This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/NobR7UL5byCpZKTvbFGK58LQtmM.roa File: NobR7UL5byCpZKTvbFGK58LQtmM.roa (raw, json) Hash identifier: ZrbWVVUrxDR0Te7xCjnXE3B3pEfh7oGrLw0lK7eVXzA= Subject key identifier: 36:86:D1:ED:42:F9:6F:20:A9:64:A4:EF:6C:51:8A:E7:C2:D0:B6:63 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6EE066D38D0B8E273E4047AE50774 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/NobR7UL5byCpZKTvbFGK58LQtmM.roa Signing time: Fri 02 Jan 2026 12:20:27 +0000 ROA not before: Fri 02 Jan 2026 12:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207113 IP address blocks: 2a0c:9a40:8f70::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:ee:06:6d:38:d0:b8:e2:73:e4:04:7a:e5:07:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3686d1ed42f96f20a964a4ef6c518ae7c2d0b663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:94:2d:ae:f3:d8:1f:b6:9d:f6:e4:7c:38:a9: 78:9c:c8:bd:6a:1a:72:67:a5:61:a7:2b:f8:c9:d3: e4:94:36:bc:45:c8:a3:2c:52:8b:09:ac:7e:68:e7: 90:36:94:11:00:5b:d4:60:31:7e:3e:a7:8c:e8:40: 9f:c3:60:10:6e:0e:57:a7:f4:a3:51:ee:2b:b9:b4: 47:e7:0a:13:59:8c:45:2e:1f:a8:7d:b2:53:2c:4e: d6:49:a4:4b:e8:5c:3f:f3:cb:b4:c2:1f:d0:74:57: a4:cd:c0:d0:7f:6e:ab:f7:3d:f9:4a:e3:b7:39:d7: ac:96:46:31:55:6a:ee:2c:7f:8e:77:2e:c8:1f:79: 0a:5e:29:58:3e:c4:6c:f4:a1:36:79:4b:73:24:f7: 66:30:f7:e1:24:01:29:95:ca:a3:1d:ec:ca:63:d1: 63:3c:a5:92:1f:23:a7:e3:81:04:2b:ab:f8:45:a5: af:e4:6e:ae:56:78:02:21:46:57:a2:7e:43:8f:07: 33:79:e8:89:5e:91:c1:2e:53:09:52:b0:9e:d4:9d: 42:6f:cf:71:db:35:5c:e7:c5:ba:66:e9:93:d4:81: 4c:0c:28:90:f8:1b:d9:4b:e8:e7:a2:c8:64:18:63: c6:48:3e:02:9d:71:56:c0:55:d2:f0:48:87:76:36: 8e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:86:D1:ED:42:F9:6F:20:A9:64:A4:EF:6C:51:8A:E7:C2:D0:B6:63 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/NobR7UL5byCpZKTvbFGK58LQtmM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8f70::/44 Signature Algorithm: sha256WithRSAEncryption 1e:ec:da:c0:e5:d0:b0:64:5c:6f:a6:a3:d5:a3:7d:b3:c5:15: 20:44:43:82:8a:b2:b3:69:25:00:84:fb:7a:aa:47:05:a3:4f: b7:47:72:75:68:6b:a3:8d:74:86:2c:20:5c:bb:51:09:67:36: 09:a3:1e:86:e4:d7:2c:a5:b7:37:75:47:2e:0c:44:07:9a:65: 54:48:b1:03:fa:53:3c:00:6a:86:1a:19:3b:63:a0:4b:dd:f9: 5a:df:12:33:7a:04:10:64:63:31:8e:b1:4c:bf:68:36:33:dd: 27:1e:b2:dd:86:91:20:f2:8f:fe:37:58:cb:28:43:b9:24:7c: 90:7e:91:df:2d:6c:8b:7a:02:cc:15:1c:cc:3f:e0:49:a2:ea: 20:3c:a0:57:08:09:6e:1f:0b:54:4a:c8:95:43:53:4b:17:bd: ef:56:cb:2f:d7:c4:75:9d:96:40:77:49:44:73:fa:4b:e0:f6: aa:bc:c3:5c:2e:b3:78:9e:16:d9:78:66:6e:a0:17:d3:3e:cb: 0b:86:c2:58:44:33:b5:b9:b8:d8:6b:61:48:db:9d:01:b8:08: 37:e4:46:87:7f:23:71:fb:f4:a6:4b:e4:fe:be:6f:9f:3e:99: 32:31:ce:bd:99:98:22:df:6d:48:05:fe:55:4b:02:a3:df:c7: 9a:40:c9:77 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pu4GbTjQuOJz5AR65Qd0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjg2ZDFlZDQyZjk2ZjIwYTk2NGE0ZWY2YzUxOGFlN2MyZDBiNjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpQtrvPYH7ad9uR8OKl4nMi9ahpy Z6Vhpyv4ydPklDa8RcijLFKLCax+aOeQNpQRAFvUYDF+PqeM6ECfw2AQbg5Xp/Sj Ue4rubRH5woTWYxFLh+ofbJTLE7WSaRL6Fw/88u0wh/QdFekzcDQf26r9z35SuO3 OdeslkYxVWruLH+Ody7IH3kKXilYPsRs9KE2eUtzJPdmMPfhJAEplcqjHezKY9Fj PKWSHyOn44EEK6v4RaWv5G6uVngCIUZXon5DjwczeeiJXpHBLlMJUrCe1J1Cb89x 2zVc58W6ZumT1IFMDCiQ+BvZS+jnoshkGGPGSD4CnXFWwFXS8EiHdjaOwQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDaG0e1C+W8gqWSk72xRiufC0LZjMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvTm9iUjdVTDVieUNwWktUdmJGR0s1OExRdG1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgyaQI9w MA0GCSqGSIb3DQEBCwUAA4IBAQAe7NrA5dCwZFxvpqPVo32zxRUgREOCirKzaSUA hPt6qkcFo0+3R3J1aGujjXSGLCBcu1EJZzYJox6G5Ncspbc3dUcuDEQHmmVUSLED +lM8AGqGGhk7Y6BL3fla3xIzegQQZGMxjrFMv2g2M90nHrLdhpEg8o/+N1jLKEO5 JHyQfpHfLWyLegLMFRzMP+BJouogPKBXCAluHwtUSsiVQ1NLF73vVssv18R1nZZA d0lEc/pL4PaqvMNcLrN4nhbZeGZuoBfTPssLhsJYRDO1ubjYa2FI250BuAg35EaH fyNx+/SmS+T+vm+fPpkyMc69mZgi321IBf5VSwKj38eaQMl3 -----END CERTIFICATE-----Generated at Tue Jan 20 09:03:23 2026 by rpki-client