This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/l8y_CZFtjy7UxsBnsA6SmEaz_Pg.roa File: l8y_CZFtjy7UxsBnsA6SmEaz_Pg.roa (raw, json) Hash identifier: IpVRL/J0OqdoRHt5k7gg2Ru0zVsMQjS+jp5yBXK+6a8= Subject key identifier: 97:CC:BF:09:91:6D:8F:2E:D4:C6:C0:67:B0:0E:92:98:46:B3:FC:F8 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6D3AA36B2BB4046850F501E73D36E Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/l8y_CZFtjy7UxsBnsA6SmEaz_Pg.roa Signing time: Fri 02 Jan 2026 12:20:20 +0000 ROA not before: Fri 02 Jan 2026 12:20:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197464 IP address blocks: 2a0c:9a40:8580::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:d3:aa:36:b2:bb:40:46:85:0f:50:1e:73:d3:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=97ccbf09916d8f2ed4c6c067b00e929846b3fcf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4c:2a:0c:2a:66:6d:78:73:99:0b:54:1c:8d: ff:df:d6:ee:98:2c:16:79:0c:fb:87:8d:59:b6:dc: 5b:5b:2e:32:10:ea:63:fa:cc:16:1d:92:6b:4e:58: 60:95:fa:5b:f9:8d:6e:5b:d5:2e:28:4f:b2:80:ac: 13:46:ef:0e:a4:d6:4e:81:c1:fe:d6:f6:4a:bb:f6: dd:19:1a:6a:b5:b9:ff:74:af:df:b7:63:6a:ea:b3: 5a:45:6e:55:18:0e:3b:7f:d8:c8:71:ee:de:b9:8c: ba:70:92:8c:a7:a2:a0:15:fa:5c:f6:e3:06:9c:26: 17:ea:e6:08:2f:6f:04:9e:f0:67:77:1a:1a:fc:bf: 02:b1:52:7f:a0:b5:21:be:29:0c:96:ed:df:78:95: 25:28:7d:40:81:28:72:87:16:d0:75:0f:92:a2:ad: 8f:4c:8c:ec:dd:d2:06:62:50:0d:e6:58:93:4e:a3: 61:58:f5:e8:7e:00:ca:e7:af:e4:ea:20:1b:43:cb: ac:90:a8:1c:36:60:29:b8:f5:20:c4:43:42:dd:68: c1:8e:35:5a:6e:35:7f:26:10:54:9c:71:f8:be:85: a4:76:9d:d0:00:fa:59:36:b1:0e:dd:e7:31:fa:24: 8a:53:7b:2c:5b:cc:62:42:06:36:69:a2:ed:a6:b7: 51:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:CC:BF:09:91:6D:8F:2E:D4:C6:C0:67:B0:0E:92:98:46:B3:FC:F8 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/l8y_CZFtjy7UxsBnsA6SmEaz_Pg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8580::/44 Signature Algorithm: sha256WithRSAEncryption 65:8d:a9:95:69:39:ea:a7:de:0b:ba:fd:06:39:87:b7:5a:19: 52:34:19:64:98:66:cc:25:43:a1:c7:a0:59:ed:fd:ea:9b:c9: ea:3b:12:62:94:9b:01:f7:d5:47:40:db:16:78:eb:de:57:75: 10:c5:3c:b6:7f:e6:b2:59:7d:78:4f:e7:fe:3a:80:2f:35:9e: ab:e4:54:16:1b:7d:35:6a:47:de:0b:04:1a:0a:68:03:44:db: ee:8e:6e:bc:c5:7f:8b:b6:15:4c:4e:c6:03:e1:e0:ac:54:1e: 91:7e:6d:af:0d:54:af:dd:2f:93:94:17:a3:e6:c1:9d:01:1b: 14:a8:2c:b9:9f:0f:00:cf:61:d4:b3:f5:63:51:da:6b:33:e6: 46:4f:0c:84:0e:ec:ec:cd:0e:e9:20:8d:18:52:91:f1:19:ba: af:d0:ae:09:e4:17:31:63:b4:7c:2f:dd:c8:41:4d:9f:57:c0: 92:cf:f9:dc:45:53:a4:47:1f:01:03:da:e9:24:47:40:60:04: 95:20:62:95:df:9c:55:97:f3:2d:70:61:eb:a1:43:89:a4:06: a1:97:0f:90:36:24:d0:86:52:a8:0c:d7:61:a9:1c:99:36:fe: 59:73:b7:a5:78:55:49:28:3b:d5:43:e8:cc:89:ce:c0:43:d9: 79:60:f1:bb -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+ptOqNrK7QEaFD1Aec9NuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5N2NjYmYwOTkxNmQ4ZjJlZDRjNmMwNjdiMDBlOTI5ODQ2YjNmY2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0wqDCpmbXhzmQtUHI3/39bumCwW eQz7h41ZttxbWy4yEOpj+swWHZJrTlhglfpb+Y1uW9UuKE+ygKwTRu8OpNZOgcH+ 1vZKu/bdGRpqtbn/dK/ft2Nq6rNaRW5VGA47f9jIce7euYy6cJKMp6KgFfpc9uMG nCYX6uYIL28EnvBndxoa/L8CsVJ/oLUhvikMlu3feJUlKH1AgShyhxbQdQ+Soq2P TIzs3dIGYlAN5liTTqNhWPXofgDK56/k6iAbQ8uskKgcNmApuPUgxENC3WjBjjVa bjV/JhBUnHH4voWkdp3QAPpZNrEO3ecx+iSKU3ssW8xiQgY2aaLtprdRLwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJfMvwmRbY8u1MbAZ7AOkphGs/z4MB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvbDh5X0NaRnRqeTdVeHNCbnNBNlNtRWF6X1BnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgyaQIWA MA0GCSqGSIb3DQEBCwUAA4IBAQBljamVaTnqp94Luv0GOYe3WhlSNBlkmGbMJUOh x6BZ7f3qm8nqOxJilJsB99VHQNsWeOveV3UQxTy2f+ayWX14T+f+OoAvNZ6r5FQW G301akfeCwQaCmgDRNvujm68xX+LthVMTsYD4eCsVB6Rfm2vDVSv3S+TlBej5sGd ARsUqCy5nw8Az2HUs/VjUdprM+ZGTwyEDuzszQ7pII0YUpHxGbqv0K4J5BcxY7R8 L93IQU2fV8CSz/ncRVOkRx8BA9rpJEdAYASVIGKV35xVl/MtcGHroUOJpAahlw+Q NiTQhlKoDNdhqRyZNv5Zc7eleFVJKDvVQ+jMic7AQ9l5YPG7 -----END CERTIFICATE-----Generated at Tue Jan 20 09:06:50 2026 by rpki-client