This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/h9jO82DzPzCrWSEbuTEW6WZn-dU.roa File: h9jO82DzPzCrWSEbuTEW6WZn-dU.roa (raw, json) Hash identifier: Y9ht/97s15vCAYnMLK/PeLXghS/QzThy/mDmbCT33zI= Subject key identifier: 87:D8:CE:F3:60:F3:3F:30:AB:59:21:1B:B9:31:16:E9:66:67:F9:D5 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019BF5AAD0AA309911500AB5A02300B1B41C Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/h9jO82DzPzCrWSEbuTEW6WZn-dU.roa Signing time: Sun 25 Jan 2026 14:59:31 +0000 ROA not before: Sun 25 Jan 2026 14:59:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204208 IP address blocks: 2a0c:9a40:8e60::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:aa:d0:aa:30:99:11:50:0a:b5:a0:23:00:b1:b4:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 25 14:59:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87d8cef360f33f30ab59211bb93116e96667f9d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:02:d4:4f:15:f1:52:11:ea:f5:10:ee:f9:69: 59:38:a1:90:af:8a:1e:c2:4b:1a:31:9f:49:6b:55: ff:5a:be:32:c2:25:49:59:92:d6:62:29:7b:19:9d: 44:ff:58:24:32:75:69:88:e6:f6:9a:46:5c:ee:9e: f5:5a:8e:c5:47:32:e8:19:97:09:f9:1c:67:8c:2f: f5:6c:0a:04:ed:4e:ad:7d:83:fb:71:ec:0c:93:ee: 7e:b0:08:1d:d5:80:69:74:39:ec:3a:70:d3:6f:ed: 05:55:87:9c:18:36:df:f9:58:4a:8a:6b:5d:c2:2f: 1d:3b:c6:3c:ab:c5:b5:89:4a:67:85:a8:7e:f6:f6: 57:a2:a6:6f:e3:f8:b8:93:c2:92:6d:78:a7:78:35: 4f:63:76:fc:45:eb:15:35:23:f5:86:b6:97:b1:e3: 92:d8:3f:c3:39:16:38:b2:30:ae:1c:4e:a3:2a:7c: 4a:31:58:89:55:40:76:25:86:60:b3:8b:ec:b3:81: f4:b0:5f:f5:d4:f4:46:68:9d:05:91:cf:67:be:e7: 7b:54:a8:13:56:fc:34:ed:c0:48:55:39:de:c7:22: 65:3e:34:fa:0a:d1:65:cd:a2:eb:38:50:18:48:e0: 32:44:78:26:35:5e:5a:0b:e3:af:b7:44:3e:6a:a7: b7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D8:CE:F3:60:F3:3F:30:AB:59:21:1B:B9:31:16:E9:66:67:F9:D5 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/h9jO82DzPzCrWSEbuTEW6WZn-dU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8e60::/44 Signature Algorithm: sha256WithRSAEncryption 75:aa:b2:91:2b:57:01:2b:62:12:9f:38:f0:5a:70:43:7c:9f: 87:78:fd:4a:28:af:1f:84:cd:e9:23:f7:cd:4b:6d:d3:d0:d5: 01:3d:0b:8f:6e:bd:3e:5f:b5:85:28:d8:52:44:2f:a5:17:85: 4f:4c:2c:c6:91:7c:11:24:e1:00:61:47:23:83:a7:cc:14:2b: ad:d4:3e:5b:df:1f:a0:f2:bd:52:6a:a1:49:0b:54:39:54:32: 8f:e1:61:15:0a:14:46:29:f7:0d:a2:c6:57:48:1d:48:1f:b8: 2c:79:dc:c8:28:d8:78:b3:7a:75:1a:47:94:2c:11:1e:dc:ea: 4f:05:ab:59:fb:c4:e7:c7:17:51:34:dc:5b:12:ca:8a:07:61: 48:4d:f9:4a:59:b5:2b:f9:bb:01:1b:53:c5:b0:9c:ae:6f:59: da:19:0b:79:44:d0:fb:4c:5c:4f:d6:70:21:04:9e:24:5c:73: 17:d1:0b:da:fd:d6:c4:d6:e8:5b:4a:02:8a:33:eb:ea:a5:d0: 96:e4:58:55:98:a0:31:93:21:ed:6a:61:8c:3b:59:3d:a1:5d: 0a:02:da:b4:02:d1:29:38:12:e3:a2:a8:64:e9:2a:c6:2b:18: 75:20:b4:a9:80:51:0a:f6:ab:f9:b7:67:0d:b3:69:66:45:77: 1e:93:aa:d5 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZv1qtCqMJkRUAq1oCMAsbQcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTI1MTQ1OTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4N2Q4Y2VmMzYwZjMzZjMwYWI1OTIxMWJiOTMxMTZlOTY2NjdmOWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywLUTxXxUhHq9RDu+WlZOKGQr4oe wksaMZ9Ja1X/Wr4ywiVJWZLWYil7GZ1E/1gkMnVpiOb2mkZc7p71Wo7FRzLoGZcJ +RxnjC/1bAoE7U6tfYP7cewMk+5+sAgd1YBpdDnsOnDTb+0FVYecGDbf+VhKimtd wi8dO8Y8q8W1iUpnhah+9vZXoqZv4/i4k8KSbXineDVPY3b8ResVNSP1hraXseOS 2D/DORY4sjCuHE6jKnxKMViJVUB2JYZgs4vss4H0sF/11PRGaJ0Fkc9nvud7VKgT Vvw07cBIVTnexyJlPjT6CtFlzaLrOFAYSOAyRHgmNV5aC+Ovt0Q+aqe3wQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIfYzvNg8z8wq1khG7kxFulmZ/nVMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvaDlqTzgyRHpQekNyV1NFYnVURVc2V1puLWRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgyaQI5g MA0GCSqGSIb3DQEBCwUAA4IBAQB1qrKRK1cBK2ISnzjwWnBDfJ+HeP1KKK8fhM3p I/fNS23T0NUBPQuPbr0+X7WFKNhSRC+lF4VPTCzGkXwRJOEAYUcjg6fMFCut1D5b 3x+g8r1SaqFJC1Q5VDKP4WEVChRGKfcNosZXSB1IH7gsedzIKNh4s3p1GkeULBEe 3OpPBatZ+8TnxxdRNNxbEsqKB2FITflKWbUr+bsBG1PFsJyub1naGQt5RND7TFxP 1nAhBJ4kXHMX0Qva/dbE1uhbSgKKM+vqpdCW5FhVmKAxkyHtamGMO1k9oV0KAtq0 AtEpOBLjoqhk6SrGKxh1ILSpgFEK9qv5t2cNs2lmRXcek6rV -----END CERTIFICATE-----Generated at Wed Feb 4 06:49:21 2026 by rpki-client