This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/c_1fodQnSP8Tl7MSWV4Z0rVDbHs.roa File: c_1fodQnSP8Tl7MSWV4Z0rVDbHs.roa (raw, json) Hash identifier: 5WVa9F4An3UrXx/nYmPKvD+DoZkuuqVcFXTp44/iD7w= Subject key identifier: 73:FD:5F:A1:D4:27:48:FF:13:97:B3:12:59:5E:19:D2:B5:43:6C:7B Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA7171287735E21CB42927970F6C02F Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/c_1fodQnSP8Tl7MSWV4Z0rVDbHs.roa Signing time: Fri 02 Jan 2026 12:20:38 +0000 ROA not before: Fri 02 Jan 2026 12:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215788 IP address blocks: 2a0c:9a40:8600::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:17:12:87:73:5e:21:cb:42:92:79:70:f6:c0:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=73fd5fa1d42748ff1397b312595e19d2b5436c7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3d:0b:c6:d0:37:3b:d4:ef:3e:6c:f9:9c:05: 00:79:bf:4a:f9:44:d0:38:16:82:0a:9a:5b:c0:24: 60:81:41:8a:f7:a7:b3:79:59:90:d7:3a:b6:0b:5d: e7:c0:1e:22:e8:82:8d:19:e8:0e:e8:4f:ed:89:89: 3b:15:f7:80:92:c9:16:84:f2:63:3d:8e:f0:37:17: 98:7a:fe:98:b6:2b:57:f3:08:dc:5a:d7:16:b6:ea: 5a:81:19:22:8b:3d:9d:31:c9:ef:bc:3a:af:0c:b9: 22:22:f9:1b:4e:8a:e0:70:d0:fa:cb:bb:1f:06:4d: bb:dc:ad:61:64:2c:71:5d:ea:36:1b:07:08:7c:50: a2:7b:3e:30:d3:7a:18:2d:ef:f1:f3:59:2a:b8:82: ab:1e:1d:b5:1a:12:4f:58:21:09:86:0f:d4:2e:75: 36:26:85:e2:8d:12:4f:a8:cf:b1:d3:ff:2e:ec:8d: 08:e0:96:5a:ee:c9:9c:6a:d7:85:bc:2f:bb:3b:6f: d8:76:b3:76:d2:93:fe:d3:db:c3:10:79:35:67:40: e5:c8:76:81:e9:00:c0:43:a1:b7:e5:d0:aa:64:ae: 51:6b:21:50:50:fe:2f:88:de:5e:5b:93:b6:09:89: bb:b6:66:c5:fb:a6:7b:b0:c9:b6:bd:7d:7e:ba:24: a3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:FD:5F:A1:D4:27:48:FF:13:97:B3:12:59:5E:19:D2:B5:43:6C:7B X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/c_1fodQnSP8Tl7MSWV4Z0rVDbHs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8600::/44 Signature Algorithm: sha256WithRSAEncryption af:a2:d8:a0:67:61:df:71:c0:2d:05:5a:a2:52:dc:cb:0b:de: 43:45:67:7f:9c:60:2c:bd:73:c8:3f:64:1f:23:05:f1:15:87: 9a:5f:f5:6c:ba:68:b5:d9:52:03:eb:f0:a7:00:b6:9d:60:29: 71:a1:a4:6e:de:8f:b8:b5:b7:17:88:64:31:47:5b:1e:2f:6e: 80:20:98:57:b8:97:9a:65:59:34:d1:5e:24:4c:83:06:b9:5b: 68:d0:8e:d3:bc:fb:2a:61:7e:a1:fb:ad:49:35:82:ab:ed:eb: 4d:13:36:5a:3a:39:9c:ff:8f:5c:e8:ca:d4:1d:fc:d9:70:a4: 14:ca:0f:9a:fb:d4:5b:9b:c0:f7:41:d9:e4:58:e2:74:a6:b7: fc:84:75:57:73:c3:c6:0a:01:fc:14:6b:63:a7:0a:c8:87:4b: 96:ab:89:41:56:e2:91:48:c1:57:8e:5f:1c:61:40:51:71:54: 94:e4:c6:4a:bd:a3:61:f7:72:31:6e:0f:93:cb:ff:32:b9:db: 2c:34:13:23:1c:2d:8e:c2:8f:d9:0e:ef:ee:f6:62:23:e7:63: 30:15:ed:a6:46:d5:69:42:9d:4d:93:37:7d:6a:d5:28:d2:2c: c7:5d:fa:39:37:83:c7:81:53:10:30:39:87:9e:1f:7d:bb:70: e6:46:2d:20 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pxcSh3NeIctCknlw9sAvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3M2ZkNWZhMWQ0Mjc0OGZmMTM5N2IzMTI1OTVlMTlkMmI1NDM2YzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApD0LxtA3O9TvPmz5nAUAeb9K+UTQ OBaCCppbwCRggUGK96ezeVmQ1zq2C13nwB4i6IKNGegO6E/tiYk7FfeAkskWhPJj PY7wNxeYev6YtitX8wjcWtcWtupagRkiiz2dMcnvvDqvDLkiIvkbTorgcND6y7sf Bk273K1hZCxxXeo2GwcIfFCiez4w03oYLe/x81kquIKrHh21GhJPWCEJhg/ULnU2 JoXijRJPqM+x0/8u7I0I4JZa7smcateFvC+7O2/YdrN20pP+09vDEHk1Z0DlyHaB 6QDAQ6G35dCqZK5RayFQUP4viN5eW5O2CYm7tmbF+6Z7sMm2vX1+uiSjfwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHP9X6HUJ0j/E5ezElleGdK1Q2x7MB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvY18xZm9kUW5TUDhUbDdNU1dWNFowclZEYkhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgyaQIYA MA0GCSqGSIb3DQEBCwUAA4IBAQCvotigZ2HfccAtBVqiUtzLC95DRWd/nGAsvXPI P2QfIwXxFYeaX/Vsumi12VID6/CnALadYClxoaRu3o+4tbcXiGQxR1seL26AIJhX uJeaZVk00V4kTIMGuVto0I7TvPsqYX6h+61JNYKr7etNEzZaOjmc/49c6MrUHfzZ cKQUyg+a+9Rbm8D3QdnkWOJ0prf8hHVXc8PGCgH8FGtjpwrIh0uWq4lBVuKRSMFX jl8cYUBRcVSU5MZKvaNh93Ixbg+Ty/8yudssNBMjHC2Owo/ZDu/u9mIj52MwFe2m RtVpQp1Nkzd9atUo0izHXfo5N4PHgVMQMDmHnh99u3DmRi0g -----END CERTIFICATE-----Generated at Tue Jan 20 09:03:23 2026 by rpki-client