This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/T2wAr7gYNJVJIAcqw9qA7VL7En8.roa File: T2wAr7gYNJVJIAcqw9qA7VL7En8.roa (raw, json) Hash identifier: rLlxRbkXu8kcuE24oBjb4OB6+EqS75dGyhLBMheWaoE= Subject key identifier: 4F:6C:00:AF:B8:18:34:95:49:20:07:2A:C3:DA:80:ED:52:FB:12:7F Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6CA9B5AE2AE12F2ACEB3F3C316EB7 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/T2wAr7gYNJVJIAcqw9qA7VL7En8.roa Signing time: Fri 02 Jan 2026 12:20:18 +0000 ROA not before: Fri 02 Jan 2026 12:20:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49134 IP address blocks: 2a0c:9a40:8200::/47 maxlen: 48 2a0c:9a40:8201::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:ca:9b:5a:e2:ae:12:f2:ac:eb:3f:3c:31:6e:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f6c00afb81834954920072ac3da80ed52fb127f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d1:8c:e3:f0:e9:c8:f7:99:07:d4:40:48:cc: cd:bb:3c:a6:be:4e:02:06:33:19:66:17:ab:a8:ce: 5f:28:d8:8b:c4:4a:8f:0a:4d:4a:c3:0d:6e:96:49: 42:c6:e4:d0:96:b1:ad:c5:24:f7:d1:29:06:55:71: 30:2f:a4:cf:f0:f8:19:da:0b:d9:40:c4:87:40:47: 1f:8c:45:21:a2:41:bb:66:4b:73:6d:e5:35:da:49: fd:1d:03:a4:97:d7:7d:d7:a2:b1:3e:9d:5c:0f:53: 23:5f:68:09:91:c4:78:d1:34:c6:3f:ca:2f:2b:2a: 3a:00:d5:7f:76:b2:b3:6f:f3:e2:d7:0b:bf:17:7a: 2e:e2:2b:45:f6:f5:79:df:f9:5d:47:0a:4d:7c:e3: d4:d5:f9:6a:98:4e:00:c4:aa:2c:50:58:70:e3:00: 26:2a:40:56:a0:82:c3:b5:47:14:53:30:05:21:79: 4a:b0:d9:8e:9d:5b:81:9b:1e:f4:0b:67:73:19:42: e1:60:4e:f7:97:0d:c5:54:a7:19:f1:9f:09:5e:3c: 21:fd:27:3b:bf:82:92:9f:22:a7:92:fa:04:b6:41: 6a:f8:23:d5:4f:68:12:71:81:ab:86:09:2e:1e:61: 65:63:6c:49:b8:f9:cf:16:3c:86:dc:3c:b6:b6:99: 21:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:6C:00:AF:B8:18:34:95:49:20:07:2A:C3:DA:80:ED:52:FB:12:7F X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/T2wAr7gYNJVJIAcqw9qA7VL7En8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8200::/47 Signature Algorithm: sha256WithRSAEncryption 3d:08:92:ae:34:f8:29:93:b5:b7:70:5d:a4:da:bd:8c:63:0d: 24:fb:94:0a:2c:6f:8a:d8:65:8c:aa:32:e0:48:dc:7d:8c:54: 4f:d8:01:22:b2:af:4a:bb:6f:c5:90:73:81:32:aa:10:f5:ab: 14:27:fe:2c:78:e6:5a:24:63:b3:b0:ba:29:5f:5d:9c:64:ee: 7e:d1:4f:c6:95:1f:89:98:95:fe:8e:dd:5f:ed:2b:dc:3c:04: 9b:76:f0:e5:6c:fb:5a:8e:f7:e9:a4:25:7b:d5:d5:22:ba:c6: 15:78:a6:be:fd:9a:33:ab:03:52:de:1f:e7:01:d1:6a:37:76: 82:33:39:c4:e3:79:3e:6d:3a:5b:91:0e:37:08:55:b2:06:67: bd:7b:48:c7:fd:85:25:81:c2:b0:d2:bc:13:64:79:13:dd:9e: d5:4b:d6:4a:59:06:f0:1d:c8:dc:bb:4f:ba:1d:57:df:88:a0: da:83:66:20:91:01:09:b3:88:9d:26:9c:db:19:b5:4b:5b:21: de:a2:02:f7:3c:53:5d:b7:94:56:33:d7:fd:e9:b9:cb:c1:0c: 11:a9:98:02:5b:e4:d8:f8:c2:da:54:47:8f:01:b5:f1:2f:26: 1a:e2:d7:b9:b0:b4:98:ba:44:af:26:14:42:3f:c1:c0:99:94: e7:06:7b:71 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+psqbWuKuEvKs6z88MW63MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjZjMDBhZmI4MTgzNDk1NDkyMDA3MmFjM2RhODBlZDUyZmIxMjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndGM4/DpyPeZB9RASMzNuzymvk4C BjMZZherqM5fKNiLxEqPCk1Kww1ulklCxuTQlrGtxST30SkGVXEwL6TP8PgZ2gvZ QMSHQEcfjEUhokG7ZktzbeU12kn9HQOkl9d916KxPp1cD1MjX2gJkcR40TTGP8ov Kyo6ANV/drKzb/Pi1wu/F3ou4itF9vV53/ldRwpNfOPU1flqmE4AxKosUFhw4wAm KkBWoILDtUcUUzAFIXlKsNmOnVuBmx70C2dzGULhYE73lw3FVKcZ8Z8JXjwh/Sc7 v4KSnyKnkvoEtkFq+CPVT2gScYGrhgkuHmFlY2xJuPnPFjyG3Dy2tpkh0wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFE9sAK+4GDSVSSAHKsPagO1S+xJ/MB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvVDJ3QXI3Z1lOSlZKSUFjcXc5cUE3Vkw3RW44LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKgyaQIIA MA0GCSqGSIb3DQEBCwUAA4IBAQA9CJKuNPgpk7W3cF2k2r2MYw0k+5QKLG+K2GWM qjLgSNx9jFRP2AEisq9Ku2/FkHOBMqoQ9asUJ/4seOZaJGOzsLopX12cZO5+0U/G lR+JmJX+jt1f7SvcPASbdvDlbPtajvfppCV71dUiusYVeKa+/ZozqwNS3h/nAdFq N3aCMznE43k+bTpbkQ43CFWyBme9e0jH/YUlgcKw0rwTZHkT3Z7VS9ZKWQbwHcjc u0+6HVffiKDag2YgkQEJs4idJpzbGbVLWyHeogL3PFNdt5RWM9f96bnLwQwRqZgC W+TY+MLaVEePAbXxLyYa4te5sLSYukSvJhRCP8HAmZTnBntx -----END CERTIFICATE-----Generated at Tue Jan 20 09:04:40 2026 by rpki-client