This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/F6UI4FFFTAESaQRCO6fq4x5CgbA.roa File: F6UI4FFFTAESaQRCO6fq4x5CgbA.roa (raw, json) Hash identifier: xUZlXKmm9iHEzo1UvZapBuHfxb8QhXF4aFDXceE2yv4= Subject key identifier: 17:A5:08:E0:51:45:4C:01:12:69:04:42:3B:A7:EA:E3:1E:42:81:B0 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA71A0B8B760BD89C1CC24AF249E755 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/F6UI4FFFTAESaQRCO6fq4x5CgbA.roa Signing time: Fri 02 Jan 2026 12:20:38 +0000 ROA not before: Fri 02 Jan 2026 12:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216339 IP address blocks: 2a0c:9a40:8310::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:1a:0b:8b:76:0b:d8:9c:1c:c2:4a:f2:49:e7:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17a508e051454c01126904423ba7eae31e4281b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fa:03:8a:16:e4:ae:be:48:a2:91:94:3e:f7: a5:56:e0:cb:26:53:90:24:a9:52:02:26:2f:34:93: ad:93:ca:0b:41:34:c9:f7:8e:c4:45:18:d4:04:af: 98:0d:4f:0c:fb:e6:df:41:79:79:71:f9:11:fc:b4: 86:db:75:ff:06:fd:ea:ac:77:0a:40:43:09:08:b7: 5d:06:d4:e2:19:ec:38:c9:50:8e:32:69:72:43:ab: 1e:55:23:30:48:a0:02:e8:03:cb:59:ff:c9:bf:b0: 9c:ad:c6:d1:19:42:47:85:07:98:2b:ec:b6:1f:3a: 8d:b1:2d:0c:c4:76:d9:2d:35:bc:3d:38:f4:75:ff: a8:3f:ec:de:7d:5c:f4:fe:b8:4f:ec:e8:73:d2:07: d9:25:d7:93:78:60:08:15:89:65:e4:c4:31:2f:0b: da:24:3e:fc:55:6e:b3:e8:eb:fc:01:76:e3:b7:19: ef:af:bc:f2:8e:ee:3c:22:41:06:66:94:21:35:9c: 11:c2:9f:b2:6e:59:6d:ff:41:7c:a6:94:bb:d2:32: a2:74:9c:b9:73:73:7b:5a:7f:96:d9:03:2f:bf:75: 3a:53:76:57:58:31:ac:2b:cf:af:22:de:c9:38:77: b8:2e:65:c9:88:28:40:6e:76:df:48:da:a3:4e:6e: 6d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A5:08:E0:51:45:4C:01:12:69:04:42:3B:A7:EA:E3:1E:42:81:B0 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/F6UI4FFFTAESaQRCO6fq4x5CgbA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8310::/48 Signature Algorithm: sha256WithRSAEncryption 57:c6:41:32:7f:d1:bf:76:c2:bd:1f:91:47:31:b1:04:a7:d7: fe:c1:06:1c:3b:86:ab:f5:4f:18:a9:ef:39:20:86:26:e2:a0: 8a:a0:5c:9e:f5:e3:1d:f7:a6:82:7a:8c:b0:b2:61:78:b4:4e: 54:67:9e:16:a0:61:ab:f5:21:8a:93:92:83:ca:77:ce:bc:9b: c5:cb:03:a7:42:44:23:52:04:32:80:d3:6b:20:e2:0c:71:94: 87:59:e7:26:ac:7f:9d:86:0f:61:98:d5:61:aa:f4:7c:71:6f: e1:52:4b:9b:8e:f1:e2:18:95:8a:7a:c5:bc:10:5d:3f:16:53: 39:32:25:02:f1:21:44:fa:6a:5c:aa:f2:47:71:60:7e:fb:14: e4:bc:68:44:98:77:74:a1:41:89:0c:c0:49:bb:fb:7b:49:65: 64:f7:95:9d:0c:67:67:e4:fa:d9:b2:e7:c7:9e:76:fa:a7:99: dd:d2:91:78:9a:58:98:c7:13:40:fa:e4:c1:45:84:30:bc:0c: 77:77:41:ac:8b:32:f4:cf:7a:a9:fb:7d:74:c7:f7:10:f5:c1: bd:ac:de:38:1f:93:4b:33:7d:e7:75:48:00:3e:bf:1a:02:13: 9e:f3:a3:67:32:b8:6e:3b:30:42:60:ce:0f:dc:73:58:42:37: 53:7b:de:36 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pxoLi3YL2JwcwkrySedVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxN2E1MDhlMDUxNDU0YzAxMTI2OTA0NDIzYmE3ZWFlMzFlNDI4MWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPoDihbkrr5IopGUPvelVuDLJlOQ JKlSAiYvNJOtk8oLQTTJ947ERRjUBK+YDU8M++bfQXl5cfkR/LSG23X/Bv3qrHcK QEMJCLddBtTiGew4yVCOMmlyQ6seVSMwSKAC6APLWf/Jv7CcrcbRGUJHhQeYK+y2 HzqNsS0MxHbZLTW8PTj0df+oP+zefVz0/rhP7Ohz0gfZJdeTeGAIFYll5MQxLwva JD78VW6z6Ov8AXbjtxnvr7zyju48IkEGZpQhNZwRwp+ybllt/0F8ppS70jKidJy5 c3N7Wn+W2QMvv3U6U3ZXWDGsK8+vIt7JOHe4LmXJiChAbnbfSNqjTm5tPwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBelCOBRRUwBEmkEQjun6uMeQoGwMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvRjZVSTRGRkZUQUVTYVFSQ082ZnE0eDVDZ2JBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIMQ MA0GCSqGSIb3DQEBCwUAA4IBAQBXxkEyf9G/dsK9H5FHMbEEp9f+wQYcO4ar9U8Y qe85IIYm4qCKoFye9eMd96aCeoywsmF4tE5UZ54WoGGr9SGKk5KDynfOvJvFywOn QkQjUgQygNNrIOIMcZSHWecmrH+dhg9hmNVhqvR8cW/hUkubjvHiGJWKesW8EF0/ FlM5MiUC8SFE+mpcqvJHcWB++xTkvGhEmHd0oUGJDMBJu/t7SWVk95WdDGdn5PrZ sufHnnb6p5nd0pF4mliYxxNA+uTBRYQwvAx3d0GsizL0z3qp+310x/cQ9cG9rN44 H5NLM33ndUgAPr8aAhOe86NnMrhuOzBCYM4P3HNYQjdTe942 -----END CERTIFICATE-----Generated at Sat Jan 10 22:06:57 2026 by rpki-client