This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/xqtPQpmSw8BM5RyqcwITHIfXLSc.roa File: xqtPQpmSw8BM5RyqcwITHIfXLSc.roa (raw, json) Hash identifier: hGp4Jg8lf+rbg8QFIZWOCXC5lP9F5Y5cQtGXi8sQzqY= Subject key identifier: C6:AB:4F:42:99:92:C3:C0:4C:E5:1C:AA:73:02:13:1C:87:D7:2D:27 Certificate issuer: /CN=f4b769a53dd86352d3440f222bdf907cf09c2dba Certificate serial: 019B79ECCC49B02DF5FA2ADBF07E33FBE90B Authority key identifier: F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/xqtPQpmSw8BM5RyqcwITHIfXLSc.roa Signing time: Thu 01 Jan 2026 14:18:40 +0000 ROA not before: Thu 01 Jan 2026 14:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16097 IP address blocks: 86.56.96.0/19 maxlen: 19 2001:4c51::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:cc:49:b0:2d:f5:fa:2a:db:f0:7e:33:fb:e9:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4b769a53dd86352d3440f222bdf907cf09c2dba Validity Not Before: Jan 1 14:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6ab4f429992c3c04ce51caa7302131c87d72d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c4:27:49:c0:52:d0:5c:22:83:92:15:7c:8e: b5:8c:26:71:a5:99:1a:c8:1d:9f:b5:9a:3b:e9:3f: 79:6f:3c:08:8d:73:eb:8c:c3:2f:80:6b:69:04:3d: a1:75:a1:c9:8e:c4:ce:7d:aa:4e:72:47:19:c1:6f: 15:8b:35:17:8f:9d:d7:bf:7f:4f:76:8b:01:e7:c7: 4c:77:a7:c7:8e:0b:e1:1b:1f:35:8d:f6:02:05:8e: 80:3c:cc:7c:80:90:53:c2:dd:45:6c:47:e1:97:e0: 55:ba:e1:49:02:32:cf:d8:15:28:17:5e:b6:46:4d: 58:ea:e5:ff:0f:e7:96:ec:21:a1:3d:85:c5:e6:67: 89:72:72:95:fb:7d:76:76:85:6b:f7:1d:6a:a8:9e: 3d:42:2f:94:40:b6:0a:09:0c:25:fe:18:4f:c0:0b: 6a:74:ec:52:ac:c9:0c:89:a2:56:74:62:f7:a7:69: 97:ee:8b:c8:b2:f7:48:25:f8:e1:9c:1c:14:3e:41: dd:bb:24:e2:39:a2:c6:51:87:b2:a4:c1:79:a8:80: 07:63:b2:90:ba:1b:23:72:38:0a:c7:a9:25:99:1c: 3f:09:c3:34:85:d6:ed:2e:ee:d2:d1:90:0c:18:0f: 5a:9d:d1:ea:86:8c:5a:1c:68:80:6d:ce:af:d7:f8: 5b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:AB:4F:42:99:92:C3:C0:4C:E5:1C:AA:73:02:13:1C:87:D7:2D:27 X509v3 Authority Key Identifier: keyid:F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/xqtPQpmSw8BM5RyqcwITHIfXLSc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.56.96.0/19 IPv6: 2001:4c51::/32 Signature Algorithm: sha256WithRSAEncryption 2c:7c:23:4d:2d:0f:d3:91:06:17:61:2c:e5:6c:61:3e:40:0b: 11:26:b0:00:e0:84:89:c8:9f:0b:30:84:f3:2a:84:a2:95:16: 0d:c6:88:e2:3c:db:09:c4:05:60:6f:91:9c:3a:a8:f5:2e:5c: 5c:b8:d5:9e:d1:07:16:fa:f1:1f:bd:69:20:95:92:75:09:ed: d1:2a:4d:3a:a9:51:04:fc:4d:68:c2:55:94:b8:42:9b:0e:2a: aa:9a:db:6a:5d:fe:1a:10:7c:ac:7d:61:32:d2:11:ec:08:21: 07:2d:1c:91:c2:23:5f:48:55:83:b8:72:93:23:ce:53:b1:66: ce:41:00:48:2a:6c:bc:0c:8c:aa:2a:9c:9e:84:b0:65:4f:84: 3f:21:94:ac:df:dd:e2:fd:28:e9:e4:73:ca:0d:bf:a3:51:cb: 2a:aa:f8:3d:b7:65:98:63:bc:7f:9d:05:30:73:f9:b1:2f:5a: a2:ff:4b:a7:20:07:f8:3c:93:5a:f5:40:f8:aa:2b:26:f5:d9: bf:a4:e5:ff:54:bc:9f:b4:7f:07:d5:2d:92:0e:ae:ab:8f:6a: 26:26:d6:f4:a2:22:7b:3e:f0:23:9b:db:f5:5f:96:5c:32:d4: 6d:53:3f:50:4d:8b:2d:5a:f2:b1:8b:ee:7a:be:df:7a:cd:ef: 7d:df:5c:61 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57MxJsC31+irb8H4z++kLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0Yjc2OWE1M2RkODYzNTJkMzQ0MGYyMjJiZGY5MDdjZjA5 YzJkYmEwHhcNMjYwMTAxMTQxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmFiNGY0Mjk5OTJjM2MwNGNlNTFjYWE3MzAyMTMxYzg3ZDcyZDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMQnScBS0Fwig5IVfI61jCZxpZka yB2ftZo76T95bzwIjXPrjMMvgGtpBD2hdaHJjsTOfapOckcZwW8VizUXj53Xv39P dosB58dMd6fHjgvhGx81jfYCBY6APMx8gJBTwt1FbEfhl+BVuuFJAjLP2BUoF162 Rk1Y6uX/D+eW7CGhPYXF5meJcnKV+312doVr9x1qqJ49Qi+UQLYKCQwl/hhPwAtq dOxSrMkMiaJWdGL3p2mX7ovIsvdIJfjhnBwUPkHduyTiOaLGUYeypMF5qIAHY7KQ uhsjcjgKx6klmRw/CcM0hdbtLu7S0ZAMGA9andHqhoxaHGiAbc6v1/hbwwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMarT0KZksPATOUcqnMCExyH1y0nMB8GA1UdIwQY MBaAFPS3aaU92GNS00QPIivfkHzwnC26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUxkcHBUM1lZMUxUUkE4aUs5LVFmUENjTGJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83MGQ1MGYtZmYzYy00ZjYzLThkZWMt ZDdjMzZjMjdjMDg3LzEveHF0UFFwbVN3OEJNNVJ5cWN3SVRISWZYTFNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy83MGQ1MGYtZmYzYy00ZjYzLThkZWMtZDdjMzZjMjdjMDg3 LzEvOUxkcHBUM1lZMUxUUkE4aUs5LVFmUENjTGJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFVjhgMA0E AgACMAcDBQAgAUxRMA0GCSqGSIb3DQEBCwUAA4IBAQAsfCNNLQ/TkQYXYSzlbGE+ QAsRJrAA4ISJyJ8LMITzKoSilRYNxojiPNsJxAVgb5GcOqj1LlxcuNWe0QcW+vEf vWkglZJ1Ce3RKk06qVEE/E1owlWUuEKbDiqqmttqXf4aEHysfWEy0hHsCCEHLRyR wiNfSFWDuHKTI85TsWbOQQBIKmy8DIyqKpyehLBlT4Q/IZSs393i/Sjp5HPKDb+j Ucsqqvg9t2WYY7x/nQUwc/mxL1qi/0unIAf4PJNa9UD4qism9dm/pOX/VLyftH8H 1S2SDq6rj2omJtb0oiJ7PvAjm9v1X5ZcMtRtUz9QTYstWvKxi+56vt96ze9931xh -----END CERTIFICATE-----Generated at Sun Jan 25 22:49:23 2026 by rpki-client