This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/rAeJ94f0LZh2Dsz6upQ8bQcr408.roa File: rAeJ94f0LZh2Dsz6upQ8bQcr408.roa (raw, json) Hash identifier: 81qqRtkU1rtY8a9RQ/t4M/wdTVD4VtAdR7idchjnvZk= Subject key identifier: AC:07:89:F7:87:F4:2D:98:76:0E:CC:FA:BA:94:3C:6D:07:2B:E3:4F Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA717EF3EE090108070F60567F5146D Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/rAeJ94f0LZh2Dsz6upQ8bQcr408.roa Signing time: Fri 02 Jan 2026 12:20:38 +0000 ROA not before: Fri 02 Jan 2026 12:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215967 IP address blocks: 2a0c:9a40:8960::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:17:ef:3e:e0:90:10:80:70:f6:05:67:f5:14:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac0789f787f42d98760eccfaba943c6d072be34f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:37:6d:ce:fb:59:de:e3:4f:78:90:02:f8:32: 8f:03:cd:68:ef:50:d0:52:97:23:ba:c8:d0:be:1f: 59:7d:69:7d:f3:72:52:2d:d2:d7:13:77:aa:68:99: 4c:cf:41:82:f1:63:dc:c7:db:93:00:f6:08:54:12: 52:a8:42:4e:ec:88:3a:18:34:dd:cd:66:b5:9f:20: 59:ef:71:ff:97:44:be:42:e0:0b:68:e5:2c:75:11: eb:f2:03:93:2e:e8:f6:61:9e:67:cb:78:57:cb:cb: ee:7d:3d:51:fd:e3:9f:c6:c2:db:f8:42:00:3d:1d: 68:8e:61:43:cc:25:bb:f9:16:41:42:d4:07:33:77: 79:0a:44:50:e7:6a:c6:fe:54:5a:a6:19:e1:c0:ed: 94:1a:e0:43:0b:d4:f1:9f:cd:5d:af:b5:26:60:ab: 40:1d:7b:02:22:dc:d2:bd:f3:43:dc:5c:12:d3:30: 38:ff:13:49:98:17:71:b3:31:11:06:e1:94:42:29: e8:26:f6:75:a3:fe:c1:7a:d8:a6:af:07:d2:58:c5: 6d:57:ed:a0:b6:3b:7e:eb:eb:d2:17:69:f5:69:cf: 7e:f8:64:b2:d3:15:86:ed:b5:cd:42:ba:2c:31:25: 35:b7:c5:ff:99:b7:33:7c:d5:9a:23:cd:4c:4d:93: 7e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:07:89:F7:87:F4:2D:98:76:0E:CC:FA:BA:94:3C:6D:07:2B:E3:4F X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/rAeJ94f0LZh2Dsz6upQ8bQcr408.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8960::/48 Signature Algorithm: sha256WithRSAEncryption 7f:de:95:e9:5a:d7:05:6c:72:9f:45:32:c6:0a:30:85:27:17: a7:db:27:b0:a3:16:0b:e6:9b:77:0a:22:10:20:f5:f0:4c:cb: a5:0b:7d:b2:dd:2b:01:7c:f1:e5:48:fa:1c:ed:13:35:b4:16: e5:1c:02:e2:7d:35:77:f0:0b:f0:fa:bf:ed:e9:f9:cb:b7:0a: a8:5f:49:25:68:7e:f7:91:ad:41:53:83:1a:01:69:c7:38:cd: 29:e9:14:10:c1:09:fd:f9:96:f9:42:99:48:9d:99:f7:43:e0: 31:56:70:67:82:ff:b5:ba:98:98:6d:7f:53:37:b6:28:48:97: ea:58:91:5e:a0:9d:79:98:b0:b7:54:a2:fc:cf:30:62:7e:23: 23:c1:09:a9:4b:ae:02:29:f3:f7:84:80:76:c8:79:90:c2:51: c9:8f:b7:b3:36:00:9b:a8:21:1d:97:5b:1f:19:de:0e:35:5a: f9:f5:09:47:0b:7e:ac:8b:68:7f:8d:96:59:f9:14:ca:9b:5a: 5a:22:84:be:a2:22:67:db:c7:c5:5a:be:2e:a9:13:1a:e7:23: 36:da:bd:ad:4c:e9:f0:f4:43:6a:db:08:ac:fa:c1:fa:8e:31: 36:7d:f2:d4:da:77:62:ce:4d:16:5e:cc:28:b6:a0:15:5d:67: 9a:7a:c5:9b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pxfvPuCQEIBw9gVn9RRtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzA3ODlmNzg3ZjQyZDk4NzYwZWNjZmFiYTk0M2M2ZDA3MmJlMzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujdtzvtZ3uNPeJAC+DKPA81o71DQ UpcjusjQvh9ZfWl983JSLdLXE3eqaJlMz0GC8WPcx9uTAPYIVBJSqEJO7Ig6GDTd zWa1nyBZ73H/l0S+QuALaOUsdRHr8gOTLuj2YZ5ny3hXy8vufT1R/eOfxsLb+EIA PR1ojmFDzCW7+RZBQtQHM3d5CkRQ52rG/lRaphnhwO2UGuBDC9Txn81dr7UmYKtA HXsCItzSvfND3FwS0zA4/xNJmBdxszERBuGUQinoJvZ1o/7BetimrwfSWMVtV+2g tjt+6+vSF2n1ac9++GSy0xWG7bXNQrosMSU1t8X/mbczfNWaI81MTZN+nwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKwHifeH9C2Ydg7M+rqUPG0HK+NPMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvckFlSjk0ZjBMWmgyRHN6NnVwUThiUWNyNDA4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIlg MA0GCSqGSIb3DQEBCwUAA4IBAQB/3pXpWtcFbHKfRTLGCjCFJxen2yewoxYL5pt3 CiIQIPXwTMulC32y3SsBfPHlSPoc7RM1tBblHALifTV38Avw+r/t6fnLtwqoX0kl aH73ka1BU4MaAWnHOM0p6RQQwQn9+Zb5QplInZn3Q+AxVnBngv+1upiYbX9TN7Yo SJfqWJFeoJ15mLC3VKL8zzBifiMjwQmpS64CKfP3hIB2yHmQwlHJj7ezNgCbqCEd l1sfGd4ONVr59QlHC36si2h/jZZZ+RTKm1paIoS+oiJn28fFWr4uqRMa5yM22r2t TOnw9ENq2wis+sH6jjE2ffLU2ndizk0WXswotqAVXWeaesWb -----END CERTIFICATE-----Generated at Tue Jan 20 09:04:38 2026 by rpki-client