This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Ic3cpubyCaDWsp-eS0rEqP64j9E.roa File: Ic3cpubyCaDWsp-eS0rEqP64j9E.roa (raw, json) Hash identifier: TbpCY/gXQamTHdxZLSkEVcIC+Z0/30+YCCBWitdV0Jk= Subject key identifier: 21:CD:DC:A6:E6:F2:09:A0:D6:B2:9F:9E:4B:4A:C4:A8:FE:B8:8F:D1 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6C6204F78077F4F75A323A5CA55DB Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Ic3cpubyCaDWsp-eS0rEqP64j9E.roa Signing time: Fri 02 Jan 2026 12:20:17 +0000 ROA not before: Fri 02 Jan 2026 12:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39351 IP address blocks: 2a0c:9a46:a00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:c6:20:4f:78:07:7f:4f:75:a3:23:a5:ca:55:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21cddca6e6f209a0d6b29f9e4b4ac4a8feb88fd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3d:33:c0:25:25:83:a0:fe:68:7f:89:04:63: cb:e5:5e:f2:b3:c5:82:88:aa:ab:aa:80:f6:b6:e6: 4d:bb:fa:c1:66:89:cb:95:0b:63:a1:a8:10:cf:66: db:d2:9f:c6:50:2d:8d:a9:3d:ef:73:5c:0b:06:76: 02:4f:51:ec:1c:3a:6c:e8:d8:a4:4b:a2:90:3e:30: e3:4c:6a:80:9d:99:c9:eb:87:e5:61:3a:c9:9e:e6: 43:d9:8a:50:08:cb:f8:04:60:5f:81:2a:99:1b:27: 8e:45:f1:e7:8c:b8:ac:eb:0f:d4:f4:42:2c:b0:da: 21:fd:42:2b:c2:1d:89:f3:b6:43:c9:49:14:1c:ce: c7:e7:25:93:6f:4c:6d:11:cb:10:f3:86:84:ca:9a: e7:6c:be:db:63:14:c1:e8:ce:c1:8c:3f:6d:d8:f6: 06:8c:b0:a8:c4:6d:48:eb:10:0d:e1:76:b1:d9:3d: ab:66:e3:be:81:f3:a7:94:53:e3:4a:28:08:35:f0: 04:68:3e:7a:1b:05:a1:15:13:bf:22:88:c3:8e:79: 4a:8b:35:13:92:02:7c:a5:df:30:ff:da:0b:b5:6b: 43:1b:4c:65:26:9e:a6:2d:00:9e:d2:54:7f:f1:a2: 78:64:ce:4d:5a:08:4d:b6:d8:9d:3d:7c:d5:d8:50: 33:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:CD:DC:A6:E6:F2:09:A0:D6:B2:9F:9E:4B:4A:C4:A8:FE:B8:8F:D1 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Ic3cpubyCaDWsp-eS0rEqP64j9E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a46:a00::/40 Signature Algorithm: sha256WithRSAEncryption 01:2f:fa:74:8b:58:b7:91:41:b2:42:36:c8:b8:7b:62:8c:97: 19:41:a7:bc:e4:ca:62:90:c4:ac:92:e3:92:80:54:01:b9:69: ee:37:bc:ad:42:7e:a4:18:0d:36:cf:0f:24:b0:46:9a:24:51: d7:35:5b:56:9b:67:69:08:9e:ec:a0:15:de:72:dc:2f:3f:c7: 21:a9:2d:06:07:63:da:fe:3d:a4:ea:18:b8:69:6f:97:60:67: 42:9e:a6:2a:73:94:74:ca:9b:1e:7f:64:ea:be:61:3e:86:3b: a6:f7:8a:d7:6d:8c:fd:72:83:85:c0:4d:99:7d:6f:48:27:ce: 26:4e:b7:38:28:f1:0e:d9:5e:3c:a1:41:b6:21:1a:00:cc:e7: 43:5d:e7:fd:25:0a:2d:c7:3c:92:9a:25:0a:13:50:85:a5:4d: a0:8e:16:ea:f3:a9:a4:a7:37:85:ed:b4:a7:01:ad:63:63:4d: 06:68:c7:c9:56:d0:80:f0:73:9e:7c:6f:f4:df:7a:53:45:be: e1:2f:1e:58:57:11:9d:4b:c7:e8:8d:ef:6c:0d:24:be:09:39: 9b:fc:65:73:58:c4:a9:4c:54:2e:f1:ba:7f:11:89:d3:40:5a: 1b:40:d7:ba:8c:05:cf:1d:1b:7a:1c:a7:d9:30:b3:58:85:a7: 79:ea:05:f6 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+psYgT3gHf091oyOlylXbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMWNkZGNhNmU2ZjIwOWEwZDZiMjlmOWU0YjRhYzRhOGZlYjg4ZmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzz0zwCUlg6D+aH+JBGPL5V7ys8WC iKqrqoD2tuZNu/rBZonLlQtjoagQz2bb0p/GUC2NqT3vc1wLBnYCT1HsHDps6Nik S6KQPjDjTGqAnZnJ64flYTrJnuZD2YpQCMv4BGBfgSqZGyeORfHnjLis6w/U9EIs sNoh/UIrwh2J87ZDyUkUHM7H5yWTb0xtEcsQ84aEyprnbL7bYxTB6M7BjD9t2PYG jLCoxG1I6xAN4Xax2T2rZuO+gfOnlFPjSigINfAEaD56GwWhFRO/IojDjnlKizUT kgJ8pd8w/9oLtWtDG0xlJp6mLQCe0lR/8aJ4ZM5NWghNttidPXzV2FAzqQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFCHN3Kbm8gmg1rKfnktKxKj+uI/RMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvSWMzY3B1YnlDYURXc3AtZVMwckVxUDY0ajlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgyaRgow DQYJKoZIhvcNAQELBQADggEBAAEv+nSLWLeRQbJCNsi4e2KMlxlBp7zkymKQxKyS 45KAVAG5ae43vK1CfqQYDTbPDySwRpokUdc1W1abZ2kInuygFd5y3C8/xyGpLQYH Y9r+PaTqGLhpb5dgZ0KepipzlHTKmx5/ZOq+YT6GO6b3itdtjP1yg4XATZl9b0gn ziZOtzgo8Q7ZXjyhQbYhGgDM50Nd5/0lCi3HPJKaJQoTUIWlTaCOFurzqaSnN4Xt tKcBrWNjTQZox8lW0IDwc558b/TfelNFvuEvHlhXEZ1Lx+iN72wNJL4JOZv8ZXNY xKlMVC7xun8RidNAWhtA17qMBc8dG3ocp9kws1iFp3nqBfY= -----END CERTIFICATE-----Generated at Tue Jan 20 09:03:21 2026 by rpki-client