This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/_V61XYS07KP1X6njo-yY8F6CaXI.roa File: _V61XYS07KP1X6njo-yY8F6CaXI.roa (raw, json) Hash identifier: Baaj+EtwnMFsGpyR9xhb34HVu/efW/bbdGVi2B/szUs= Subject key identifier: FD:5E:B5:5D:84:B4:EC:A3:F5:5F:A9:E3:A3:EC:98:F0:5E:82:69:72 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA707388A0B4CE4C2A0D4E8937D31C9 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/_V61XYS07KP1X6njo-yY8F6CaXI.roa Signing time: Fri 02 Jan 2026 12:20:34 +0000 ROA not before: Fri 02 Jan 2026 12:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213716 IP address blocks: 2a0c:9a40:8650::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:07:38:8a:0b:4c:e4:c2:a0:d4:e8:93:7d:31:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd5eb55d84b4eca3f55fa9e3a3ec98f05e826972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f4:5d:58:d2:31:5a:ed:72:c4:12:82:e2:60: 18:8e:f0:d3:f6:7d:6c:e6:1c:8b:3c:b2:6d:98:f1: de:69:6f:3f:19:7e:0d:ea:e1:03:20:2f:69:36:58: d5:43:68:51:f4:66:a8:83:7b:e7:45:28:49:43:df: d9:05:9e:5d:0b:7d:51:1b:7c:f8:5c:02:28:a3:63: 70:91:a0:92:21:70:69:1b:15:bd:97:4f:3c:ff:20: 27:a3:56:cc:20:95:ae:f2:54:61:2d:04:4d:9a:da: b5:ba:c0:d8:9e:3b:c5:8b:f7:41:c6:3d:15:cb:da: ee:34:2c:55:d0:7d:cd:53:4a:7a:08:cd:11:62:5b: de:f5:2b:50:e7:ae:e3:d6:6a:af:a7:df:9c:59:3f: de:b4:e5:73:7d:71:50:f3:a3:7d:60:d7:99:dc:68: 85:b1:17:ad:71:52:04:52:e8:23:d9:cf:d6:72:0e: d1:00:1a:ee:8c:1a:f6:b4:e6:6a:a6:2b:28:6e:36: 94:d3:c1:4d:cc:4e:b4:1b:67:60:41:e6:55:3a:1b: 17:43:9f:7b:42:ed:98:fc:6f:67:e2:9c:5b:bc:54: c7:90:30:8b:4d:4b:15:7c:7a:29:84:f4:75:a6:15: a8:66:a6:00:0c:59:55:71:b7:b7:60:8f:af:b0:40: 2d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:5E:B5:5D:84:B4:EC:A3:F5:5F:A9:E3:A3:EC:98:F0:5E:82:69:72 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/_V61XYS07KP1X6njo-yY8F6CaXI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8650::/48 Signature Algorithm: sha256WithRSAEncryption a5:31:d8:2c:c3:4c:b7:fc:99:35:69:7a:be:e4:94:e8:50:cd: 66:b7:f9:6b:50:13:48:a6:0f:5f:b0:8d:36:ae:c7:c9:29:65: 2e:05:ec:36:1a:bc:d0:e2:1c:d4:ad:55:7b:9e:ae:74:ef:d3: a8:48:a3:62:5f:01:1e:23:03:46:32:92:84:7e:e7:73:a8:19: d1:9f:ee:5d:41:30:73:7b:fe:28:c3:c3:f8:9b:45:94:a7:d4: 00:1f:2d:ea:4f:48:7f:06:22:d9:73:b0:fc:38:25:ea:82:d1: 6b:42:51:0b:e3:a2:27:13:82:db:08:16:e4:c8:c6:d3:f8:2d: c7:56:95:d4:3f:96:c2:78:d5:7a:cd:33:01:40:84:ee:70:e5: 43:e7:e9:04:4f:88:9e:55:40:59:a3:35:ab:a4:40:55:d0:8e: e7:43:0f:04:13:03:d3:1e:3c:a7:c0:b8:42:b6:dd:82:7f:de: 2e:e2:57:97:f2:5b:44:ed:76:03:ea:69:3e:1d:df:b5:5b:bb: da:75:0e:58:5e:fc:71:b8:d7:63:2a:89:d0:d2:42:2b:64:a0: bc:df:2d:60:eb:1a:af:36:73:50:cb:f4:1d:1a:55:8b:c0:81: 09:39:bb:0e:d1:37:f6:a8:54:da:9f:3b:f4:de:6b:3b:e1:5c: 29:19:98:b6 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pwc4igtM5MKg1OiTfTHJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDVlYjU1ZDg0YjRlY2EzZjU1ZmE5ZTNhM2VjOThmMDVlODI2OTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PRdWNIxWu1yxBKC4mAYjvDT9n1s 5hyLPLJtmPHeaW8/GX4N6uEDIC9pNljVQ2hR9Gaog3vnRShJQ9/ZBZ5dC31RG3z4 XAIoo2NwkaCSIXBpGxW9l088/yAno1bMIJWu8lRhLQRNmtq1usDYnjvFi/dBxj0V y9ruNCxV0H3NU0p6CM0RYlve9StQ567j1mqvp9+cWT/etOVzfXFQ86N9YNeZ3GiF sRetcVIEUugj2c/Wcg7RABrujBr2tOZqpisobjaU08FNzE60G2dgQeZVOhsXQ597 Qu2Y/G9n4pxbvFTHkDCLTUsVfHophPR1phWoZqYADFlVcbe3YI+vsEAtyQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFP1etV2EtOyj9V+p46PsmPBegmlyMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvX1Y2MVhZUzA3S1AxWDZuam8teVk4RjZDYVhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIZQ MA0GCSqGSIb3DQEBCwUAA4IBAQClMdgsw0y3/Jk1aXq+5JToUM1mt/lrUBNIpg9f sI02rsfJKWUuBew2GrzQ4hzUrVV7nq5079OoSKNiXwEeIwNGMpKEfudzqBnRn+5d QTBze/4ow8P4m0WUp9QAHy3qT0h/BiLZc7D8OCXqgtFrQlEL46InE4LbCBbkyMbT +C3HVpXUP5bCeNV6zTMBQITucOVD5+kET4ieVUBZozWrpEBV0I7nQw8EEwPTHjyn wLhCtt2Cf94u4leX8ltE7XYD6mk+Hd+1W7vadQ5YXvxxuNdjKonQ0kIrZKC83y1g 6xqvNnNQy/QdGlWLwIEJObsO0Tf2qFTanzv03ms74VwpGZi2 -----END CERTIFICATE-----Generated at Tue Jan 20 09:04:37 2026 by rpki-client