This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/xqDiTE82VfBKD9rVWVzUaZpsTPI.roa File: xqDiTE82VfBKD9rVWVzUaZpsTPI.roa (raw, json) Hash identifier: 9m/z8uOFFSLz+xo2V7/xt7po1ubSIknfY+Jf0uQ8ei0= Subject key identifier: C6:A0:E2:4C:4F:36:55:F0:4A:0F:DA:D5:59:5C:D4:69:9A:6C:4C:F2 Certificate issuer: /CN=2763d9cfc81732ed2fa4a642edae334c002950f8 Certificate serial: 019B7DCA84E3BC1D56617C69D0B34961A2B0 Authority key identifier: 27:63:D9:CF:C8:17:32:ED:2F:A4:A6:42:ED:AE:33:4C:00:29:50:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/xqDiTE82VfBKD9rVWVzUaZpsTPI.roa Signing time: Fri 02 Jan 2026 08:19:42 +0000 ROA not before: Fri 02 Jan 2026 08:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208122 IP address blocks: 2a06:78c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:84:e3:bc:1d:56:61:7c:69:d0:b3:49:61:a2:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2763d9cfc81732ed2fa4a642edae334c002950f8 Validity Not Before: Jan 2 08:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6a0e24c4f3655f04a0fdad5595cd4699a6c4cf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:86:b7:a5:79:63:04:7d:9e:c6:50:e7:6a:34: 1b:5a:3a:24:8b:40:b8:bf:f0:fd:cc:8a:95:21:8c: 0a:61:73:73:e4:10:18:3f:3d:60:69:5f:25:91:23: 87:f6:d8:4e:3a:b0:10:b6:17:2d:bd:a6:f8:85:ba: 14:68:f3:f4:d4:8a:88:1f:1e:92:c3:50:21:1f:a0: 45:70:d7:a3:d5:f6:be:9c:15:ea:27:a0:cb:80:bf: 8e:2e:64:21:6d:ef:08:f9:08:d1:af:90:b5:83:5f: ae:aa:75:01:47:c8:e3:11:30:37:6a:fe:ed:a5:37: b4:78:2e:22:a8:3c:4e:6e:cc:8d:b0:52:59:57:c9: 54:80:21:07:4b:bb:08:50:f7:bb:f3:bb:2c:c7:71: 96:46:aa:17:de:84:b2:9b:41:34:e2:10:df:55:ed: 3a:82:ce:56:30:ab:b6:c0:87:93:80:a2:1f:23:fc: 84:83:e3:e8:e5:c1:f2:44:83:69:04:81:c3:1e:52: 49:0a:29:79:e7:dd:f4:2a:a6:10:cd:d0:a1:09:02: 1a:47:59:0d:c5:dc:7c:d7:6a:cf:30:b3:e8:16:61: ff:5a:77:55:09:87:07:56:dc:64:d2:ba:84:82:a9: 22:bc:53:25:fd:ff:50:11:27:6e:f6:b1:fd:8c:b9: c0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:A0:E2:4C:4F:36:55:F0:4A:0F:DA:D5:59:5C:D4:69:9A:6C:4C:F2 X509v3 Authority Key Identifier: keyid:27:63:D9:CF:C8:17:32:ED:2F:A4:A6:42:ED:AE:33:4C:00:29:50:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/xqDiTE82VfBKD9rVWVzUaZpsTPI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:78c0::/29 Signature Algorithm: sha256WithRSAEncryption 76:d8:5a:cd:3d:95:15:e9:73:0f:2d:7c:4d:12:ca:05:d6:f2: 49:0a:aa:a8:c1:8a:a6:7b:7a:78:f2:02:4f:0a:03:dd:20:7d: 9f:33:3d:14:4a:1f:e2:dc:73:4a:2c:83:08:00:d4:f8:d3:03: b2:84:5a:a8:e4:a3:79:fd:e7:4b:06:59:1b:44:49:91:35:7d: 82:ee:f1:f2:7e:4a:c8:17:4a:8f:e5:62:18:1f:79:c9:84:ec: f1:1a:9f:54:2c:8d:a8:2f:17:78:7d:7d:4b:ad:e6:d3:ca:32: 0d:a3:d5:c2:0a:b4:a2:85:05:03:2b:b6:70:a2:2d:7f:2c:be: fe:39:46:15:3f:9f:80:42:9d:9a:3a:5c:6a:b5:6b:4a:81:ff: 1d:6d:3e:00:35:55:e7:c7:ef:86:79:d0:fc:4c:c9:5d:10:ce: 74:f4:3b:f0:d4:8a:24:d6:c9:fc:97:8e:39:01:d5:3c:d8:e0: 4c:3a:f7:ad:12:75:63:f8:9a:c2:15:66:3e:b6:f2:07:05:6f: f7:81:f2:b6:3a:88:a7:64:53:e9:2f:58:19:36:80:8f:32:b9: 07:1e:f9:df:a2:76:5d:38:a0:98:de:48:30:dd:78:a9:0b:5c: 61:e9:a6:5a:d0:f7:5b:34:c4:c0:e7:95:3f:a4:0a:5e:a9:4e: ca:77:73:3a -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9yoTjvB1WYXxp0LNJYaKwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3NjNkOWNmYzgxNzMyZWQyZmE0YTY0MmVkYWUzMzRjMDAy OTUwZjgwHhcNMjYwMTAyMDgxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmEwZTI0YzRmMzY1NWYwNGEwZmRhZDU1OTVjZDQ2OTlhNmM0Y2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIa3pXljBH2exlDnajQbWjoki0C4 v/D9zIqVIYwKYXNz5BAYPz1gaV8lkSOH9thOOrAQthctvab4hboUaPP01IqIHx6S w1AhH6BFcNej1fa+nBXqJ6DLgL+OLmQhbe8I+QjRr5C1g1+uqnUBR8jjETA3av7t pTe0eC4iqDxObsyNsFJZV8lUgCEHS7sIUPe787ssx3GWRqoX3oSym0E04hDfVe06 gs5WMKu2wIeTgKIfI/yEg+Po5cHyRINpBIHDHlJJCil55930KqYQzdChCQIaR1kN xdx812rPMLPoFmH/WndVCYcHVtxk0rqEgqkivFMl/f9QESdu9rH9jLnATwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFMag4kxPNlXwSg/a1Vlc1GmabEzyMB8GA1UdIwQY MBaAFCdj2c/IFzLtL6SmQu2uM0wAKVD4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjJQWno4Z1hNdTB2cEtaQzdhNHpUQUFwVVBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS83YWMxYzItMTQwZi00YzFhLTgxY2Mt MWQxMjI4MGJhMzIyLzEveHFEaVRFODJWZkJLRDlyVldWelVhWnBzVFBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS83YWMxYzItMTQwZi00YzFhLTgxY2MtMWQxMjI4MGJhMzIy LzEvSjJQWno4Z1hNdTB2cEtaQzdhNHpUQUFwVVBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgZ4wDAN BgkqhkiG9w0BAQsFAAOCAQEAdthazT2VFelzDy18TRLKBdbySQqqqMGKpnt6ePIC TwoD3SB9nzM9FEof4txzSiyDCADU+NMDsoRaqOSjef3nSwZZG0RJkTV9gu7x8n5K yBdKj+ViGB95yYTs8RqfVCyNqC8XeH19S63m08oyDaPVwgq0ooUFAyu2cKItfyy+ /jlGFT+fgEKdmjpcarVrSoH/HW0+ADVV58fvhnnQ/EzJXRDOdPQ78NSKJNbJ/JeO OQHVPNjgTDr3rRJ1Y/iawhVmPrbyBwVv94HytjqIp2RT6S9YGTaAjzK5Bx7536J2 XTigmN5IMN14qQtcYemmWtD3WzTEwOeVP6QKXqlOyndzOg== -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:28 2026 by rpki-client