This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/XuBKY0oAARsXVXjq7u8JeDvNOcU.roa File: XuBKY0oAARsXVXjq7u8JeDvNOcU.roa (raw, json) Hash identifier: vlWZjrm0v836+Ch01+GkfQiIKmv/HzSaOumEGtSwczo= Subject key identifier: 5E:E0:4A:63:4A:00:01:1B:17:55:78:EA:EE:EF:09:78:3B:CD:39:C5 Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c Certificate serial: 019B7F8361E21322BEEFEDD7435D6B3BA676 Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/XuBKY0oAARsXVXjq7u8JeDvNOcU.roa Signing time: Fri 02 Jan 2026 16:21:15 +0000 ROA not before: Fri 02 Jan 2026 16:21:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206938 IP address blocks: 2a03:2107::/48 maxlen: 48 2a03:2107:1::/48 maxlen: 48 2a03:2107:2::/48 maxlen: 48 2a03:2107:3::/48 maxlen: 48 2a03:2107:4::/48 maxlen: 48 2a03:2107:5::/48 maxlen: 48 2a03:2107:6::/48 maxlen: 48 2a03:2107:7::/48 maxlen: 48 2a03:2107:8::/48 maxlen: 48 2a03:2107:9::/48 maxlen: 48 2a03:2107:a::/48 maxlen: 48 2a03:2107:b::/48 maxlen: 48 2a03:2107:c::/48 maxlen: 48 2a03:2107:d::/48 maxlen: 48 2a03:2107:e::/48 maxlen: 48 2a03:2107:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:61:e2:13:22:be:ef:ed:d7:43:5d:6b:3b:a6:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c Validity Not Before: Jan 2 16:21:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ee04a634a00011b175578eaeeef09783bcd39c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:11:48:ec:44:57:00:ce:0b:96:67:c9:e8:2c: 92:ec:c7:8a:3f:60:54:1c:03:df:c1:72:e1:ad:ea: 99:7c:ef:c7:2a:4f:cf:85:02:6a:04:dd:91:81:82: bc:f6:f6:73:6f:01:34:4f:38:5e:a9:98:e6:03:13: b4:02:7c:04:3a:e1:6a:39:1b:23:be:f2:bc:ec:86: 87:a2:f2:1d:bc:08:6b:9f:a7:29:17:09:3e:b3:0b: e5:0d:9a:40:93:68:9a:fe:30:2f:35:67:93:3e:54: 09:41:9f:50:d6:85:aa:ce:1c:8c:7b:88:44:17:14: ea:a0:34:1f:ea:62:cb:14:de:0b:92:33:dd:86:6b: 04:d0:f4:a3:1d:25:41:e3:20:1d:38:bd:67:47:bc: 15:64:07:d4:5b:53:81:13:e0:f4:3e:d0:19:d8:79: d0:80:b3:53:31:c9:9e:77:05:55:6d:f3:60:74:e9: 7b:a0:09:a9:5c:ab:d7:30:20:55:05:d5:ed:ba:52: a4:bc:4d:45:89:99:e9:0d:7c:41:22:da:c0:72:c7: 99:c4:d4:90:ef:17:d8:6d:27:71:d4:e3:91:e9:08: 1a:0f:f8:aa:5f:22:54:6d:9a:88:01:6a:cc:15:f8: 7e:ce:ed:20:cb:53:b8:69:85:35:22:73:6c:47:28: a8:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:E0:4A:63:4A:00:01:1B:17:55:78:EA:EE:EF:09:78:3B:CD:39:C5 X509v3 Authority Key Identifier: keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/XuBKY0oAARsXVXjq7u8JeDvNOcU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:2107::/44 Signature Algorithm: sha256WithRSAEncryption a8:d9:52:56:37:b1:2b:88:d9:29:81:16:9b:01:9c:c1:e2:de: 43:40:91:d1:9a:ce:0b:82:5f:b9:62:75:e8:8a:cd:5f:f5:f2: 9a:c2:f0:47:b5:7a:06:08:97:a3:e2:05:1f:8b:ce:ac:d1:11: c4:a4:03:14:93:65:c0:8c:fb:69:3d:73:f4:ea:08:0f:4a:8a: 5c:f1:be:96:af:37:c7:f8:fa:9e:d6:04:bd:ea:55:de:fa:cb: dc:bd:5d:2d:2f:b6:10:23:96:42:d6:ca:29:55:76:de:86:2f: b7:cc:c8:bc:3c:cd:30:bf:5e:bb:d3:aa:b9:ae:51:94:66:db: 8a:e5:39:b3:ca:bb:3e:84:4c:d1:52:88:02:b4:79:d8:b1:97: 93:0d:86:6b:c9:61:e7:a6:2b:ee:e0:d9:6a:2b:ab:2b:48:1a: 81:92:7a:3f:ee:1a:a9:ca:02:36:d6:2d:c8:df:4e:5f:41:af: 4d:9c:2e:2b:45:75:23:1b:11:d6:21:ec:7f:9f:f6:58:39:cd: c3:1a:26:fa:6c:42:60:d6:3e:9c:56:49:00:47:dd:e9:07:a6: 37:ce:94:70:ec:fd:8b:b4:d9:09:15:a9:a3:a2:2f:22:5d:4e: 5b:80:c8:d7:8a:ff:91:d9:f1:65:f9:5a:ab:36:6f:ae:b7:3d: 8c:6a:5e:37 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/g2HiEyK+7+3XQ11rO6Z2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZTRhZWQzZWY3MmJlZTMxNDE2NjBkMTE0OWUxNmQwNzky MDVmM2MwHhcNMjYwMTAyMTYyMTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZWUwNGE2MzRhMDAwMTFiMTc1NTc4ZWFlZWVmMDk3ODNiY2QzOWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRFI7ERXAM4LlmfJ6CyS7MeKP2BU HAPfwXLhreqZfO/HKk/PhQJqBN2RgYK89vZzbwE0TzheqZjmAxO0AnwEOuFqORsj vvK87IaHovIdvAhrn6cpFwk+swvlDZpAk2ia/jAvNWeTPlQJQZ9Q1oWqzhyMe4hE FxTqoDQf6mLLFN4LkjPdhmsE0PSjHSVB4yAdOL1nR7wVZAfUW1OBE+D0PtAZ2HnQ gLNTMcmedwVVbfNgdOl7oAmpXKvXMCBVBdXtulKkvE1FiZnpDXxBItrAcseZxNSQ 7xfYbSdx1OOR6QgaD/iqXyJUbZqIAWrMFfh+zu0gy1O4aYU1InNsRyioCwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFF7gSmNKAAEbF1V46u7vCXg7zTnFMB8GA1UdIwQY MBaAFCXkrtPvcr7jFBZg0RSeFtB5IF88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEt ZWQzZTM4Zjk1NzdmLzEvWHVCS1kwb0FBUnNYVlhqcTd1OEplRHZOT2NVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEtZWQzZTM4Zjk1Nzdm LzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgMhBwAA MA0GCSqGSIb3DQEBCwUAA4IBAQCo2VJWN7EriNkpgRabAZzB4t5DQJHRms4Lgl+5 YnXois1f9fKawvBHtXoGCJej4gUfi86s0RHEpAMUk2XAjPtpPXP06ggPSopc8b6W rzfH+Pqe1gS96lXe+svcvV0tL7YQI5ZC1sopVXbehi+3zMi8PM0wv16706q5rlGU ZtuK5Tmzyrs+hEzRUogCtHnYsZeTDYZryWHnpivu4NlqK6srSBqBkno/7hqpygI2 1i3I305fQa9NnC4rRXUjGxHWIex/n/ZYOc3DGib6bEJg1j6cVkkAR93pB6Y3zpRw 7P2LtNkJFamjoi8iXU5bgMjXiv+R2fFl+VqrNm+utz2Mal43 -----END CERTIFICATE-----Generated at Sun Jan 25 21:24:31 2026 by rpki-client