This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/9gkLjLsUoFQwTLqRerm5_b6VdZY.roa File: 9gkLjLsUoFQwTLqRerm5_b6VdZY.roa (raw, json) Hash identifier: mey8Ww/INWowAC1LiYCuV6jw4xyi7YkPGfCOUH26WRM= Subject key identifier: F6:09:0B:8C:BB:14:A0:54:30:4C:BA:91:7A:B9:B9:FD:BE:95:75:96 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6EF682E729B92A88B89F732F74AE1 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/9gkLjLsUoFQwTLqRerm5_b6VdZY.roa Signing time: Fri 02 Jan 2026 12:20:28 +0000 ROA not before: Fri 02 Jan 2026 12:20:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207571 IP address blocks: 2a0c:9a40:8fe0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:ef:68:2e:72:9b:92:a8:8b:89:f7:32:f7:4a:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6090b8cbb14a054304cba917ab9b9fdbe957596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:34:43:ff:cf:9d:d6:fe:08:ae:f1:07:0c:55: cf:e3:58:fb:6e:e2:c9:dc:bf:b7:a6:f9:4b:b1:4c: 8c:86:25:44:49:26:69:7b:f9:52:92:ee:b5:3e:68: 29:dc:95:29:7e:cf:8d:81:bc:de:2c:33:76:7f:e5: ad:2a:f4:82:6b:82:b3:b9:a2:da:64:54:42:f2:69: 3c:ad:84:bb:39:1f:6d:f9:52:4b:3f:fa:fa:f4:94: 8d:84:72:14:6f:44:12:b7:6b:b2:f3:8e:dc:cb:77: d8:6b:48:b4:d2:1f:50:92:b5:cc:af:0e:b1:34:4c: 24:fe:5d:68:75:c0:6a:f3:ab:fc:49:94:00:13:9c: 94:69:ad:d4:11:6d:0b:e4:6d:08:12:8a:12:69:90: 2a:a1:eb:d5:86:53:94:f5:33:f0:e5:f9:3c:e6:13: 5a:af:c8:f5:98:53:31:58:2c:28:13:f8:36:e6:6a: 3d:0c:7b:fe:24:0c:2f:48:f3:6c:b3:eb:9a:02:f7: 32:62:9d:8e:1e:a8:5e:df:67:40:b1:36:3f:fa:19: 12:0f:c8:6a:1d:ad:c0:28:bc:07:38:6d:23:90:71: 84:6e:0c:19:e3:29:6c:2c:0c:93:9e:e1:18:1c:d0: f3:40:8f:0b:58:b3:d7:af:55:a3:11:a4:63:3d:f5: a1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:09:0B:8C:BB:14:A0:54:30:4C:BA:91:7A:B9:B9:FD:BE:95:75:96 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/9gkLjLsUoFQwTLqRerm5_b6VdZY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8fe0::/48 Signature Algorithm: sha256WithRSAEncryption cd:d3:db:fd:d1:d1:8b:dd:1d:29:82:db:58:92:b6:3c:55:fe: 31:d7:ae:6d:02:75:2c:e7:5a:1b:e8:70:57:3f:dc:88:f5:00: 5a:3c:7f:b9:29:72:c5:ef:0f:68:40:3b:f4:da:15:56:dc:92: 25:65:4d:53:09:3c:43:a1:d4:36:de:74:82:94:90:9d:3d:f4: c3:c2:64:8e:ba:0d:76:81:be:bc:cb:97:86:58:3b:f9:5c:41: f5:42:3d:27:48:d6:0d:a4:30:73:8c:68:43:af:c9:59:ff:18: d9:51:af:5a:0d:9b:20:06:be:e6:e2:20:5e:2d:6c:b8:6f:1f: f8:93:6a:7d:e6:fa:d3:4f:18:ef:3c:7f:a8:23:f3:3e:ac:e8: f1:79:d9:23:ae:52:47:60:71:de:16:cd:46:db:05:74:88:21: 29:b1:4e:33:52:d0:37:1a:33:f3:52:e3:56:28:68:6b:10:ce: 54:e1:f6:43:5f:74:1e:38:5d:6e:2f:3f:7c:b4:fb:36:51:a1: ca:ca:1b:78:da:85:d3:b0:82:04:cb:a0:bb:c0:ae:68:7f:6a: 9c:9f:3c:4e:d8:12:0c:71:01:25:d8:4d:46:89:00:1f:59:22: 27:a3:40:5b:b5:2e:c0:ca:12:a2:18:01:5d:0c:4d:1f:a9:2e: d1:9d:11:26 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pu9oLnKbkqiLifcy90rhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjA5MGI4Y2JiMTRhMDU0MzA0Y2JhOTE3YWI5YjlmZGJlOTU3NTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DRD/8+d1v4IrvEHDFXP41j7buLJ 3L+3pvlLsUyMhiVESSZpe/lSku61Pmgp3JUpfs+NgbzeLDN2f+WtKvSCa4KzuaLa ZFRC8mk8rYS7OR9t+VJLP/r69JSNhHIUb0QSt2uy847cy3fYa0i00h9QkrXMrw6x NEwk/l1odcBq86v8SZQAE5yUaa3UEW0L5G0IEooSaZAqoevVhlOU9TPw5fk85hNa r8j1mFMxWCwoE/g25mo9DHv+JAwvSPNss+uaAvcyYp2OHqhe32dAsTY/+hkSD8hq Ha3AKLwHOG0jkHGEbgwZ4ylsLAyTnuEYHNDzQI8LWLPXr1WjEaRjPfWhXwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPYJC4y7FKBUMEy6kXq5uf2+lXWWMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvOWdrTGpMc1VvRlF3VExxUmVybTVfYjZWZFpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQI/g MA0GCSqGSIb3DQEBCwUAA4IBAQDN09v90dGL3R0pgttYkrY8Vf4x165tAnUs51ob 6HBXP9yI9QBaPH+5KXLF7w9oQDv02hVW3JIlZU1TCTxDodQ23nSClJCdPfTDwmSO ug12gb68y5eGWDv5XEH1Qj0nSNYNpDBzjGhDr8lZ/xjZUa9aDZsgBr7m4iBeLWy4 bx/4k2p95vrTTxjvPH+oI/M+rOjxedkjrlJHYHHeFs1G2wV0iCEpsU4zUtA3GjPz UuNWKGhrEM5U4fZDX3QeOF1uLz98tPs2UaHKyht42oXTsIIEy6C7wK5of2qcnzxO 2BIMcQEl2E1GiQAfWSIno0BbtS7AyhKiGAFdDE0fqS7RnREm -----END CERTIFICATE-----Generated at Tue Jan 20 09:04:43 2026 by rpki-client