This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/p-jVQOvU8O0P3fanqgNMPjxZ9-M.roa File: p-jVQOvU8O0P3fanqgNMPjxZ9-M.roa (raw, json) Hash identifier: V95AkDmXsG6R5Q19ZSujbxPAm0sbv+1N8M563rnRI5U= Subject key identifier: A7:E8:D5:40:EB:D4:F0:ED:0F:DD:F6:A7:AA:03:4C:3E:3C:59:F7:E3 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA70E7C94ED955E8D21C01F8AF4D859 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/p-jVQOvU8O0P3fanqgNMPjxZ9-M.roa Signing time: Fri 02 Jan 2026 12:20:35 +0000 ROA not before: Fri 02 Jan 2026 12:20:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215080 IP address blocks: 2a0c:9a40:8590::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:0e:7c:94:ed:95:5e:8d:21:c0:1f:8a:f4:d8:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a7e8d540ebd4f0ed0fddf6a7aa034c3e3c59f7e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a5:ac:6e:a2:ea:33:a4:ba:ad:57:65:e1:f7: dc:56:1e:55:a4:ee:5b:98:70:3f:a7:ff:2c:ad:cd: b4:17:39:2f:32:9c:93:20:87:78:99:9a:d1:d0:1e: 55:36:5a:0e:ce:3a:90:8d:de:56:b6:93:45:01:61: a3:83:ae:2b:57:01:b0:59:ad:e5:4d:5d:f1:f6:ce: 40:0f:ad:86:34:cc:69:9e:04:49:a8:30:b5:37:ba: 64:12:22:37:a9:87:dc:70:34:7d:c6:65:0d:d6:0b: d2:55:d4:30:02:48:33:53:c9:bc:79:f1:0e:85:d2: 6b:ca:4e:0f:40:72:05:b6:83:6c:38:06:97:2f:c6: 3f:f7:e1:2d:bb:2a:a5:fd:22:7c:0d:11:5b:15:d4: 77:7a:cd:12:a1:35:22:ba:51:87:bd:8e:3e:7a:fb: cf:4d:cb:47:83:b7:45:4d:ba:0e:2a:24:ab:3e:9f: 77:ca:c8:2d:b7:cb:1e:e4:20:07:ba:84:b2:5d:6e: c7:4a:3f:84:cf:82:25:cf:43:98:fd:ad:6e:bc:80: 7e:c6:bc:bd:3c:c9:e8:e3:18:c6:b2:70:27:d9:5e: 8e:4e:2c:3a:a9:e9:c3:d4:83:82:22:4e:a0:fa:b6: 2b:ab:36:d4:38:c5:1a:03:36:b3:6b:04:6a:e3:f9: 37:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:E8:D5:40:EB:D4:F0:ED:0F:DD:F6:A7:AA:03:4C:3E:3C:59:F7:E3 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/p-jVQOvU8O0P3fanqgNMPjxZ9-M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8590::/48 Signature Algorithm: sha256WithRSAEncryption c3:cc:98:c3:3a:fd:df:30:50:5a:58:7d:82:8e:09:e4:46:f8: 27:06:74:b9:38:23:a4:4c:2f:d9:97:04:ff:6c:b2:6b:04:24: 63:3e:36:11:b3:73:d8:71:c9:d7:28:14:9a:fe:a6:1b:54:75: 8f:52:f9:d3:e5:0f:5b:96:82:99:3d:b3:c1:f9:4e:67:b4:8f: 32:1b:31:ae:89:6d:81:ec:6e:71:50:02:58:16:0d:45:43:14: 83:1e:9b:51:ca:04:d1:32:d5:0c:dc:cb:36:6e:c1:a1:7d:cd: 38:f2:53:9c:bb:a9:20:b5:65:1b:24:c6:6c:26:81:4f:6c:67: f1:4d:98:e7:20:e3:59:d1:e5:ad:25:65:16:91:fb:3e:c2:46: 6a:a6:7d:9a:f1:d0:6e:99:2f:7e:97:e0:5c:c6:7f:a5:5c:ab: 09:60:6c:29:c9:26:cb:d6:76:17:ee:76:99:19:e4:56:5f:8d: 3b:ed:b2:bf:4c:ae:62:5b:fc:dd:37:17:c4:e9:c1:21:5c:0f: 45:d0:91:40:8a:4b:f8:92:a6:c1:85:9d:dd:fb:c3:0c:7c:a9: b9:05:27:f9:7d:5e:43:a6:a1:cd:d2:80:f9:45:ba:ad:3f:ca: d2:dd:e5:8a:ab:c8:59:e2:dc:89:4c:bf:d2:02:b8:e6:b4:48: d5:e6:9b:b4 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pw58lO2VXo0hwB+K9NhZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2U4ZDU0MGViZDRmMGVkMGZkZGY2YTdhYTAzNGMzZTNjNTlmN2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1aWsbqLqM6S6rVdl4ffcVh5VpO5b mHA/p/8src20FzkvMpyTIId4mZrR0B5VNloOzjqQjd5WtpNFAWGjg64rVwGwWa3l TV3x9s5AD62GNMxpngRJqDC1N7pkEiI3qYfccDR9xmUN1gvSVdQwAkgzU8m8efEO hdJryk4PQHIFtoNsOAaXL8Y/9+Etuyql/SJ8DRFbFdR3es0SoTUiulGHvY4+evvP TctHg7dFTboOKiSrPp93ysgtt8se5CAHuoSyXW7HSj+Ez4Ilz0OY/a1uvIB+xry9 PMno4xjGsnAn2V6OTiw6qenD1IOCIk6g+rYrqzbUOMUaAzazawRq4/k3ewIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKfo1UDr1PDtD932p6oDTD48WffjMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvcC1qVlFPdlU4TzBQM2ZhbnFnTk1QanhaOS1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIWQ MA0GCSqGSIb3DQEBCwUAA4IBAQDDzJjDOv3fMFBaWH2CjgnkRvgnBnS5OCOkTC/Z lwT/bLJrBCRjPjYRs3PYccnXKBSa/qYbVHWPUvnT5Q9bloKZPbPB+U5ntI8yGzGu iW2B7G5xUAJYFg1FQxSDHptRygTRMtUM3Ms2bsGhfc048lOcu6kgtWUbJMZsJoFP bGfxTZjnIONZ0eWtJWUWkfs+wkZqpn2a8dBumS9+l+Bcxn+lXKsJYGwpySbL1nYX 7naZGeRWX4077bK/TK5iW/zdNxfE6cEhXA9F0JFAikv4kqbBhZ3d+8MMfKm5BSf5 fV5DpqHN0oD5RbqtP8rS3eWKq8hZ4tyJTL/SArjmtEjV5pu0 -----END CERTIFICATE-----Generated at Tue Jan 20 09:05:52 2026 by rpki-client