This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/eHjAx7jZxI1kgs5BnSAoy2-lINM.roa File: eHjAx7jZxI1kgs5BnSAoy2-lINM.roa (raw, json) Hash identifier: xuprLo7NQ+nTb4snVnZHfQKQZQ8obpUFM50vHJ1Tho0= Subject key identifier: 78:78:C0:C7:B8:D9:C4:8D:64:82:CE:41:9D:20:28:CB:6F:A5:20:D3 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6E7DCA6D542308CF4DD1D117CF42E Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/eHjAx7jZxI1kgs5BnSAoy2-lINM.roa Signing time: Fri 02 Jan 2026 12:20:26 +0000 ROA not before: Fri 02 Jan 2026 12:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204329 IP address blocks: 2a0c:9a40:8730::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:e7:dc:a6:d5:42:30:8c:f4:dd:1d:11:7c:f4:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7878c0c7b8d9c48d6482ce419d2028cb6fa520d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ea:5d:6a:91:c4:02:8c:59:59:01:6c:09:91: f0:b8:1a:89:d0:70:1c:38:96:e9:5d:b9:f1:fe:78: 81:18:37:6f:24:d3:45:88:63:ca:30:88:f7:90:83: 46:29:49:cb:8a:62:85:21:1d:68:0c:d3:0a:af:76: 28:ba:28:4e:9d:74:ff:2c:f5:57:d3:39:9f:a1:98: 1f:ad:62:f0:52:3e:f7:f6:1b:55:8a:c8:68:e1:42: b4:85:b9:b1:68:65:4f:e5:0b:b2:b6:f2:c2:cb:5b: fe:5f:80:9d:4d:9a:a2:46:5a:d3:f7:38:97:ff:14: 57:6e:5d:b1:8f:89:81:71:df:0e:4a:b1:72:ca:ec: 89:8f:47:ca:7e:b8:4c:2d:56:bf:6f:c6:7d:da:dd: 04:b9:dd:62:79:03:c1:b2:68:0b:02:86:f8:f5:9c: e9:7e:ae:58:c6:21:d3:9a:15:39:dd:e2:0b:87:41: cf:2f:1a:54:b6:ba:19:5c:28:19:6c:ed:e6:55:16: 11:34:ab:b2:fb:b2:7e:f9:18:cb:46:6f:60:1f:1e: af:4a:63:9b:a8:64:6b:f2:c1:8c:1c:4c:59:84:0d: 5e:1d:26:78:dd:8b:a4:f9:21:7e:55:3c:f9:d1:b1: 4e:df:28:b2:b1:f2:06:21:9e:13:28:c2:a4:f1:66: a1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:78:C0:C7:B8:D9:C4:8D:64:82:CE:41:9D:20:28:CB:6F:A5:20:D3 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/eHjAx7jZxI1kgs5BnSAoy2-lINM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8730::/48 Signature Algorithm: sha256WithRSAEncryption 51:5b:30:3c:50:1d:71:81:86:69:50:ab:e4:4f:92:15:68:1c: 19:29:26:35:3b:85:cf:98:f6:4a:24:32:c3:f7:ff:d9:c5:4f: 5e:23:60:7d:71:10:31:63:8d:02:79:88:75:12:06:f5:10:9e: 43:93:97:99:a5:9a:9e:cf:44:df:6d:ef:91:b2:4a:3c:d1:d6: de:17:ae:38:eb:e5:89:5b:0b:d8:2a:51:95:76:78:f1:ab:67: 1a:6a:f7:27:83:91:a1:d9:c6:94:56:cb:d2:7e:2d:52:cb:2c: 53:10:74:2a:fe:21:96:11:7d:6c:63:e6:a1:de:3f:d1:29:8b: 69:69:30:1f:64:b3:5d:05:84:7f:42:c3:31:c6:7e:3f:23:cf: 0f:54:63:80:c0:1a:1f:1a:47:6e:32:c2:48:8e:33:fe:79:85: 2a:b3:b5:cf:7a:aa:8e:fb:b4:de:fa:1e:47:2e:4e:2b:d1:a8: 5d:bd:2b:12:9d:62:8b:b1:97:9f:61:2a:8b:87:4e:d4:b3:19: 79:e0:ba:79:d6:cb:9f:66:fa:61:c6:f9:b4:3c:5f:1b:40:56: fc:da:83:cf:df:cf:4b:20:fc:4c:b5:70:d5:78:35:50:1c:86: 7a:47:63:d6:50:d1:61:2f:9a:e6:be:0b:5a:b4:d2:d8:f9:9e: d2:a0:6d:54 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pufcptVCMIz03R0RfPQuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODc4YzBjN2I4ZDljNDhkNjQ4MmNlNDE5ZDIwMjhjYjZmYTUyMGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+pdapHEAoxZWQFsCZHwuBqJ0HAc OJbpXbnx/niBGDdvJNNFiGPKMIj3kINGKUnLimKFIR1oDNMKr3YouihOnXT/LPVX 0zmfoZgfrWLwUj739htVisho4UK0hbmxaGVP5QuytvLCy1v+X4CdTZqiRlrT9ziX /xRXbl2xj4mBcd8OSrFyyuyJj0fKfrhMLVa/b8Z92t0Eud1ieQPBsmgLAob49Zzp fq5YxiHTmhU53eILh0HPLxpUtroZXCgZbO3mVRYRNKuy+7J++RjLRm9gHx6vSmOb qGRr8sGMHExZhA1eHSZ43Yuk+SF+VTz50bFO3yiysfIGIZ4TKMKk8WahGwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHh4wMe42cSNZILOQZ0gKMtvpSDTMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvZUhqQXg3alp4STFrZ3M1Qm5TQW95Mi1sSU5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIcw MA0GCSqGSIb3DQEBCwUAA4IBAQBRWzA8UB1xgYZpUKvkT5IVaBwZKSY1O4XPmPZK JDLD9//ZxU9eI2B9cRAxY40CeYh1Egb1EJ5Dk5eZpZqez0Tfbe+Rsko80dbeF644 6+WJWwvYKlGVdnjxq2caavcng5Gh2caUVsvSfi1SyyxTEHQq/iGWEX1sY+ah3j/R KYtpaTAfZLNdBYR/QsMxxn4/I88PVGOAwBofGkduMsJIjjP+eYUqs7XPeqqO+7Te +h5HLk4r0ahdvSsSnWKLsZefYSqLh07Usxl54Lp51sufZvphxvm0PF8bQFb82oPP 389LIPxMtXDVeDVQHIZ6R2PWUNFhL5rmvgtatNLY+Z7SoG1U -----END CERTIFICATE-----Generated at Tue Jan 20 09:05:16 2026 by rpki-client