This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/xX_eayIur3ayUrNMcGn9ChpnHec.roa File: xX_eayIur3ayUrNMcGn9ChpnHec.roa (raw, json) Hash identifier: U/ut0MWz8oiiYflyyyeRjSx1ThmGKeCsH/L5YDP+UgA= Subject key identifier: C5:7F:DE:6B:22:2E:AF:76:B2:52:B3:4C:70:69:FD:0A:1A:67:1D:E7 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019B7C12FAAA0CA54A554A909A92E42F5F66 Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/xX_eayIur3ayUrNMcGn9ChpnHec.roa Signing time: Fri 02 Jan 2026 00:19:36 +0000 ROA not before: Fri 02 Jan 2026 00:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208249 IP address blocks: 2a06:1e81::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 06:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:fa:aa:0c:a5:4a:55:4a:90:9a:92:e4:2f:5f:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Jan 2 00:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c57fde6b222eaf76b252b34c7069fd0a1a671de7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ee:a3:6b:75:47:de:74:34:40:c5:a2:b2:3e: df:68:28:20:04:ab:c5:37:92:7a:e3:04:2e:64:a1: 5e:70:12:65:a3:b4:94:2d:3b:4f:e1:18:da:ab:c1: 49:27:90:60:b9:06:a3:69:e2:2c:5e:c9:95:4e:aa: aa:7b:0d:9f:18:11:f6:1d:83:ad:0a:02:0a:5f:52: 2e:de:d9:53:0d:72:37:c7:36:bb:83:98:6c:f1:74: 53:91:f2:4b:4c:69:e5:79:fe:81:cf:06:43:8d:b0: 87:19:f4:df:aa:3d:0c:81:d5:47:0a:28:51:e0:22: 95:ff:f7:71:ac:f9:fc:da:0f:9b:49:46:8e:d3:4f: 88:2f:81:ba:4e:e7:18:4f:21:bb:91:fb:28:02:a7: 9b:40:5d:3c:97:d0:e1:9c:37:b4:32:22:c2:c1:ae: dc:c8:a3:f1:a7:27:a9:b3:1d:e3:f5:64:db:c3:dd: 16:5f:fb:49:1b:3b:93:d7:16:1c:75:74:58:cf:a5: 9d:54:45:c3:bf:c9:77:46:7f:7e:a7:d0:2e:02:34: 83:0b:73:32:31:39:67:61:4e:c7:2e:59:bb:bc:06: 6f:a0:8c:2e:39:cd:35:14:92:7d:8b:db:57:ee:b9: e7:54:ad:cd:97:5f:78:c3:96:08:96:75:54:6f:cc: 72:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:7F:DE:6B:22:2E:AF:76:B2:52:B3:4C:70:69:FD:0A:1A:67:1D:E7 X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/xX_eayIur3ayUrNMcGn9ChpnHec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1e81::/32 Signature Algorithm: sha256WithRSAEncryption 19:1f:b4:4e:16:b3:f2:58:0c:14:32:2a:69:74:eb:e1:95:cc: 89:03:2e:af:98:c3:06:6a:26:3e:5b:d7:b3:31:cc:db:c4:87: 6e:e3:01:7a:3a:a0:11:73:7d:78:b9:70:14:a1:ca:0a:7a:9d: f1:32:d2:f4:57:a5:41:f8:3c:6e:09:c1:04:b7:21:0b:8b:5b: 93:18:61:ef:f2:94:f1:1c:7d:2a:64:48:c0:a6:d9:53:f2:ed: 5f:81:79:2b:47:db:a2:cd:3a:16:cd:64:12:12:ea:af:eb:63: 18:d5:4c:a5:9b:e6:51:2a:a9:58:5b:13:33:d7:a6:6c:42:f8: 09:6a:18:a1:a5:b8:86:2b:1c:b6:86:07:46:24:84:9a:cc:94: 4b:94:b4:f1:cf:c5:9b:a1:1a:83:fb:59:6b:e3:fa:fc:5d:f9: e6:f0:93:68:fd:2b:59:52:85:fc:e5:93:81:61:a2:ec:aa:99: 5d:16:68:11:37:e4:39:83:c1:e2:a7:49:ca:9d:37:49:25:e5: a4:c7:48:77:3d:7c:02:1e:34:bd:0c:6c:63:12:e1:41:3f:3b: 23:a0:77:ce:1e:fa:e2:08:65:1d:20:91:80:33:24:0d:af:d1: ae:b7:a9:e9:11:2a:a5:86:41:ca:0d:ea:7a:82:28:75:b1:41: 7a:a0:2b:cb -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8EvqqDKVKVUqQmpLkL19mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjYwMTAyMDAxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTdmZGU2YjIyMmVhZjc2YjI1MmIzNGM3MDY5ZmQwYTFhNjcxZGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwO6ja3VH3nQ0QMWisj7faCggBKvF N5J64wQuZKFecBJlo7SULTtP4Rjaq8FJJ5BguQajaeIsXsmVTqqqew2fGBH2HYOt CgIKX1Iu3tlTDXI3xza7g5hs8XRTkfJLTGnlef6BzwZDjbCHGfTfqj0MgdVHCihR 4CKV//dxrPn82g+bSUaO00+IL4G6TucYTyG7kfsoAqebQF08l9DhnDe0MiLCwa7c yKPxpyepsx3j9WTbw90WX/tJGzuT1xYcdXRYz6WdVEXDv8l3Rn9+p9AuAjSDC3My MTlnYU7HLlm7vAZvoIwuOc01FJJ9i9tX7rnnVK3Nl194w5YIlnVUb8xy9wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFMV/3msiLq92slKzTHBp/QoaZx3nMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEveFhfZWF5SXVyM2F5VXJOTWNHbjlDaHBuSGVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgYegTAN BgkqhkiG9w0BAQsFAAOCAQEAGR+0Thaz8lgMFDIqaXTr4ZXMiQMur5jDBmomPlvX szHM28SHbuMBejqgEXN9eLlwFKHKCnqd8TLS9FelQfg8bgnBBLchC4tbkxhh7/KU 8Rx9KmRIwKbZU/LtX4F5K0fbos06Fs1kEhLqr+tjGNVMpZvmUSqpWFsTM9embEL4 CWoYoaW4hisctoYHRiSEmsyUS5S08c/Fm6Eag/tZa+P6/F355vCTaP0rWVKF/OWT gWGi7KqZXRZoETfkOYPB4qdJyp03SSXlpMdIdz18Ah40vQxsYxLhQT87I6B3zh76 4ghlHSCRgDMkDa/Rrrep6REqpYZByg3qeoIodbFBeqAryw== -----END CERTIFICATE-----Generated at Wed Jan 7 15:53:12 2026 by rpki-client