This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/IV8wpNvg2G4efwLMSkRm-dQJBUE.roa File: IV8wpNvg2G4efwLMSkRm-dQJBUE.roa (raw, json) Hash identifier: tKqtrwI59RWyngF68eBgAjGi3ChdfIkHQ+ZG0v7qlhA= Subject key identifier: 21:5F:30:A4:DB:E0:D8:6E:1E:7F:02:CC:4A:44:66:F9:D4:09:05:41 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6E873672209573B4E21E9B25FF957 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/IV8wpNvg2G4efwLMSkRm-dQJBUE.roa Signing time: Fri 02 Jan 2026 12:20:26 +0000 ROA not before: Fri 02 Jan 2026 12:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204768 IP address blocks: 2a0c:9a40:8add::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:e8:73:67:22:09:57:3b:4e:21:e9:b2:5f:f9:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=215f30a4dbe0d86e1e7f02cc4a4466f9d4090541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:5e:54:6d:c4:ac:90:ef:c4:40:55:15:d0:5f: a0:59:0b:15:db:09:90:f4:a3:d3:4e:51:01:03:63: ce:0f:78:15:85:e2:6e:dc:53:40:07:c4:15:5b:f3: 28:d2:3b:88:06:96:74:67:e8:1c:9d:c5:c3:5c:6f: 27:15:66:e6:7f:24:fe:10:33:fc:95:6e:2a:b2:ce: d0:ac:2b:a0:c1:14:b5:cb:90:f7:a4:dc:a4:fe:de: dc:f4:0b:53:35:75:a4:43:28:5a:6f:74:88:c5:3e: 18:e9:b1:f6:99:3f:ab:0e:ac:2d:40:71:19:89:41: 6a:88:7b:6f:e9:ce:c1:fb:2e:ad:29:3f:84:6e:a3: 52:e6:3f:e5:77:6a:2a:3a:c5:11:94:ef:42:4a:9b: 16:9b:f3:64:c7:01:ef:eb:c7:19:98:97:2b:dc:e5: d7:91:fc:c8:86:36:30:6a:bc:70:dc:9c:01:31:90: 7d:ba:75:43:c7:ec:2d:d9:65:7f:d8:bf:3c:00:88: 11:c1:d2:40:b3:23:2f:82:a5:f3:8c:5b:95:48:02: 77:7d:ef:af:6c:e6:f8:1d:05:a6:8e:62:88:aa:41: 05:32:a4:e2:75:12:3c:23:26:cc:b0:67:48:2e:e4: 91:10:68:7e:f3:c5:b1:07:eb:e2:77:3e:67:8d:a6: 49:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:5F:30:A4:DB:E0:D8:6E:1E:7F:02:CC:4A:44:66:F9:D4:09:05:41 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/IV8wpNvg2G4efwLMSkRm-dQJBUE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8add::/48 Signature Algorithm: sha256WithRSAEncryption 55:18:ba:93:6e:c7:90:4d:e8:9c:ba:0e:c4:9b:6f:db:49:b6: 60:2d:87:b5:6c:86:63:d0:34:d5:5e:98:68:cc:46:f5:bf:f4: 8a:c8:fe:fc:4c:6f:a9:f9:70:bc:81:8e:f1:89:ed:3e:eb:d6: b3:0a:c5:fa:2d:6e:07:17:02:b9:cc:ee:3d:8e:89:6b:38:c2: 59:28:8d:31:d8:22:36:a6:c2:b0:45:e8:64:a1:d1:b7:71:21: 3b:a4:c3:9a:2d:46:28:c5:10:e3:d4:91:16:67:7e:b5:b7:ac: ba:08:be:8c:b2:67:41:1d:a4:65:bd:5d:92:89:7c:aa:67:6e: 21:af:46:e5:f1:ff:d0:ac:bf:b2:25:47:35:f9:a0:c1:86:5e: 58:3d:57:44:ea:a6:14:fb:fb:26:1e:53:61:2e:67:20:15:0c: a2:87:50:bb:54:34:83:5f:f7:db:f4:27:7a:29:a8:cc:c7:e8: 29:67:0d:ae:9d:30:fe:b8:28:e1:46:26:4a:e8:3e:06:85:0b: 2c:b6:89:62:d2:b2:86:95:07:7f:ae:ca:59:1f:d2:ec:6e:b6: ae:bb:94:6e:e3:a6:8e:21:1e:ba:a5:6e:e6:6a:22:28:25:c9: 6e:df:0c:f0:45:5d:75:aa:df:fd:f7:2e:a2:33:9d:63:43:e0: c2:9c:d8:18 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+puhzZyIJVztOIemyX/lXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTVmMzBhNGRiZTBkODZlMWU3ZjAyY2M0YTQ0NjZmOWQ0MDkwNTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4F5UbcSskO/EQFUV0F+gWQsV2wmQ 9KPTTlEBA2POD3gVheJu3FNAB8QVW/Mo0juIBpZ0Z+gcncXDXG8nFWbmfyT+EDP8 lW4qss7QrCugwRS1y5D3pNyk/t7c9AtTNXWkQyhab3SIxT4Y6bH2mT+rDqwtQHEZ iUFqiHtv6c7B+y6tKT+EbqNS5j/ld2oqOsURlO9CSpsWm/NkxwHv68cZmJcr3OXX kfzIhjYwarxw3JwBMZB9unVDx+wt2WV/2L88AIgRwdJAsyMvgqXzjFuVSAJ3fe+v bOb4HQWmjmKIqkEFMqTidRI8IybMsGdILuSREGh+88WxB+vidz5njaZJpQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCFfMKTb4NhuHn8CzEpEZvnUCQVBMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvSVY4d3BOdmcyRzRlZndMTVNrUm0tZFFKQlVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIrd MA0GCSqGSIb3DQEBCwUAA4IBAQBVGLqTbseQTeicug7Em2/bSbZgLYe1bIZj0DTV XphozEb1v/SKyP78TG+p+XC8gY7xie0+69azCsX6LW4HFwK5zO49jolrOMJZKI0x 2CI2psKwRehkodG3cSE7pMOaLUYoxRDj1JEWZ361t6y6CL6MsmdBHaRlvV2SiXyq Z24hr0bl8f/QrL+yJUc1+aDBhl5YPVdE6qYU+/smHlNhLmcgFQyih1C7VDSDX/fb 9Cd6KajMx+gpZw2unTD+uCjhRiZK6D4GhQsstoli0rKGlQd/rspZH9Lsbrauu5Ru 46aOIR66pW7maiIoJclu3wzwRV11qt/99y6iM51jQ+DCnNgY -----END CERTIFICATE-----Generated at Tue Jan 20 09:03:27 2026 by rpki-client