This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Cgl0T9W5J9uPz9RNK9JayGWezWI.roa File: Cgl0T9W5J9uPz9RNK9JayGWezWI.roa (raw, json) Hash identifier: AyibXHCUdKoxpSbqdU9x99V9xmW7yi1LLj+6u1cxwJk= Subject key identifier: 0A:09:74:4F:D5:B9:27:DB:8F:CF:D4:4D:2B:D2:5A:C8:65:9E:CD:62 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6F3DB4C6E61A7416BD531C07CFFDE Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Cgl0T9W5J9uPz9RNK9JayGWezWI.roa Signing time: Fri 02 Jan 2026 12:20:29 +0000 ROA not before: Fri 02 Jan 2026 12:20:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208694 IP address blocks: 2a0c:9a40:8820::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:f3:db:4c:6e:61:a7:41:6b:d5:31:c0:7c:ff:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a09744fd5b927db8fcfd44d2bd25ac8659ecd62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3a:5d:06:12:c7:9b:94:af:91:2b:7b:ed:41: 72:35:d0:32:80:34:f3:52:28:23:55:e4:05:0c:d9: e1:0c:38:38:56:46:f7:da:8b:f0:03:97:0f:a9:3b: af:72:89:b9:d2:2f:b1:c6:9e:4b:3a:5b:e2:0c:85: 15:ca:6c:5b:42:64:a2:c4:01:2b:0c:23:4d:b3:30: c3:b3:33:f7:14:64:e3:17:77:14:cc:a2:48:eb:8f: 24:78:18:a5:2b:8b:30:85:67:ca:cf:f7:57:17:00: 9c:fc:43:e5:e7:4f:5c:9b:41:33:5e:d2:9f:ab:2d: 79:86:f4:27:de:2d:6f:36:29:d6:c2:a8:4c:13:1e: da:ae:ae:9c:38:14:2b:c4:e4:0a:1f:a5:c5:1b:8f: c2:9c:f9:f8:a1:d7:79:1d:67:9b:51:18:06:49:85: aa:31:ec:53:b8:84:e5:c5:45:a0:77:32:8a:fe:27: 1f:dc:79:ed:a1:62:09:42:55:4f:1e:3e:57:59:3f: 37:b7:d6:2c:9f:6f:96:3a:e9:79:33:7a:dc:10:f3: 07:13:e3:95:98:ee:87:92:63:b0:c1:81:d1:2d:c2: 61:6e:29:94:21:4f:7d:34:ba:5f:b3:4b:22:65:01: 4e:a9:f7:1c:51:a9:d9:f5:70:39:06:a1:80:37:77: c5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:09:74:4F:D5:B9:27:DB:8F:CF:D4:4D:2B:D2:5A:C8:65:9E:CD:62 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Cgl0T9W5J9uPz9RNK9JayGWezWI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8820::/48 Signature Algorithm: sha256WithRSAEncryption 7f:23:0f:24:8c:af:bf:43:6f:b1:fb:b7:5b:74:9f:8c:92:94: 75:91:ed:e2:be:ee:5c:b7:b5:2b:ed:cc:64:57:06:3d:26:b0: 84:53:ee:6c:f3:b7:b2:63:ca:51:c3:ed:48:28:48:ca:3c:cf: 2d:88:3c:2c:8a:c9:fb:17:03:2a:d1:72:24:c2:81:7d:b9:17: 23:0b:61:c6:f5:aa:af:1b:65:aa:e7:47:d6:a2:03:9d:06:11: 23:74:49:0e:2e:b2:f1:a9:4f:4b:0e:4a:a0:66:f1:d1:ed:f7: 9f:fa:36:9c:0f:a3:c3:40:8d:e1:c8:13:4c:44:99:9a:e7:45: b3:23:10:0a:57:33:0d:b1:9a:11:3a:1a:8c:c0:8b:da:86:2d: cd:7e:2e:93:1c:f5:2e:11:6c:00:7a:56:31:71:93:1f:4b:74: b6:cf:64:f4:46:c6:cc:0c:45:ec:f2:1b:da:e7:39:e0:c5:7a: f1:10:90:38:51:21:16:ef:37:be:34:5d:1d:2a:43:78:f6:b0: 85:e3:2f:b4:79:4e:a2:16:d5:3b:c9:f9:9c:2a:82:14:72:32: ec:8e:d5:c7:e9:23:8f:17:b0:da:7f:a3:fe:ec:b0:14:24:ec: 9e:5e:ad:ec:c1:11:0c:72:3c:8c:1d:39:7e:8c:59:f5:85:7c: 38:3b:5c:1c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pvPbTG5hp0Fr1THAfP/eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTA5NzQ0ZmQ1YjkyN2RiOGZjZmQ0NGQyYmQyNWFjODY1OWVjZDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzpdBhLHm5SvkSt77UFyNdAygDTz UigjVeQFDNnhDDg4Vkb32ovwA5cPqTuvcom50i+xxp5LOlviDIUVymxbQmSixAEr DCNNszDDszP3FGTjF3cUzKJI648keBilK4swhWfKz/dXFwCc/EPl509cm0EzXtKf qy15hvQn3i1vNinWwqhMEx7arq6cOBQrxOQKH6XFG4/CnPn4odd5HWebURgGSYWq MexTuITlxUWgdzKK/icf3HntoWIJQlVPHj5XWT83t9Ysn2+WOul5M3rcEPMHE+OV mO6HkmOwwYHRLcJhbimUIU99NLpfs0siZQFOqfccUanZ9XA5BqGAN3fF2wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAoJdE/VuSfbj8/UTSvSWshlns1iMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvQ2dsMFQ5VzVKOXVQejlSTks5SmF5R1dleldJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIgg MA0GCSqGSIb3DQEBCwUAA4IBAQB/Iw8kjK+/Q2+x+7dbdJ+MkpR1ke3ivu5ct7Ur 7cxkVwY9JrCEU+5s87eyY8pRw+1IKEjKPM8tiDwsisn7FwMq0XIkwoF9uRcjC2HG 9aqvG2Wq50fWogOdBhEjdEkOLrLxqU9LDkqgZvHR7fef+jacD6PDQI3hyBNMRJma 50WzIxAKVzMNsZoROhqMwIvahi3Nfi6THPUuEWwAelYxcZMfS3S2z2T0RsbMDEXs 8hva5zngxXrxEJA4USEW7ze+NF0dKkN49rCF4y+0eU6iFtU7yfmcKoIUcjLsjtXH 6SOPF7Daf6P+7LAUJOyeXq3swREMcjyMHTl+jFn1hXw4O1wc -----END CERTIFICATE-----Generated at Tue Jan 20 09:06:14 2026 by rpki-client