This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/n6Vs4-Vf-6AvWaS9hqBaM-02VoE.roa File: n6Vs4-Vf-6AvWaS9hqBaM-02VoE.roa (raw, json) Hash identifier: nblE2BwIvl+Y40lUBMMgAKec+LfevVznSQCnyKG8s88= Subject key identifier: 9F:A5:6C:E3:E5:5F:FB:A0:2F:59:A4:BD:86:A0:5A:33:ED:36:56:81 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6EF1BC0620C84EACAF753A5A91764 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/n6Vs4-Vf-6AvWaS9hqBaM-02VoE.roa Signing time: Fri 02 Jan 2026 12:20:27 +0000 ROA not before: Fri 02 Jan 2026 12:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207414 IP address blocks: 2a0c:9a40:8280::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:ef:1b:c0:62:0c:84:ea:ca:f7:53:a5:a9:17:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9fa56ce3e55ffba02f59a4bd86a05a33ed365681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:72:5b:2a:c1:ee:ea:ad:8e:25:62:84:b0:5e: 0f:e2:6e:12:2a:2f:4d:49:c3:95:f2:6e:64:48:93: 76:e3:48:5c:be:35:0e:8f:af:98:c9:8b:11:f7:fa: ae:8b:18:8c:60:5c:d3:c8:6c:41:16:02:bb:f6:92: 28:b2:21:c7:6f:56:78:19:3d:0c:41:0f:54:fd:b6: 4d:f5:2a:df:d6:f0:3a:5e:ff:8b:7d:0f:3b:35:16: f0:dc:f5:5e:1b:7e:ef:43:f7:71:4a:ac:af:15:0f: 2d:c5:47:5c:76:16:e6:34:cd:6f:59:c9:1c:5f:9a: 32:75:93:c4:27:59:78:8d:f8:7b:44:91:74:c5:26: ec:52:ca:27:04:44:76:a8:fa:ed:5b:10:06:c2:80: 2e:02:94:7b:07:d5:4c:6a:c1:f0:21:9a:4b:33:ae: fd:6e:41:b4:95:a4:b8:2e:21:8e:f7:8c:9e:97:cd: 12:3b:d4:5d:f2:f0:b6:c8:62:89:d1:fd:a5:78:0a: f2:7c:e1:ba:97:bb:ca:9a:be:6a:96:e3:3f:09:78: d3:24:b2:0a:86:fb:5f:79:bc:04:c7:d8:48:0a:90: ce:2c:63:92:be:7a:69:19:29:0f:9d:d6:5f:69:67: eb:b4:09:f3:b2:15:a9:b0:f3:b6:24:e8:2f:fd:4d: ad:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:A5:6C:E3:E5:5F:FB:A0:2F:59:A4:BD:86:A0:5A:33:ED:36:56:81 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/n6Vs4-Vf-6AvWaS9hqBaM-02VoE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8280::/48 Signature Algorithm: sha256WithRSAEncryption cb:28:05:a2:c6:6a:ab:1f:1c:ae:9a:75:3b:86:c2:08:9b:93: 27:85:88:8e:4e:7b:92:14:7d:1d:eb:65:31:e7:aa:f6:c9:05: a7:b1:3b:05:aa:f9:92:ec:bf:76:0c:27:fb:89:94:25:ae:40: 79:3f:9b:18:ec:fc:8a:91:8d:83:a8:a5:b1:f8:9f:4d:08:33: 42:01:7f:bb:5f:e4:4b:14:7d:fa:6f:88:5f:7f:26:32:1f:2e: 2b:80:c0:b5:b9:3f:e0:d2:91:80:de:ca:ac:4e:13:7c:b6:62: 06:8b:d7:5f:ca:84:54:f6:5f:55:a9:16:3e:fd:70:d7:da:7b: ed:3f:ad:bb:cf:e9:07:44:5e:d9:8f:e4:ca:1f:e4:cf:2f:71: c1:3e:71:dd:cd:ca:80:77:e4:83:e6:93:2c:b2:f6:0a:7a:61: fd:bd:97:1a:e7:65:be:c7:23:35:e3:64:ef:42:7d:03:08:71: 34:3b:f2:0d:17:e5:e3:c5:83:b5:a8:02:43:51:75:76:d3:55: 1f:6a:bb:e3:39:fd:50:f6:57:7c:0b:fa:5e:e9:cf:6c:26:9c: fc:34:4d:0d:33:25:8d:65:70:42:6d:24:d3:0e:10:83:ea:ec: 0d:79:4a:8a:87:d2:4f:a1:a7:12:26:e1:8b:96:47:cc:c7:5b: 9c:f8:e7:5e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pu8bwGIMhOrK91OlqRdkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZmE1NmNlM2U1NWZmYmEwMmY1OWE0YmQ4NmEwNWEzM2VkMzY1NjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3JbKsHu6q2OJWKEsF4P4m4SKi9N ScOV8m5kSJN240hcvjUOj6+YyYsR9/quixiMYFzTyGxBFgK79pIosiHHb1Z4GT0M QQ9U/bZN9Srf1vA6Xv+LfQ87NRbw3PVeG37vQ/dxSqyvFQ8txUdcdhbmNM1vWckc X5oydZPEJ1l4jfh7RJF0xSbsUsonBER2qPrtWxAGwoAuApR7B9VMasHwIZpLM679 bkG0laS4LiGO94yel80SO9Rd8vC2yGKJ0f2leAryfOG6l7vKmr5qluM/CXjTJLIK hvtfebwEx9hICpDOLGOSvnppGSkPndZfaWfrtAnzshWpsPO2JOgv/U2tgQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJ+lbOPlX/ugL1mkvYagWjPtNlaBMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvbjZWczQtVmYtNkF2V2FTOWhxQmFNLTAyVm9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIKA MA0GCSqGSIb3DQEBCwUAA4IBAQDLKAWixmqrHxyumnU7hsIIm5MnhYiOTnuSFH0d 62Ux56r2yQWnsTsFqvmS7L92DCf7iZQlrkB5P5sY7PyKkY2DqKWx+J9NCDNCAX+7 X+RLFH36b4hffyYyHy4rgMC1uT/g0pGA3sqsThN8tmIGi9dfyoRU9l9VqRY+/XDX 2nvtP627z+kHRF7Zj+TKH+TPL3HBPnHdzcqAd+SD5pMssvYKemH9vZca52W+xyM1 42TvQn0DCHE0O/INF+XjxYO1qAJDUXV201UfarvjOf1Q9ld8C/pe6c9sJpz8NE0N MyWNZXBCbSTTDhCD6uwNeUqKh9JPoacSJuGLlkfMx1uc+Ode -----END CERTIFICATE-----Generated at Tue Jan 20 09:05:16 2026 by rpki-client