This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/joMsKgKNBvK4omvafZGOijTXeYo.roa File: joMsKgKNBvK4omvafZGOijTXeYo.roa (raw, json) Hash identifier: rlR/V94rXy/TP4BSVja44w8ri/nJnb6SFRQEc9Vk800= Subject key identifier: 8E:83:2C:2A:02:8D:06:F2:B8:A2:6B:DA:7D:91:8E:8A:34:D7:79:8A Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6D206511AE067AEF07FD5F6D79AA3 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/joMsKgKNBvK4omvafZGOijTXeYo.roa Signing time: Fri 02 Jan 2026 12:20:20 +0000 ROA not before: Fri 02 Jan 2026 12:20:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 142561 IP address blocks: 2a0c:9a40:8c82::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:d2:06:51:1a:e0:67:ae:f0:7f:d5:f6:d7:9a:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e832c2a028d06f2b8a26bda7d918e8a34d7798a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:9f:b2:78:40:91:0f:01:97:9b:f2:ff:83:bb: 89:84:52:a8:5b:db:99:43:8f:0f:97:e9:82:96:f8: a5:b9:3b:73:1b:b9:c3:8d:22:33:16:04:27:96:9f: 44:9d:d2:78:de:d0:9c:de:92:0a:31:58:ad:2d:6e: 37:e2:df:24:86:5c:1a:a8:9c:a6:6b:84:92:52:c7: 8f:c9:9c:a1:9d:01:45:fb:22:27:b3:56:9d:8d:45: 10:22:53:31:cf:67:1a:8b:78:d1:d5:4f:ca:f4:c4: f5:91:d4:4d:fe:82:5b:b2:28:6f:9c:0c:3e:da:1b: 29:e9:6b:8c:38:e3:1a:3d:2b:26:a5:5a:ab:da:28: ff:ab:74:35:5e:53:7d:72:8c:2c:0e:99:20:e5:55: 75:66:b0:f5:f3:dc:a8:90:bd:66:2e:e9:d9:63:ef: 52:bd:d9:13:2d:6d:4a:b3:0a:eb:c0:45:0e:c6:e2: 92:33:54:00:c2:3f:6c:26:fc:ad:59:c5:ed:e8:87: 90:d2:68:2e:cf:a3:fd:60:5e:f9:51:0f:ae:22:11: f1:e8:bf:23:39:7e:f9:0b:24:26:7b:eb:ed:95:d0: ff:a0:4c:77:68:38:32:c6:f1:ba:fa:34:17:64:c5: f0:a5:be:9f:f7:f0:fe:60:2b:c5:81:01:96:b6:29: 14:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:83:2C:2A:02:8D:06:F2:B8:A2:6B:DA:7D:91:8E:8A:34:D7:79:8A X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/joMsKgKNBvK4omvafZGOijTXeYo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8c82::/48 Signature Algorithm: sha256WithRSAEncryption ba:c9:1d:8a:41:b6:3d:c8:15:2d:20:33:4f:32:c6:b7:99:12: e6:20:05:8e:3c:75:3d:78:97:f8:b3:a8:60:75:d3:0b:9e:8d: ab:c4:ed:a4:4f:da:06:7b:b1:8e:36:88:62:30:3c:6f:41:8c: 28:fe:d7:40:ba:88:ec:b9:81:04:d5:71:18:98:9e:c1:73:3f: 8e:7a:5f:15:48:10:b0:b1:85:28:a3:0d:f8:4b:d4:c6:70:23: 19:e3:78:db:76:e8:8c:17:78:3c:a3:84:d8:c3:48:b2:bf:0b: 57:91:3b:44:44:8c:9e:bb:57:54:87:e8:b4:e3:0a:e9:40:d9: 9a:83:0e:b5:71:79:99:e9:d0:56:58:c8:42:ed:b1:99:4c:c3: 97:8f:0b:68:44:95:80:f1:bd:b3:81:83:36:88:6c:e6:76:ad: 3c:41:8c:a5:21:95:1e:05:04:3f:09:eb:f6:44:5f:c6:7d:0a: db:fe:d3:3b:18:15:7a:f6:8a:ad:71:0c:f8:68:74:18:20:4e: e9:4e:30:eb:de:28:e3:95:50:cc:09:83:11:ec:c3:6a:ee:a7: f0:5c:05:aa:6f:7e:41:a5:f6:05:7b:eb:33:f4:43:ee:c7:71: ff:03:fb:9a:74:f7:9e:12:e6:f6:52:fc:a2:b5:76:6c:76:d3: b3:33:d5:bb -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+ptIGURrgZ67wf9X215qjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTgzMmMyYTAyOGQwNmYyYjhhMjZiZGE3ZDkxOGU4YTM0ZDc3OThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2p+yeECRDwGXm/L/g7uJhFKoW9uZ Q48Pl+mClviluTtzG7nDjSIzFgQnlp9EndJ43tCc3pIKMVitLW434t8khlwaqJym a4SSUsePyZyhnQFF+yIns1adjUUQIlMxz2cai3jR1U/K9MT1kdRN/oJbsihvnAw+ 2hsp6WuMOOMaPSsmpVqr2ij/q3Q1XlN9cowsDpkg5VV1ZrD189yokL1mLunZY+9S vdkTLW1KswrrwEUOxuKSM1QAwj9sJvytWcXt6IeQ0mguz6P9YF75UQ+uIhHx6L8j OX75CyQme+vtldD/oEx3aDgyxvG6+jQXZMXwpb6f9/D+YCvFgQGWtikUGQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFI6DLCoCjQbyuKJr2n2Rjoo013mKMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvam9Nc0tnS05Cdks0b212YWZaR09palRYZVlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIyC MA0GCSqGSIb3DQEBCwUAA4IBAQC6yR2KQbY9yBUtIDNPMsa3mRLmIAWOPHU9eJf4 s6hgddMLno2rxO2kT9oGe7GONohiMDxvQYwo/tdAuojsuYEE1XEYmJ7Bcz+Oel8V SBCwsYUoow34S9TGcCMZ43jbduiMF3g8o4TYw0iyvwtXkTtERIyeu1dUh+i04wrp QNmagw61cXmZ6dBWWMhC7bGZTMOXjwtoRJWA8b2zgYM2iGzmdq08QYylIZUeBQQ/ Cev2RF/GfQrb/tM7GBV69oqtcQz4aHQYIE7pTjDr3ijjlVDMCYMR7MNq7qfwXAWq b35BpfYFe+sz9EPux3H/A/uadPeeEub2UvyitXZsdtOzM9W7 -----END CERTIFICATE-----Generated at Tue Jan 20 09:03:37 2026 by rpki-client