This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/1sm2TQ2cBmWuXNKpz35agCPRLYs.roa File: 1sm2TQ2cBmWuXNKpz35agCPRLYs.roa (raw, json) Hash identifier: i37fwUoOvTid31PYG5zIXmgiMxWXmjlt2ynmViXAYYY= Subject key identifier: D6:C9:B6:4D:0D:9C:06:65:AE:5C:D2:A9:CF:7E:5A:80:23:D1:2D:8B Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA712C702A78153374D68DFAC68C79D Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/1sm2TQ2cBmWuXNKpz35agCPRLYs.roa Signing time: Fri 02 Jan 2026 12:20:37 +0000 ROA not before: Fri 02 Jan 2026 12:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215541 IP address blocks: 2a0c:9a40:8510::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:12:c7:02:a7:81:53:37:4d:68:df:ac:68:c7:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6c9b64d0d9c0665ae5cd2a9cf7e5a8023d12d8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:eb:ad:60:90:6c:fb:fa:c9:b1:b7:8d:8d:ba: e7:1f:66:40:04:8d:69:1c:58:16:e6:20:7d:d2:c2: c1:2a:e7:f6:ac:1b:10:89:ea:ad:a7:96:71:b9:cc: 3c:44:85:c1:c1:0d:32:f0:b3:1e:5f:14:74:0d:58: a6:c7:3e:21:16:3d:9f:d5:81:16:34:7a:9e:5a:0a: 12:60:ef:41:4e:ed:78:85:a3:f0:a4:f3:da:a1:d2: 74:2a:44:54:ba:2f:93:3e:cc:b6:41:d0:50:0f:43: 77:c0:58:14:68:5f:39:a0:b4:89:32:f5:dd:0a:0e: fc:3c:5d:0c:06:cb:53:67:fc:47:46:b4:7a:54:ad: 2f:a6:2b:fb:1f:9f:2f:be:46:e5:0e:c1:51:5a:1e: 66:09:64:1e:9d:35:34:4e:57:bf:bd:91:f0:1d:52: 94:63:bc:45:0c:fb:14:d6:cb:62:22:9e:e7:49:96: 78:5e:8a:65:2c:d9:4e:8a:2f:7d:3f:02:36:ff:0d: c0:e9:dd:23:41:24:9f:71:dd:5f:d5:50:a4:92:fb: 2e:21:2d:1f:e3:66:68:ad:35:f7:bb:1f:00:9b:ae: b8:1c:c6:d9:0b:c6:72:25:73:6e:b4:19:83:ba:c5: 4b:0a:54:8b:7b:69:ed:49:84:45:aa:a7:4f:82:6e: de:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C9:B6:4D:0D:9C:06:65:AE:5C:D2:A9:CF:7E:5A:80:23:D1:2D:8B X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/1sm2TQ2cBmWuXNKpz35agCPRLYs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8510::/48 Signature Algorithm: sha256WithRSAEncryption 37:4d:81:a9:13:69:d7:39:d4:06:15:da:3b:1a:69:3e:89:20: 06:6f:3a:1a:83:c2:70:38:09:f9:67:23:0c:6c:8f:d6:d0:42: bb:c4:db:aa:ae:e3:16:02:b8:1d:c4:3b:e0:cd:16:5c:cb:91: 71:37:48:5a:d0:7f:5a:dd:bd:cf:5f:60:54:4d:18:61:1e:78: 9e:ee:38:19:15:b6:cb:60:40:8a:9d:5e:f9:57:8b:92:24:da: 72:0a:b5:00:78:35:0d:73:18:78:74:f5:5b:13:3e:6a:f9:a9: f6:69:e7:dd:30:2d:fb:5a:0b:87:0d:04:d0:0f:aa:13:df:69: 9c:ae:76:3e:7e:bc:e5:58:93:30:81:0a:6c:56:c7:e9:e7:7c: 87:ce:3a:79:ec:6a:f8:f3:0c:8b:06:eb:67:18:89:5a:0d:a5: 6c:fe:38:3b:2f:47:24:58:20:2c:50:04:dd:c6:6b:47:be:37: a6:ae:f2:6b:8e:05:c5:b4:93:ee:78:ea:ce:26:ae:9e:2d:df: 1a:6b:d2:46:5c:1b:61:5b:ef:f1:a5:15:3d:f3:43:1f:6f:11: 5b:30:49:e3:39:4c:c6:04:18:02:91:46:28:65:de:6a:aa:11: 4d:0c:6d:2c:c0:17:d9:e8:3f:49:b9:90:67:f9:3f:ba:ad:6a: e8:a3:fa:20 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pxLHAqeBUzdNaN+saMedMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmM5YjY0ZDBkOWMwNjY1YWU1Y2QyYTljZjdlNWE4MDIzZDEyZDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOutYJBs+/rJsbeNjbrnH2ZABI1p HFgW5iB90sLBKuf2rBsQieqtp5Zxucw8RIXBwQ0y8LMeXxR0DVimxz4hFj2f1YEW NHqeWgoSYO9BTu14haPwpPPaodJ0KkRUui+TPsy2QdBQD0N3wFgUaF85oLSJMvXd Cg78PF0MBstTZ/xHRrR6VK0vpiv7H58vvkblDsFRWh5mCWQenTU0Tle/vZHwHVKU Y7xFDPsU1stiIp7nSZZ4XoplLNlOii99PwI2/w3A6d0jQSSfcd1f1VCkkvsuIS0f 42ZorTX3ux8Am664HMbZC8ZyJXNutBmDusVLClSLe2ntSYRFqqdPgm7eCwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNbJtk0NnAZlrlzSqc9+WoAj0S2LMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvMXNtMlRRMmNCbVd1WE5LcHozNWFnQ1BSTFlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIUQ MA0GCSqGSIb3DQEBCwUAA4IBAQA3TYGpE2nXOdQGFdo7Gmk+iSAGbzoag8JwOAn5 ZyMMbI/W0EK7xNuqruMWArgdxDvgzRZcy5FxN0ha0H9a3b3PX2BUTRhhHnie7jgZ FbbLYECKnV75V4uSJNpyCrUAeDUNcxh4dPVbEz5q+an2aefdMC37WguHDQTQD6oT 32mcrnY+frzlWJMwgQpsVsfp53yHzjp57Gr48wyLButnGIlaDaVs/jg7L0ckWCAs UATdxmtHvjemrvJrjgXFtJPueOrOJq6eLd8aa9JGXBthW+/xpRU980MfbxFbMEnj OUzGBBgCkUYoZd5qqhFNDG0swBfZ6D9JuZBn+T+6rWroo/og -----END CERTIFICATE-----Generated at Tue Jan 20 09:04:43 2026 by rpki-client