This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/1-cpjMvgEsFI1tsnqv4Xg9LvmYgE.roa File: 1-cpjMvgEsFI1tsnqv4Xg9LvmYgE.roa (raw, json) Hash identifier: /Pc7vzKj6j4kaA3BfqJdw+t93c1sTH3vrjFRGxDdAu8= Subject key identifier: F9:CA:63:32:F8:04:B0:52:35:B6:C9:EA:BF:85:E0:F4:BB:E6:62:01 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6ED117C7B23120DF9320FA5F7168D Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/1-cpjMvgEsFI1tsnqv4Xg9LvmYgE.roa Signing time: Fri 02 Jan 2026 12:20:27 +0000 ROA not before: Fri 02 Jan 2026 12:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205920 IP address blocks: 2a10:a500::/32 maxlen: 32 2a10:a500::/48 maxlen: 48 2a10:a500:10::/48 maxlen: 48 2a10:a500:1a::/48 maxlen: 48 2a10:a500:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:ed:11:7c:7b:23:12:0d:f9:32:0f:a5:f7:16:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9ca6332f804b05235b6c9eabf85e0f4bbe66201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6d:73:76:8c:d5:33:eb:68:78:68:a7:27:9b: 3f:0b:87:dd:3f:0c:cc:09:92:8d:03:6a:f8:e2:b4: 64:3c:f1:e8:a3:d4:bf:7b:7f:7e:a6:74:d6:bb:65: 54:c0:aa:fe:96:35:a8:fe:24:7e:1c:96:ec:d9:51: 65:5a:0e:c1:98:02:a3:f7:72:0d:09:26:9a:89:03: 74:fe:74:a2:26:19:7e:48:05:2a:a8:0f:f5:1a:d8: 49:cc:20:a0:fd:7b:66:5b:fb:82:84:2a:71:1f:b1: 11:e5:d0:17:57:85:8c:a0:65:c3:45:a9:6c:20:1e: b4:8a:08:4e:95:70:92:d3:c8:e9:87:0b:81:1c:d6: 3a:db:fe:f5:56:8d:b9:a2:7f:eb:d7:4f:55:03:d9: ff:74:f3:5a:ee:4f:55:72:77:48:b9:ea:3c:bd:18: 42:2e:51:aa:4d:2e:60:8a:3c:25:8c:25:e7:85:16: 79:cf:c3:74:7b:aa:a4:2a:a5:7c:59:cd:3a:cf:d8: 5b:15:24:ff:8d:c9:67:c3:3f:62:7d:c5:8c:d6:49: 50:8f:69:e0:51:75:9e:55:b4:f5:88:21:fd:1a:3e: a1:3c:aa:bb:c8:47:aa:0e:fd:6f:15:c0:22:9c:b2: 8b:e0:6e:fa:b1:f6:57:8e:41:ee:48:ef:26:54:27: f4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:CA:63:32:F8:04:B0:52:35:B6:C9:EA:BF:85:E0:F4:BB:E6:62:01 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/1-cpjMvgEsFI1tsnqv4Xg9LvmYgE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:a500::/32 Signature Algorithm: sha256WithRSAEncryption 35:90:40:c9:6c:20:9b:10:94:35:1b:fe:25:06:b6:3a:44:a6: b4:13:20:2d:df:5c:2a:ff:42:7c:b8:4c:fb:32:8f:04:36:12: 3f:99:2d:06:a2:c5:eb:17:a2:85:58:4e:cf:22:7f:d5:a4:43: 2f:e7:b2:9c:b6:8b:24:29:b1:75:90:fd:c6:ac:85:62:9a:7a: 6f:bb:3d:bd:a6:28:9f:15:34:94:c2:13:53:f7:29:4c:e7:36: d4:9b:9a:e8:c1:84:e3:ca:79:38:bc:b9:ff:dd:63:e9:ad:54: cd:ec:d3:05:c8:63:a3:5c:0f:57:37:e1:ae:bd:45:6d:b9:be: 2c:cc:6b:46:ef:05:43:ca:1a:1d:63:30:9d:38:ed:19:74:68: 36:cf:eb:9e:6f:be:bf:74:05:ea:60:8e:1f:40:ea:80:0d:9c: cd:57:f6:a1:6e:5e:28:57:56:f6:3d:4d:49:23:1c:a1:88:30: 53:eb:61:dd:25:70:35:20:7b:22:b7:8a:2b:b3:1b:e3:16:10: b7:4b:a0:e6:fd:2b:92:ae:aa:fd:bc:b5:6a:1d:15:c5:c8:77: 28:39:be:a3:4c:fa:e7:0c:6d:62:be:a4:a4:7c:1e:d9:f4:7b: 7c:65:98:54:04:ae:56:36:f0:03:77:16:0b:1a:8e:7d:3d:e6: df:8d:79:d8 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+pu0RfHsjEg35Mg+l9xaNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWNhNjMzMmY4MDRiMDUyMzViNmM5ZWFiZjg1ZTBmNGJiZTY2MjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2W1zdozVM+toeGinJ5s/C4fdPwzM CZKNA2r44rRkPPHoo9S/e39+pnTWu2VUwKr+ljWo/iR+HJbs2VFlWg7BmAKj93IN CSaaiQN0/nSiJhl+SAUqqA/1GthJzCCg/XtmW/uChCpxH7ER5dAXV4WMoGXDRals IB60ighOlXCS08jphwuBHNY62/71Vo25on/r109VA9n/dPNa7k9VcndIueo8vRhC LlGqTS5gijwljCXnhRZ5z8N0e6qkKqV8Wc06z9hbFST/jclnwz9ifcWM1klQj2ng UXWeVbT1iCH9Gj6hPKq7yEeqDv1vFcAinLKL4G76sfZXjkHuSO8mVCf0qQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFPnKYzL4BLBSNbbJ6r+F4PS75mIBMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvMS1jcGpNdmdFc0ZJMXRzbnF2NFhnOUx2bVlnRS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMDIvZjk2ZjczLTY2ODYtNDE2NC1iMjNmLWJmNGU1MjdiOWZh OC8xL25wV2pZZjRyTEZLU1ltdWt4V3BscUJUa2dBZy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoQpQAw DQYJKoZIhvcNAQELBQADggEBADWQQMlsIJsQlDUb/iUGtjpEprQTIC3fXCr/Qny4 TPsyjwQ2Ej+ZLQaixesXooVYTs8if9WkQy/nspy2iyQpsXWQ/cashWKaem+7Pb2m KJ8VNJTCE1P3KUznNtSbmujBhOPKeTi8uf/dY+mtVM3s0wXIY6NcD1c34a69RW25 vizMa0bvBUPKGh1jMJ047Rl0aDbP655vvr90Bepgjh9A6oANnM1X9qFuXihXVvY9 TUkjHKGIMFPrYd0lcDUgeyK3iiuzG+MWELdLoOb9K5Kuqv28tWodFcXIdyg5vqNM +ucMbWK+pKR8Htn0e3xlmFQErlY28AN3Fgsajn095t+Nedg= -----END CERTIFICATE-----Generated at Tue Jan 20 09:05:17 2026 by rpki-client