This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/64bS8hYqRhTe1YsKWKoTyQwVhkU.roa File: 64bS8hYqRhTe1YsKWKoTyQwVhkU.roa (raw, json) Hash identifier: QdvgoAUFbh1rnnJRW3jDjDcSrTqdbtVuGCfur3p2ZaY= Subject key identifier: EB:86:D2:F2:16:2A:46:14:DE:D5:8B:0A:58:AA:13:C9:0C:15:86:45 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6FA27520921BB4145DA06E01C05CA Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/64bS8hYqRhTe1YsKWKoTyQwVhkU.roa Signing time: Fri 02 Jan 2026 12:20:30 +0000 ROA not before: Fri 02 Jan 2026 12:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210445 IP address blocks: 2a0c:9a40:821a::/48 maxlen: 48 2a0c:9a40:9300::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:fa:27:52:09:21:bb:41:45:da:06:e0:1c:05:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb86d2f2162a4614ded58b0a58aa13c90c158645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1c:b2:ab:06:4d:56:8a:03:b4:24:9f:83:bb: 9a:03:f1:f8:d7:8d:be:29:69:da:b2:11:9e:43:05: 6a:ff:9e:5a:47:c1:74:19:98:96:17:2f:4c:8f:ce: 75:7e:a5:05:5f:66:a4:01:8d:6f:71:c6:cf:9a:c3: 96:19:6c:75:36:7e:da:ec:62:d8:5b:15:91:32:39: e7:2a:59:82:3b:7d:57:d5:ae:d8:04:ae:b3:a9:2e: fb:08:17:9c:28:8d:d0:ac:3b:cd:ce:04:27:42:14: ee:a7:34:6f:83:ed:9f:9e:01:02:91:7d:1d:4a:89: ef:8f:33:ef:ef:cd:6b:72:4c:2f:7d:ca:6c:1d:6c: a3:a7:5e:d0:41:94:ef:ca:f0:d1:9b:df:7c:5e:04: f7:63:c7:c8:de:a9:de:16:cf:51:52:e5:55:6f:f5: d7:30:f7:70:a2:63:db:16:51:5c:24:1d:22:b2:f2: 25:db:9f:39:62:71:dc:ee:b5:63:40:9f:8c:cf:f2: 43:01:37:98:4e:6d:7e:60:e1:b1:06:53:7e:74:ff: 46:8f:26:a1:d8:44:f1:4d:6d:ce:7c:7d:fa:1b:35: 88:8b:fc:1a:d4:e8:34:bc:89:2c:92:8e:41:83:eb: 97:a3:a3:02:0b:6b:eb:f0:09:32:9e:87:92:5b:61: 54:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:86:D2:F2:16:2A:46:14:DE:D5:8B:0A:58:AA:13:C9:0C:15:86:45 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/64bS8hYqRhTe1YsKWKoTyQwVhkU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:821a::/48 2a0c:9a40:9300::/40 Signature Algorithm: sha256WithRSAEncryption 00:18:d1:d3:26:ea:dc:a6:e5:ea:f7:50:ac:a4:6e:07:85:15: c6:e0:e4:6f:6a:1a:bc:71:4a:cb:3f:e8:ab:38:e6:1a:d3:cf: 47:b7:86:2a:bf:5d:0d:f2:42:db:c7:8d:9a:38:c2:2b:9b:fa: 24:d1:f2:f6:54:ec:37:d3:54:ee:7e:19:5f:bb:e0:28:f5:38: ed:af:41:6a:7b:5f:56:40:22:73:7e:5d:6e:8e:f5:83:26:07: 7b:87:4f:0f:fb:6e:9e:c3:10:ea:14:f4:6c:85:5d:8d:89:d9: 45:e2:5e:b1:5f:48:26:e5:28:95:ad:bc:eb:56:3e:da:5f:86: 5c:8f:ee:22:39:44:2a:d2:be:20:ed:5c:88:c6:c1:c9:f7:71: 18:ee:9c:7d:07:c0:11:70:9e:0b:2f:cd:00:0f:fe:94:d3:1d: d7:2f:36:02:ee:c8:ab:d9:42:e5:9a:7c:2f:55:3c:2a:7e:82: 66:b7:fb:cc:ef:82:44:dc:0c:30:ba:5a:a8:78:7a:fb:6a:99: 6a:28:7a:9e:20:fd:ca:e8:16:a7:17:0e:50:73:4e:22:6b:06: 2c:e7:b9:e2:55:e5:6c:47:98:22:5c:86:c9:55:79:fc:fd:9a: 0b:18:62:0b:67:57:28:03:55:c0:e6:e9:3c:a2:77:bd:62:f8: 8d:49:21:3a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgISAZt+pvonUgkhu0FF2gbgHAXKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjg2ZDJmMjE2MmE0NjE0ZGVkNThiMGE1OGFhMTNjOTBjMTU4NjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhyyqwZNVooDtCSfg7uaA/H4142+ KWnashGeQwVq/55aR8F0GZiWFy9Mj851fqUFX2akAY1vccbPmsOWGWx1Nn7a7GLY WxWRMjnnKlmCO31X1a7YBK6zqS77CBecKI3QrDvNzgQnQhTupzRvg+2fngECkX0d SonvjzPv781rckwvfcpsHWyjp17QQZTvyvDRm998XgT3Y8fI3qneFs9RUuVVb/XX MPdwomPbFlFcJB0isvIl2585YnHc7rVjQJ+Mz/JDATeYTm1+YOGxBlN+dP9Gjyah 2ETxTW3OfH36GzWIi/wa1Og0vIksko5Bg+uXo6MCC2vr8AkynoeSW2FU/QIDAQAB o4ICFDCCAhAwHQYDVR0OBBYEFOuG0vIWKkYU3tWLCliqE8kMFYZFMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvNjRiUzhoWXFSaFRlMVlzS1dLb1R5UXdWaGtVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcAKgyaQIIa AwYAKgyaQJMwDQYJKoZIhvcNAQELBQADggEBAAAY0dMm6tym5er3UKykbgeFFcbg 5G9qGrxxSss/6Ks45hrTz0e3hiq/XQ3yQtvHjZo4wiub+iTR8vZU7DfTVO5+GV+7 4Cj1OO2vQWp7X1ZAInN+XW6O9YMmB3uHTw/7bp7DEOoU9GyFXY2J2UXiXrFfSCbl KJWtvOtWPtpfhlyP7iI5RCrSviDtXIjGwcn3cRjunH0HwBFwngsvzQAP/pTTHdcv NgLuyKvZQuWafC9VPCp+gma3+8zvgkTcDDC6Wqh4evtqmWooep4g/croFqcXDlBz TiJrBiznueJV5WxHmCJchslVefz9mgsYYgtnVygDVcDm6Tyid71i+I1JITo= -----END CERTIFICATE-----Generated at Tue Jan 20 09:06:50 2026 by rpki-client