This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/g73f_IHKkQPfXAoitk1lxu0p1I4.roa File: g73f_IHKkQPfXAoitk1lxu0p1I4.roa (raw, json) Hash identifier: On4Y1+Bu+3fE/oNRmbJQ7loDsGnJ7UfQZ2X9VLG/qRs= Subject key identifier: 83:BD:DF:FC:81:CA:91:03:DF:5C:0A:22:B6:4D:65:C6:ED:29:D4:8E Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6EA8695797476733895857EADB013 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/g73f_IHKkQPfXAoitk1lxu0p1I4.roa Signing time: Fri 02 Jan 2026 12:20:26 +0000 ROA not before: Fri 02 Jan 2026 12:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205102 IP address blocks: 2a0c:9a40:8420::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:ea:86:95:79:74:76:73:38:95:85:7e:ad:b0:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=83bddffc81ca9103df5c0a22b64d65c6ed29d48e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:af:82:80:89:e2:73:47:41:28:2f:c0:ba:1d: 68:96:9a:46:eb:4b:cd:69:d0:72:8f:d0:f5:61:3d: ec:aa:24:32:c2:1b:b6:e5:6b:5d:b2:d1:09:46:c3: a9:51:39:98:21:1e:d3:9a:b7:32:28:a0:64:e6:ef: a8:a2:a3:95:d4:59:d0:19:46:e5:7a:0a:f2:ca:12: b2:3f:1c:f8:c3:b9:fc:82:fd:be:18:73:6b:53:67: 3d:2c:53:c4:39:28:52:12:eb:5f:62:3a:c7:67:b5: bb:4e:90:0a:aa:9c:b9:c8:2b:1b:8c:a1:d2:8c:df: 61:c7:9a:e5:f0:c6:64:16:8b:27:4f:06:dd:e4:e0: a1:0b:12:b2:12:5d:f0:55:b6:29:97:3e:6e:cc:31: c3:f9:6d:be:0a:f8:a2:f7:c8:00:d4:5c:5a:b6:e4: 1a:c8:e7:58:97:16:b1:31:42:32:c6:ad:f1:ae:4a: 2d:df:59:51:ce:ec:cd:70:57:94:0e:b7:b9:1d:f8: 38:fd:1f:4d:77:68:32:7d:86:cd:75:ae:98:73:d0: 0f:d0:4c:8c:e2:a2:75:27:7f:d6:0f:85:8c:7a:ba: 35:b3:56:2f:f6:66:73:de:a1:6e:36:bb:77:da:1c: 32:8a:23:95:06:57:cc:6d:ba:4f:d1:bc:80:89:a4: 4b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:BD:DF:FC:81:CA:91:03:DF:5C:0A:22:B6:4D:65:C6:ED:29:D4:8E X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/g73f_IHKkQPfXAoitk1lxu0p1I4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8420::/44 Signature Algorithm: sha256WithRSAEncryption 7b:4d:1c:ee:73:f9:31:60:78:4a:e0:0c:62:5e:10:58:49:c8: 8c:ca:4c:bd:a7:03:fe:b9:c0:d6:0c:44:a9:fd:33:63:96:1e: 74:21:0a:5b:e6:c5:82:6b:a5:48:80:30:cd:53:7d:73:18:69: 64:26:15:9a:a1:ab:65:51:01:9c:38:8c:cf:f7:6c:f8:ae:43: d1:13:91:c7:7b:9b:60:5a:6c:b2:85:32:87:cb:f3:45:af:e5: b7:55:10:2e:f9:ad:c3:bc:59:42:ac:25:07:93:7b:db:1e:ec: 72:99:63:0c:42:ac:71:d5:3a:f9:4d:ab:c5:0a:41:57:fd:fd: 54:b7:c8:9b:48:89:3f:c5:38:88:47:d3:af:4b:df:ea:7b:3c: 9f:d4:53:3f:69:81:5b:db:78:76:70:41:ef:ee:34:9c:ea:7f: 66:6d:86:fd:f7:66:5d:25:89:24:95:fd:d1:42:56:a6:76:88: 81:74:55:fd:f2:7e:b8:fc:43:09:f8:4e:89:41:77:90:82:8f: 99:e0:87:c1:65:70:8e:7f:6c:91:01:f1:3b:ac:85:9b:1c:73: d2:d1:fc:7d:b9:fa:fb:5f:52:c8:41:f6:39:24:0a:bd:d9:6b: 8a:74:f2:13:48:4f:cc:5e:4b:b7:93:6a:7b:b8:66:78:17:1d: 9d:0b:0b:04 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+puqGlXl0dnM4lYV+rbATMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4M2JkZGZmYzgxY2E5MTAzZGY1YzBhMjJiNjRkNjVjNmVkMjlkNDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApa+CgInic0dBKC/Auh1olppG60vN adByj9D1YT3sqiQywhu25WtdstEJRsOpUTmYIR7TmrcyKKBk5u+ooqOV1FnQGUbl egryyhKyPxz4w7n8gv2+GHNrU2c9LFPEOShSEutfYjrHZ7W7TpAKqpy5yCsbjKHS jN9hx5rl8MZkFosnTwbd5OChCxKyEl3wVbYplz5uzDHD+W2+Cvii98gA1FxatuQa yOdYlxaxMUIyxq3xrkot31lRzuzNcFeUDre5Hfg4/R9Nd2gyfYbNda6Yc9AP0EyM 4qJ1J3/WD4WMero1s1Yv9mZz3qFuNrt32hwyiiOVBlfMbbpP0byAiaRLdwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIO93/yBypED31wKIrZNZcbtKdSOMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvZzczZl9JSEtrUVBmWEFvaXRrMWx4dTBwMUk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgyaQIQg MA0GCSqGSIb3DQEBCwUAA4IBAQB7TRzuc/kxYHhK4AxiXhBYSciMyky9pwP+ucDW DESp/TNjlh50IQpb5sWCa6VIgDDNU31zGGlkJhWaoatlUQGcOIzP92z4rkPRE5HH e5tgWmyyhTKHy/NFr+W3VRAu+a3DvFlCrCUHk3vbHuxymWMMQqxx1Tr5TavFCkFX /f1Ut8ibSIk/xTiIR9OvS9/qezyf1FM/aYFb23h2cEHv7jSc6n9mbYb992ZdJYkk lf3RQlamdoiBdFX98n64/EMJ+E6JQXeQgo+Z4IfBZXCOf2yRAfE7rIWbHHPS0fx9 ufr7X1LIQfY5JAq92WuKdPITSE/MXku3k2p7uGZ4Fx2dCwsE -----END CERTIFICATE-----Generated at Tue Jan 20 09:05:18 2026 by rpki-client