This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/1-qFVIlk3rzTt-ZErc1Ca5V6MzJI.roa File: 1-qFVIlk3rzTt-ZErc1Ca5V6MzJI.roa (raw, json) Hash identifier: pAtBUuA3BSPx9chzElMzfJbgdjxBbjhigPdPizi9kyw= Subject key identifier: FA:A1:55:22:59:37:AF:34:ED:F9:91:2B:73:50:9A:E5:5E:8C:CC:92 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6D9901FFFFB04572555A6DCDD777D Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/1-qFVIlk3rzTt-ZErc1Ca5V6MzJI.roa Signing time: Fri 02 Jan 2026 12:20:22 +0000 ROA not before: Fri 02 Jan 2026 12:20:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199705 IP address blocks: 2a0c:9a40:8210::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:d9:90:1f:ff:fb:04:57:25:55:a6:dc:dd:77:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=faa155225937af34edf9912b73509ae55e8ccc92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:54:84:8a:35:0a:f3:18:94:5d:2e:79:84:f0: a9:29:bc:75:5f:f6:be:08:15:0b:02:f8:0f:1b:ec: aa:d1:6d:dd:47:d1:a7:48:2c:ba:02:6b:ff:b1:c3: 6e:ac:d2:28:26:53:8e:f0:97:8a:bb:e3:c2:b2:ed: 85:f1:db:f1:d4:73:d4:29:56:c3:9b:43:4b:de:c6: 8a:3d:0a:ff:6a:50:04:d7:40:7d:60:b1:04:21:ab: d9:39:8a:10:05:a5:0b:7d:e8:f8:30:09:49:8d:27: 7b:b0:72:23:a9:42:a7:ba:fa:17:9a:7f:8c:a2:42: 5f:57:a8:42:15:ba:af:2f:aa:6a:a9:72:97:a0:01: b3:9f:6c:3a:a0:88:ff:db:1a:44:d9:13:6b:70:52: 48:14:f7:c2:fc:dd:e4:ce:e7:95:20:1f:6b:48:16: 6e:49:d4:1b:36:7f:79:f7:05:58:6f:f4:87:41:00: ff:a8:dd:50:2e:b9:75:48:c9:a7:89:7e:26:36:2c: da:f0:61:e9:c6:8e:cd:a0:b9:48:b2:e2:14:3d:7b: 5d:42:82:e8:e2:79:92:5d:44:c0:17:0c:b1:e5:fd: 74:39:bf:02:90:64:a5:f8:b7:35:83:f9:f2:21:91: 30:97:0e:a7:b9:26:34:56:12:61:36:9e:14:16:d9: b6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:A1:55:22:59:37:AF:34:ED:F9:91:2B:73:50:9A:E5:5E:8C:CC:92 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/1-qFVIlk3rzTt-ZErc1Ca5V6MzJI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8210::/44 Signature Algorithm: sha256WithRSAEncryption 34:94:a3:e4:d4:1d:f8:fe:d7:c2:3f:f2:27:44:92:d2:4e:eb: a0:50:71:5b:8d:95:56:c1:01:68:64:ae:bd:a5:5b:e2:82:dd: e1:e1:32:f5:af:40:e4:88:27:50:b4:a7:df:e1:10:7a:8e:4a: 57:42:8c:ad:c1:60:c5:08:c7:bf:1b:25:21:61:b1:71:6a:d9: 8f:4a:03:86:27:ba:ca:e2:0b:58:34:95:3e:77:35:26:72:b0: 86:0a:99:6b:63:68:dc:ea:d2:14:b7:86:67:93:57:fb:5f:7e: c7:2c:81:68:cc:f9:33:8a:d8:82:f8:c7:3d:e1:0b:84:b9:e0: 42:9e:09:6c:ea:68:91:25:bf:af:77:7f:1f:cc:b4:f0:93:1b: 0d:40:ca:dc:7c:b8:e6:9a:ab:7c:c3:03:27:0e:c2:dc:b0:d7: f2:12:ca:a8:73:79:0a:10:fc:93:c2:5d:da:0b:a6:7f:db:1d: 8a:97:02:86:67:33:e8:aa:a4:d7:e0:b0:75:c7:e7:12:23:fc: 98:c0:dd:71:1d:d8:d2:57:0d:fe:3f:ae:12:b1:a3:de:ef:8c: 7a:ab:b7:a0:aa:0b:51:c9:8d:4c:97:f2:54:ce:cf:9c:db:3f: 33:56:f1:d8:0f:e9:de:86:3a:9c:6a:3d:11:78:85:91:0d:21: 5e:5c:e4:bc -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZt+ptmQH//7BFclVabc3Xd9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWExNTUyMjU5MzdhZjM0ZWRmOTkxMmI3MzUwOWFlNTVlOGNjYzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1SEijUK8xiUXS55hPCpKbx1X/a+ CBULAvgPG+yq0W3dR9GnSCy6Amv/scNurNIoJlOO8JeKu+PCsu2F8dvx1HPUKVbD m0NL3saKPQr/alAE10B9YLEEIavZOYoQBaULfej4MAlJjSd7sHIjqUKnuvoXmn+M okJfV6hCFbqvL6pqqXKXoAGzn2w6oIj/2xpE2RNrcFJIFPfC/N3kzueVIB9rSBZu SdQbNn959wVYb/SHQQD/qN1QLrl1SMmniX4mNiza8GHpxo7NoLlIsuIUPXtdQoLo 4nmSXUTAFwyx5f10Ob8CkGSl+Lc1g/nyIZEwlw6nuSY0VhJhNp4UFtm2PwIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFPqhVSJZN6807fmRK3NQmuVejMySMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvMS1xRlZJbGszcnpUdC1aRXJjMUNhNVY2TXpKSS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMDIvZjk2ZjczLTY2ODYtNDE2NC1iMjNmLWJmNGU1MjdiOWZh OC8xL25wV2pZZjRyTEZLU1ltdWt4V3BscUJUa2dBZy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoMmkCC EDANBgkqhkiG9w0BAQsFAAOCAQEANJSj5NQd+P7Xwj/yJ0SS0k7roFBxW42VVsEB aGSuvaVb4oLd4eEy9a9A5IgnULSn3+EQeo5KV0KMrcFgxQjHvxslIWGxcWrZj0oD hie6yuILWDSVPnc1JnKwhgqZa2No3OrSFLeGZ5NX+19+xyyBaMz5M4rYgvjHPeEL hLngQp4JbOpokSW/r3d/H8y08JMbDUDK3Hy45pqrfMMDJw7C3LDX8hLKqHN5ChD8 k8Jd2gumf9sdipcChmcz6Kqk1+CwdcfnEiP8mMDdcR3Y0lcN/j+uErGj3u+Mequ3 oKoLUcmNTJfyVM7PnNs/M1bx2A/p3oY6nGo9EXiFkQ0hXlzkvA== -----END CERTIFICATE-----Generated at Tue Jan 20 09:07:38 2026 by rpki-client