This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/35Hw59fsemxzWSm9s8TtNFn-4mM.roa File: 35Hw59fsemxzWSm9s8TtNFn-4mM.roa (raw, json) Hash identifier: musVjDlQDM57/QThUftIu199B9A6BsD8Bw67cjwI2aM= Subject key identifier: DF:91:F0:E7:D7:EC:7A:6C:73:59:29:BD:B3:C4:ED:34:59:FE:E2:63 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6ECB99AA3E7D2F713D1A210A50130 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/35Hw59fsemxzWSm9s8TtNFn-4mM.roa Signing time: Fri 02 Jan 2026 12:20:27 +0000 ROA not before: Fri 02 Jan 2026 12:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205777 IP address blocks: 2a0c:9a40:8870::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:ec:b9:9a:a3:e7:d2:f7:13:d1:a2:10:a5:01:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df91f0e7d7ec7a6c735929bdb3c4ed3459fee263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c9:bb:dc:d8:d3:ec:18:ad:69:f4:41:93:0c: a6:fe:51:30:0d:ad:0d:74:f1:68:9f:54:3d:6a:c1: ba:3b:e0:71:49:ef:b9:87:5b:d3:5b:0c:03:60:75: 25:90:f2:6b:3d:62:f8:60:5c:b0:76:59:93:03:e0: 0e:fa:fa:d3:52:46:b9:c7:20:18:b6:b1:e8:27:db: 35:75:12:7e:39:2a:8f:94:95:9c:47:91:4c:85:f4: 3f:17:2d:ba:37:de:38:be:da:e6:57:66:91:fa:b9: c7:c4:a9:65:64:80:aa:17:2d:c5:b2:d5:31:20:f6: fa:cd:7a:11:15:b1:7a:1e:fb:2d:22:b6:63:ac:a7: da:c7:d9:a0:cf:0a:1f:52:bc:83:b6:00:ac:b7:89: e9:f6:f5:36:6b:b6:3b:87:ee:be:c6:93:9b:16:1b: 80:f2:00:5e:ed:ac:47:f1:c5:54:1c:59:6b:cb:f2: 19:cd:5c:11:a2:2e:e3:18:e9:e0:b5:c6:63:32:01: 63:18:8f:e1:81:8c:db:b7:d3:01:f7:fd:c0:4d:e8: 6f:e9:12:1e:1a:11:87:94:d0:21:d7:ee:e1:c0:ec: 24:a5:02:d0:fd:b9:b0:58:af:8b:0d:5d:27:f5:28: e2:01:99:4b:63:3e:86:85:2b:58:7b:cd:6f:f4:9b: e5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:91:F0:E7:D7:EC:7A:6C:73:59:29:BD:B3:C4:ED:34:59:FE:E2:63 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/35Hw59fsemxzWSm9s8TtNFn-4mM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8870::/48 Signature Algorithm: sha256WithRSAEncryption 7a:2f:cf:89:0c:e9:8a:13:de:80:f3:ec:56:f9:ab:e5:cc:81: 48:6d:32:41:b9:9b:00:46:f8:ed:e6:04:3d:00:89:b3:8c:f2: 6f:a1:aa:9a:ff:fa:a4:46:d0:ae:d0:d2:97:1c:88:57:48:57: d0:a5:16:4e:c1:d7:7f:4d:b1:fd:70:41:6b:af:28:50:c7:f7: c9:2c:a7:ab:87:3c:22:41:ab:2a:91:3f:2f:89:66:f3:c5:ea: 18:19:81:ad:3f:28:40:b1:5e:21:1f:70:8b:bd:28:f8:1c:0d: ca:22:6a:e6:13:14:43:5b:d5:24:d3:02:be:a4:60:23:df:af: 1a:18:68:12:de:5f:e9:55:af:85:54:39:c2:bd:eb:98:e3:37: b4:f7:ae:4c:88:51:91:f8:f3:7a:8e:cc:ec:0a:c2:ff:57:15: 4e:6c:f1:a2:5e:bb:11:c2:18:36:6d:8f:71:5e:b8:d7:be:e5: 8d:6a:8f:c1:ec:98:af:40:54:7e:4d:a1:6b:b1:29:59:4c:97: 13:77:7a:e4:20:6d:6d:83:4f:82:9c:6d:90:33:6b:8f:19:3b: 92:83:bb:41:98:75:fb:e4:7d:e6:50:51:28:02:5f:6d:db:bb: be:51:22:7e:22:7b:a1:69:d4:06:c4:be:00:53:a4:89:94:f7: d5:ab:44:e4 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+puy5mqPn0vcT0aIQpQEwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjkxZjBlN2Q3ZWM3YTZjNzM1OTI5YmRiM2M0ZWQzNDU5ZmVlMjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMm73NjT7BitafRBkwym/lEwDa0N dPFon1Q9asG6O+BxSe+5h1vTWwwDYHUlkPJrPWL4YFywdlmTA+AO+vrTUka5xyAY trHoJ9s1dRJ+OSqPlJWcR5FMhfQ/Fy26N944vtrmV2aR+rnHxKllZICqFy3FstUx IPb6zXoRFbF6HvstIrZjrKfax9mgzwofUryDtgCst4np9vU2a7Y7h+6+xpObFhuA 8gBe7axH8cVUHFlry/IZzVwRoi7jGOngtcZjMgFjGI/hgYzbt9MB9/3ATehv6RIe GhGHlNAh1+7hwOwkpQLQ/bmwWK+LDV0n9SjiAZlLYz6GhStYe81v9Jvl5QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFN+R8OfX7Hpsc1kpvbPE7TRZ/uJjMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvMzVIdzU5ZnNlbXh6V1NtOXM4VHRORm4tNG1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIhw MA0GCSqGSIb3DQEBCwUAA4IBAQB6L8+JDOmKE96A8+xW+avlzIFIbTJBuZsARvjt 5gQ9AImzjPJvoaqa//qkRtCu0NKXHIhXSFfQpRZOwdd/TbH9cEFrryhQx/fJLKer hzwiQasqkT8viWbzxeoYGYGtPyhAsV4hH3CLvSj4HA3KImrmExRDW9Uk0wK+pGAj 368aGGgS3l/pVa+FVDnCveuY4ze0965MiFGR+PN6jszsCsL/VxVObPGiXrsRwhg2 bY9xXrjXvuWNao/B7JivQFR+TaFrsSlZTJcTd3rkIG1tg0+CnG2QM2uPGTuSg7tB mHX75H3mUFEoAl9t27u+USJ+InuhadQGxL4AU6SJlPfVq0Tk -----END CERTIFICATE-----Generated at Tue Jan 20 09:04:43 2026 by rpki-client