This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/xZh2bocDA2yvFjE0_wiUAEY6dzo.roa File: xZh2bocDA2yvFjE0_wiUAEY6dzo.roa (raw, json) Hash identifier: Tzt6JK47BDLVwIilYNgHd87uaHUZEPoA9qdEO9K7mHk= Subject key identifier: C5:98:76:6E:87:03:03:6C:AF:16:31:34:FF:08:94:00:46:3A:77:3A Certificate issuer: /CN=c7e9c7aa534b1300bf724fff0f0c1b0519d505bb Certificate serial: 019B77C7440CA11D9A4A98FB8B32E0793865 Authority key identifier: C7:E9:C7:AA:53:4B:13:00:BF:72:4F:FF:0F:0C:1B:05:19:D5:05:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-nHqlNLEwC_ck__DwwbBRnVBbs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/xZh2bocDA2yvFjE0_wiUAEY6dzo.roa Signing time: Thu 01 Jan 2026 04:18:26 +0000 ROA not before: Thu 01 Jan 2026 04:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208816 IP address blocks: 2a0e:9481::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.crl rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.mft rsync://rpki.ripe.net/repository/DEFAULT/x-nHqlNLEwC_ck__DwwbBRnVBbs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:44:0c:a1:1d:9a:4a:98:fb:8b:32:e0:79:38:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7e9c7aa534b1300bf724fff0f0c1b0519d505bb Validity Not Before: Jan 1 04:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c598766e8703036caf163134ff089400463a773a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:44:d7:6f:dc:52:be:39:f0:f1:0d:07:73:82: c7:da:18:9b:86:a4:e4:24:0f:3d:b4:9f:6a:76:c0: 3b:e7:02:e7:0e:fb:6e:13:75:6d:41:a6:3e:08:d5: 57:2e:ae:5f:94:6f:0f:3a:85:a1:b2:a8:a8:75:b7: cd:8f:5a:b1:69:fe:b0:c6:f9:5f:45:a6:04:88:b7: 9d:b0:3d:09:3a:ac:40:5c:c0:c4:40:07:d1:15:02: 90:cf:78:ee:c6:65:b5:bf:53:4e:28:34:a4:91:c4: 55:01:6c:74:34:57:b5:0f:e4:c5:37:58:cc:a3:9f: d9:e5:2c:f6:db:d8:28:8d:01:41:b1:83:71:46:d2: 2a:38:f5:2d:14:6a:6e:c8:6c:05:db:97:56:81:13: 12:a1:e5:58:a4:d0:46:b6:ab:e7:90:06:df:e5:10: 64:0d:59:93:be:67:eb:be:35:bb:1c:58:94:19:40: ad:cf:02:ea:d7:a0:f7:43:57:45:f6:14:33:2a:05: 04:b9:53:4f:b6:1c:35:2e:75:d9:67:3f:e1:6c:93: 2e:70:40:54:3e:b0:e0:f5:92:96:48:f9:38:cf:a1: 4f:e6:03:86:20:aa:db:68:49:49:55:48:2b:b9:44: c7:42:1c:09:a8:5d:e0:d2:c5:e4:11:84:48:10:f2: 3a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:98:76:6E:87:03:03:6C:AF:16:31:34:FF:08:94:00:46:3A:77:3A X509v3 Authority Key Identifier: keyid:C7:E9:C7:AA:53:4B:13:00:BF:72:4F:FF:0F:0C:1B:05:19:D5:05:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-nHqlNLEwC_ck__DwwbBRnVBbs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/xZh2bocDA2yvFjE0_wiUAEY6dzo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:9481::/32 Signature Algorithm: sha256WithRSAEncryption b0:26:51:10:17:70:c3:b9:d6:58:f8:d5:d8:bd:8f:a7:2e:28: ab:3f:01:65:44:c5:67:9e:35:98:04:41:a4:10:90:bf:18:f9: 82:9a:d9:02:a9:85:2a:91:fa:5e:5f:7b:78:12:a7:34:25:d9: 2f:8c:d8:b6:49:13:12:73:5a:95:d8:e3:93:ef:64:44:c2:f4: 8b:bd:7b:16:7f:87:bd:0e:2a:b0:82:c4:10:5f:01:11:82:e5: a9:10:e0:01:b5:b8:d6:09:ad:bf:15:53:40:92:90:d7:8f:8c: c5:3c:d9:ed:e8:f6:d8:5d:13:2a:1f:ed:6d:e9:ce:3e:77:16: e4:70:a9:09:71:04:c2:c2:92:b0:1f:81:bc:55:7f:fb:c8:ad: b4:c0:25:b4:9a:fb:b6:06:94:65:58:75:ed:49:0a:b8:0b:83: 62:06:be:0d:cd:51:bd:1e:a8:ac:1a:a9:a7:ca:21:66:b5:1c: 14:81:42:4c:26:e5:4e:d4:94:e7:da:e0:80:a3:a3:19:ac:ee: 44:6a:1d:a3:9d:79:c6:67:45:7e:ff:06:bb:a4:20:24:8f:31: 1e:9a:e6:4c:a9:e8:14:2b:9d:99:39:95:b3:50:b9:e0:d3:61: 12:bd:28:c9:d1:13:c3:4f:e6:79:71:08:a7:33:4f:87:a6:1f: 8a:17:6d:bd -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt3x0QMoR2aSpj7izLgeThlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ZTljN2FhNTM0YjEzMDBiZjcyNGZmZjBmMGMxYjA1MTlk NTA1YmIwHhcNMjYwMTAxMDQxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTk4NzY2ZTg3MDMwMzZjYWYxNjMxMzRmZjA4OTQwMDQ2M2E3NzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9UTXb9xSvjnw8Q0Hc4LH2hibhqTk JA89tJ9qdsA75wLnDvtuE3VtQaY+CNVXLq5flG8POoWhsqiodbfNj1qxaf6wxvlf RaYEiLedsD0JOqxAXMDEQAfRFQKQz3juxmW1v1NOKDSkkcRVAWx0NFe1D+TFN1jM o5/Z5Sz229gojQFBsYNxRtIqOPUtFGpuyGwF25dWgRMSoeVYpNBGtqvnkAbf5RBk DVmTvmfrvjW7HFiUGUCtzwLq16D3Q1dF9hQzKgUEuVNPthw1LnXZZz/hbJMucEBU PrDg9ZKWSPk4z6FP5gOGIKrbaElJVUgruUTHQhwJqF3g0sXkEYRIEPI6SwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFMWYdm6HAwNsrxYxNP8IlABGOnc6MB8GA1UdIwQY MBaAFMfpx6pTSxMAv3JP/w8MGwUZ1QW7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveC1uSHFsTkxFd0NfY2tfX0R3d2JCUm5WQmJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC81MGFiZWYtMzc0Yy00ZWE2LWI3ZDQt Y2U1MDA4MjdmZjdmLzEveFpoMmJvY0RBMnl2RmpFMF93aVVBRVk2ZHpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC81MGFiZWYtMzc0Yy00ZWE2LWI3ZDQtY2U1MDA4MjdmZjdm LzEveC1uSHFsTkxFd0NfY2tfX0R3d2JCUm5WQmJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg6UgTAN BgkqhkiG9w0BAQsFAAOCAQEAsCZREBdww7nWWPjV2L2Ppy4oqz8BZUTFZ541mARB pBCQvxj5gprZAqmFKpH6Xl97eBKnNCXZL4zYtkkTEnNaldjjk+9kRML0i717Fn+H vQ4qsILEEF8BEYLlqRDgAbW41gmtvxVTQJKQ14+MxTzZ7ej22F0TKh/tbenOPncW 5HCpCXEEwsKSsB+BvFV/+8ittMAltJr7tgaUZVh17UkKuAuDYga+Dc1RvR6orBqp p8ohZrUcFIFCTCblTtSU59rggKOjGazuRGodo515xmdFfv8Gu6QgJI8xHprmTKno FCudmTmVs1C54NNhEr0oydETw0/meXEIpzNPh6YfihdtvQ== -----END CERTIFICATE-----Generated at Mon Jan 26 03:05:50 2026 by rpki-client