This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/9lZ-yzBoTL2Q3tEfTGvAJ31AkaI.roa File: 9lZ-yzBoTL2Q3tEfTGvAJ31AkaI.roa (raw, json) Hash identifier: mZ5mTYqzMf+60QDXA/A80xWmGAZGWKbUo1eAsowQ3Ow= Subject key identifier: F6:56:7E:CB:30:68:4C:BD:90:DE:D1:1F:4C:6B:C0:27:7D:40:91:A2 Certificate issuer: /CN=96fcda128fe82afc06e8aad1c8e5ccdfb35561e4 Certificate serial: 019B78A33D07D6B4F3CA79829E64A20BE7C6 Authority key identifier: 96:FC:DA:12:8F:E8:2A:FC:06:E8:AA:D1:C8:E5:CC:DF:B3:55:61:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/9lZ-yzBoTL2Q3tEfTGvAJ31AkaI.roa Signing time: Thu 01 Jan 2026 08:18:42 +0000 ROA not before: Thu 01 Jan 2026 08:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214797 IP address blocks: 2a14:5cc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:3d:07:d6:b4:f3:ca:79:82:9e:64:a2:0b:e7:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96fcda128fe82afc06e8aad1c8e5ccdfb35561e4 Validity Not Before: Jan 1 08:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6567ecb30684cbd90ded11f4c6bc0277d4091a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ba:82:7e:61:85:09:22:2d:5f:7e:17:5a:d8: b9:27:58:5a:bd:2f:5d:52:c9:c5:49:27:10:8d:17: d9:e6:8f:51:2b:6d:59:85:22:a0:80:0c:a9:1f:86: 05:1f:3f:45:c5:a5:17:23:52:7a:15:5e:21:a7:db: 40:be:c8:ff:4a:f6:24:68:a0:96:fd:59:2f:06:a5: 91:65:91:9d:cf:f5:93:27:b4:17:52:9f:ab:a0:e9: 1d:f0:de:84:82:a6:4c:f7:a1:2b:e1:84:b2:d3:dc: 4a:b6:37:4b:90:fa:04:83:ca:af:44:62:9d:6c:dd: 8c:b4:fd:00:5a:ea:62:a7:f7:31:cf:51:9d:35:c0: 42:c1:0d:60:a6:66:f6:78:40:24:9d:cc:a1:a0:52: e4:3c:7f:eb:13:bb:6f:9d:ce:28:5c:76:82:38:73: 45:43:f5:c9:aa:db:78:cc:c6:9a:ca:a9:7a:c4:56: 2b:ab:91:6d:76:b1:7e:bf:10:69:61:32:fb:56:4d: ef:46:f8:43:b6:a9:b6:52:e7:4c:2f:33:56:85:97: 52:7c:1f:7a:99:9e:d6:7c:8e:59:4a:35:e1:45:02: b8:da:cb:b5:d6:8d:f9:a5:be:81:b4:ea:9c:f2:0f: 09:ef:c5:b0:bf:48:cf:63:85:77:e5:bb:3b:91:d2: fd:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:56:7E:CB:30:68:4C:BD:90:DE:D1:1F:4C:6B:C0:27:7D:40:91:A2 X509v3 Authority Key Identifier: keyid:96:FC:DA:12:8F:E8:2A:FC:06:E8:AA:D1:C8:E5:CC:DF:B3:55:61:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/9lZ-yzBoTL2Q3tEfTGvAJ31AkaI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:5cc0::/29 Signature Algorithm: sha256WithRSAEncryption d1:44:1f:43:c1:33:69:8a:5c:24:62:09:ea:fa:5f:84:f5:f4: cb:0f:9c:aa:6f:06:41:e2:07:11:d0:1a:4a:2a:9d:3d:3f:01: d1:ec:8f:65:08:6a:4b:57:2a:32:39:5a:f2:d7:29:0c:bb:72: e4:af:4b:99:e9:e5:c4:1f:36:e0:e0:45:cb:21:71:53:e6:50: fb:f6:17:a3:da:35:59:74:a1:3c:78:35:3a:fa:95:78:e2:53: 55:bc:50:64:a2:ce:bd:5b:f9:c5:a1:64:c1:54:40:03:bc:38: 12:bc:c3:d7:78:e5:33:dc:39:19:56:2b:6e:e6:67:e6:77:38: 89:d4:9a:6b:e5:1a:37:63:12:8d:16:1a:2e:28:ee:b4:30:fc: 13:d3:e9:17:ef:42:c0:74:59:6a:42:ef:7e:38:6b:26:f8:1f: 6c:80:c0:17:ff:d8:f7:50:cf:79:11:89:4b:1e:08:95:10:65: 06:8f:e3:92:f4:02:a0:ab:ad:1a:c9:ca:d9:41:f5:d4:f8:25: 5f:a3:7b:f7:4b:c3:16:b8:cf:c3:c7:8b:9f:c0:1b:dd:05:9d: d6:fd:9d:a6:45:a7:e2:77:1f:31:06:1e:f6:14:0a:c3:f5:19: 1d:d6:50:a3:53:b0:f0:d6:a1:3d:f7:76:45:11:ff:c1:26:61: 04:ec:7f:06 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4oz0H1rTzynmCnmSiC+fGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZmNkYTEyOGZlODJhZmMwNmU4YWFkMWM4ZTVjY2RmYjM1 NTYxZTQwHhcNMjYwMTAxMDgxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjU2N2VjYjMwNjg0Y2JkOTBkZWQxMWY0YzZiYzAyNzdkNDA5MWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLqCfmGFCSItX34XWti5J1havS9d UsnFSScQjRfZ5o9RK21ZhSKggAypH4YFHz9FxaUXI1J6FV4hp9tAvsj/SvYkaKCW /VkvBqWRZZGdz/WTJ7QXUp+roOkd8N6EgqZM96Er4YSy09xKtjdLkPoEg8qvRGKd bN2MtP0AWupip/cxz1GdNcBCwQ1gpmb2eEAkncyhoFLkPH/rE7tvnc4oXHaCOHNF Q/XJqtt4zMaayql6xFYrq5FtdrF+vxBpYTL7Vk3vRvhDtqm2UudMLzNWhZdSfB96 mZ7WfI5ZSjXhRQK42su11o35pb6BtOqc8g8J78Wwv0jPY4V35bs7kdL9xwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPZWfsswaEy9kN7RH0xrwCd9QJGiMB8GA1UdIwQY MBaAFJb82hKP6Cr8Buiq0cjlzN+zVWHkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHZ6YUVvX29LdndHNktyUnlPWE0zN05WWWVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi81MzM4NmMtNDhjNS00MmVlLWJkMDkt ZTUwYWJjOGU4ODQ0LzEvOWxaLXl6Qm9UTDJRM3RFZlRHdkFKMzFBa2FJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi81MzM4NmMtNDhjNS00MmVlLWJkMDktZTUwYWJjOGU4ODQ0 LzEvbHZ6YUVvX29LdndHNktyUnlPWE0zN05WWWVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhRcwDAN BgkqhkiG9w0BAQsFAAOCAQEA0UQfQ8EzaYpcJGIJ6vpfhPX0yw+cqm8GQeIHEdAa SiqdPT8B0eyPZQhqS1cqMjla8tcpDLty5K9LmenlxB824OBFyyFxU+ZQ+/YXo9o1 WXShPHg1OvqVeOJTVbxQZKLOvVv5xaFkwVRAA7w4ErzD13jlM9w5GVYrbuZn5nc4 idSaa+UaN2MSjRYaLijutDD8E9PpF+9CwHRZakLvfjhrJvgfbIDAF//Y91DPeRGJ Sx4IlRBlBo/jkvQCoKutGsnK2UH11PglX6N790vDFrjPw8eLn8Ab3QWd1v2dpkWn 4ncfMQYe9hQKw/UZHdZQo1Ow8NahPfd2RRH/wSZhBOx/Bg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:29 2026 by rpki-client