This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/1-pBGpIQSdCMWu3FQZf7CJqE041U.roa File: 1-pBGpIQSdCMWu3FQZf7CJqE041U.roa (raw, json) Hash identifier: izB4x5uSqIkeNoNErehyMiSXtNHzZYdzmXP5plNuGIc= Subject key identifier: FA:90:46:A4:84:12:74:23:16:BB:71:50:65:FE:C2:26:A1:34:E3:55 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6D7231669A2CC44A37FD4AC71553B Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/1-pBGpIQSdCMWu3FQZf7CJqE041U.roa Signing time: Fri 02 Jan 2026 12:20:21 +0000 ROA not before: Fri 02 Jan 2026 12:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198510 IP address blocks: 2a0c:9a40:8c80::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:d7:23:16:69:a2:cc:44:a3:7f:d4:ac:71:55:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa9046a48412742316bb715065fec226a134e355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a2:de:5f:db:78:11:c5:b4:78:c5:60:25:f3: 22:33:bb:03:1b:62:e0:22:14:95:83:23:7a:ea:1d: 44:91:83:01:8b:45:7a:46:f3:ca:a9:e6:3c:fe:d5: 5f:2c:25:c4:82:ef:3f:b6:ba:6c:1e:9e:73:4b:b4: 78:50:40:d8:1a:9a:89:00:bf:fa:15:76:03:24:b4: f2:2b:ce:c9:fb:fc:d1:51:2a:1a:0b:97:5f:46:68: ab:b1:d9:41:16:a1:53:6b:80:b9:e7:33:76:9e:7e: c8:84:f1:00:9d:08:94:ef:81:cc:96:23:56:71:73: 85:5f:a4:9f:ed:83:16:c7:c1:90:70:31:97:c3:27: 73:b4:0b:e0:0a:0c:7e:34:f0:26:25:a5:aa:f3:5b: 87:22:4a:99:98:de:63:ef:f4:74:e7:51:67:4a:2c: 70:5f:a6:65:8c:d0:28:1f:b3:ab:f8:33:7d:a6:ce: 7e:d2:bc:5e:fe:db:8c:42:d1:c2:35:cd:c6:87:32: 4a:18:6c:75:c4:d6:84:d5:68:6a:f1:ea:0b:20:e7: 1c:bb:16:8d:48:e4:8b:63:8c:3d:b6:58:94:2e:4c: 72:01:35:ee:4e:68:45:d6:e5:9d:64:0c:90:c8:68: 28:d0:c9:b7:13:61:c7:f2:10:1b:26:24:e7:2b:0e: 09:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:90:46:A4:84:12:74:23:16:BB:71:50:65:FE:C2:26:A1:34:E3:55 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/1-pBGpIQSdCMWu3FQZf7CJqE041U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8c80::/44 Signature Algorithm: sha256WithRSAEncryption d0:87:d0:cd:a2:d9:50:96:9f:9b:cb:a0:58:54:15:83:64:4e: 9b:71:35:7c:f5:5d:56:24:76:87:33:ff:32:d9:5e:91:f8:68: 73:f8:7b:5a:d6:d1:e1:b9:23:de:b7:a4:0b:0e:95:7d:e3:a8: 1b:af:6f:7b:b8:a2:dd:f2:99:6f:ad:d1:bb:56:08:c2:fe:fc: d4:0a:cf:e1:e2:a1:8c:2f:d2:78:08:03:fe:3d:ce:26:af:fc: e0:04:70:ad:0e:1d:94:19:c3:f8:67:04:55:e4:2d:90:ef:7a: c1:b9:c7:38:8f:00:4f:3f:6a:e4:6d:db:2e:9c:24:fd:d5:75: 38:60:de:95:81:ed:df:a5:d7:ea:c7:b8:15:f9:7f:6b:ea:29: eb:60:35:09:7b:69:cd:87:44:77:e2:98:01:15:4a:c7:b7:e1: 48:41:3a:4a:b9:59:e6:32:c1:9e:5c:fe:11:4d:ab:f2:c7:94: c5:8c:da:5a:cd:82:e5:f2:c0:1a:1b:84:33:ee:d6:85:87:3d: 45:c2:d9:a1:6d:b4:de:3c:c7:e7:84:b0:67:a8:77:78:d3:43: 17:bb:68:a9:19:98:ad:fa:7e:7b:a4:ab:e5:17:b2:3f:1a:cb: f5:a3:32:cb:f9:51:97:53:40:76:83:d0:f0:ec:b5:eb:b8:b4: d4:15:d9:8a -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZt+ptcjFmmizESjf9SscVU7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTkwNDZhNDg0MTI3NDIzMTZiYjcxNTA2NWZlYzIyNmExMzRlMzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaLeX9t4EcW0eMVgJfMiM7sDG2Lg IhSVgyN66h1EkYMBi0V6RvPKqeY8/tVfLCXEgu8/trpsHp5zS7R4UEDYGpqJAL/6 FXYDJLTyK87J+/zRUSoaC5dfRmirsdlBFqFTa4C55zN2nn7IhPEAnQiU74HMliNW cXOFX6Sf7YMWx8GQcDGXwydztAvgCgx+NPAmJaWq81uHIkqZmN5j7/R051FnSixw X6ZljNAoH7Or+DN9ps5+0rxe/tuMQtHCNc3GhzJKGGx1xNaE1Whq8eoLIOccuxaN SOSLY4w9tliULkxyATXuTmhF1uWdZAyQyGgo0Mm3E2HH8hAbJiTnKw4J0QIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFPqQRqSEEnQjFrtxUGX+wiahNONVMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvMS1wQkdwSVFTZENNV3UzRlFaZjdDSnFFMDQxVS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMDIvZjk2ZjczLTY2ODYtNDE2NC1iMjNmLWJmNGU1MjdiOWZh OC8xL25wV2pZZjRyTEZLU1ltdWt4V3BscUJUa2dBZy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoMmkCM gDANBgkqhkiG9w0BAQsFAAOCAQEA0IfQzaLZUJafm8ugWFQVg2ROm3E1fPVdViR2 hzP/Mtlekfhoc/h7WtbR4bkj3rekCw6VfeOoG69ve7ii3fKZb63Ru1YIwv781ArP 4eKhjC/SeAgD/j3OJq/84ARwrQ4dlBnD+GcEVeQtkO96wbnHOI8ATz9q5G3bLpwk /dV1OGDelYHt36XX6se4Ffl/a+op62A1CXtpzYdEd+KYARVKx7fhSEE6SrlZ5jLB nlz+EU2r8seUxYzaWs2C5fLAGhuEM+7WhYc9RcLZoW203jzH54SwZ6h3eNNDF7to qRmYrfp+e6Sr5ReyPxrL9aMyy/lRl1NAdoPQ8Oy167i01BXZig== -----END CERTIFICATE-----Generated at Tue Jan 20 09:06:12 2026 by rpki-client