This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/0scsgalfJohtLimP_9P40a70CJ4.roa File: 0scsgalfJohtLimP_9P40a70CJ4.roa (raw, json) Hash identifier: 9tsSqmP6jY4v152zZgLQUmj6oK6T4oRG+rSHb4sQtYo= Subject key identifier: D2:C7:2C:81:A9:5F:26:88:6D:2E:29:8F:FF:D3:F8:D1:AE:F4:08:9E Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA7181CB954AAE5FBC0162E383316A1 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/0scsgalfJohtLimP_9P40a70CJ4.roa Signing time: Fri 02 Jan 2026 12:20:38 +0000 ROA not before: Fri 02 Jan 2026 12:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216052 IP address blocks: 2a0c:9a40:8480::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:18:1c:b9:54:aa:e5:fb:c0:16:2e:38:33:16:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2c72c81a95f26886d2e298fffd3f8d1aef4089e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3e:72:5e:bb:26:93:29:c2:67:68:e4:90:3a: 28:69:a1:d7:1f:ef:cd:58:e8:48:b8:ec:76:11:9c: 29:5f:2e:c0:5c:f8:df:f3:2d:ba:a4:40:6d:27:0a: 54:be:b9:f5:48:10:d8:6a:bb:1d:58:66:60:7a:34: dc:51:de:a3:dc:c9:d3:9d:0f:98:72:81:ac:cb:ef: 1c:dd:25:c8:a7:d9:90:bf:37:42:2d:76:10:ae:82: b9:b7:bb:35:fb:8b:27:1b:b9:cc:1a:ac:9d:7f:29: 54:84:43:dc:68:64:4a:c9:fd:3e:88:02:73:ee:b7: ef:3f:6e:96:99:63:bb:ff:4c:3d:5d:dd:d4:7e:5b: c3:c8:d2:ba:42:cf:4c:e0:22:6c:5b:12:e6:84:b1: 85:38:9c:84:46:71:29:c7:d8:5e:0a:cb:81:32:d2: 92:f8:cd:90:5d:db:89:b3:58:4c:cf:57:90:04:12: b1:32:a4:bf:5e:94:03:ee:11:af:0d:fc:4f:f6:f1: b3:0c:da:4c:18:21:54:6b:36:5a:38:86:1a:66:4e: 7c:1b:fa:8c:0a:d2:9a:c9:16:92:30:53:c3:3d:f9: 09:eb:ba:ad:91:60:8a:af:a0:9c:73:fc:fc:3f:d3: 3e:09:a6:73:07:69:17:6d:01:eb:56:14:a2:f1:3b: 20:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C7:2C:81:A9:5F:26:88:6D:2E:29:8F:FF:D3:F8:D1:AE:F4:08:9E X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/0scsgalfJohtLimP_9P40a70CJ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8480::/44 Signature Algorithm: sha256WithRSAEncryption 76:5f:18:1a:e3:ef:aa:c2:b2:4d:e2:5c:9f:ef:b9:c7:61:e3: 88:71:84:99:e8:d2:e3:59:f5:c8:cf:76:40:13:79:11:b4:91: ca:70:c8:87:29:7f:77:ef:70:d5:70:2c:49:2d:0b:28:5d:d8: c4:b9:69:3b:c5:86:88:68:b9:76:29:e5:4c:7f:6b:0d:01:c3: 65:a9:4d:f9:3c:55:06:29:82:ad:4f:d3:5d:69:fb:34:a9:b6: 42:11:61:ed:2b:54:41:7d:bb:1c:c4:17:3a:cf:5f:b3:c7:dc: 43:92:41:77:ec:05:13:1a:77:40:d4:25:29:eb:fe:8e:91:ea: 8e:5b:1d:eb:ba:ea:7b:7f:33:14:ca:cb:bf:c0:53:fd:c2:39: ee:94:56:3f:07:0f:bd:50:08:2d:ea:48:fa:90:d8:49:71:0c: 46:c6:db:18:d0:5f:0d:9d:be:77:2c:2f:8c:2f:6b:68:10:7c: 55:c5:d0:d5:46:93:90:83:19:12:8b:e9:25:09:1d:e3:31:51: 12:a7:79:57:51:17:67:d8:52:80:3c:32:91:12:57:8c:e6:ef: 62:20:a2:53:99:c5:e5:a1:83:51:cb:ea:07:3b:99:fb:d4:0d: 10:ce:27:43:19:8b:5d:b3:46:f1:c5:fb:8d:e1:ed:b2:72:72: d8:29:a9:b1 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pxgcuVSq5fvAFi44MxahMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmM3MmM4MWE5NWYyNjg4NmQyZTI5OGZmZmQzZjhkMWFlZjQwODllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzT5yXrsmkynCZ2jkkDooaaHXH+/N WOhIuOx2EZwpXy7AXPjf8y26pEBtJwpUvrn1SBDYarsdWGZgejTcUd6j3MnTnQ+Y coGsy+8c3SXIp9mQvzdCLXYQroK5t7s1+4snG7nMGqydfylUhEPcaGRKyf0+iAJz 7rfvP26WmWO7/0w9Xd3UflvDyNK6Qs9M4CJsWxLmhLGFOJyERnEpx9heCsuBMtKS +M2QXduJs1hMz1eQBBKxMqS/XpQD7hGvDfxP9vGzDNpMGCFUazZaOIYaZk58G/qM CtKayRaSMFPDPfkJ67qtkWCKr6Ccc/z8P9M+CaZzB2kXbQHrVhSi8Tsg2QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNLHLIGpXyaIbS4pj//T+NGu9AieMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvMHNjc2dhbGZKb2h0TGltUF85UDQwYTcwQ0o0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgyaQISA MA0GCSqGSIb3DQEBCwUAA4IBAQB2Xxga4++qwrJN4lyf77nHYeOIcYSZ6NLjWfXI z3ZAE3kRtJHKcMiHKX9373DVcCxJLQsoXdjEuWk7xYaIaLl2KeVMf2sNAcNlqU35 PFUGKYKtT9Ndafs0qbZCEWHtK1RBfbscxBc6z1+zx9xDkkF37AUTGndA1CUp6/6O keqOWx3ruup7fzMUysu/wFP9wjnulFY/Bw+9UAgt6kj6kNhJcQxGxtsY0F8Nnb53 LC+ML2toEHxVxdDVRpOQgxkSi+klCR3jMVESp3lXURdn2FKAPDKREleM5u9iIKJT mcXloYNRy+oHO5n71A0QzidDGYtds0bxxfuN4e2ycnLYKamx -----END CERTIFICATE-----Generated at Tue Jan 20 09:04:42 2026 by rpki-client