This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/XTp2Q_X9IPYiKxjwerz6gv4CZ1A.roa File: XTp2Q_X9IPYiKxjwerz6gv4CZ1A.roa (raw, json) Hash identifier: xs/xW47uPV3PFyZM/56JVPLFLoywp7b6YdV2aLzUF3c= Subject key identifier: 5D:3A:76:43:F5:FD:20:F6:22:2B:18:F0:7A:BC:FA:82:FE:02:67:50 Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Certificate serial: 019B7F810C6E311F1C936EF8DB189797B228 Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/XTp2Q_X9IPYiKxjwerz6gv4CZ1A.roa Signing time: Fri 02 Jan 2026 16:18:42 +0000 ROA not before: Fri 02 Jan 2026 16:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31605 IP address blocks: 2a0f:56c4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:0c:6e:31:1f:1c:93:6e:f8:db:18:97:97:b2:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Validity Not Before: Jan 2 16:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d3a7643f5fd20f6222b18f07abcfa82fe026750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:94:d5:50:12:70:85:5a:a9:20:b0:4f:fd:a9: f2:99:f4:ef:1a:62:49:7b:2c:b6:5d:f6:49:74:66: 1a:d0:82:b3:3d:c6:20:dd:00:b4:9a:e9:28:ed:85: 41:12:18:d6:2f:65:bc:23:3d:0c:98:ea:50:e9:5e: e3:e4:83:62:6f:74:37:6f:48:f5:18:1e:b5:81:41: b6:3b:f6:27:93:ed:6f:97:57:bb:a1:1b:6a:1a:3b: 2b:96:d1:a2:fe:a5:e9:c9:7f:1c:e8:13:c3:30:94: 75:59:0f:75:47:55:ff:f0:0d:37:14:7c:fc:13:cc: f8:b5:19:32:c7:4e:5d:66:48:07:09:16:da:13:20: bf:e2:9d:a7:67:03:fe:a7:bc:49:12:b4:af:d1:61: f7:0a:cc:b3:72:e8:aa:96:21:fd:03:6d:9e:c8:2e: 42:b2:63:11:1e:54:ef:a0:15:80:03:fd:87:ca:1a: 3e:a3:c1:c4:85:27:9f:32:34:fb:8e:1f:03:5a:3e: 43:b2:07:c8:15:04:7f:ba:05:2f:d7:a5:31:b4:65: bd:19:62:39:1c:aa:11:9f:09:f9:79:40:d1:d4:0b: 07:29:7c:99:23:54:18:32:2b:b6:a5:bd:d6:c4:2b: 68:d0:7b:d5:e3:93:69:cb:61:c6:b9:e2:bd:fa:d9: 47:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:3A:76:43:F5:FD:20:F6:22:2B:18:F0:7A:BC:FA:82:FE:02:67:50 X509v3 Authority Key Identifier: keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/XTp2Q_X9IPYiKxjwerz6gv4CZ1A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:56c4::/48 Signature Algorithm: sha256WithRSAEncryption 8b:25:b4:04:5c:f9:74:37:f9:a8:00:57:10:11:58:98:0a:74: 4e:c8:6d:2f:2b:2d:41:99:37:65:9d:36:4d:0c:cf:d7:41:93: 64:36:f6:e6:9c:88:97:3e:4b:cd:7f:ee:8b:59:f7:0f:7f:4d: 5a:f7:98:b3:05:11:75:1c:4e:e9:72:99:18:d9:ef:76:62:ce: b8:10:fd:a8:df:5c:71:79:03:77:49:77:ea:55:6e:2c:2f:5a: 8e:ee:e3:70:6d:28:60:52:7b:b2:90:9e:06:d7:df:b7:15:c5: 31:9b:e4:24:52:1e:3b:17:53:73:e9:bd:9b:3a:76:19:32:88: 6f:fa:a0:a0:7a:40:ab:41:f1:f4:b6:13:9c:13:be:54:6e:55: 2e:62:88:a6:19:ef:07:43:f8:c0:44:b5:90:62:24:68:6a:04: 4a:61:b5:a3:e8:9b:f5:08:48:e2:7a:2c:b3:bc:8e:56:fb:bc: c3:9b:8e:b3:db:bd:9b:26:58:f5:d1:64:07:55:31:16:b0:1f: f8:d6:57:43:72:bf:d0:6b:86:13:56:63:c1:b1:74:f2:1a:2d: bc:d1:33:ac:61:28:e3:7d:66:e6:3c:76:99:bd:8d:f1:fa:8e: d3:9d:9f:91:27:4a:fc:c1:76:62:65:73:ad:df:44:10:80:28: ea:67:14:84 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/gQxuMR8ck2742xiXl7IoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmODIzMDlhNjgxNDY3OGFkNzJlM2YzMWE0ZmUwMjcyZjQw YmQ5ODYwHhcNMjYwMTAyMTYxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDNhNzY0M2Y1ZmQyMGY2MjIyYjE4ZjA3YWJjZmE4MmZlMDI2NzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZTVUBJwhVqpILBP/anymfTvGmJJ eyy2XfZJdGYa0IKzPcYg3QC0muko7YVBEhjWL2W8Iz0MmOpQ6V7j5INib3Q3b0j1 GB61gUG2O/Ynk+1vl1e7oRtqGjsrltGi/qXpyX8c6BPDMJR1WQ91R1X/8A03FHz8 E8z4tRkyx05dZkgHCRbaEyC/4p2nZwP+p7xJErSv0WH3CsyzcuiqliH9A22eyC5C smMRHlTvoBWAA/2Hyho+o8HEhSefMjT7jh8DWj5DsgfIFQR/ugUv16UxtGW9GWI5 HKoRnwn5eUDR1AsHKXyZI1QYMiu2pb3WxCto0HvV45Npy2HGueK9+tlHDwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFF06dkP1/SD2IisY8Hq8+oL+AmdQMB8GA1UdIwQY MBaAFP+CMJpoFGeK1y4/MaT+AnL0C9mGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTkt ZjUyNTgxNjQwMmJkLzEvWFRwMlFfWDlJUFlpS3hqd2VyejZndjRDWjFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTktZjUyNTgxNjQwMmJk LzEvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9WxAAA MA0GCSqGSIb3DQEBCwUAA4IBAQCLJbQEXPl0N/moAFcQEViYCnROyG0vKy1BmTdl nTZNDM/XQZNkNvbmnIiXPkvNf+6LWfcPf01a95izBRF1HE7pcpkY2e92Ys64EP2o 31xxeQN3SXfqVW4sL1qO7uNwbShgUnuykJ4G19+3FcUxm+QkUh47F1Nz6b2bOnYZ Mohv+qCgekCrQfH0thOcE75UblUuYoimGe8HQ/jARLWQYiRoagRKYbWj6Jv1CEji eiyzvI5W+7zDm46z272bJlj10WQHVTEWsB/41ldDcr/Qa4YTVmPBsXTyGi280TOs YSjjfWbmPHaZvY3x+o7TnZ+RJ0r8wXZiZXOt30QQgCjqZxSE -----END CERTIFICATE-----Generated at Sun Jan 25 16:12:50 2026 by rpki-client