3l+a21D+QfbceP/QoskIbSUSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUt NTMyMWQ2OWQ5NzlkLzEvWE0yeE1BTU9oUmkwdEphR052THNEQThneGZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUtNTMyMWQ2OWQ5Nzlk LzEvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwUqFMOA AWADBwUqFMOAAYAwDQYJKoZIhvcNAQELBQADggEBAHgYZJfsTBtXlVk4Hg1jc2s4 HQAaCsjAz0Xq3Qw0QIbAAC1rAxycJO/RaGXnLXLE6D7epVurKS7QdQnBc4Ygpt2r EqU/MCTy8jNJVf7Rqrci1mpYZs+4djimjQEInIflv3TNXPDfmcjJMBF33+4Z6dEH HH5+DDMKZhRhFD4ahRzglo0fh0IK/jHY4Yq4anGpdWrbsfWn4QoSRepYtW7b5Nqm 6V9w82S03lsA5qqhZlKiFVdLKpnHHzIBNT9omAr16n0vb345hDAPdym94tOKro2s Tp/c9ipYlqt18BUQ+iJRRghmS4EG4YgQ8GtpPYTFMZinjWM9USLh5Tc69CLncpk= -----END CERTIFICATE-----Generated at Sun Jan 25 14:36:05 2026 by rpki-client