This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/84qmccWUudMMIte-g95rv86udGA.roa File: 84qmccWUudMMIte-g95rv86udGA.roa (raw, json) Hash identifier: EUIyePHe1K9HniN2J81kjFSB1Fj3IUe+nAAAmNhdo5M= Subject key identifier: F3:8A:A6:71:C5:94:B9:D3:0C:22:D7:BE:83:DE:6B:BF:CE:AE:74:60 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6EB062C3A8311A38F6968C29044B2 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/84qmccWUudMMIte-g95rv86udGA.roa Signing time: Fri 02 Jan 2026 12:20:26 +0000 ROA not before: Fri 02 Jan 2026 12:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205329 IP address blocks: 2a0c:9a40:8440::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:eb:06:2c:3a:83:11:a3:8f:69:68:c2:90:44:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f38aa671c594b9d30c22d7be83de6bbfceae7460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:20:6c:70:cf:aa:0a:67:e8:40:66:f9:d8:c7: e0:99:a2:18:6e:fc:cf:95:6c:23:23:74:97:2f:f1: a2:15:53:f2:e5:d8:ff:47:c9:7f:cb:ac:45:b4:09: c1:35:42:db:84:92:e5:c2:90:97:cd:c8:98:56:07: a6:a0:89:17:52:35:a9:b3:9e:3f:3f:4f:a0:02:f4: 0d:65:4b:b2:c5:42:7c:1f:96:76:f3:b9:37:1e:0e: fa:8a:2a:bd:26:6f:56:cc:b1:29:9a:32:7d:91:51: 2c:f6:f8:07:fb:1b:47:5e:ea:84:07:60:89:d3:92: 81:6c:36:d7:3d:a2:ea:82:f9:2c:f1:f9:0d:c9:d8: e3:ca:d3:44:62:ee:a8:eb:04:0a:1a:80:b9:98:8e: e3:9d:37:75:60:c2:9f:ce:53:11:24:a4:c7:42:2e: eb:fa:70:1b:e5:66:39:a4:3d:7c:08:64:67:1b:cd: fd:c5:4f:a3:fe:15:86:9a:d3:eb:0f:21:af:15:74: b8:f2:60:64:fb:90:20:5b:a8:db:a9:12:76:a6:ee: 63:1f:16:82:4d:2d:50:33:08:37:3a:fb:c3:06:f8: 7b:fe:6e:a6:ca:c2:28:1e:0e:87:ea:98:b4:9a:12: 2a:ba:81:59:8c:65:63:f2:75:7f:a9:37:9d:1d:34: a1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:8A:A6:71:C5:94:B9:D3:0C:22:D7:BE:83:DE:6B:BF:CE:AE:74:60 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/84qmccWUudMMIte-g95rv86udGA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8440::/44 Signature Algorithm: sha256WithRSAEncryption 3f:4e:81:11:0c:80:ff:bb:60:a1:11:50:99:03:2b:fe:5c:79: ea:3a:ca:16:6c:db:72:c4:f9:9d:85:57:10:d3:28:4f:43:08: b2:bc:0a:a7:e7:a2:a0:c4:b4:83:65:df:83:3c:02:9e:d8:66: ac:0f:01:89:03:6f:6c:52:6b:3b:a5:cb:b5:4c:bd:d4:05:c1: a7:ba:c7:a7:08:1d:62:8a:fa:b5:76:af:20:63:b4:3f:9a:2c: 24:68:40:4e:41:e8:eb:87:b6:48:d4:17:d1:f5:85:ce:d1:51: 84:90:f4:89:19:d5:8f:50:81:14:1a:e8:dc:98:00:7a:4b:4e: 2d:e6:4f:ce:65:30:54:bd:93:4f:6d:3d:0c:7e:a8:3d:45:ec: 52:e8:e0:07:ea:55:8f:92:c9:3f:2d:08:11:f5:31:9f:47:bf: 33:13:59:97:07:6c:2d:c8:63:55:ac:d4:11:d7:b6:ca:64:ba: 37:fb:14:da:87:c9:3b:3d:ff:1d:d4:c2:d8:4c:f4:cb:d2:c1: dc:b1:af:57:ac:54:9d:e9:6b:d2:36:1b:b8:df:d7:36:4f:4a: af:a4:0b:c3:1a:7a:47:2b:17:c7:51:2e:04:f9:7f:29:28:34: e2:15:d8:d7:b1:9d:d7:60:b1:d1:db:8a:8b:87:ad:0c:83:4e: b8:10:59:eb -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pusGLDqDEaOPaWjCkESyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzhhYTY3MWM1OTRiOWQzMGMyMmQ3YmU4M2RlNmJiZmNlYWU3NDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyBscM+qCmfoQGb52MfgmaIYbvzP lWwjI3SXL/GiFVPy5dj/R8l/y6xFtAnBNULbhJLlwpCXzciYVgemoIkXUjWps54/ P0+gAvQNZUuyxUJ8H5Z287k3Hg76iiq9Jm9WzLEpmjJ9kVEs9vgH+xtHXuqEB2CJ 05KBbDbXPaLqgvks8fkNydjjytNEYu6o6wQKGoC5mI7jnTd1YMKfzlMRJKTHQi7r +nAb5WY5pD18CGRnG839xU+j/hWGmtPrDyGvFXS48mBk+5AgW6jbqRJ2pu5jHxaC TS1QMwg3OvvDBvh7/m6mysIoHg6H6pi0mhIquoFZjGVj8nV/qTedHTShrwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPOKpnHFlLnTDCLXvoPea7/OrnRgMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvODRxbWNjV1V1ZE1NSXRlLWc5NXJ2ODZ1ZEdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgyaQIRA MA0GCSqGSIb3DQEBCwUAA4IBAQA/ToERDID/u2ChEVCZAyv+XHnqOsoWbNtyxPmd hVcQ0yhPQwiyvAqn56KgxLSDZd+DPAKe2GasDwGJA29sUms7pcu1TL3UBcGnusen CB1iivq1dq8gY7Q/miwkaEBOQejrh7ZI1BfR9YXO0VGEkPSJGdWPUIEUGujcmAB6 S04t5k/OZTBUvZNPbT0Mfqg9RexS6OAH6lWPksk/LQgR9TGfR78zE1mXB2wtyGNV rNQR17bKZLo3+xTah8k7Pf8d1MLYTPTL0sHcsa9XrFSd6WvSNhu439c2T0qvpAvD GnpHKxfHUS4E+X8pKDTiFdjXsZ3XYLHR24qLh60Mg064EFnr -----END CERTIFICATE-----Generated at Tue Jan 20 09:04:37 2026 by rpki-client