This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/XiqMdLxfKoUjx95VMJtJvMxAZvY.roa File: XiqMdLxfKoUjx95VMJtJvMxAZvY.roa (raw, json) Hash identifier: SXoL5HuxIAiQquuEruAdXQNKyAHRVH7HOzbYGfTqh5A= Subject key identifier: 5E:2A:8C:74:BC:5F:2A:85:23:C7:DE:55:30:9B:49:BC:CC:40:66:F6 Certificate issuer: /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205 Certificate serial: 019B7835547054013388D1C31161F8565F48 Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/XiqMdLxfKoUjx95VMJtJvMxAZvY.roa Signing time: Thu 01 Jan 2026 06:18:39 +0000 ROA not before: Thu 01 Jan 2026 06:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59542 IP address blocks: 2a02:a43f:9000::/36 maxlen: 36 2a02:a43f:9000::/37 maxlen: 37 2a02:a43f:9800::/37 maxlen: 37 2a02:a43f:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:54:70:54:01:33:88:d1:c3:11:61:f8:56:5f:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205 Validity Not Before: Jan 1 06:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e2a8c74bc5f2a8523c7de55309b49bccc4066f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d1:a0:4f:1b:2f:06:6e:7c:2a:ba:46:ba:f6: 6f:56:68:24:08:eb:62:fb:77:12:8c:01:f4:7d:fc: c8:2f:46:f4:4b:57:af:c6:3d:73:37:25:f6:21:e8: 32:9d:d3:1d:2c:7b:0d:78:6b:39:e1:81:34:d7:1b: fb:d7:b0:fb:9f:46:88:63:2b:df:aa:99:3d:21:a5: 6a:9c:9e:ac:db:e5:a4:87:04:fa:6c:b4:e7:c7:0c: c6:57:e1:52:90:a5:51:66:f1:f3:7d:30:f8:0a:12: a3:31:4e:e0:7b:fa:5d:ef:57:e3:97:9b:7b:9f:31: 66:85:4e:d7:75:1e:8e:6a:fd:f1:79:b6:bc:ea:fb: ef:a0:23:08:19:de:88:42:cc:a9:68:ad:ea:7c:43: c5:84:ef:1d:28:65:50:81:9a:18:8c:76:95:58:67: ae:dc:65:b7:7d:27:cd:6a:ad:b2:00:a5:46:3a:cb: 47:d6:6c:10:bd:4f:9f:de:3d:18:5c:5e:00:8f:4a: 42:5b:9e:ce:92:ff:c4:b5:c4:8d:41:3f:b9:11:70: 1d:a2:00:91:85:c8:5e:93:d7:38:4b:60:38:d5:2f: 7d:fd:c9:93:4f:9f:ec:8e:51:e5:e7:1c:1f:3d:f1: 7c:24:f2:9b:05:dc:36:00:fd:d8:8c:2e:3b:d6:a2: d1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:2A:8C:74:BC:5F:2A:85:23:C7:DE:55:30:9B:49:BC:CC:40:66:F6 X509v3 Authority Key Identifier: keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/XiqMdLxfKoUjx95VMJtJvMxAZvY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:a43f:9000::/36 2a02:a43f:f000::/36 Signature Algorithm: sha256WithRSAEncryption 60:f6:7c:5c:ee:69:b1:03:7f:ca:45:11:e8:85:7f:68:9f:67: 35:8d:e8:4e:7e:7f:77:45:dd:47:1f:b7:18:39:c1:cc:64:80: ad:d1:52:37:24:98:2b:05:4c:72:ae:c5:1c:a7:51:07:a2:de: 51:92:a7:37:cd:15:81:21:f9:e5:70:14:ce:d2:49:af:78:13: 62:99:2e:d6:be:c7:94:f8:a6:9f:e1:59:ec:8e:90:e1:c4:7d: 79:12:a7:29:e1:66:a7:fd:ff:cb:c8:b6:f9:96:1a:34:65:ae: 76:d6:b2:c8:55:1c:84:1e:bb:ec:a4:68:3d:cc:b8:26:05:68: f0:c0:d1:cf:3a:6e:9a:f0:59:05:d0:52:0a:6d:52:27:f3:8b: 63:ef:a2:54:d4:1b:05:be:f4:c9:88:43:96:45:de:f8:5f:de: c0:07:77:5c:1e:0f:ad:32:95:af:bc:2a:20:c4:64:75:3a:6b: ca:f8:4b:49:7f:1b:65:c8:d6:a3:b4:4d:99:7f:43:7e:ad:0e: a0:2d:6a:24:6c:a6:07:81:99:77:e9:63:c4:27:57:da:98:ff: 29:29:a3:17:ae:0a:9f:ab:22:a5:ee:4d:77:79:c8:93:62:21: 13:f3:88:c8:bc:95:f0:c2:6c:c7:44:a5:15:dc:ab:b1:db:b1: 5e:a3:49:67 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgISAZt4NVRwVAEziNHDEWH4Vl9IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxZWVkNDA5MTM4M2Q5ZWQ0MDU2ZDlmNGVmZjdkMjYyMmRk Y2UyMDUwHhcNMjYwMTAxMDYxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTJhOGM3NGJjNWYyYTg1MjNjN2RlNTUzMDliNDliY2NjNDA2NmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNGgTxsvBm58KrpGuvZvVmgkCOti +3cSjAH0ffzIL0b0S1evxj1zNyX2IegyndMdLHsNeGs54YE01xv717D7n0aIYyvf qpk9IaVqnJ6s2+WkhwT6bLTnxwzGV+FSkKVRZvHzfTD4ChKjMU7ge/pd71fjl5t7 nzFmhU7XdR6Oav3xeba86vvvoCMIGd6IQsypaK3qfEPFhO8dKGVQgZoYjHaVWGeu 3GW3fSfNaq2yAKVGOstH1mwQvU+f3j0YXF4Aj0pCW57Okv/EtcSNQT+5EXAdogCR hchek9c4S2A41S99/cmTT5/sjlHl5xwfPfF8JPKbBdw2AP3YjC471qLROQIDAQAB o4ICEzCCAg8wHQYDVR0OBBYEFF4qjHS8XyqFI8feVTCbSbzMQGb2MB8GA1UdIwQY MBaAFIHu1AkTg9ntQFbZ9O/30mIt3OIFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS80YTljYzQtMmI5YS00ZWYyLWEzM2Et ODcyYjM3MTBjMmExLzEvWGlxTWRMeGZLb1VqeDk1Vk1KdEp2TXhBWnZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS80YTljYzQtMmI5YS00ZWYyLWEzM2EtODcyYjM3MTBjMmEx LzEvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwYEKgKkP5AD BgQqAqQ/8DANBgkqhkiG9w0BAQsFAAOCAQEAYPZ8XO5psQN/ykUR6IV/aJ9nNY3o Tn5/d0XdRx+3GDnBzGSArdFSNySYKwVMcq7FHKdRB6LeUZKnN80VgSH55XAUztJJ r3gTYpku1r7HlPimn+FZ7I6Q4cR9eRKnKeFmp/3/y8i2+ZYaNGWudtayyFUchB67 7KRoPcy4JgVo8MDRzzpumvBZBdBSCm1SJ/OLY++iVNQbBb70yYhDlkXe+F/ewAd3 XB4PrTKVr7wqIMRkdTpryvhLSX8bZcjWo7RNmX9Dfq0OoC1qJGymB4GZd+ljxCdX 2pj/KSmjF64Kn6sipe5Nd3nIk2IhE/OIyLyV8MJsx0SlFdyrsduxXqNJZw== -----END CERTIFICATE-----Generated at Mon Jan 26 00:39:14 2026 by rpki-client