This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/1-w3sXmpi8xlzNsqqTDtZAmugcc8.roa File: 1-w3sXmpi8xlzNsqqTDtZAmugcc8.roa (raw, json) Hash identifier: ZR4XuiAMiwGZqHawlMs4782gBLCzLP2V3wLegdrcusU= Subject key identifier: FB:0D:EC:5E:6A:62:F3:19:73:36:CA:AA:4C:3B:59:02:6B:A0:71:CF Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B996DE7DD874F76DA7F502AA9BC108AFF Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/1-w3sXmpi8xlzNsqqTDtZAmugcc8.roa Signing time: Wed 07 Jan 2026 17:07:55 +0000 ROA not before: Wed 07 Jan 2026 17:07:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208229 IP address blocks: 2a0c:9a40:8e30::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:99:6d:e7:dd:87:4f:76:da:7f:50:2a:a9:bc:10:8a:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 7 17:07:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb0dec5e6a62f3197336caaa4c3b59026ba071cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:82:dc:2e:90:ca:72:79:ec:f6:15:8e:ae:e7: 25:a4:ba:44:99:e6:d1:c1:5f:a3:8f:35:d2:35:78: fa:94:93:58:f5:df:5a:6d:92:ed:22:a4:de:15:2d: ef:f3:44:ac:b4:a7:ea:df:f5:b1:e8:db:f5:f4:ae: c9:a6:c4:af:90:86:e7:51:5b:86:0d:48:ff:0a:14: 7b:f0:29:05:08:7b:e7:99:19:46:55:96:f3:60:25: 61:80:8a:e1:c4:38:6f:df:4b:27:00:6f:af:f9:92: 35:9b:62:2d:35:bc:40:97:19:30:09:66:54:40:46: b8:40:d8:28:82:0b:8c:2a:76:11:00:93:c7:22:92: 30:67:0f:58:5f:4c:ef:49:54:93:6d:89:40:8d:ec: 76:25:9a:bb:c9:24:d3:74:47:3b:11:2c:ad:55:6f: f7:71:71:b9:67:99:ce:e6:13:a9:38:7c:e7:1d:2a: 73:cf:2d:e9:61:a2:24:01:7a:ff:75:0a:b0:5e:0b: 61:6f:44:d1:a7:e2:56:1f:0e:15:4a:96:3b:e4:fa: c1:e2:ac:fb:35:ba:29:5b:35:4d:d6:2a:fe:a4:f8: 7f:8b:aa:6c:45:31:d7:92:49:e0:fe:df:8c:43:75: 99:e3:a8:1e:fe:0d:a7:89:85:3b:43:29:a2:50:1e: 5a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:0D:EC:5E:6A:62:F3:19:73:36:CA:AA:4C:3B:59:02:6B:A0:71:CF X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/1-w3sXmpi8xlzNsqqTDtZAmugcc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8e30::/48 Signature Algorithm: sha256WithRSAEncryption 93:82:43:16:94:cd:17:62:68:ba:89:aa:f5:20:3a:4e:6d:c1: 56:d0:92:ce:2f:ec:9d:bd:78:01:73:3a:b7:cd:00:ce:78:e2: 4a:1c:0c:fd:18:0f:0e:06:e2:3b:5e:64:10:d3:06:58:87:8f: ac:89:6c:76:d6:d3:b3:04:a2:33:c4:65:d7:ad:fa:b8:88:57: 36:fc:b6:af:94:c4:ad:c2:90:b6:7c:23:e3:ef:5c:08:b3:a8: 76:24:e6:ce:0b:8b:a9:f1:09:a9:63:3a:14:94:05:9f:e6:74: b3:4b:7b:ab:2a:14:a1:63:d8:0b:77:ff:59:ee:4c:66:99:5c: 90:75:a2:e5:14:33:51:cc:8d:28:85:62:ff:5c:d7:aa:6c:e5: c3:8a:bc:cb:f8:f3:e7:03:c8:75:f6:15:07:f8:a8:17:38:e0: 03:1e:72:51:e3:84:dd:bd:32:3d:36:9e:80:85:ae:ca:1a:60: d2:a9:aa:8f:47:77:6f:d0:85:d7:95:ed:78:26:e0:fd:02:32: 02:ef:70:1f:3d:44:92:12:63:7a:42:8e:76:3c:27:61:34:f4: 28:05:8e:cf:88:c2:66:66:22:d9:17:dd:fa:d9:dc:0a:37:ed: 57:01:73:4b:f0:08:11:47:59:5d:e5:dc:de:fa:34:df:73:b0: 72:28:b5:8d -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZuZbefdh0922n9QKqm8EIr/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTA3MTcwNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjBkZWM1ZTZhNjJmMzE5NzMzNmNhYWE0YzNiNTkwMjZiYTA3MWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6YLcLpDKcnns9hWOruclpLpEmebR wV+jjzXSNXj6lJNY9d9abZLtIqTeFS3v80SstKfq3/Wx6Nv19K7JpsSvkIbnUVuG DUj/ChR78CkFCHvnmRlGVZbzYCVhgIrhxDhv30snAG+v+ZI1m2ItNbxAlxkwCWZU QEa4QNgogguMKnYRAJPHIpIwZw9YX0zvSVSTbYlAjex2JZq7ySTTdEc7ESytVW/3 cXG5Z5nO5hOpOHznHSpzzy3pYaIkAXr/dQqwXgthb0TRp+JWHw4VSpY75PrB4qz7 NbopWzVN1ir+pPh/i6psRTHXkkng/t+MQ3WZ46ge/g2niYU7QymiUB5aowIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFPsN7F5qYvMZczbKqkw7WQJroHHPMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvMS13M3NYbXBpOHhsek5zcXFURHRaQW11Z2NjOC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMDIvZjk2ZjczLTY2ODYtNDE2NC1iMjNmLWJmNGU1MjdiOWZh OC8xL25wV2pZZjRyTEZLU1ltdWt4V3BscUJUa2dBZy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoMmkCO MDANBgkqhkiG9w0BAQsFAAOCAQEAk4JDFpTNF2Jouomq9SA6Tm3BVtCSzi/snb14 AXM6t80AznjiShwM/RgPDgbiO15kENMGWIePrIlsdtbTswSiM8Rl1636uIhXNvy2 r5TErcKQtnwj4+9cCLOodiTmzguLqfEJqWM6FJQFn+Z0s0t7qyoUoWPYC3f/We5M ZplckHWi5RQzUcyNKIVi/1zXqmzlw4q8y/jz5wPIdfYVB/ioFzjgAx5yUeOE3b0y PTaegIWuyhpg0qmqj0d3b9CF15XteCbg/QIyAu9wHz1EkhJjekKOdjwnYTT0KAWO z4jCZmYi2Rfd+tncCjftVwFzS/AIEUdZXeXc3vo033Owcii1jQ== -----END CERTIFICATE-----Generated at Tue Jan 20 09:07:39 2026 by rpki-client