This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Au2K9WMedWcMseHb2MW6hU8GrgY.roa File: Au2K9WMedWcMseHb2MW6hU8GrgY.roa (raw, json) Hash identifier: uPigoox/eaFwY6f9n1smin4XDLoGbx0yPIHll4ltd0I= Subject key identifier: 02:ED:8A:F5:63:1E:75:67:0C:B1:E1:DB:D8:C5:BA:85:4F:06:AE:06 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA7020D548FE9FBD4FABA993E5CD653 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Au2K9WMedWcMseHb2MW6hU8GrgY.roa Signing time: Fri 02 Jan 2026 12:20:32 +0000 ROA not before: Fri 02 Jan 2026 12:20:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213163 IP address blocks: 2a0c:9a40:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:02:0d:54:8f:e9:fb:d4:fa:ba:99:3e:5c:d6:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=02ed8af5631e75670cb1e1dbd8c5ba854f06ae06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5c:b8:b2:af:71:cb:60:0c:fc:51:95:ee:64: 08:d5:90:6e:e4:62:05:e1:e4:84:18:37:0f:04:32: d8:3b:39:42:bc:ee:55:89:02:88:12:d4:45:6c:71: c8:b6:4e:0f:63:1c:72:16:35:45:00:e9:fd:d5:5d: d3:e8:9b:cd:8a:34:7d:39:65:27:9b:b5:ab:06:e1: f7:34:a6:f3:1a:28:9a:24:29:a0:72:47:65:90:07: 13:cb:9b:a3:f6:d1:f1:73:8b:67:9e:0a:dc:02:c9: 65:24:5f:0b:62:44:08:e5:24:2c:63:af:2c:d4:48: 08:c2:f3:96:c0:b6:d9:d8:4a:6a:9c:fc:01:96:ac: 09:6c:18:89:26:5b:2c:b7:38:e3:76:58:5d:f8:49: fb:b4:2d:cc:54:c7:2c:4c:13:f8:4f:49:3d:7c:a4: c0:ed:19:76:f3:9f:24:83:8c:a1:88:c3:c1:e0:66: db:db:86:f4:bd:2f:5c:23:1d:34:36:eb:7f:a2:6b: fc:f8:d6:4d:ed:e3:8c:e5:81:ae:60:20:33:13:b1: 74:90:9f:bb:f2:0c:43:70:83:8a:f2:5a:43:58:6d: c1:b4:89:b1:b3:e4:61:fe:f9:72:70:b6:ed:0e:17: 04:03:52:2a:43:de:41:0b:2c:e2:4d:c7:76:71:fe: ff:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:ED:8A:F5:63:1E:75:67:0C:B1:E1:DB:D8:C5:BA:85:4F:06:AE:06 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Au2K9WMedWcMseHb2MW6hU8GrgY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:b00b::/48 Signature Algorithm: sha256WithRSAEncryption b8:88:68:a1:dd:bd:d4:7e:89:00:f3:7e:8b:8d:20:36:bc:8e: a8:ca:89:fa:7e:7e:fa:6a:18:d2:00:30:7f:8a:98:86:94:9b: 36:30:cf:bd:72:e0:a1:81:e9:f3:a7:98:e5:c4:fa:5b:09:08: 5c:30:0d:bb:8c:cc:52:1c:52:71:fc:eb:e9:7d:9f:2a:6e:53: 8b:02:87:ca:47:ca:55:ed:38:79:8b:20:2b:69:4c:21:dc:73: bf:4a:3c:6c:dc:91:0f:ef:f7:ab:65:f5:0e:0b:52:b6:f3:40: 44:b2:d4:10:10:b5:1e:50:2d:de:f6:98:78:a0:56:25:5d:e1: 43:08:69:83:8e:66:df:c4:03:0d:de:b1:40:09:aa:e7:07:d6: 51:f7:b2:af:e1:a9:c9:70:fc:91:a8:af:37:c9:cc:85:56:70: 5d:a0:76:69:70:07:51:e8:c3:b3:a9:c9:6d:c1:61:85:63:e2: 18:bf:5a:63:ee:74:c8:34:95:4f:db:71:25:69:c8:65:38:ad: db:60:36:0e:67:b3:2a:f5:17:e1:d4:cc:e0:e3:25:43:36:1d: 76:b1:4e:61:4b:50:56:af:51:b0:8d:43:bf:15:6c:5e:b8:fe: d4:cb:10:3b:c7:85:da:38:f6:89:e9:5b:60:0d:8a:21:68:26: ac:27:2c:e9 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pwINVI/p+9T6upk+XNZTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMmVkOGFmNTYzMWU3NTY3MGNiMWUxZGJkOGM1YmE4NTRmMDZhZTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVy4sq9xy2AM/FGV7mQI1ZBu5GIF 4eSEGDcPBDLYOzlCvO5ViQKIEtRFbHHItk4PYxxyFjVFAOn91V3T6JvNijR9OWUn m7WrBuH3NKbzGiiaJCmgckdlkAcTy5uj9tHxc4tnngrcAsllJF8LYkQI5SQsY68s 1EgIwvOWwLbZ2EpqnPwBlqwJbBiJJlsstzjjdlhd+En7tC3MVMcsTBP4T0k9fKTA 7Rl2858kg4yhiMPB4Gbb24b0vS9cIx00Nut/omv8+NZN7eOM5YGuYCAzE7F0kJ+7 8gxDcIOK8lpDWG3BtImxs+Rh/vlycLbtDhcEA1IqQ95BCyziTcd2cf7/hQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFALtivVjHnVnDLHh29jFuoVPBq4GMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvQXUySzlXTWVkV2NNc2VIYjJNVzZoVThHcmdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQLAL MA0GCSqGSIb3DQEBCwUAA4IBAQC4iGih3b3UfokA836LjSA2vI6oyon6fn76ahjS ADB/ipiGlJs2MM+9cuChgenzp5jlxPpbCQhcMA27jMxSHFJx/OvpfZ8qblOLAofK R8pV7Th5iyAraUwh3HO/Sjxs3JEP7/erZfUOC1K280BEstQQELUeUC3e9ph4oFYl XeFDCGmDjmbfxAMN3rFACarnB9ZR97Kv4anJcPyRqK83ycyFVnBdoHZpcAdR6MOz qcltwWGFY+IYv1pj7nTINJVP23ElachlOK3bYDYOZ7Mq9Rfh1Mzg4yVDNh12sU5h S1BWr1GwjUO/FWxeuP7UyxA7x4XaOPaJ6VtgDYohaCasJyzp -----END CERTIFICATE-----Generated at Tue Jan 20 09:05:54 2026 by rpki-client