This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/no1Tx7tP2fF4P8eB0haHy-fpOlk.roa File: no1Tx7tP2fF4P8eB0haHy-fpOlk.roa (raw, json) Hash identifier: W5yRyAqrsCLW9Mp7wbXyfYAN3aIeaw2S/kadAyWr9UQ= Subject key identifier: 9E:8D:53:C7:BB:4F:D9:F1:78:3F:C7:81:D2:16:87:CB:E7:E9:3A:59 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6FD6BABFA5248D32D8B490137C6FE Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/no1Tx7tP2fF4P8eB0haHy-fpOlk.roa Signing time: Fri 02 Jan 2026 12:20:31 +0000 ROA not before: Fri 02 Jan 2026 12:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212057 IP address blocks: 2a0c:9a40:8860::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:fd:6b:ab:fa:52:48:d3:2d:8b:49:01:37:c6:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e8d53c7bb4fd9f1783fc781d21687cbe7e93a59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0e:40:aa:43:1a:d7:1c:b9:ff:ba:11:d6:c9: 94:b2:bf:cb:47:d4:25:ff:fa:cc:57:85:02:05:0b: 2c:6e:d1:b7:f1:3d:88:f8:d5:da:01:c9:7e:ce:fa: 6e:71:dc:9a:f1:1f:24:3b:5f:98:23:5a:c6:e4:34: 24:51:ad:6c:37:06:5a:b1:e9:bd:6b:a3:ff:c7:68: 82:8f:d0:1b:ab:8b:9f:ba:9c:82:f4:a2:ba:bf:8e: 1c:39:85:ea:1a:91:1a:8f:60:1e:e4:c3:53:11:37: 58:e4:07:65:ce:95:bf:47:a2:d3:3a:43:96:d0:d9: b0:33:0c:68:31:8f:75:d1:52:d9:88:8a:f0:fd:dd: 52:40:e6:ef:c0:c4:6f:44:82:d6:95:58:91:58:0d: 65:17:08:5d:bc:72:32:a0:46:95:00:bd:68:74:d8: a0:49:cc:9f:8a:6e:6e:ea:3a:48:2a:11:6f:ed:74: 1c:71:e6:bf:ea:6b:80:1d:e6:af:c0:35:9f:01:3a: 25:73:1d:e3:64:65:0a:a7:93:24:04:e8:ff:6c:4a: 48:ef:ef:b8:02:9f:b8:96:e4:89:b7:3e:df:e6:02: 47:27:bb:8e:68:ed:3f:9b:e1:70:b7:41:3d:85:11: 68:f6:a0:98:a1:d8:21:57:f7:80:a4:62:58:94:49: a3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:8D:53:C7:BB:4F:D9:F1:78:3F:C7:81:D2:16:87:CB:E7:E9:3A:59 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/no1Tx7tP2fF4P8eB0haHy-fpOlk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8860::/44 Signature Algorithm: sha256WithRSAEncryption 50:85:43:be:92:1f:54:e9:e4:57:d3:5e:e0:7a:2c:23:eb:62: 4e:86:ba:13:4f:82:cb:c1:88:68:cc:fb:75:37:10:38:16:55: d6:5d:fb:0f:a3:5a:31:5b:8e:2d:09:5e:2b:29:2c:93:ff:a9: 94:eb:13:78:0e:f6:00:04:d3:07:ef:ad:98:d7:68:7b:94:75: 9c:fe:91:f7:2e:6b:91:84:67:d7:1b:3a:1f:50:74:67:0f:5d: ab:d4:51:52:70:05:58:cb:96:4c:7c:89:d3:32:f8:55:b3:b1: df:52:18:5c:db:db:fa:31:69:2b:27:a6:28:f2:6b:58:40:7a: 02:9e:0d:50:c0:0a:b9:0e:75:fd:db:49:30:f0:9a:0f:0d:cb: 77:43:cc:9b:0f:93:b6:58:58:93:df:9c:81:88:7c:f1:b3:45: 25:e1:2e:3c:74:2b:46:58:11:e2:6f:91:5d:b7:6c:f8:6c:66: ca:e6:6d:7e:45:11:bc:5b:3b:6c:da:a2:87:ce:ba:62:3d:15: 22:84:8b:42:1d:24:5b:3a:b9:d8:d9:24:95:81:64:dc:d4:c6: e3:2f:5d:9e:20:10:4e:e4:8c:21:1f:d2:3d:7d:e4:c2:2a:01: 86:b6:3d:12:45:4e:c5:2e:29:37:f6:39:98:f7:7b:a9:37:be: 41:db:71:80 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pv1rq/pSSNMti0kBN8b+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZThkNTNjN2JiNGZkOWYxNzgzZmM3ODFkMjE2ODdjYmU3ZTkzYTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArA5AqkMa1xy5/7oR1smUsr/LR9Ql //rMV4UCBQssbtG38T2I+NXaAcl+zvpucdya8R8kO1+YI1rG5DQkUa1sNwZasem9 a6P/x2iCj9Abq4ufupyC9KK6v44cOYXqGpEaj2Ae5MNTETdY5AdlzpW/R6LTOkOW 0NmwMwxoMY910VLZiIrw/d1SQObvwMRvRILWlViRWA1lFwhdvHIyoEaVAL1odNig Scyfim5u6jpIKhFv7XQccea/6muAHeavwDWfATolcx3jZGUKp5MkBOj/bEpI7++4 Ap+4luSJtz7f5gJHJ7uOaO0/m+Fwt0E9hRFo9qCYodghV/eApGJYlEmj7QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJ6NU8e7T9nxeD/HgdIWh8vn6TpZMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvbm8xVHg3dFAyZkY0UDhlQjBoYUh5LWZwT2xrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgyaQIhg MA0GCSqGSIb3DQEBCwUAA4IBAQBQhUO+kh9U6eRX017geiwj62JOhroTT4LLwYho zPt1NxA4FlXWXfsPo1oxW44tCV4rKSyT/6mU6xN4DvYABNMH762Y12h7lHWc/pH3 LmuRhGfXGzofUHRnD12r1FFScAVYy5ZMfInTMvhVs7HfUhhc29v6MWkrJ6Yo8mtY QHoCng1QwAq5DnX920kw8JoPDct3Q8ybD5O2WFiT35yBiHzxs0Ul4S48dCtGWBHi b5Fdt2z4bGbK5m1+RRG8Wzts2qKHzrpiPRUihItCHSRbOrnY2SSVgWTc1MbjL12e IBBO5IwhH9I9feTCKgGGtj0SRU7FLik39jmY93upN75B23GA -----END CERTIFICATE-----Generated at Tue Jan 20 09:03:15 2026 by rpki-client