This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/619zYJcf29ZdRUZ2TEzM_f7IQXA.roa File: 619zYJcf29ZdRUZ2TEzM_f7IQXA.roa (raw, json) Hash identifier: M+Wc6RyILs0hBiRKAwY3X8byDUTFO6cAlU4bA8VToak= Subject key identifier: EB:5F:73:60:97:1F:DB:D6:5D:45:46:76:4C:4C:CC:FD:FE:C8:41:70 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6FC98DB39C59C3A96F51E50FDAD28 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/619zYJcf29ZdRUZ2TEzM_f7IQXA.roa Signing time: Fri 02 Jan 2026 12:20:31 +0000 ROA not before: Fri 02 Jan 2026 12:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211760 IP address blocks: 2a0c:9a40:8c10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 19:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:fc:98:db:39:c5:9c:3a:96:f5:1e:50:fd:ad:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb5f7360971fdbd65d4546764c4cccfdfec84170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:db:65:68:23:71:52:b2:d7:d3:7e:d4:ad:21: 8f:d3:7d:bd:48:4c:96:9e:05:9a:02:63:14:f5:07: 18:54:3a:ab:4b:e1:fa:da:79:86:68:e7:1d:14:87: d0:b6:85:b1:d0:e1:9a:2a:5c:8c:5b:de:c6:55:32: 44:e2:3a:f1:bd:69:a8:43:ee:54:bc:f4:a8:45:17: b1:08:f6:62:21:f1:ab:be:3e:3b:65:6e:bd:e2:f1: c3:aa:2b:e2:9e:e8:a9:de:ac:eb:01:7e:2b:75:a1: c9:37:b3:9b:27:37:23:a0:a7:5a:43:4c:22:39:fd: 19:6f:16:3d:55:58:b0:ed:d3:6e:cf:ae:d0:79:21: 7a:0f:8e:66:a2:88:45:13:aa:fd:98:16:cd:87:c5: 21:b8:50:96:d9:86:73:8c:60:a2:dd:db:c3:1e:8f: 4f:49:91:a8:15:1f:4c:42:3a:4c:13:b9:0d:a6:19: 98:b1:72:37:7f:f2:58:dd:92:28:52:f3:35:e6:10: 12:de:dc:44:6b:c2:c7:bf:2d:97:79:47:c1:1c:c5: fa:23:70:69:12:17:bf:a0:9b:e2:da:26:f0:60:16: 92:df:fd:4d:5d:db:0b:5c:f2:c6:8e:d0:1b:77:58: 7c:1b:2d:8f:0e:4f:45:3c:61:77:50:47:0e:5a:32: 65:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:5F:73:60:97:1F:DB:D6:5D:45:46:76:4C:4C:CC:FD:FE:C8:41:70 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/619zYJcf29ZdRUZ2TEzM_f7IQXA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8c10::/48 Signature Algorithm: sha256WithRSAEncryption 45:75:2f:d9:39:e9:82:4c:bc:40:1a:7c:1e:96:aa:f3:32:6a: 8b:80:6b:c2:52:06:6e:6b:c0:10:66:8c:a1:b5:80:06:c6:ce: 3d:2a:fb:d2:97:7c:06:56:95:5d:23:35:23:b2:ae:75:04:06: 30:6d:dd:16:c2:7d:b2:d4:7e:35:41:b8:42:2c:10:b3:e8:f5: 9a:9c:7c:83:9d:66:1e:1f:2f:53:85:9a:f1:b2:48:48:04:40: 09:8e:3a:9d:61:87:73:49:ff:3e:3e:8d:56:76:60:9b:21:8c: 14:f2:81:e2:4f:d7:14:12:ef:9b:c2:2f:4f:2f:d7:d9:53:97: 90:df:41:95:ed:f6:00:4d:40:05:c6:60:da:e7:94:12:7d:ce: cb:41:26:b5:d2:b4:5f:e6:9c:c5:9f:a9:5c:35:3a:d9:62:0f: d4:19:c3:af:3d:46:26:0b:f9:55:ce:f6:b4:42:11:48:e1:a8: bd:41:c4:cb:e9:63:83:03:97:2d:36:89:a3:5a:68:23:dc:e5: 52:2f:c3:d2:28:4c:98:ce:d2:22:9f:f1:3a:b8:ae:c2:81:b5: 15:79:4b:04:8c:5d:08:60:15:f4:37:ac:3c:7b:4a:17:3d:bd: 21:88:b6:6b:4d:2b:9d:37:d1:be:d1:79:c5:5a:0b:a7:cd:8b: d6:f3:3b:7b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pvyY2znFnDqW9R5Q/a0oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjVmNzM2MDk3MWZkYmQ2NWQ0NTQ2NzY0YzRjY2NmZGZlYzg0MTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9tlaCNxUrLX037UrSGP0329SEyW ngWaAmMU9QcYVDqrS+H62nmGaOcdFIfQtoWx0OGaKlyMW97GVTJE4jrxvWmoQ+5U vPSoRRexCPZiIfGrvj47ZW694vHDqivinuip3qzrAX4rdaHJN7ObJzcjoKdaQ0wi Of0ZbxY9VViw7dNuz67QeSF6D45moohFE6r9mBbNh8UhuFCW2YZzjGCi3dvDHo9P SZGoFR9MQjpME7kNphmYsXI3f/JY3ZIoUvM15hAS3txEa8LHvy2XeUfBHMX6I3Bp Ehe/oJvi2ibwYBaS3/1NXdsLXPLGjtAbd1h8Gy2PDk9FPGF3UEcOWjJl4wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOtfc2CXH9vWXUVGdkxMzP3+yEFwMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvNjE5ellKY2YyOVpkUlVaMlRFek1fZjdJUVhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIwQ MA0GCSqGSIb3DQEBCwUAA4IBAQBFdS/ZOemCTLxAGnwelqrzMmqLgGvCUgZua8AQ ZoyhtYAGxs49KvvSl3wGVpVdIzUjsq51BAYwbd0Wwn2y1H41QbhCLBCz6PWanHyD nWYeHy9ThZrxskhIBEAJjjqdYYdzSf8+Po1WdmCbIYwU8oHiT9cUEu+bwi9PL9fZ U5eQ30GV7fYATUAFxmDa55QSfc7LQSa10rRf5pzFn6lcNTrZYg/UGcOvPUYmC/lV zva0QhFI4ai9QcTL6WODA5ctNomjWmgj3OVSL8PSKEyYztIin/E6uK7CgbUVeUsE jF0IYBX0N6w8e0oXPb0hiLZrTSudN9G+0XnFWgunzYvW8zt7 -----END CERTIFICATE-----Generated at Mon Jan 19 04:45:28 2026 by rpki-client