This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/cQ3LYfNpRzNl6kGlGc5Uuxt4Rdk.roa File: cQ3LYfNpRzNl6kGlGc5Uuxt4Rdk.roa (raw, json) Hash identifier: 6AQAXA2bGJWy1E3X0Neho1y8EqWswMyvZDd5kRpvgtQ= Subject key identifier: 71:0D:CB:61:F3:69:47:33:65:EA:41:A5:19:CE:54:BB:1B:78:45:D9 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6C435D5C6ED7B62280771658B32E2 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/cQ3LYfNpRzNl6kGlGc5Uuxt4Rdk.roa Signing time: Fri 02 Jan 2026 12:20:17 +0000 ROA not before: Fri 02 Jan 2026 12:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 2a0c:9a40:8a90::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:c4:35:d5:c6:ed:7b:62:28:07:71:65:8b:32:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=710dcb61f369473365ea41a519ce54bb1b7845d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c7:72:9a:d5:6f:e0:dc:df:97:fe:1e:16:d3: 11:c1:41:b2:d1:4d:d3:69:f4:7c:63:28:02:e1:58: 2e:96:8e:46:3f:62:74:57:cd:87:70:30:66:fc:ee: fc:53:e8:28:17:89:0c:91:1c:73:f6:fb:30:62:c0: 51:c5:f9:ad:da:53:29:7a:34:b4:be:56:ea:2e:dc: 71:55:4b:ed:f0:34:bb:2e:c5:b8:27:c9:3d:20:d9: f8:37:01:3a:9f:ae:3c:e1:0d:ff:cc:15:c7:5b:4a: ac:31:aa:75:48:cd:34:db:e4:66:33:88:fe:80:1d: ac:16:3c:f9:6c:63:f4:3a:92:24:6f:0b:2d:fe:5e: 4e:74:5b:35:bb:2f:3b:bf:4f:8c:d7:46:8e:57:c8: 59:a1:ba:5a:51:35:70:96:d8:29:cf:26:65:c9:f3: ce:f8:1d:e7:c7:94:c4:a0:c1:24:61:55:f8:42:52: d1:58:c8:ce:97:d5:fc:f3:bc:13:80:cd:d5:07:54: 1c:41:89:c9:83:cf:c6:1a:ab:b2:ea:76:04:03:89: 52:7a:7c:9f:56:8f:df:fc:c5:88:12:0d:0b:84:75: 95:c6:7b:cd:97:f4:72:f3:35:d4:20:dc:fc:ab:54: 25:d1:72:e3:5d:9c:21:dc:0a:4b:8a:4f:62:d0:35: e9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:0D:CB:61:F3:69:47:33:65:EA:41:A5:19:CE:54:BB:1B:78:45:D9 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/cQ3LYfNpRzNl6kGlGc5Uuxt4Rdk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8a90::/48 Signature Algorithm: sha256WithRSAEncryption c0:eb:c0:8f:ea:ae:85:26:91:0e:6d:14:f1:8b:51:0a:0b:9b: e5:38:9d:64:44:cf:c1:e3:c3:bb:4e:0a:99:2b:26:a2:18:64: 34:37:89:e0:bc:9b:ca:e6:dd:be:6a:a7:0a:81:06:b1:c8:73: e8:ec:df:6f:8f:51:f8:47:6d:10:84:8e:d2:2c:94:f0:88:4f: 5e:99:d6:92:b4:eb:79:0c:32:52:ff:a6:dd:eb:53:fe:cd:6f: ff:94:b3:34:ab:78:7c:e2:4f:8b:11:e6:af:2f:46:d8:f3:97: a7:4c:82:83:6d:e2:8d:fc:c4:5e:ce:07:9a:c2:b3:63:2a:99: 22:3d:17:e7:bf:6b:8d:89:72:4c:94:09:b2:e7:d9:14:79:14: e0:95:bd:25:17:1c:50:da:ab:87:96:2e:75:08:c7:d7:6a:57: a5:0a:35:e7:54:72:75:db:84:13:ce:74:df:ef:50:00:7b:13: 02:87:90:8d:26:5b:c9:10:6d:b3:2f:85:54:5c:dd:a4:48:74: f1:95:ed:2e:3c:78:61:95:d4:8d:c4:a4:23:78:eb:99:3b:d5: 66:76:e0:17:0e:65:20:b2:59:69:bb:44:a8:07:65:a9:72:b6: ce:bf:d9:47:bc:d6:2d:27:59:47:49:f3:f0:13:54:f4:6c:a9: be:a5:51:84 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+psQ11cbte2IoB3FlizLiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTBkY2I2MWYzNjk0NzMzNjVlYTQxYTUxOWNlNTRiYjFiNzg0NWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08dymtVv4Nzfl/4eFtMRwUGy0U3T afR8YygC4Vgulo5GP2J0V82HcDBm/O78U+goF4kMkRxz9vswYsBRxfmt2lMpejS0 vlbqLtxxVUvt8DS7LsW4J8k9INn4NwE6n6484Q3/zBXHW0qsMap1SM002+RmM4j+ gB2sFjz5bGP0OpIkbwst/l5OdFs1uy87v0+M10aOV8hZobpaUTVwltgpzyZlyfPO +B3nx5TEoMEkYVX4QlLRWMjOl9X887wTgM3VB1QcQYnJg8/GGquy6nYEA4lSenyf Vo/f/MWIEg0LhHWVxnvNl/Ry8zXUINz8q1Ql0XLjXZwh3ApLik9i0DXpJQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHENy2HzaUczZepBpRnOVLsbeEXZMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvY1EzTFlmTnBSek5sNmtHbEdjNVV1eHQ0UmRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIqQ MA0GCSqGSIb3DQEBCwUAA4IBAQDA68CP6q6FJpEObRTxi1EKC5vlOJ1kRM/B48O7 TgqZKyaiGGQ0N4ngvJvK5t2+aqcKgQaxyHPo7N9vj1H4R20QhI7SLJTwiE9emdaS tOt5DDJS/6bd61P+zW//lLM0q3h84k+LEeavL0bY85enTIKDbeKN/MRezgeawrNj KpkiPRfnv2uNiXJMlAmy59kUeRTglb0lFxxQ2quHli51CMfXalelCjXnVHJ124QT znTf71AAexMCh5CNJlvJEG2zL4VUXN2kSHTxle0uPHhhldSNxKQjeOuZO9VmduAX DmUgsllpu0SoB2WpcrbOv9lHvNYtJ1lHSfPwE1T0bKm+pVGE -----END CERTIFICATE-----Generated at Sat Jan 17 06:46:26 2026 by rpki-client