This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/cCnAkYCGjRrVAF9Y2LjrNMu5gp4.roa File: cCnAkYCGjRrVAF9Y2LjrNMu5gp4.roa (raw, json) Hash identifier: kG6cuf/lvwY8MtJ2vyWyt09N3wpoxpMl/jTSCxXwk1g= Subject key identifier: 70:29:C0:91:80:86:8D:1A:D5:00:5F:58:D8:B8:EB:34:CB:B9:82:9E Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6F11400735F2632FAE28D1F6AE8E6 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/cCnAkYCGjRrVAF9Y2LjrNMu5gp4.roa Signing time: Fri 02 Jan 2026 12:20:28 +0000 ROA not before: Fri 02 Jan 2026 12:20:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207941 IP address blocks: 2a0c:9a40:8990::/44 maxlen: 48 2a0c:9a40:89a0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:f1:14:00:73:5f:26:32:fa:e2:8d:1f:6a:e8:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7029c09180868d1ad5005f58d8b8eb34cbb9829e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f1:17:0b:10:db:0c:a5:2e:bc:34:38:50:1e: 55:df:a0:4d:de:36:e4:cb:eb:86:8c:4f:9d:1c:c7: ed:12:36:6a:7a:4e:a2:7d:ec:6a:d3:b8:b6:45:90: 63:57:b7:e9:66:32:cd:1c:4f:53:2a:57:4f:7e:3c: b8:c3:8b:62:91:23:97:18:bd:55:fb:12:8f:60:7b: 76:35:8c:20:ad:82:6a:3a:53:6d:00:76:f3:ae:9f: 43:bf:dc:04:ad:84:10:49:c5:37:3f:9e:12:c5:01: 1d:35:04:87:59:59:a6:4c:de:7d:8e:ac:37:61:94: e8:8e:0a:42:1b:26:0d:23:00:61:43:61:ce:7e:84: 3e:51:a1:45:51:24:cf:7e:1b:1d:d2:6c:77:99:51: 8f:93:94:33:a8:e8:e4:85:42:b5:1a:4f:6f:d6:5a: a2:8f:c8:0b:6c:c7:f0:39:68:43:0f:e2:37:34:bc: 29:fb:f8:04:54:03:0a:d2:33:3e:c8:65:84:f4:4e: a5:19:ed:41:8e:c6:4b:10:9e:d3:87:4a:bc:83:bb: 4f:0f:1d:58:22:0b:2d:66:e2:3e:8e:cf:9b:f0:96: d4:c2:d4:cf:a3:1f:c3:3a:79:21:32:64:6b:3a:8a: 0f:64:f7:c7:78:b8:4c:7f:28:c4:17:c0:63:52:78: 71:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:29:C0:91:80:86:8D:1A:D5:00:5F:58:D8:B8:EB:34:CB:B9:82:9E X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/cCnAkYCGjRrVAF9Y2LjrNMu5gp4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8990::-2a0c:9a40:89af:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 2d:1f:37:c3:16:f2:fe:f7:04:02:6f:1a:3e:15:de:ff:e1:16: c0:47:9e:01:d0:8a:cb:1e:5d:b1:3a:03:7a:08:99:a1:84:a6: 15:74:c4:1a:c7:b5:73:22:30:ac:7c:f0:e9:11:5a:ba:1d:c7: c1:de:6a:fa:89:dc:6d:96:69:55:c9:57:0e:ed:c9:34:de:b8: b0:70:25:ac:b5:84:2b:9d:74:3c:c9:42:46:bb:ea:88:87:9c: 30:cb:d9:ff:23:d4:5a:47:c3:cf:94:42:d5:c7:5a:fd:dd:74: 14:1a:c8:ab:8e:86:c0:39:d7:f5:09:16:7f:4f:a8:4f:78:89: 31:7a:0f:91:d4:42:f5:84:42:9a:95:76:eb:f5:cc:ff:9e:9d: 92:ff:00:28:4a:5f:fd:9b:58:bc:1d:d8:95:fe:5b:e0:77:36: 06:82:89:b3:12:17:68:f3:ee:18:22:21:2b:d3:b7:5d:2e:7c: 1c:ae:b0:d3:0c:df:63:7f:f0:58:59:ff:03:9d:58:47:4a:ca: 14:e0:4f:a1:b5:2f:a4:97:2f:52:21:6b:ad:db:ed:74:9c:a4: 1f:75:ff:f5:33:7c:50:81:a1:9c:b3:d2:15:aa:79:11:d8:66: fc:ef:16:74:9e:33:d5:c9:75:00:80:6f:ce:4b:19:bd:be:4c: e2:02:78:b4 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt+pvEUAHNfJjL64o0faujmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDI5YzA5MTgwODY4ZDFhZDUwMDVmNThkOGI4ZWIzNGNiYjk4MjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPEXCxDbDKUuvDQ4UB5V36BN3jbk y+uGjE+dHMftEjZqek6ifexq07i2RZBjV7fpZjLNHE9TKldPfjy4w4tikSOXGL1V +xKPYHt2NYwgrYJqOlNtAHbzrp9Dv9wErYQQScU3P54SxQEdNQSHWVmmTN59jqw3 YZTojgpCGyYNIwBhQ2HOfoQ+UaFFUSTPfhsd0mx3mVGPk5QzqOjkhUK1Gk9v1lqi j8gLbMfwOWhDD+I3NLwp+/gEVAMK0jM+yGWE9E6lGe1BjsZLEJ7Th0q8g7tPDx1Y IgstZuI+js+b8JbUwtTPox/DOnkhMmRrOooPZPfHeLhMfyjEF8BjUnhxMwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFHApwJGAho0a1QBfWNi46zTLuYKeMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvY0NuQWtZQ0dqUnJWQUY5WTJManJOTXU1Z3A0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwQqDJpA iZADBwQqDJpAiaAwDQYJKoZIhvcNAQELBQADggEBAC0fN8MW8v73BAJvGj4V3v/h FsBHngHQisseXbE6A3oImaGEphV0xBrHtXMiMKx88OkRWrodx8HeavqJ3G2WaVXJ Vw7tyTTeuLBwJay1hCuddDzJQka76oiHnDDL2f8j1FpHw8+UQtXHWv3ddBQayKuO hsA51/UJFn9PqE94iTF6D5HUQvWEQpqVduv1zP+enZL/AChKX/2bWLwd2JX+W+B3 NgaCibMSF2jz7hgiISvTt10ufByusNMM32N/8FhZ/wOdWEdKyhTgT6G1L6SXL1Ih a63b7XScpB91//UzfFCBoZyz0hWqeRHYZvzvFnSeM9XJdQCAb85LGb2+TOICeLQ= -----END CERTIFICATE-----Generated at Tue Jan 20 09:05:18 2026 by rpki-client