This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/xgAWBil5EsIbXsPRusPGb6zpLcw.roa File: xgAWBil5EsIbXsPRusPGb6zpLcw.roa (raw, json) Hash identifier: zSJUAVPIgPXFjPtFqmN1COeOAZ77TlWuxQawdy7chmA= Subject key identifier: C6:00:16:06:29:79:12:C2:1B:5E:C3:D1:BA:C3:C6:6F:AC:E9:2D:CC Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Certificate serial: 019B7F150F8CD2EBEB4F048C772BDCFC8C21 Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/xgAWBil5EsIbXsPRusPGb6zpLcw.roa Signing time: Fri 02 Jan 2026 14:20:45 +0000 ROA not before: Fri 02 Jan 2026 14:20:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205534 IP address blocks: 2a14:c380:370::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:0f:8c:d2:eb:eb:4f:04:8c:77:2b:dc:fc:8c:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Validity Not Before: Jan 2 14:20:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6001606297912c21b5ec3d1bac3c66face92dcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:52:27:4a:b5:bb:9e:86:63:f8:88:5f:36:30: 48:94:92:eb:79:4b:04:57:b9:ba:bd:de:9d:e3:2d: 10:33:f1:72:94:d3:ef:85:73:74:43:fc:a4:f9:72: 2c:95:c5:6f:ee:44:7e:db:36:48:a6:cc:65:be:79: 2d:a7:4f:c2:34:f3:a3:8e:b6:89:f8:62:f1:b8:13: f8:fe:e1:b2:00:02:ba:d2:d2:8d:10:a5:31:65:ec: 81:d8:5d:69:bb:86:32:b2:cb:d1:44:2c:6a:bf:7f: 33:11:7e:18:bc:f2:76:74:82:53:0c:84:6d:d8:c6: 74:81:86:77:04:33:48:75:14:4e:28:9b:74:44:56: 8c:33:bb:6b:fe:cb:b1:03:1d:93:a2:93:8f:b4:ac: c5:02:f1:b9:5c:0c:d2:cf:83:07:b8:49:30:80:77: 54:a4:ab:11:87:f8:ca:d3:f1:fe:46:aa:95:77:2b: 95:2f:f7:e8:50:2b:d3:26:bf:7d:7f:b5:ff:33:3a: ed:c1:43:57:2e:ee:da:68:39:c7:87:f3:23:21:5e: 2e:b4:b5:4b:de:fd:b2:b4:bc:2d:b8:60:8c:e5:98: fb:f2:73:9d:01:12:74:50:35:33:27:cc:8c:c5:a4: 60:b4:2a:76:75:03:22:54:82:f1:11:0f:68:6f:da: 2e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:00:16:06:29:79:12:C2:1B:5E:C3:D1:BA:C3:C6:6F:AC:E9:2D:CC X509v3 Authority Key Identifier: keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/xgAWBil5EsIbXsPRusPGb6zpLcw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:c380:370::/44 Signature Algorithm: sha256WithRSAEncryption 8e:09:7a:c8:93:43:d7:a9:f6:7f:89:b7:d8:a2:87:6e:e8:eb: 32:05:6e:56:5d:6f:4c:65:33:cb:17:53:95:00:71:b0:8f:dc: c3:3e:34:f6:97:69:14:a3:80:39:b8:27:3c:ed:b5:56:82:66: 75:de:fb:44:7c:66:17:c7:be:d2:e0:fb:44:9b:cd:b4:27:cd: 6d:b9:bd:c9:93:27:e9:e2:18:b8:ea:d1:f9:5e:ff:b5:4e:e9: 45:38:19:2e:42:d3:95:8f:21:91:be:00:f8:50:42:bc:00:63: db:ec:e1:8f:d8:ec:13:85:1f:ce:17:3c:93:3e:6a:d8:26:2f: 5b:5a:c6:07:b4:0c:db:67:2b:6b:77:dd:f2:a8:f5:7b:8a:72: 78:1f:14:d3:29:21:f6:60:9a:c1:51:ff:6d:d0:0f:1f:26:25: 20:30:22:5b:9e:1f:a4:64:e4:8a:fc:62:84:fb:28:25:d8:b5: ad:76:ac:e2:3c:85:20:11:60:90:16:e3:36:7f:27:1a:38:af: 23:99:e8:20:a9:29:e3:94:27:d8:ef:fa:db:91:da:bd:0d:00: 6e:ce:2f:fa:ce:a4:98:4d:10:a5:b5:13:a2:97:f0:40:ad:42: a0:99:61:1a:15:26:7d:95:1b:aa:c8:28:b3:bd:c5:12:9b:89: c6:b8:ba:fc -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/FQ+M0uvrTwSMdyvc/IwhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YjNkZTVmOWFkYjUwZmU0MWY2ZGM3OGZmZDBhMmM5MDg2 ZDI1MTIwHhcNMjYwMTAyMTQyMDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjAwMTYwNjI5NzkxMmMyMWI1ZWMzZDFiYWMzYzY2ZmFjZTkyZGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplInSrW7noZj+IhfNjBIlJLreUsE V7m6vd6d4y0QM/FylNPvhXN0Q/yk+XIslcVv7kR+2zZIpsxlvnktp0/CNPOjjraJ +GLxuBP4/uGyAAK60tKNEKUxZeyB2F1pu4YyssvRRCxqv38zEX4YvPJ2dIJTDIRt 2MZ0gYZ3BDNIdRROKJt0RFaMM7tr/suxAx2TopOPtKzFAvG5XAzSz4MHuEkwgHdU pKsRh/jK0/H+RqqVdyuVL/foUCvTJr99f7X/MzrtwUNXLu7aaDnHh/MjIV4utLVL 3v2ytLwtuGCM5Zj78nOdARJ0UDUzJ8yMxaRgtCp2dQMiVILxEQ9ob9oueQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMYAFgYpeRLCG17D0brDxm+s6S3MMB8GA1UdIwQY MBaAFFiz3l+a21D+QfbceP/QoskIbSUSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUt NTMyMWQ2OWQ5NzlkLzEveGdBV0JpbDVFc0liWHNQUnVzUEdiNnpwTGN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUtNTMyMWQ2OWQ5Nzlk LzEvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhTDgANw MA0GCSqGSIb3DQEBCwUAA4IBAQCOCXrIk0PXqfZ/ibfYoodu6OsyBW5WXW9MZTPL F1OVAHGwj9zDPjT2l2kUo4A5uCc87bVWgmZ13vtEfGYXx77S4PtEm820J81tub3J kyfp4hi46tH5Xv+1TulFOBkuQtOVjyGRvgD4UEK8AGPb7OGP2OwThR/OFzyTPmrY Ji9bWsYHtAzbZytrd93yqPV7inJ4HxTTKSH2YJrBUf9t0A8fJiUgMCJbnh+kZOSK /GKE+ygl2LWtdqziPIUgEWCQFuM2fycaOK8jmeggqSnjlCfY7/rbkdq9DQBuzi/6 zqSYTRCltROil/BArUKgmWEaFSZ9lRuqyCizvcUSm4nGuLr8 -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:49 2026 by rpki-client