This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/0yB7o9FF-5U6YFQNs65PIwUgEjw.roa File: 0yB7o9FF-5U6YFQNs65PIwUgEjw.roa (raw, json) Hash identifier: oAAnCL8ov6np12rGkbJxii9fv+kv1wkBvcLbHlY4+ec= Subject key identifier: D3:20:7B:A3:D1:45:FB:95:3A:60:54:0D:B3:AE:4F:23:05:20:12:3C Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6D1385DD015B268DF32966ADD61AC Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/0yB7o9FF-5U6YFQNs65PIwUgEjw.roa Signing time: Fri 02 Jan 2026 12:20:20 +0000 ROA not before: Fri 02 Jan 2026 12:20:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 139311 IP address blocks: 2a0c:9a40:82e0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:d1:38:5d:d0:15:b2:68:df:32:96:6a:dd:61:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3207ba3d145fb953a60540db3ae4f230520123c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:91:6f:e9:51:82:bd:fa:7e:0d:70:ce:03:ae: 72:68:17:e6:d7:07:53:59:4f:68:21:86:cd:43:85: a2:e7:b4:e7:0d:ac:79:89:62:5d:9a:5e:eb:39:ac: ac:18:df:3c:f7:b4:3b:62:cb:c7:ad:fd:92:96:0f: 9d:36:76:c5:8c:a4:f5:ae:d3:7f:c3:ec:a6:85:c1: af:d1:9f:fd:47:b4:a3:d9:93:7f:69:de:74:46:a8: 98:e2:88:cf:47:75:a8:39:6c:b8:71:c1:c9:bc:48: 17:ac:ef:83:8b:2e:f9:17:d8:cd:72:00:59:a6:4d: d5:d2:aa:3a:81:55:ea:2f:9a:ce:bb:2a:9b:22:5f: 9a:b9:95:54:cb:7c:f4:14:77:0f:32:f8:94:2a:76: bf:7c:ba:63:9b:3a:67:76:07:89:0c:f8:19:a9:d7: 93:b9:e1:31:62:1d:cd:c6:7d:25:c8:8e:6a:67:72: b6:27:64:1b:08:87:be:9b:1a:16:34:b5:5c:a2:40: e5:60:fd:70:49:fa:18:20:f8:99:c0:b3:dd:5c:3a: cb:9e:88:74:20:c9:bb:8f:0f:be:fe:c1:34:72:66: c5:93:f5:a7:05:9e:1f:72:25:22:0c:d6:fd:66:a3: 11:62:77:e0:d3:d8:ca:54:5a:ab:e9:d7:9d:b1:ba: d6:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:20:7B:A3:D1:45:FB:95:3A:60:54:0D:B3:AE:4F:23:05:20:12:3C X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/0yB7o9FF-5U6YFQNs65PIwUgEjw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:82e0::/44 Signature Algorithm: sha256WithRSAEncryption ca:b9:5e:f8:22:9d:f4:c6:2d:77:fa:49:a2:1e:35:3c:24:73: f7:cf:13:4b:c1:1c:c7:2f:72:47:1e:93:5d:44:62:c9:09:38: 5c:58:b3:4f:af:cf:ec:fc:f9:7c:d3:35:11:53:67:40:ac:24: 72:c9:26:30:8b:73:7e:38:b8:29:4b:3f:d8:10:b8:0a:51:fd: 20:9e:35:a8:7f:a9:5f:aa:3d:8c:0a:0b:3a:50:2f:52:fc:d9: 19:a2:94:cc:8e:df:f3:86:28:2f:97:7d:8b:74:b3:ee:71:8b: df:ce:3c:4a:96:b6:4f:47:ae:93:19:59:d3:e1:3b:d0:46:61: 99:0c:05:24:4c:73:b8:06:f9:f6:48:b5:fa:49:a4:18:e6:4e: 39:01:b1:24:74:c1:e9:2d:8f:d4:47:ac:b0:7f:1e:cc:57:17: 8f:db:fe:2f:c2:c3:84:19:a8:d5:8d:31:b0:a1:17:75:f7:1d: 46:d6:56:6c:fb:66:cc:95:ed:97:d3:99:6e:3f:3a:d8:f7:9e: 66:90:96:db:eb:d0:d9:04:94:4e:e8:ec:3e:a0:4b:65:06:7c: b5:fa:e5:19:f2:50:8d:53:81:af:6b:ac:72:07:ed:f0:23:d2: d5:5f:67:07:43:08:61:cf:a1:a4:b7:7b:bb:c6:51:6c:7d:c2: 17:ef:35:69 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+ptE4XdAVsmjfMpZq3WGsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzIwN2JhM2QxNDVmYjk1M2E2MDU0MGRiM2FlNGYyMzA1MjAxMjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpFv6VGCvfp+DXDOA65yaBfm1wdT WU9oIYbNQ4Wi57TnDax5iWJdml7rOaysGN8897Q7YsvHrf2Slg+dNnbFjKT1rtN/ w+ymhcGv0Z/9R7Sj2ZN/ad50RqiY4ojPR3WoOWy4ccHJvEgXrO+Diy75F9jNcgBZ pk3V0qo6gVXqL5rOuyqbIl+auZVUy3z0FHcPMviUKna/fLpjmzpndgeJDPgZqdeT ueExYh3Nxn0lyI5qZ3K2J2QbCIe+mxoWNLVcokDlYP1wSfoYIPiZwLPdXDrLnoh0 IMm7jw++/sE0cmbFk/WnBZ4fciUiDNb9ZqMRYnfg09jKVFqr6dedsbrWvQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNMge6PRRfuVOmBUDbOuTyMFIBI8MB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvMHlCN285RkYtNVU2WUZRTnM2NVBJd1VnRWp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgyaQILg MA0GCSqGSIb3DQEBCwUAA4IBAQDKuV74Ip30xi13+kmiHjU8JHP3zxNLwRzHL3JH HpNdRGLJCThcWLNPr8/s/Pl80zURU2dArCRyySYwi3N+OLgpSz/YELgKUf0gnjWo f6lfqj2MCgs6UC9S/NkZopTMjt/zhigvl32LdLPucYvfzjxKlrZPR66TGVnT4TvQ RmGZDAUkTHO4Bvn2SLX6SaQY5k45AbEkdMHpLY/UR6ywfx7MVxeP2/4vwsOEGajV jTGwoRd19x1G1lZs+2bMle2X05luPzrY955mkJbb69DZBJRO6Ow+oEtlBny1+uUZ 8lCNU4Gva6xyB+3wI9LVX2cHQwhhz6Gkt3u7xlFsfcIX7zVp -----END CERTIFICATE-----Generated at Tue Jan 20 09:04:38 2026 by rpki-client