This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/xwHnchiOAHRSaPxQfMUxp_joUnY.roa File: xwHnchiOAHRSaPxQfMUxp_joUnY.roa (raw, json) Hash identifier: qFPxwS1wi1Jk3om9qexO1e1HC4tkLXTweeGEIkEplvU= Subject key identifier: C7:01:E7:72:18:8E:00:74:52:68:FC:50:7C:C5:31:A7:F8:E8:52:76 Certificate issuer: /CN=351a14ce9d25239b92fe5abce532515044c1aba4 Certificate serial: 019B7DCB0DBBAE49B3EE89B6ADEEA739C1B9 Authority key identifier: 35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/xwHnchiOAHRSaPxQfMUxp_joUnY.roa Signing time: Fri 02 Jan 2026 08:20:17 +0000 ROA not before: Fri 02 Jan 2026 08:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44024 IP address blocks: 2a05:91c3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:0d:bb:ae:49:b3:ee:89:b6:ad:ee:a7:39:c1:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a14ce9d25239b92fe5abce532515044c1aba4 Validity Not Before: Jan 2 08:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c701e772188e00745268fc507cc531a7f8e85276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a7:ce:e3:cb:bb:5e:54:3c:89:52:02:02:1f: a0:43:de:9b:10:fc:f0:57:73:53:45:d2:23:ef:54: 99:60:d3:9a:93:91:16:a2:27:68:b4:ef:0e:64:19: e0:7f:bb:73:8f:ee:f5:8c:38:b3:b5:c5:85:e0:41: f1:cb:7a:73:51:3d:8d:ac:6d:0e:ae:94:c0:8c:f8: d8:2d:2a:bf:3e:7e:7d:41:76:75:cd:28:f0:c2:8d: ed:e2:5f:c0:53:07:6e:83:18:b6:ce:75:21:f2:74: 01:1c:f0:5a:73:cc:98:cf:28:ef:c1:83:20:d7:f8: 87:95:68:e6:18:56:83:30:e5:df:94:41:0d:dd:4e: 86:73:15:a4:f0:66:98:ab:7a:ba:d2:58:e8:4f:58: 90:20:90:02:1b:3d:4c:ea:b0:10:d7:65:dc:83:c8: 6f:17:a5:33:9b:50:b8:9a:c1:93:e2:2b:4b:e2:99: 9a:8f:6c:88:07:88:cd:d2:a2:75:3b:03:1f:0e:41: 20:cf:d5:aa:b4:a5:fd:31:bc:3b:8f:e3:cd:97:2f: 6c:84:83:75:3b:79:6b:fc:96:6f:02:99:95:6d:fa: f2:2b:9e:8a:9c:be:f2:cc:bb:27:44:b0:33:c6:81: ae:d8:7d:3f:2a:07:de:1a:f6:bb:82:8d:e2:c4:71: 4c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:01:E7:72:18:8E:00:74:52:68:FC:50:7C:C5:31:A7:F8:E8:52:76 X509v3 Authority Key Identifier: keyid:35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/xwHnchiOAHRSaPxQfMUxp_joUnY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:91c3::/48 Signature Algorithm: sha256WithRSAEncryption 33:12:f0:f2:c4:b4:e7:d3:6e:78:18:66:5c:7a:fe:96:57:8d: 98:d7:ff:b1:db:f0:34:72:38:35:ad:bd:61:3a:a7:1a:d0:33: 06:21:12:8c:5f:8b:50:db:fc:88:0b:ea:60:39:9a:f0:e2:d5: 04:cb:f4:80:54:1b:fe:cc:78:80:26:dd:50:e9:3a:99:a0:4c: f2:7e:a7:c8:61:4e:ad:88:79:8a:94:fa:23:e6:33:09:d7:3e: 0c:7c:8a:b4:cf:23:24:93:97:28:aa:37:61:e7:93:06:69:0b: 94:5c:da:ac:ec:62:d0:1b:f5:46:45:a9:62:f8:3e:af:d1:15: 54:97:cc:65:b4:90:fa:f9:cc:fa:67:1d:6b:c4:de:3f:02:10: 0d:e9:e1:45:da:c6:a5:18:57:13:69:95:81:10:bd:94:b2:86: dd:b2:83:d3:29:3b:05:4f:55:04:7c:76:32:d7:50:6a:bd:68: 41:37:c9:32:2a:b6:28:0e:75:a5:75:34:ac:b4:ab:37:22:2a: 92:0d:65:0e:71:19:ca:ac:b9:7f:27:f8:46:05:5c:a6:54:be: 2f:3c:6e:4e:07:75:0a:1b:ce:fe:71:a0:f3:4b:61:83:fc:9e: 32:f9:1f:28:30:2e:9f:36:52:53:58:fd:00:d0:e9:df:32:31: 7e:48:e6:3a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9yw27rkmz7om2re6nOcG5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWExNGNlOWQyNTIzOWI5MmZlNWFiY2U1MzI1MTUwNDRj MWFiYTQwHhcNMjYwMTAyMDgyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzAxZTc3MjE4OGUwMDc0NTI2OGZjNTA3Y2M1MzFhN2Y4ZTg1Mjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qfO48u7XlQ8iVICAh+gQ96bEPzw V3NTRdIj71SZYNOak5EWoidotO8OZBngf7tzj+71jDiztcWF4EHxy3pzUT2NrG0O rpTAjPjYLSq/Pn59QXZ1zSjwwo3t4l/AUwdugxi2znUh8nQBHPBac8yYzyjvwYMg 1/iHlWjmGFaDMOXflEEN3U6GcxWk8GaYq3q60ljoT1iQIJACGz1M6rAQ12Xcg8hv F6Uzm1C4msGT4itL4pmaj2yIB4jN0qJ1OwMfDkEgz9WqtKX9Mbw7j+PNly9shIN1 O3lr/JZvApmVbfryK56KnL7yzLsnRLAzxoGu2H0/KgfeGva7go3ixHFMrwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMcB53IYjgB0Umj8UHzFMaf46FJ2MB8GA1UdIwQY MBaAFDUaFM6dJSObkv5avOUyUVBEwaukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvVXpwMGxJNXVTX2xxODVUSlJVRVRCcTZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8zZTIxNjUtM2JiNS00NWMzLTk4OWEt Mjk1Mzg5NGIxZjZkLzEveHdIbmNoaU9BSFJTYVB4UWZNVXhwX2pvVW5ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8zZTIxNjUtM2JiNS00NWMzLTk4OWEtMjk1Mzg5NGIxZjZk LzEvTlJvVXpwMGxJNXVTX2xxODVUSlJVRVRCcTZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgWRwwAA MA0GCSqGSIb3DQEBCwUAA4IBAQAzEvDyxLTn0254GGZcev6WV42Y1/+x2/A0cjg1 rb1hOqca0DMGIRKMX4tQ2/yIC+pgOZrw4tUEy/SAVBv+zHiAJt1Q6TqZoEzyfqfI YU6tiHmKlPoj5jMJ1z4MfIq0zyMkk5coqjdh55MGaQuUXNqs7GLQG/VGRali+D6v 0RVUl8xltJD6+cz6Zx1rxN4/AhAN6eFF2salGFcTaZWBEL2UsobdsoPTKTsFT1UE fHYy11BqvWhBN8kyKrYoDnWldTSstKs3IiqSDWUOcRnKrLl/J/hGBVymVL4vPG5O B3UKG87+caDzS2GD/J4y+R8oMC6fNlJTWP0A0OnfMjF+SOY6 -----END CERTIFICATE-----Generated at Mon Jan 26 00:13:46 2026 by rpki-client