This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/pXTNd4lo6POgR2MQZWXMk709wtQ.roa File: pXTNd4lo6POgR2MQZWXMk709wtQ.roa (raw, json) Hash identifier: jL2dKalnFJwmyeawsFc/rpHK4qYT8G5M4BUKHlL6MHg= Subject key identifier: A5:74:CD:77:89:68:E8:F3:A0:47:63:10:65:65:CC:93:BD:3D:C2:D4 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6FED44A6579032EB9AB3EADB08412 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/pXTNd4lo6POgR2MQZWXMk709wtQ.roa Signing time: Fri 02 Jan 2026 12:20:31 +0000 ROA not before: Fri 02 Jan 2026 12:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212925 IP address blocks: 2a0c:9a40:8020::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:fe:d4:4a:65:79:03:2e:b9:ab:3e:ad:b0:84:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a574cd778968e8f3a04763106565cc93bd3dc2d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cc:d8:f3:52:ff:05:ad:56:6b:6e:8d:79:f0: 0c:79:0c:90:69:ff:98:2b:bd:d0:0c:6b:3d:26:64: 1f:5a:81:53:ef:4b:e6:67:52:83:b9:8e:c5:a7:31: a5:5e:48:1b:9a:b0:f4:52:24:6a:fb:a2:b8:30:74: c7:80:7b:8c:92:72:f1:8e:fc:52:43:89:b6:92:a7: d3:54:7a:97:ac:95:a9:39:3e:df:bd:30:20:dc:42: c8:8b:6c:c3:89:24:72:8b:93:e8:fc:79:a0:75:89: be:b9:0e:47:fd:f5:80:1a:6d:c5:31:a4:26:38:1a: 99:98:1d:9e:12:d3:93:df:20:bf:92:0b:71:d2:f2: 25:29:7d:8b:ce:f5:6a:3c:1e:91:43:da:f0:78:27: f1:40:22:a6:00:fa:98:ff:66:2c:04:b7:ab:e4:d5: 3d:d9:2b:2b:87:90:8c:62:5b:03:c4:37:8e:da:65: 16:cb:75:55:f8:8f:99:91:5d:4d:33:66:94:3f:c0: 24:72:62:fe:0f:8c:80:9e:81:9a:66:b4:9c:28:2e: 1f:47:99:38:17:c6:d1:80:ab:8e:4e:90:c0:ca:27: 64:e4:ea:e7:75:7e:30:8c:9a:64:7b:35:30:c8:ce: 0d:7e:ba:39:7f:04:73:9e:04:95:12:fa:a1:29:00: 9b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:74:CD:77:89:68:E8:F3:A0:47:63:10:65:65:CC:93:BD:3D:C2:D4 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/pXTNd4lo6POgR2MQZWXMk709wtQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8020::/44 Signature Algorithm: sha256WithRSAEncryption 08:ae:7c:a4:b2:89:ce:61:d4:77:5b:ec:7a:05:24:40:3f:15: 47:57:9a:93:0b:ea:ef:8b:1a:98:a2:61:3b:72:39:08:a8:a2: a8:15:8d:2b:ae:22:67:e6:cd:65:09:ae:e5:c1:78:a5:0c:fc: 67:36:5d:b6:5b:03:6e:88:83:93:ed:63:6e:cd:02:83:08:50: 9e:75:8b:39:df:63:dc:15:35:af:21:e2:d9:90:37:25:62:40: c3:aa:32:77:18:13:60:54:be:04:16:fd:40:a0:59:22:2d:c1: f6:09:03:e4:fd:36:2c:97:b7:f3:82:25:c1:7c:9f:ad:99:e5: 36:62:cf:ad:b1:c5:36:6e:d7:19:19:93:c5:de:5d:31:df:b4: 9f:8d:95:4d:b2:95:c6:4f:a8:05:c1:2a:3e:1b:18:63:0d:40: 75:91:d1:7a:10:e7:27:b9:b4:0a:74:59:2d:75:ec:50:4d:55: 24:61:b4:ea:24:59:00:1a:88:e4:e8:d7:62:bb:cc:04:3e:99: 82:28:00:6a:84:f1:85:ac:15:75:bf:02:93:45:e5:b0:03:79: 3c:33:86:ce:cb:42:81:3e:c9:4c:23:02:1d:3e:94:d1:b6:52: e1:d9:3a:e8:d0:31:ee:06:2b:a4:bb:ec:c6:53:9f:d6:fa:da: 33:ff:0b:f0 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pv7USmV5Ay65qz6tsIQSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTc0Y2Q3Nzg5NjhlOGYzYTA0NzYzMTA2NTY1Y2M5M2JkM2RjMmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08zY81L/Ba1Wa26NefAMeQyQaf+Y K73QDGs9JmQfWoFT70vmZ1KDuY7FpzGlXkgbmrD0UiRq+6K4MHTHgHuMknLxjvxS Q4m2kqfTVHqXrJWpOT7fvTAg3ELIi2zDiSRyi5Po/HmgdYm+uQ5H/fWAGm3FMaQm OBqZmB2eEtOT3yC/kgtx0vIlKX2LzvVqPB6RQ9rweCfxQCKmAPqY/2YsBLer5NU9 2Ssrh5CMYlsDxDeO2mUWy3VV+I+ZkV1NM2aUP8AkcmL+D4yAnoGaZrScKC4fR5k4 F8bRgKuOTpDAyidk5OrndX4wjJpkezUwyM4Nfro5fwRzngSVEvqhKQCbqwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKV0zXeJaOjzoEdjEGVlzJO9PcLUMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvcFhUTmQ0bG82UE9nUjJNUVpXWE1rNzA5d3RRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgyaQIAg MA0GCSqGSIb3DQEBCwUAA4IBAQAIrnyksonOYdR3W+x6BSRAPxVHV5qTC+rvixqY omE7cjkIqKKoFY0rriJn5s1lCa7lwXilDPxnNl22WwNuiIOT7WNuzQKDCFCedYs5 32PcFTWvIeLZkDclYkDDqjJ3GBNgVL4EFv1AoFkiLcH2CQPk/TYsl7fzgiXBfJ+t meU2Ys+tscU2btcZGZPF3l0x37SfjZVNspXGT6gFwSo+GxhjDUB1kdF6EOcnubQK dFktdexQTVUkYbTqJFkAGojk6Ndiu8wEPpmCKABqhPGFrBV1vwKTReWwA3k8M4bO y0KBPslMIwIdPpTRtlLh2Tro0DHuBiuku+zGU5/W+toz/wvw -----END CERTIFICATE-----Generated at Tue Jan 20 09:03:14 2026 by rpki-client