This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/XR-EYzoeTJi_gNpw5v85R8iIDCI.roa File: XR-EYzoeTJi_gNpw5v85R8iIDCI.roa (raw, json) Hash identifier: hr4Ank/yR0Q5kl1E1WgAYLVhDPaCeCKIZMYB9E/hjDs= Subject key identifier: 5D:1F:84:63:3A:1E:4C:98:BF:80:DA:70:E6:FF:39:47:C8:88:0C:22 Certificate issuer: /CN=6dfecfa0e6692595cfbea5266076e8e53efd9461 Certificate serial: 019B7F8489F62A23FB9EC922375F51E11D94 Authority key identifier: 6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/XR-EYzoeTJi_gNpw5v85R8iIDCI.roa Signing time: Fri 02 Jan 2026 16:22:30 +0000 ROA not before: Fri 02 Jan 2026 16:22:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209090 IP address blocks: 2a10:c706::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:89:f6:2a:23:fb:9e:c9:22:37:5f:51:e1:1d:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dfecfa0e6692595cfbea5266076e8e53efd9461 Validity Not Before: Jan 2 16:22:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d1f84633a1e4c98bf80da70e6ff3947c8880c22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f1:76:c0:93:ef:4e:f0:a8:49:76:7c:8e:96: 9f:62:70:ed:6c:b0:7d:d8:1a:d5:65:58:69:2d:32: 0e:b2:7a:9e:f3:3c:e0:23:bd:27:35:ce:fa:b4:d7: 63:a8:d8:e4:3e:2a:28:fc:02:a0:31:51:d5:1f:f5: 4a:86:98:b0:e6:08:67:22:af:ee:cf:bb:fd:80:79: ab:2a:92:13:ac:5c:0b:ce:b3:99:54:2d:ff:39:76: 10:00:d8:9e:fe:e1:d8:3c:45:f3:7b:ca:98:27:1c: b0:0f:86:29:bb:ad:d3:e7:8f:6e:23:c4:69:6f:5d: 3c:48:9f:4f:38:0a:77:26:b5:c8:d8:9a:f2:be:cb: 0b:94:f1:e7:f3:49:76:fd:41:02:fb:e8:f3:f2:d6: 8e:82:3d:6b:7d:92:ac:0d:38:47:d9:e0:6a:19:af: dd:59:6a:00:15:b1:03:01:ec:70:1a:e0:5f:d1:0b: d9:ef:5f:d0:86:90:a5:14:6d:51:4c:58:98:4c:4e: 1c:ab:06:d7:8f:c0:3a:31:61:ca:2f:a2:b6:86:76: 67:7c:6d:50:23:8d:da:9a:13:37:a4:ac:a0:e5:d3: 07:25:c6:7e:4a:7a:a6:a3:44:67:92:6a:f6:9d:7f: 50:c2:f4:2f:35:98:7f:18:16:a9:5c:74:ed:17:ed: 3b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:1F:84:63:3A:1E:4C:98:BF:80:DA:70:E6:FF:39:47:C8:88:0C:22 X509v3 Authority Key Identifier: keyid:6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/XR-EYzoeTJi_gNpw5v85R8iIDCI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:c706::/32 Signature Algorithm: sha256WithRSAEncryption 7a:0b:5c:c0:ca:3e:be:91:18:ee:4a:f3:00:14:c6:32:1f:92: 76:ac:3d:0a:c2:6c:13:d4:1a:f3:08:e2:56:03:66:c3:df:e0: f1:0f:77:3e:b3:44:e2:9e:ca:91:1e:ec:41:9d:18:e8:7d:de: f2:af:82:17:50:ae:92:01:2c:56:04:c4:33:fe:ca:41:d3:3e: b6:7b:4e:80:ff:05:d6:b6:17:59:ee:20:87:71:87:a3:ca:6d: 67:84:1c:e1:07:42:dc:bb:d8:0f:e4:fe:67:8a:93:31:90:e7: 6f:ba:6e:72:e9:8c:66:d1:b6:fd:82:b8:ef:d9:37:9f:0d:69: 7d:b2:86:9f:4d:e7:94:50:5c:8d:de:53:02:5e:d8:21:43:92: f1:d0:df:8b:50:3a:f8:3a:1b:b0:a0:0f:1a:fd:1b:ac:c5:84: ae:7d:70:67:90:59:d6:48:68:ff:9b:e5:90:6a:b1:e1:17:f0: 89:68:bf:87:14:3b:d2:04:6f:ad:05:fd:2a:88:ab:2e:17:86: b6:17:ae:af:a2:cf:35:4b:50:b2:1f:77:ae:13:ba:62:d1:b1: 6d:3f:a1:45:77:ad:d2:16:eb:36:76:2b:a3:ad:75:07:53:77: b9:05:41:3f:ef:b0:4d:d1:e6:60:9a:a3:fd:d8:94:71:10:52: 4d:a1:81:40 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/hIn2KiP7nskiN19R4R2UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZmVjZmEwZTY2OTI1OTVjZmJlYTUyNjYwNzZlOGU1M2Vm ZDk0NjEwHhcNMjYwMTAyMTYyMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDFmODQ2MzNhMWU0Yzk4YmY4MGRhNzBlNmZmMzk0N2M4ODgwYzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPF2wJPvTvCoSXZ8jpafYnDtbLB9 2BrVZVhpLTIOsnqe8zzgI70nNc76tNdjqNjkPioo/AKgMVHVH/VKhpiw5ghnIq/u z7v9gHmrKpITrFwLzrOZVC3/OXYQANie/uHYPEXze8qYJxywD4Ypu63T549uI8Rp b108SJ9POAp3JrXI2JryvssLlPHn80l2/UEC++jz8taOgj1rfZKsDThH2eBqGa/d WWoAFbEDAexwGuBf0QvZ71/QhpClFG1RTFiYTE4cqwbXj8A6MWHKL6K2hnZnfG1Q I43amhM3pKyg5dMHJcZ+Snqmo0Rnkmr2nX9QwvQvNZh/GBapXHTtF+07FwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFF0fhGM6HkyYv4DacOb/OUfIiAwiMB8GA1UdIwQY MBaAFG3+z6DmaSWVz76lJmB26OU+/ZRhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmY3UG9PWnBKWlhQdnFVbVlIYm81VDc5bEdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9mY2ZlYzctZDZjMy00YjQwLWJhMmMt Zjk4OGQ0OGU1MWU4LzEvWFItRVl6b2VUSmlfZ05wdzV2ODVSOGlJRENJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9mY2ZlYzctZDZjMy00YjQwLWJhMmMtZjk4OGQ0OGU1MWU4 LzEvYmY3UG9PWnBKWlhQdnFVbVlIYm81VDc5bEdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhDHBjAN BgkqhkiG9w0BAQsFAAOCAQEAegtcwMo+vpEY7krzABTGMh+Sdqw9CsJsE9Qa8wji VgNmw9/g8Q93PrNE4p7KkR7sQZ0Y6H3e8q+CF1CukgEsVgTEM/7KQdM+tntOgP8F 1rYXWe4gh3GHo8ptZ4Qc4QdC3LvYD+T+Z4qTMZDnb7pucumMZtG2/YK479k3nw1p fbKGn03nlFBcjd5TAl7YIUOS8dDfi1A6+DobsKAPGv0brMWErn1wZ5BZ1kho/5vl kGqx4RfwiWi/hxQ70gRvrQX9KoirLheGtheur6LPNUtQsh93rhO6YtGxbT+hRXet 0hbrNnYro611B1N3uQVBP++wTdHmYJqj/diUcRBSTaGBQA== -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:49 2026 by rpki-client