This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/NsV9MHwOu_t9ADCWVI3laeLcYVo.roa File: NsV9MHwOu_t9ADCWVI3laeLcYVo.roa (raw, json) Hash identifier: zCO15Pyp+5q2WP4XYTL6Oh78F4VdYAYYb8aZab0wxIc= Subject key identifier: 36:C5:7D:30:7C:0E:BB:FB:7D:00:30:96:54:8D:E5:69:E2:DC:61:5A Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6E741610F42FB2259D3AE9222EDB9 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/NsV9MHwOu_t9ADCWVI3laeLcYVo.roa Signing time: Fri 02 Jan 2026 12:20:25 +0000 ROA not before: Fri 02 Jan 2026 12:20:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203888 IP address blocks: 2a0c:9a40:84c0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:e7:41:61:0f:42:fb:22:59:d3:ae:92:22:ed:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36c57d307c0ebbfb7d003096548de569e2dc615a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:dc:cd:be:62:c7:d7:fa:fa:f3:6f:b6:f8:b8: 3d:2c:dd:8b:19:e7:80:27:80:1f:28:a8:b7:47:c8: 61:63:31:7e:c5:f1:4d:95:41:8d:f6:68:17:96:f4: 80:a2:d2:49:18:0f:e6:0b:dc:be:7a:28:24:9b:e4: 9c:4e:0c:35:cb:7b:ae:9a:a4:3c:d2:7b:89:10:f2: 07:79:73:b0:17:88:f7:08:51:08:f6:5b:0b:24:1c: ab:42:8d:f4:a2:1a:8c:43:9c:47:d7:6e:23:25:db: 1a:26:77:e7:08:d8:4c:59:73:bd:68:60:0d:6d:6f: ab:46:d2:f5:64:20:5d:b1:53:a7:45:b7:65:69:7c: b8:61:41:d5:43:68:2d:47:02:0a:fc:d0:96:88:00: 86:1e:53:54:d5:16:52:76:54:16:0b:33:33:f6:2b: 89:84:a2:0d:fe:02:ec:e1:8b:77:84:b5:29:0c:dd: 38:ba:7c:83:e4:ad:50:eb:88:68:93:38:41:59:36: a8:66:1d:ea:d8:2c:56:72:73:34:b3:ec:88:fa:30: 82:ff:03:87:7f:49:b6:b7:90:15:20:71:ee:69:34: 3b:05:24:da:61:2d:75:96:11:a4:32:8a:57:cb:33: 5c:5f:ec:86:72:6f:54:7d:fc:4b:e3:69:dc:25:e4: 9e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C5:7D:30:7C:0E:BB:FB:7D:00:30:96:54:8D:E5:69:E2:DC:61:5A X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/NsV9MHwOu_t9ADCWVI3laeLcYVo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:84c0::/44 Signature Algorithm: sha256WithRSAEncryption cc:c3:24:f7:35:69:05:ba:1f:a3:c4:e3:6d:ac:eb:72:39:93: b1:d0:fc:0e:09:6e:6a:f1:0c:4d:f0:85:36:23:44:66:9d:9e: cb:9e:1c:32:80:c7:6f:da:71:ba:30:b8:09:3f:1e:83:45:f7: a1:6f:cd:10:55:67:b0:b5:79:c8:6f:ce:59:eb:84:cb:1d:03: c1:49:a1:78:b2:d1:61:1e:27:c7:3f:f9:bd:dc:54:6f:8f:46: ba:5e:f9:5a:f6:45:a7:ed:43:2b:59:5e:a9:38:4f:b8:6e:31: 15:37:f6:2c:25:0e:a5:c0:57:91:2d:39:21:0f:76:a0:7e:4c: 6d:1c:0e:98:00:07:6e:b9:57:9f:cf:e5:ee:fb:21:cb:39:a7: 31:55:55:65:c5:d6:f4:3d:d2:69:d3:bf:64:23:bc:88:8c:62: a0:e2:ee:28:ff:25:64:b2:b4:ce:ad:6e:3b:59:ce:9e:a2:79: 51:e5:2e:84:6b:6f:73:98:71:2d:bf:d9:1a:32:77:23:8d:1f: 96:69:2f:79:be:dc:82:b5:cb:35:c9:fa:4d:37:02:66:68:13: bd:e3:82:85:7d:30:c0:91:0c:d2:ab:11:27:a5:79:11:84:f6: ab:72:b4:2c:17:cb:75:6c:22:3f:78:24:5f:7c:fd:5a:7b:ba: 4e:2d:2e:86 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pudBYQ9C+yJZ066SIu25MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNmM1N2QzMDdjMGViYmZiN2QwMDMwOTY1NDhkZTU2OWUyZGM2MTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudzNvmLH1/r682+2+Lg9LN2LGeeA J4AfKKi3R8hhYzF+xfFNlUGN9mgXlvSAotJJGA/mC9y+eigkm+ScTgw1y3uumqQ8 0nuJEPIHeXOwF4j3CFEI9lsLJByrQo30ohqMQ5xH124jJdsaJnfnCNhMWXO9aGAN bW+rRtL1ZCBdsVOnRbdlaXy4YUHVQ2gtRwIK/NCWiACGHlNU1RZSdlQWCzMz9iuJ hKIN/gLs4Yt3hLUpDN04unyD5K1Q64hokzhBWTaoZh3q2CxWcnM0s+yI+jCC/wOH f0m2t5AVIHHuaTQ7BSTaYS11lhGkMopXyzNcX+yGcm9UffxL42ncJeSeFQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDbFfTB8Drv7fQAwllSN5Wni3GFaMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvTnNWOU1Id091X3Q5QURDV1ZJM2xhZUxjWVZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgyaQITA MA0GCSqGSIb3DQEBCwUAA4IBAQDMwyT3NWkFuh+jxONtrOtyOZOx0PwOCW5q8QxN 8IU2I0RmnZ7LnhwygMdv2nG6MLgJPx6DRfehb80QVWewtXnIb85Z64TLHQPBSaF4 stFhHifHP/m93FRvj0a6Xvla9kWn7UMrWV6pOE+4bjEVN/YsJQ6lwFeRLTkhD3ag fkxtHA6YAAduuVefz+Xu+yHLOacxVVVlxdb0PdJp079kI7yIjGKg4u4o/yVksrTO rW47Wc6eonlR5S6Ea29zmHEtv9kaMncjjR+WaS95vtyCtcs1yfpNNwJmaBO944KF fTDAkQzSqxEnpXkRhParcrQsF8t1bCI/eCRffP1ae7pOLS6G -----END CERTIFICATE-----Generated at Tue Jan 20 09:04:39 2026 by rpki-client