This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/NHsvU90hPHHlXhb2Sj4aiDO66WE.roa File: NHsvU90hPHHlXhb2Sj4aiDO66WE.roa (raw, json) Hash identifier: QnV45/HkBgk+UU1z0qR0TdsLf/pRcINILbiih7b/lCc= Subject key identifier: 34:7B:2F:53:DD:21:3C:71:E5:5E:16:F6:4A:3E:1A:88:33:BA:E9:61 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6D182954DEA5AADB7CC00854F2637 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/NHsvU90hPHHlXhb2Sj4aiDO66WE.roa Signing time: Fri 02 Jan 2026 12:20:20 +0000 ROA not before: Fri 02 Jan 2026 12:20:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 142036 IP address blocks: 2a0c:9a40:82e0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:d1:82:95:4d:ea:5a:ad:b7:cc:00:85:4f:26:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=347b2f53dd213c71e55e16f64a3e1a8833bae961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:15:b3:b0:30:55:71:90:5d:58:05:7d:cc:95: 73:17:52:fc:59:7a:cc:4f:14:7f:f2:00:8b:38:70: 62:fc:f0:ec:93:a7:16:af:77:70:4e:53:3a:38:8b: e3:c4:79:7d:54:b2:13:b9:02:cb:1f:67:d0:f3:82: 63:4a:b3:fb:46:18:7e:f7:6d:79:07:13:f2:be:e6: e0:6e:15:02:bf:48:16:b9:7f:a4:d0:2e:64:92:0a: eb:f9:02:55:f4:dc:f0:a9:48:ac:44:a5:f3:b8:f9: e9:1b:17:b4:cb:cc:d8:00:10:5c:b5:d7:76:85:5d: 50:da:c8:bc:11:6b:50:40:06:bb:3e:28:15:01:d2: 07:9d:38:bd:b8:25:b9:cd:27:43:2c:c4:15:03:3c: 74:65:e1:3a:db:ec:e0:ea:73:f8:e8:64:5d:85:57: 08:e1:e2:89:70:51:41:4b:4b:02:d5:0c:18:18:9b: 4d:4e:f2:98:26:15:b7:bd:f8:1d:bf:96:93:46:58: fc:af:02:8f:6d:cd:c1:96:45:f8:a0:13:1c:c2:61: 47:65:56:41:63:6b:63:8c:01:4f:41:87:d5:4e:45: dc:45:b0:41:9c:c2:c5:d3:8d:78:29:62:54:91:73: a0:54:55:de:79:60:87:10:04:12:5e:27:29:54:c9: 80:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:7B:2F:53:DD:21:3C:71:E5:5E:16:F6:4A:3E:1A:88:33:BA:E9:61 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/NHsvU90hPHHlXhb2Sj4aiDO66WE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:82e0::/44 Signature Algorithm: sha256WithRSAEncryption 5f:d3:e9:fe:31:9d:81:79:82:a3:dd:34:bf:9e:55:38:54:27: 18:09:91:01:10:3a:7f:30:5f:95:b8:b5:2d:3d:a8:ae:8f:7c: 5d:fc:d9:de:84:c5:d5:05:e2:8b:87:16:db:a6:33:9d:ca:c6: 44:2e:08:e0:d9:1f:5c:ee:ff:ad:32:1f:5f:e6:94:69:00:65: 83:1c:d5:dc:25:03:6f:7b:87:c7:0b:55:36:fa:28:12:7b:e4: 95:67:58:b1:0f:16:4a:ab:f8:24:24:1c:9e:3e:95:38:40:ca: 50:84:f5:2d:17:3c:08:ff:82:90:96:88:ba:77:f3:c2:08:43: 8f:76:9b:31:12:84:e7:b8:ae:1f:c1:a0:f1:22:ec:23:3b:7b: 3a:48:e1:cf:5a:cf:1c:0a:e4:35:49:12:3b:c5:aa:65:a7:e1: 7d:a7:08:9e:e2:a7:13:c4:44:7b:28:a8:c6:84:3b:c4:0d:ad: 46:42:68:ac:06:e6:d4:06:01:88:1a:24:7c:55:b7:e1:65:50: 17:fd:09:34:26:c6:17:7e:8b:4d:39:9b:bb:19:9c:44:4d:2b: df:8b:3b:0b:d7:1a:f7:35:35:08:0b:73:80:73:77:5c:c6:e1: 62:a0:fd:33:57:bf:8c:c1:dd:24:81:78:34:56:37:32:85:b8: 08:a7:92:fe -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+ptGClU3qWq23zACFTyY3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDdiMmY1M2RkMjEzYzcxZTU1ZTE2ZjY0YTNlMWE4ODMzYmFlOTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxWzsDBVcZBdWAV9zJVzF1L8WXrM TxR/8gCLOHBi/PDsk6cWr3dwTlM6OIvjxHl9VLITuQLLH2fQ84JjSrP7Rhh+9215 BxPyvubgbhUCv0gWuX+k0C5kkgrr+QJV9NzwqUisRKXzuPnpGxe0y8zYABBctdd2 hV1Q2si8EWtQQAa7PigVAdIHnTi9uCW5zSdDLMQVAzx0ZeE62+zg6nP46GRdhVcI 4eKJcFFBS0sC1QwYGJtNTvKYJhW3vfgdv5aTRlj8rwKPbc3BlkX4oBMcwmFHZVZB Y2tjjAFPQYfVTkXcRbBBnMLF0414KWJUkXOgVFXeeWCHEAQSXicpVMmApQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDR7L1PdITxx5V4W9ko+GogzuulhMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvTkhzdlU5MGhQSEhsWGhiMlNqNGFpRE82NldFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgyaQILg MA0GCSqGSIb3DQEBCwUAA4IBAQBf0+n+MZ2BeYKj3TS/nlU4VCcYCZEBEDp/MF+V uLUtPaiuj3xd/NnehMXVBeKLhxbbpjOdysZELgjg2R9c7v+tMh9f5pRpAGWDHNXc JQNve4fHC1U2+igSe+SVZ1ixDxZKq/gkJByePpU4QMpQhPUtFzwI/4KQloi6d/PC CEOPdpsxEoTnuK4fwaDxIuwjO3s6SOHPWs8cCuQ1SRI7xaplp+F9pwie4qcTxER7 KKjGhDvEDa1GQmisBubUBgGIGiR8VbfhZVAX/Qk0JsYXfotNOZu7GZxETSvfizsL 1xr3NTUIC3OAc3dcxuFioP0zV7+Mwd0kgXg0VjcyhbgIp5L+ -----END CERTIFICATE-----Generated at Tue Jan 20 09:04:39 2026 by rpki-client