This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/aWiiw5TgeSjZjKUH3NHgFTmB98s.roa File: aWiiw5TgeSjZjKUH3NHgFTmB98s.roa (raw, json) Hash identifier: T7KmWAc3ykt75PE6zoidGlQtPBPK2HNiQftEmd0sx1k= Subject key identifier: 69:68:A2:C3:94:E0:79:28:D9:8C:A5:07:DC:D1:E0:15:39:81:F7:CB Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA71AF09E5414860606A1F27B0FBE32 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/aWiiw5TgeSjZjKUH3NHgFTmB98s.roa Signing time: Fri 02 Jan 2026 12:20:39 +0000 ROA not before: Fri 02 Jan 2026 12:20:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216362 IP address blocks: 2a0c:9a40:8cd0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:1a:f0:9e:54:14:86:06:06:a1:f2:7b:0f:be:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6968a2c394e07928d98ca507dcd1e0153981f7cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bb:48:0c:1a:d5:22:01:e7:ab:fa:73:ac:53: c7:76:ba:11:61:79:ca:c3:74:47:7c:27:81:88:77: e1:1d:e2:53:4d:94:10:b9:5e:96:a3:d2:87:de:c5: b9:25:20:23:b3:c8:53:c9:0f:95:c3:e4:3d:83:b0: b4:58:7b:17:a3:e4:e6:bc:90:ec:bd:e3:94:36:1c: ac:73:5d:61:82:41:67:4a:b1:d6:72:09:cd:e9:ee: 75:0a:e6:07:6d:bf:7d:a5:26:21:d4:80:8f:e3:82: 8b:b7:95:8d:65:b3:e6:ce:b0:1f:88:5c:a1:1d:2d: 1a:a2:c2:b9:68:68:b4:32:73:ad:5d:b4:67:29:e5: 90:4a:aa:7a:17:bd:8e:64:4f:bf:48:01:b0:80:68: 7a:bd:1f:c3:bb:ad:a0:84:76:48:20:d1:67:28:e5: 91:c3:3f:03:29:7b:e6:09:7b:67:90:a2:0a:67:3c: 40:2e:25:00:dc:09:d0:a9:13:3a:d3:37:be:35:73: 46:80:e9:a0:ba:81:8a:ef:0e:59:0e:08:83:eb:0f: ed:64:40:95:b9:7b:60:c6:24:64:e1:16:22:0c:83: de:48:db:bf:fe:ef:d6:9c:f9:57:b6:c7:70:50:da: 33:41:0d:e6:da:35:19:92:47:30:d8:f4:4d:94:0e: b0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:68:A2:C3:94:E0:79:28:D9:8C:A5:07:DC:D1:E0:15:39:81:F7:CB X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/aWiiw5TgeSjZjKUH3NHgFTmB98s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8cd0::/48 Signature Algorithm: sha256WithRSAEncryption 2c:79:78:1c:3a:67:91:43:ce:21:96:04:c0:a6:fd:67:a5:5a: 36:42:86:e2:44:35:93:88:a8:d7:9f:63:29:80:45:0f:f4:56: f9:e0:be:b7:d7:27:48:e3:b6:63:63:6a:6a:46:42:4b:10:29: 9f:e7:f2:61:c3:ef:c8:95:88:10:72:a2:88:5e:4e:3c:47:ad: 97:09:ef:62:c3:11:1f:69:1c:48:66:5b:6b:99:a6:f6:da:d9: 55:f0:22:5e:fc:2d:d4:43:51:ff:99:4a:08:a2:f2:34:f4:3c: fe:74:97:ce:28:06:db:ff:89:fd:10:00:f1:81:87:66:e4:77: fe:3b:9d:b2:50:91:98:e0:f6:84:5f:58:ae:be:ee:a0:d8:60: bc:f7:ce:62:d0:c6:a7:8f:99:56:6b:f3:61:3b:a7:64:c3:cc: a7:00:cf:ff:dc:86:7a:b1:dd:9e:df:84:7e:f1:98:98:1e:67: e6:e1:43:da:eb:d9:22:72:f6:01:17:79:1d:dd:15:f5:3c:e0: 7a:95:4a:c7:3d:02:16:76:a5:e1:21:ee:9d:e4:e2:9f:80:87: dc:a3:83:2e:1f:6f:a7:69:36:4b:90:46:b7:eb:86:de:81:b4: c0:1b:9b:91:57:ea:df:90:2e:94:c1:6b:00:32:24:65:7e:be: 65:19:25:13 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pxrwnlQUhgYGofJ7D74yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTY4YTJjMzk0ZTA3OTI4ZDk4Y2E1MDdkY2QxZTAxNTM5ODFmN2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbtIDBrVIgHnq/pzrFPHdroRYXnK w3RHfCeBiHfhHeJTTZQQuV6Wo9KH3sW5JSAjs8hTyQ+Vw+Q9g7C0WHsXo+TmvJDs veOUNhysc11hgkFnSrHWcgnN6e51CuYHbb99pSYh1ICP44KLt5WNZbPmzrAfiFyh HS0aosK5aGi0MnOtXbRnKeWQSqp6F72OZE+/SAGwgGh6vR/Du62ghHZIINFnKOWR wz8DKXvmCXtnkKIKZzxALiUA3AnQqRM60ze+NXNGgOmguoGK7w5ZDgiD6w/tZECV uXtgxiRk4RYiDIPeSNu//u/WnPlXtsdwUNozQQ3m2jUZkkcw2PRNlA6w1wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGloosOU4Hko2YylB9zR4BU5gffLMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvYVdpaXc1VGdlU2paaktVSDNOSGdGVG1COThzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIzQ MA0GCSqGSIb3DQEBCwUAA4IBAQAseXgcOmeRQ84hlgTApv1npVo2QobiRDWTiKjX n2MpgEUP9Fb54L631ydI47ZjY2pqRkJLECmf5/Jhw+/IlYgQcqKIXk48R62XCe9i wxEfaRxIZltrmab22tlV8CJe/C3UQ1H/mUoIovI09Dz+dJfOKAbb/4n9EADxgYdm 5Hf+O52yUJGY4PaEX1iuvu6g2GC8985i0Manj5lWa/NhO6dkw8ynAM//3IZ6sd2e 34R+8ZiYHmfm4UPa69kicvYBF3kd3RX1POB6lUrHPQIWdqXhIe6d5OKfgIfco4Mu H2+naTZLkEa364begbTAG5uRV+rfkC6UwWsAMiRlfr5lGSUT -----END CERTIFICATE-----Generated at Tue Jan 20 09:05:52 2026 by rpki-client