This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/m47HXgiyl-tViDjimPhAsf_674A.roa File: m47HXgiyl-tViDjimPhAsf_674A.roa (raw, json) Hash identifier: NqvEoBKTT9KGrbpY8ish+Vbazh43CkIHNeyyKmpxe4s= Subject key identifier: 9B:8E:C7:5E:08:B2:97:EB:55:88:38:E2:98:F8:40:B1:FF:FA:EF:80 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA70D753896F18FE47EBB28ACE04DA1 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/m47HXgiyl-tViDjimPhAsf_674A.roa Signing time: Fri 02 Jan 2026 12:20:35 +0000 ROA not before: Fri 02 Jan 2026 12:20:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214906 IP address blocks: 2a0c:9a40:8e10::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:0d:75:38:96:f1:8f:e4:7e:bb:28:ac:e0:4d:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b8ec75e08b297eb558838e298f840b1fffaef80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:96:ac:f9:81:c9:ea:b4:1a:65:4e:ba:39:79: 70:7a:b7:f5:55:5a:f2:85:bd:ea:e0:a8:c7:14:c3: 55:52:6b:2b:0d:4b:e8:a2:bb:04:a5:40:69:f0:f2: cb:50:d2:8a:67:8d:49:9d:40:28:2b:0f:c8:bd:a4: f3:b2:56:64:db:4a:c4:28:72:33:d4:38:f4:80:65: 79:f5:ce:2a:2d:6c:49:e7:af:10:42:d8:5c:2b:2b: 2b:fe:88:61:4e:e9:14:27:4e:7a:0b:4e:19:63:53: d0:8d:28:d5:b0:5d:7d:e3:26:b5:e8:f5:17:17:17: 5a:8c:82:07:e0:6a:36:17:11:2b:9e:ff:7e:e3:53: f2:6a:c7:29:1f:b2:37:96:fa:0e:cf:50:27:e7:dc: 31:be:c1:89:5c:15:7b:0a:02:d6:b7:db:2c:40:a6: 57:b4:3b:9a:f5:3a:db:a1:ff:28:1d:09:ef:97:12: 1b:1b:1a:2e:32:29:60:ad:f9:94:a3:9b:09:c8:0a: de:c1:cb:f1:af:6b:a5:f7:77:12:12:ae:b5:8b:0a: 82:ce:3d:fe:1d:d3:e6:08:99:1f:ec:e6:b7:f8:eb: 3a:bc:ac:62:9a:bd:c5:a7:53:25:e5:9e:ab:24:cf: 7e:e0:92:49:ee:34:2e:19:cc:37:1c:70:4f:ca:f1: 1b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:8E:C7:5E:08:B2:97:EB:55:88:38:E2:98:F8:40:B1:FF:FA:EF:80 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/m47HXgiyl-tViDjimPhAsf_674A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8e10::/44 Signature Algorithm: sha256WithRSAEncryption 89:6a:8d:65:15:01:ce:a1:73:f8:bd:b6:52:83:73:2c:70:a9: cd:35:0b:4a:ca:3a:7f:ec:dc:da:6b:6f:c9:cd:92:71:af:eb: 9a:9e:2c:3c:65:de:eb:7b:b1:03:64:0c:01:fe:4b:79:0e:ae: fb:52:95:a6:d0:0e:3c:a3:9d:af:db:11:38:c0:0d:10:e3:be: b8:f8:8a:c2:b6:bc:15:1e:ba:aa:9e:fb:4c:f7:69:c8:23:c5: 54:52:5b:05:b1:3a:cb:ea:dc:46:44:c5:7c:96:fd:ae:d7:97: 87:33:45:3a:6a:50:ce:69:58:56:11:ce:46:b0:e5:bc:d9:a0: fc:9e:09:a6:12:87:ff:09:f5:53:9d:58:f2:a0:2c:5d:cd:a6: 99:b7:35:cf:4e:1b:01:7e:14:f4:00:ea:cb:6e:22:08:40:b4: b8:ad:39:47:19:31:34:dc:2d:54:33:ef:3a:10:46:76:75:c5: ba:0e:cd:ad:15:24:ab:a9:ce:35:c2:14:ca:5d:46:92:fb:e9: fa:18:82:96:fd:fa:d2:5e:72:44:45:a4:a7:1b:99:b4:d8:ba: 6b:78:01:40:a3:d4:27:f4:d5:9a:62:71:06:44:29:61:16:a6: 9c:43:31:89:38:f3:7f:08:65:6b:af:df:02:c6:09:4e:ed:8a: 7a:64:9d:82 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pw11OJbxj+R+uyis4E2hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjhlYzc1ZTA4YjI5N2ViNTU4ODM4ZTI5OGY4NDBiMWZmZmFlZjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJas+YHJ6rQaZU66OXlwerf1VVry hb3q4KjHFMNVUmsrDUvoorsEpUBp8PLLUNKKZ41JnUAoKw/IvaTzslZk20rEKHIz 1Dj0gGV59c4qLWxJ568QQthcKysr/ohhTukUJ056C04ZY1PQjSjVsF194ya16PUX FxdajIIH4Go2FxErnv9+41PyascpH7I3lvoOz1An59wxvsGJXBV7CgLWt9ssQKZX tDua9Trbof8oHQnvlxIbGxouMilgrfmUo5sJyArewcvxr2ul93cSEq61iwqCzj3+ HdPmCJkf7Oa3+Os6vKximr3Fp1Ml5Z6rJM9+4JJJ7jQuGcw3HHBPyvEbRQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJuOx14IspfrVYg44pj4QLH/+u+AMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvbTQ3SFhnaXlsLXRWaURqaW1QaEFzZl82NzRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgyaQI4Q MA0GCSqGSIb3DQEBCwUAA4IBAQCJao1lFQHOoXP4vbZSg3MscKnNNQtKyjp/7Nza a2/JzZJxr+uaniw8Zd7re7EDZAwB/kt5Dq77UpWm0A48o52v2xE4wA0Q4764+IrC trwVHrqqnvtM92nII8VUUlsFsTrL6txGRMV8lv2u15eHM0U6alDOaVhWEc5GsOW8 2aD8ngmmEof/CfVTnVjyoCxdzaaZtzXPThsBfhT0AOrLbiIIQLS4rTlHGTE03C1U M+86EEZ2dcW6Ds2tFSSrqc41whTKXUaS++n6GIKW/frSXnJERaSnG5m02LpreAFA o9Qn9NWaYnEGRClhFqacQzGJOPN/CGVrr98CxglO7Yp6ZJ2C -----END CERTIFICATE-----Generated at Tue Jan 20 00:21:12 2026 by rpki-client