This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/nPPS0RMNaGh8UxvyAfjyW0eCXQ0.roa File: nPPS0RMNaGh8UxvyAfjyW0eCXQ0.roa (raw, json) Hash identifier: 0VH1mbEYBCDd1CLP/Dfi4zpUBQ2kKP15cCg877tH9QE= Subject key identifier: 9C:F3:D2:D1:13:0D:68:68:7C:53:1B:F2:01:F8:F2:5B:47:82:5D:0D Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6CD0FD671607C1E810F786857FEFC Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/nPPS0RMNaGh8UxvyAfjyW0eCXQ0.roa Signing time: Fri 02 Jan 2026 12:20:19 +0000 ROA not before: Fri 02 Jan 2026 12:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58336 IP address blocks: 2a0c:9a40:9e00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:cd:0f:d6:71:60:7c:1e:81:0f:78:68:57:fe:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9cf3d2d1130d68687c531bf201f8f25b47825d0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ff:fa:8a:35:df:e6:91:74:20:77:ac:eb:a6: 1c:66:7c:98:4b:8a:fb:1b:9b:f6:b0:62:1a:80:f9: 22:76:3f:77:22:9b:2a:2c:e5:2b:73:65:e7:a4:5b: 0f:c2:ef:08:41:e5:25:26:3b:00:c4:cd:cd:79:0c: 53:0d:5c:2f:65:5b:f1:a6:36:79:aa:b9:65:4e:ee: 14:cf:bc:33:44:59:20:7e:ef:25:b5:38:5b:b9:57: cc:ab:e7:77:75:3f:78:13:0b:82:84:18:1e:c9:0e: e6:ac:fa:a5:49:0a:ce:6d:fd:ca:b6:ee:78:cf:e5: 49:88:86:00:47:48:30:d1:18:e3:43:6f:6b:ed:66: e1:1b:dc:39:d5:3f:4b:4a:99:be:9a:f9:54:85:d9: 49:10:00:01:d7:26:05:db:0a:a8:0c:58:b5:17:4d: 9a:aa:a4:53:d5:aa:5b:b9:aa:ce:48:c6:e6:91:63: 2a:fd:61:fa:8d:2b:60:bf:a7:e6:c7:d3:78:b3:3c: 02:28:19:72:02:76:43:1d:11:c6:2e:e1:32:be:d8: 96:8c:d4:b7:b2:b6:5e:d6:06:ed:1d:40:c0:b7:03: a4:36:c9:1b:aa:ec:12:18:97:00:7a:8a:40:cc:5e: c2:29:ec:d2:07:2c:d4:4a:65:2b:9b:7c:99:79:1b: 33:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F3:D2:D1:13:0D:68:68:7C:53:1B:F2:01:F8:F2:5B:47:82:5D:0D X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/nPPS0RMNaGh8UxvyAfjyW0eCXQ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:9e00::/40 Signature Algorithm: sha256WithRSAEncryption 42:f0:06:61:13:e0:2c:97:71:71:a3:89:19:c1:63:31:91:56: 94:10:c6:78:40:1b:b2:a7:52:15:d3:0f:32:26:16:66:c8:7f: 21:84:08:50:1c:3a:9f:2b:49:a1:ab:6e:fc:05:d3:07:a3:21: 52:85:a7:95:86:db:e0:7f:0c:94:6c:89:83:08:98:14:2f:35: 4d:39:f5:b8:c1:b0:eb:f7:e1:71:9e:4b:24:4a:1c:6b:d1:23: ab:36:a4:f7:1c:5b:9a:97:87:36:3c:89:77:bd:0b:42:8b:0f: dc:4c:fe:a1:7b:3f:2d:b0:70:04:1a:2d:32:60:ce:e3:93:6a: 5f:36:13:5b:08:43:32:ae:ea:35:e8:01:bb:8c:53:c8:5f:6c: db:d3:b7:57:8a:b1:53:17:ba:27:7f:43:83:ac:74:6a:77:48: 52:54:6c:aa:93:23:0e:69:89:5a:a6:89:82:5a:ec:f8:4e:cd: 12:ad:79:fb:5f:0b:92:f7:51:d8:41:66:ec:f7:2b:04:7b:a9: 51:51:5b:fc:86:45:91:c1:54:12:2a:e7:6e:9f:18:4e:de:7f: ab:61:4f:c0:d5:cb:7b:d0:b2:75:67:e7:6f:cb:02:63:22:7c: 92:a0:e1:f8:85:c2:b2:66:90:7f:93:8b:2d:39:a6:cb:30:d0: 7f:3e:2d:0f -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+ps0P1nFgfB6BD3hoV/78MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2YzZDJkMTEzMGQ2ODY4N2M1MzFiZjIwMWY4ZjI1YjQ3ODI1ZDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3v/6ijXf5pF0IHes66YcZnyYS4r7 G5v2sGIagPkidj93IpsqLOUrc2XnpFsPwu8IQeUlJjsAxM3NeQxTDVwvZVvxpjZ5 qrllTu4Uz7wzRFkgfu8ltThbuVfMq+d3dT94EwuChBgeyQ7mrPqlSQrObf3Ktu54 z+VJiIYAR0gw0RjjQ29r7WbhG9w51T9LSpm+mvlUhdlJEAAB1yYF2wqoDFi1F02a qqRT1apbuarOSMbmkWMq/WH6jStgv6fmx9N4szwCKBlyAnZDHRHGLuEyvtiWjNS3 srZe1gbtHUDAtwOkNskbquwSGJcAeopAzF7CKezSByzUSmUrm3yZeRszkwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFJzz0tETDWhofFMb8gH48ltHgl0NMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvblBQUzBSTU5hR2g4VXh2eUFmanlXMGVDWFEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgyaQJ4w DQYJKoZIhvcNAQELBQADggEBAELwBmET4CyXcXGjiRnBYzGRVpQQxnhAG7KnUhXT DzImFmbIfyGECFAcOp8rSaGrbvwF0wejIVKFp5WG2+B/DJRsiYMImBQvNU059bjB sOv34XGeSyRKHGvRI6s2pPccW5qXhzY8iXe9C0KLD9xM/qF7Py2wcAQaLTJgzuOT al82E1sIQzKu6jXoAbuMU8hfbNvTt1eKsVMXuid/Q4OsdGp3SFJUbKqTIw5piVqm iYJa7PhOzRKteftfC5L3UdhBZuz3KwR7qVFRW/yGRZHBVBIq526fGE7ef6thT8DV y3vQsnVn52/LAmMifJKg4fiFwrJmkH+Tiy05pssw0H8+LQ8= -----END CERTIFICATE-----Generated at Tue Jan 20 09:04:38 2026 by rpki-client