This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/N34iQayOP8toUrqQN37c7EemMz4.roa File: N34iQayOP8toUrqQN37c7EemMz4.roa (raw, json) Hash identifier: SdQWfUfUPWce45b8C2AIXRRzJDJ836mwEIefIr9ejPQ= Subject key identifier: 37:7E:22:41:AC:8E:3F:CB:68:52:BA:90:37:7E:DC:EC:47:A6:33:3E Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA7062C952DA8019BC2E11C0373EFFB Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/N34iQayOP8toUrqQN37c7EemMz4.roa Signing time: Fri 02 Jan 2026 12:20:33 +0000 ROA not before: Fri 02 Jan 2026 12:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213617 IP address blocks: 2a0c:9a40:8720::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:06:2c:95:2d:a8:01:9b:c2:e1:1c:03:73:ef:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=377e2241ac8e3fcb6852ba90377edcec47a6333e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:da:00:2c:05:63:a6:b7:98:42:37:ae:38:e0: 34:7e:0e:03:74:f4:bb:49:d1:71:d9:75:57:9d:3d: 31:d0:81:eb:17:7d:e1:5d:06:c9:af:f9:e1:ac:cd: f4:51:67:05:e0:e9:74:5a:a8:8f:15:94:da:2e:f6: e7:77:5e:ef:f2:de:42:40:67:43:13:86:83:f9:d3: 1d:cd:6b:45:d2:64:55:6f:9f:eb:ff:9b:04:b5:60: 41:d3:db:c7:8f:dc:ca:26:3d:4b:f9:6e:75:d5:19: 44:2d:48:c5:df:a2:41:a0:22:c9:81:a0:40:d1:56: 93:6b:fd:ed:6d:a3:21:bd:27:a6:bc:4f:88:b7:e9: b5:f4:63:a0:8e:79:5d:48:3f:ed:10:60:c1:a3:b2: ab:56:a0:9e:90:8a:c5:9f:d2:44:56:a6:09:78:fc: 95:7f:55:cb:c2:59:26:c6:b1:93:71:28:9d:d6:b1: 9e:95:c9:ab:b7:d3:99:4d:dd:5f:3c:5f:58:36:42: a6:ea:e8:1f:50:89:d2:91:02:59:a6:b1:32:60:3b: 58:cd:f6:db:73:4c:0c:92:32:59:15:70:06:44:cd: 4c:7c:79:27:b5:f3:82:a1:de:7f:74:9e:1a:06:cb: 68:7b:d4:e0:6c:b5:2c:10:70:52:78:4c:e0:12:f6: 6e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:7E:22:41:AC:8E:3F:CB:68:52:BA:90:37:7E:DC:EC:47:A6:33:3E X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/N34iQayOP8toUrqQN37c7EemMz4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8720::/48 Signature Algorithm: sha256WithRSAEncryption 5f:26:d2:cd:b9:5e:cd:d1:17:91:31:59:ed:8f:a1:b8:e3:44: a7:15:4f:f7:ea:dc:cb:2b:58:32:fd:6e:fe:89:78:95:65:1f: 6c:2a:53:70:18:8f:7d:7a:85:81:6a:4c:80:cd:2a:81:eb:47: bc:d3:63:5b:9b:08:05:d3:8e:33:e4:14:07:b2:bc:77:35:6f: 0f:54:39:a8:6b:41:04:3a:16:81:74:b1:5a:3e:57:e8:58:37: dc:4c:5a:ce:32:2f:46:2e:30:99:f1:1a:96:55:cb:3c:7d:73: b6:c4:a0:6d:cc:e7:46:08:dd:8e:4d:6d:a4:a4:5e:26:3b:15: 9d:1c:65:28:10:53:5d:4e:3c:5b:c5:df:3b:43:e1:97:45:6d: 77:18:ba:ac:ba:a6:5d:0a:03:d3:58:bb:04:5b:21:9d:ee:93: d8:53:b2:b5:98:ca:af:9b:17:62:38:dd:46:47:65:4e:ed:2f: 58:28:39:69:e4:21:78:03:de:27:7a:fe:d2:2f:69:a6:b2:89: 5d:10:8d:f1:5d:ce:89:cb:4a:db:89:a5:bf:4c:e5:73:43:de: ae:33:8e:89:61:e0:ee:90:f2:7f:8f:66:26:8c:94:d9:ea:03: dd:b3:d7:51:5d:93:09:ae:82:9f:ab:69:7b:1f:bf:72:59:98: c9:3a:2d:f2 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pwYslS2oAZvC4RwDc+/7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzdlMjI0MWFjOGUzZmNiNjg1MmJhOTAzNzdlZGNlYzQ3YTYzMzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2doALAVjpreYQjeuOOA0fg4DdPS7 SdFx2XVXnT0x0IHrF33hXQbJr/nhrM30UWcF4Ol0WqiPFZTaLvbnd17v8t5CQGdD E4aD+dMdzWtF0mRVb5/r/5sEtWBB09vHj9zKJj1L+W511RlELUjF36JBoCLJgaBA 0VaTa/3tbaMhvSemvE+It+m19GOgjnldSD/tEGDBo7KrVqCekIrFn9JEVqYJePyV f1XLwlkmxrGTcSid1rGelcmrt9OZTd1fPF9YNkKm6ugfUInSkQJZprEyYDtYzfbb c0wMkjJZFXAGRM1MfHkntfOCod5/dJ4aBstoe9TgbLUsEHBSeEzgEvZuDQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDd+IkGsjj/LaFK6kDd+3OxHpjM+MB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvTjM0aVFheU9QOHRvVXJxUU4zN2M3RWVtTXo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIcg MA0GCSqGSIb3DQEBCwUAA4IBAQBfJtLNuV7N0ReRMVntj6G440SnFU/36tzLK1gy /W7+iXiVZR9sKlNwGI99eoWBakyAzSqB60e802NbmwgF044z5BQHsrx3NW8PVDmo a0EEOhaBdLFaPlfoWDfcTFrOMi9GLjCZ8RqWVcs8fXO2xKBtzOdGCN2OTW2kpF4m OxWdHGUoEFNdTjxbxd87Q+GXRW13GLqsuqZdCgPTWLsEWyGd7pPYU7K1mMqvmxdi ON1GR2VO7S9YKDlp5CF4A94nev7SL2mmsoldEI3xXc6Jy0rbiaW/TOVzQ96uM46J YeDukPJ/j2YmjJTZ6gPds9dRXZMJroKfq2l7H79yWZjJOi3y -----END CERTIFICATE-----Generated at Tue Jan 20 09:06:12 2026 by rpki-client