This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/xprnXzLHdgCC1ErposCq6vG3jPU.roa File: xprnXzLHdgCC1ErposCq6vG3jPU.roa (raw, json) Hash identifier: yXNFomv+hurOUmhTIqZgZ4hQnilyhZpNY276iiDrBf8= Subject key identifier: C6:9A:E7:5F:32:C7:76:00:82:D4:4A:E9:A2:C0:AA:EA:F1:B7:8C:F5 Certificate issuer: /CN=e465acc90809efb45ccda250a1057618494b86eb Certificate serial: 019B79ECF18278D5C5F399A10B9EC9B18F5C Authority key identifier: E4:65:AC:C9:08:09:EF:B4:5C:CD:A2:50:A1:05:76:18:49:4B:86:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/xprnXzLHdgCC1ErposCq6vG3jPU.roa Signing time: Thu 01 Jan 2026 14:18:50 +0000 ROA not before: Thu 01 Jan 2026 14:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5408 IP address blocks: 2a07:8504:1a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:f1:82:78:d5:c5:f3:99:a1:0b:9e:c9:b1:8f:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e465acc90809efb45ccda250a1057618494b86eb Validity Not Before: Jan 1 14:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c69ae75f32c7760082d44ae9a2c0aaeaf1b78cf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a8:2c:e8:bd:2b:62:33:67:f0:68:53:62:8a: 0e:1e:9f:19:fc:49:0a:af:7b:db:d1:42:3b:28:70: b3:50:4f:2c:22:42:67:d8:a8:95:65:dc:de:d3:f1: 30:64:f9:71:c6:9c:d5:ae:d3:e4:fb:3f:58:38:00: c5:e2:4b:d0:9a:00:17:85:d2:03:f7:aa:01:40:63: 36:f6:72:f9:cf:f1:79:89:d2:0c:a5:ff:c6:77:c2: 35:f4:17:17:47:34:09:74:3d:f0:c1:e7:0f:25:59: 26:2b:b3:1b:11:28:ac:e2:68:01:32:51:1b:75:84: e6:ce:47:4a:39:d3:01:2a:d8:aa:77:bf:57:9d:a8: 32:35:c2:bf:16:88:35:40:64:18:e3:7d:40:7f:1d: 87:b4:6a:90:41:3c:74:f6:2d:a3:65:04:b1:e5:e1: 96:84:d7:8a:ca:d7:a2:d0:49:30:1d:3a:fd:52:49: 13:e9:e3:31:84:26:27:c9:52:58:e4:64:8d:f1:c2: 3b:41:30:36:73:48:3c:12:25:d8:4e:3b:b7:87:41: 35:3c:a0:e9:fc:74:fc:72:37:c0:37:91:11:5e:43: c9:81:78:cf:93:d5:5f:f1:f9:8e:70:02:ae:ff:0b: 30:c1:91:e9:98:41:a7:57:6c:31:fd:ba:a2:00:d2: 00:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:9A:E7:5F:32:C7:76:00:82:D4:4A:E9:A2:C0:AA:EA:F1:B7:8C:F5 X509v3 Authority Key Identifier: keyid:E4:65:AC:C9:08:09:EF:B4:5C:CD:A2:50:A1:05:76:18:49:4B:86:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/xprnXzLHdgCC1ErposCq6vG3jPU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:8504:1a0::/48 Signature Algorithm: sha256WithRSAEncryption c9:cf:45:02:05:99:c8:fd:75:2c:7d:8b:80:25:29:4a:ce:b2: 14:c6:2b:df:32:44:97:7e:81:a9:44:81:49:fe:96:76:11:ce: 52:30:2c:0e:f6:41:11:49:ed:08:77:82:6b:8f:5a:1c:af:e8: 56:87:33:8e:99:5b:48:8a:a6:25:d5:34:4b:61:ef:df:f4:de: 9a:72:26:cb:63:e6:6d:c5:31:cc:04:07:4b:ea:2e:85:30:af: f0:85:8f:49:7c:d1:47:d5:47:da:0c:b3:6c:c4:5c:f0:c0:cc: 21:f9:e7:d7:6b:38:87:47:5d:16:ab:81:92:d1:79:af:6d:bd: 7c:83:df:0f:09:74:eb:c9:d7:76:9c:b7:43:5a:90:12:9b:f2: 79:a6:77:b7:21:12:04:cb:8a:fd:20:6f:77:03:7e:4d:4f:22: 12:a9:9b:27:d4:82:93:b8:0e:43:2d:80:ba:0d:09:da:62:45: a6:9e:b9:96:f2:0f:78:5e:93:3e:cb:41:30:2d:b9:19:54:6d: 5d:63:2d:b6:92:42:66:0d:a4:60:be:63:37:6a:0d:dc:26:3d: 94:0c:33:a4:dc:08:cf:f2:5c:3b:67:b5:1a:09:a1:82:d4:e8: 31:24:67:e8:48:51:80:b5:9e:6d:5d:5f:e0:64:f7:9d:12:d9: ba:7c:f7:ea -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57PGCeNXF85mhC57JsY9cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0NjVhY2M5MDgwOWVmYjQ1Y2NkYTI1MGExMDU3NjE4NDk0 Yjg2ZWIwHhcNMjYwMTAxMTQxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjlhZTc1ZjMyYzc3NjAwODJkNDRhZTlhMmMwYWFlYWYxYjc4Y2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKgs6L0rYjNn8GhTYooOHp8Z/EkK r3vb0UI7KHCzUE8sIkJn2KiVZdze0/EwZPlxxpzVrtPk+z9YOADF4kvQmgAXhdID 96oBQGM29nL5z/F5idIMpf/Gd8I19BcXRzQJdD3wwecPJVkmK7MbESis4mgBMlEb dYTmzkdKOdMBKtiqd79XnagyNcK/Fog1QGQY431Afx2HtGqQQTx09i2jZQSx5eGW hNeKytei0EkwHTr9UkkT6eMxhCYnyVJY5GSN8cI7QTA2c0g8EiXYTju3h0E1PKDp /HT8cjfAN5ERXkPJgXjPk9Vf8fmOcAKu/wswwZHpmEGnV2wx/bqiANIAVQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMaa518yx3YAgtRK6aLAqurxt4z1MB8GA1UdIwQY MBaAFORlrMkICe+0XM2iUKEFdhhJS4brMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUdXc3lRZ0o3N1JjemFKUW9RVjJHRWxMaHVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi85ZWY2MGEtNzNlZS00MGUxLTkwMDYt YzBiM2IwZjU0YmViLzEveHByblh6TEhkZ0NDMUVycG9zQ3E2dkczalBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi85ZWY2MGEtNzNlZS00MGUxLTkwMDYtYzBiM2IwZjU0YmVi LzEvNUdXc3lRZ0o3N1JjemFKUW9RVjJHRWxMaHVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgeFBAGg MA0GCSqGSIb3DQEBCwUAA4IBAQDJz0UCBZnI/XUsfYuAJSlKzrIUxivfMkSXfoGp RIFJ/pZ2Ec5SMCwO9kERSe0Id4Jrj1ocr+hWhzOOmVtIiqYl1TRLYe/f9N6acibL Y+ZtxTHMBAdL6i6FMK/whY9JfNFH1UfaDLNsxFzwwMwh+efXaziHR10Wq4GS0Xmv bb18g98PCXTrydd2nLdDWpASm/J5pne3IRIEy4r9IG93A35NTyISqZsn1IKTuA5D LYC6DQnaYkWmnrmW8g94XpM+y0EwLbkZVG1dYy22kkJmDaRgvmM3ag3cJj2UDDOk 3AjP8lw7Z7UaCaGC1OgxJGfoSFGAtZ5tXV/gZPedEtm6fPfq -----END CERTIFICATE-----Generated at Sun Jan 25 23:03:42 2026 by rpki-client