This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ADLl7A_qIHr4LfUoFABo78QFZ8Y.roa File: ADLl7A_qIHr4LfUoFABo78QFZ8Y.roa (raw, json) Hash identifier: yT77zJrJmFVA5fU8fFsQhelOeBWKT/4iFPjgRm785+E= Subject key identifier: 00:32:E5:EC:0F:EA:20:7A:F8:2D:F5:28:14:00:68:EF:C4:05:67:C6 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6C46D83640524E79313A476C7561A Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ADLl7A_qIHr4LfUoFABo78QFZ8Y.roa Signing time: Fri 02 Jan 2026 12:20:17 +0000 ROA not before: Fri 02 Jan 2026 12:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 2a0c:9a40:8060::/44 maxlen: 44 2a0c:9a40:9c10::/44 maxlen: 48 2a0c:9a40:9c20::/44 maxlen: 48 2a0c:9a40:9c90::/44 maxlen: 48 2a0c:9a40:9ca0::/44 maxlen: 48 2a0e:7d45::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:c4:6d:83:64:05:24:e7:93:13:a4:76:c7:56:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0032e5ec0fea207af82df528140068efc40567c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:36:6b:dc:f9:dd:ea:3d:14:9f:f7:1b:a2:97: f8:9c:fc:9f:8f:d9:d7:16:4f:fa:ec:57:ca:f0:9d: 3e:c1:35:fb:9c:4a:72:10:8e:c1:f5:16:68:f2:80: 0e:ad:7e:71:06:03:51:f3:2a:04:52:83:de:d8:1f: 39:12:65:04:39:1d:1a:23:fb:a8:44:85:36:e9:ae: a4:41:ca:1e:46:dc:25:79:38:ef:33:05:6e:a4:f8: 14:b8:5d:17:b6:79:fa:14:3d:51:5d:4d:34:a0:da: 32:41:b3:53:c8:f6:60:ca:22:21:64:81:e2:f5:4f: 8b:0b:9e:d8:0b:10:ed:83:86:6d:50:8f:b5:c9:a7: 3b:71:cb:e2:d3:b4:2b:61:38:e5:ad:d3:03:52:d3: ea:f5:ac:63:ed:ab:b5:43:95:19:51:ee:41:0b:70: 39:1e:3f:da:01:8d:0a:3e:25:dc:37:a8:dd:df:c9: 75:16:09:b4:c8:f1:cc:1c:7b:22:c8:f0:7d:33:4a: 2a:69:63:61:33:2c:dc:36:f5:31:57:97:9c:a6:2c: 65:b0:fa:12:c1:83:66:c3:f0:cd:88:1b:ed:7e:a6: 84:45:a1:41:f3:b6:54:0d:f4:5f:c8:77:df:d6:39: e4:d6:8d:d7:51:20:fc:cc:2c:2d:9f:fd:8a:9f:03: b9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:32:E5:EC:0F:EA:20:7A:F8:2D:F5:28:14:00:68:EF:C4:05:67:C6 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ADLl7A_qIHr4LfUoFABo78QFZ8Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8060::/44 2a0c:9a40:9c10::-2a0c:9a40:9c2f:ffff:ffff:ffff:ffff:ffff 2a0c:9a40:9c90::-2a0c:9a40:9caf:ffff:ffff:ffff:ffff:ffff 2a0e:7d45::/32 Signature Algorithm: sha256WithRSAEncryption 74:db:d2:3e:24:18:ac:4e:c2:0f:59:6e:c8:31:fe:e2:a0:fc: 72:6c:fe:4c:6b:4b:12:0a:20:3f:2d:4c:fa:e5:94:ca:53:6f: c7:3c:9b:a2:97:7c:1d:93:ec:b5:57:c4:9a:1b:dc:1b:78:08: a1:b6:2e:55:f2:ef:6e:e7:3a:2e:63:1c:c7:95:48:6f:7a:32: 3a:37:b4:09:25:12:ef:20:13:c3:b0:87:d9:0d:fc:53:55:2f: 85:fb:ee:97:8a:07:72:fa:bc:93:4a:1f:4e:eb:b2:d4:2f:b1: 9a:fa:c9:e4:a9:e8:44:63:92:90:c1:03:5b:80:35:85:ad:0a: 55:de:9b:a7:0d:1f:18:5a:5e:ac:b4:c7:ac:32:87:40:a3:c1: ca:bd:ef:98:21:fa:f6:42:17:5e:86:9d:19:fb:c4:ba:dd:09: bd:57:59:d2:18:9f:fe:96:ab:bb:9b:7a:15:48:83:3a:45:d7: 97:d7:de:b7:9c:31:93:45:54:ca:f0:32:b0:83:52:97:b4:bc: 8b:5a:c5:e6:6b:2a:bd:98:01:81:58:62:68:17:8e:98:c9:47: f3:50:d6:08:03:d1:c7:b6:31:f8:6e:5a:6e:f7:9a:b9:2d:39: ff:17:6e:71:12:5d:5d:7e:55:3c:69:6e:38:51:97:94:2e:e4: 17:88:3a:7a -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgISAZt+psRtg2QFJOeTE6R2x1YaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDMyZTVlYzBmZWEyMDdhZjgyZGY1MjgxNDAwNjhlZmM0MDU2N2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6zZr3Pnd6j0Un/cbopf4nPyfj9nX Fk/67FfK8J0+wTX7nEpyEI7B9RZo8oAOrX5xBgNR8yoEUoPe2B85EmUEOR0aI/uo RIU26a6kQcoeRtwleTjvMwVupPgUuF0Xtnn6FD1RXU00oNoyQbNTyPZgyiIhZIHi 9U+LC57YCxDtg4ZtUI+1yac7ccvi07QrYTjlrdMDUtPq9axj7au1Q5UZUe5BC3A5 Hj/aAY0KPiXcN6jd38l1Fgm0yPHMHHsiyPB9M0oqaWNhMyzcNvUxV5ecpixlsPoS wYNmw/DNiBvtfqaERaFB87ZUDfRfyHff1jnk1o3XUSD8zCwtn/2KnwO5SQIDAQAB o4ICOzCCAjcwHQYDVR0OBBYEFAAy5ewP6iB6+C31KBQAaO/EBWfGMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvQURMbDdBX3FJSHI0TGZVb0ZBQm83OFFGWjhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAAjA4AwcEKgyaQIBg MBIDBwQqDJpAnBADBwQqDJpAnCAwEgMHBCoMmkCckAMHBCoMmkCcoAMFACoOfUUw DQYJKoZIhvcNAQELBQADggEBAHTb0j4kGKxOwg9Zbsgx/uKg/HJs/kxrSxIKID8t TPrllMpTb8c8m6KXfB2T7LVXxJob3Bt4CKG2LlXy727nOi5jHMeVSG96Mjo3tAkl Eu8gE8Owh9kN/FNVL4X77peKB3L6vJNKH07rstQvsZr6yeSp6ERjkpDBA1uANYWt ClXem6cNHxhaXqy0x6wyh0Cjwcq975gh+vZCF16GnRn7xLrdCb1XWdIYn/6Wq7ub ehVIgzpF15fX3recMZNFVMrwMrCDUpe0vItaxeZrKr2YAYFYYmgXjpjJR/NQ1ggD 0ce2MfhuWm73mrktOf8XbnESXV1+VTxpbjhRl5Qu5BeIOno= -----END CERTIFICATE-----Generated at Tue Jan 20 09:05:17 2026 by rpki-client