This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/8lW9QpM0X6-zX_A86p6lNIoKiAg.roa File: 8lW9QpM0X6-zX_A86p6lNIoKiAg.roa (raw, json) Hash identifier: ouktIrJ7WGFiy90vZojo8gb4ZT5JMo2q1WyfwBL/wP8= Subject key identifier: F2:55:BD:42:93:34:5F:AF:B3:5F:F0:3C:EA:9E:A5:34:8A:0A:88:08 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6D799C37ECF9EFEE8C723FDD93354 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/8lW9QpM0X6-zX_A86p6lNIoKiAg.roa Signing time: Fri 02 Jan 2026 12:20:21 +0000 ROA not before: Fri 02 Jan 2026 12:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199109 IP address blocks: 2a0c:9a40:8320::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:d7:99:c3:7e:cf:9e:fe:e8:c7:23:fd:d9:33:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f255bd4293345fafb35ff03cea9ea5348a0a8808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:46:52:78:36:81:74:bb:11:3a:36:75:65:54: a9:32:2e:68:e6:10:54:ba:59:be:ea:9a:14:0b:30: 02:12:a9:8e:2a:59:8d:a7:85:c9:d1:35:19:3e:71: a2:36:26:f6:b2:1d:2b:78:07:47:1b:c7:78:68:a6: 66:7f:b1:22:8a:e0:2c:07:02:11:8a:4c:a8:28:8b: 3d:65:6b:b9:e1:22:6a:8e:2c:7d:3e:2b:65:fc:de: 2f:20:5b:3d:0b:5e:f4:a7:b9:d0:96:d2:80:7b:63: af:44:ec:b2:c3:cd:bd:66:0a:49:7a:83:27:77:5b: b4:7f:fb:4e:be:84:c3:db:37:50:1a:45:17:1f:6a: 62:1e:56:21:be:5d:f1:a9:5b:84:d4:73:37:1a:25: 0c:09:3d:d0:f8:0c:41:12:87:87:7f:9c:97:e3:0d: 61:4f:29:0b:72:a2:56:a7:53:04:4f:af:ac:da:9e: f9:bb:8b:84:df:89:b6:b0:c0:71:e5:f0:6f:ce:44: 37:19:e4:d9:f4:17:f8:92:62:85:b0:73:3d:1b:d6: 74:bc:08:1e:3f:38:83:58:61:1c:f2:f7:dd:8d:1c: d1:58:ec:a5:e6:25:bb:6d:46:df:d3:65:01:1f:4e: 8f:94:2c:6f:ad:31:52:c9:43:35:f6:2e:c3:97:dc: 4d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:55:BD:42:93:34:5F:AF:B3:5F:F0:3C:EA:9E:A5:34:8A:0A:88:08 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/8lW9QpM0X6-zX_A86p6lNIoKiAg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8320::/44 Signature Algorithm: sha256WithRSAEncryption 45:0e:ec:f1:4f:4b:0d:7f:ff:59:2a:8d:c7:37:8a:b7:2b:33: ce:83:f4:cb:57:2f:e8:38:9b:fe:8b:c4:06:57:df:7a:fa:43: 1b:1f:79:a9:5c:c1:dc:93:25:f9:31:ad:3d:04:5e:50:14:93: 7f:72:7a:91:c9:e7:74:92:dd:75:63:e2:13:17:83:9b:95:23: 51:e7:8c:0a:6c:ce:7c:b6:31:f5:13:c7:e9:aa:e6:f0:d1:ab: 58:7e:86:57:30:e5:53:2a:e5:c4:a4:ca:fa:13:c9:b2:f1:ec: 11:84:2d:c5:2d:05:53:01:66:8d:3c:40:55:90:69:52:b7:a3: 72:04:63:96:3a:66:d0:20:f2:85:4a:1a:cc:22:45:be:7b:49: 46:12:be:27:3d:3e:c4:ba:c0:1c:54:67:b9:db:8e:43:2c:ea: ef:5b:91:49:26:ef:e6:88:ec:88:3a:cb:2e:8d:5f:a3:b9:23: 78:ef:ad:8e:11:f1:42:59:d7:eb:93:3b:29:9d:18:f1:24:c1: 6f:91:89:24:50:21:0e:79:6f:4e:6e:7f:c0:fb:8f:0f:9f:72: 36:b5:aa:18:05:ca:bf:9a:60:f6:51:4c:b3:a7:ad:5f:ca:b7: 1e:3f:95:50:9c:e2:a3:6a:06:7e:67:c6:ab:e0:2c:0c:26:5d: 67:40:fb:9e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pteZw37Pnv7oxyP92TNUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjU1YmQ0MjkzMzQ1ZmFmYjM1ZmYwM2NlYTllYTUzNDhhMGE4ODA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0ZSeDaBdLsROjZ1ZVSpMi5o5hBU ulm+6poUCzACEqmOKlmNp4XJ0TUZPnGiNib2sh0reAdHG8d4aKZmf7EiiuAsBwIR ikyoKIs9ZWu54SJqjix9Pitl/N4vIFs9C170p7nQltKAe2OvROyyw829ZgpJeoMn d1u0f/tOvoTD2zdQGkUXH2piHlYhvl3xqVuE1HM3GiUMCT3Q+AxBEoeHf5yX4w1h TykLcqJWp1MET6+s2p75u4uE34m2sMBx5fBvzkQ3GeTZ9Bf4kmKFsHM9G9Z0vAge PziDWGEc8vfdjRzRWOyl5iW7bUbf02UBH06PlCxvrTFSyUM19i7Dl9xN1QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPJVvUKTNF+vs1/wPOqepTSKCogIMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvOGxXOVFwTTBYNi16WF9BODZwNmxOSW9LaUFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgyaQIMg MA0GCSqGSIb3DQEBCwUAA4IBAQBFDuzxT0sNf/9ZKo3HN4q3KzPOg/TLVy/oOJv+ i8QGV996+kMbH3mpXMHckyX5Ma09BF5QFJN/cnqRyed0kt11Y+ITF4OblSNR54wK bM58tjH1E8fpqubw0atYfoZXMOVTKuXEpMr6E8my8ewRhC3FLQVTAWaNPEBVkGlS t6NyBGOWOmbQIPKFShrMIkW+e0lGEr4nPT7EusAcVGe5245DLOrvW5FJJu/miOyI OssujV+juSN4762OEfFCWdfrkzspnRjxJMFvkYkkUCEOeW9Obn/A+48Pn3I2taoY Bcq/mmD2UUyzp61fyrceP5VQnOKjagZ+Z8ar4CwMJl1nQPue -----END CERTIFICATE-----Generated at Tue Jan 20 00:29:38 2026 by rpki-client