This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/v4UqatL50jA00Brg0eoBWysm-uU.roa File: v4UqatL50jA00Brg0eoBWysm-uU.roa (raw, json) Hash identifier: MDOaRq+zMLf3LRTppiEBw4Fw2TP1DRyebXKtm7cIRc0= Subject key identifier: BF:85:2A:6A:D2:F9:D2:30:34:D0:1A:E0:D1:EA:01:5B:2B:26:FA:E5 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6DCD05473A1F3FC1A9AF1C5687788 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/v4UqatL50jA00Brg0eoBWysm-uU.roa Signing time: Fri 02 Jan 2026 12:20:23 +0000 ROA not before: Fri 02 Jan 2026 12:20:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200809 IP address blocks: 2a0c:9a40:8980::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:dc:d0:54:73:a1:f3:fc:1a:9a:f1:c5:68:77:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf852a6ad2f9d23034d01ae0d1ea015b2b26fae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cc:18:35:16:ad:d8:86:2e:77:cf:5f:f9:76: bd:c7:6c:c8:61:27:fe:50:50:a5:c4:ff:a6:6c:75: 79:e1:19:ea:23:4c:73:c7:9c:e6:9b:91:15:48:a7: 57:17:c7:9c:c1:b1:cd:7f:01:cd:0e:5e:01:43:fa: 50:7a:40:4a:e3:67:de:1d:71:9a:44:54:84:55:8f: ce:97:ec:a1:55:92:53:f9:78:08:ad:86:6d:21:fc: 02:0b:9d:72:b8:a0:cd:72:06:35:77:bd:fb:9b:a0: 03:9f:c2:b7:1a:15:be:ac:79:a8:c7:e5:b3:de:cc: cd:88:9b:db:27:94:30:3d:51:b9:0e:e8:4d:f5:00: e1:dd:50:77:14:df:53:22:08:5d:e2:2f:1b:6f:41: 96:ea:f8:7a:02:0e:d4:55:c3:f3:a0:e0:17:55:09: db:e9:0d:d3:bf:35:4c:da:66:8a:61:ae:53:45:1f: 2b:89:75:5c:55:1c:d3:0e:c5:d3:34:b7:e2:f3:30: b4:f4:aa:75:8a:6e:7f:e5:9a:f7:b4:81:17:1c:06: 3e:cf:7d:87:1e:da:6f:d8:16:af:55:06:48:c4:62: 9d:f5:38:2c:89:d7:50:f7:11:0f:24:27:4b:fa:0b: a2:0e:ae:81:e7:aa:8b:64:2f:47:36:a9:2a:8a:82: 16:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:85:2A:6A:D2:F9:D2:30:34:D0:1A:E0:D1:EA:01:5B:2B:26:FA:E5 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/v4UqatL50jA00Brg0eoBWysm-uU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8980::/44 Signature Algorithm: sha256WithRSAEncryption 39:93:37:1c:c4:52:6c:b5:97:31:d8:29:2c:69:c0:64:6f:dd: 81:28:bd:4f:74:13:fe:3d:b7:f9:44:93:20:92:3a:6b:e1:63: 3c:eb:8b:d3:c6:83:d3:d1:22:e4:30:0f:8e:3f:91:61:2c:d3: 60:73:63:52:9d:40:82:2a:26:37:ed:86:dd:0e:4f:9e:4e:dd: 4e:8d:24:f9:f1:e3:df:61:5c:42:18:aa:07:03:f6:28:21:86: 69:c1:92:da:6c:50:54:70:e7:29:c7:f2:50:d6:ab:7e:81:42: d5:f6:6e:ec:ce:60:37:39:72:1b:df:10:01:c4:d0:67:8a:5e: 01:c9:ac:d7:ef:a2:b5:1c:66:8e:c4:2b:5d:ae:ee:4c:ef:ba: 8a:48:97:e0:34:2c:37:c6:16:fe:cc:e0:d3:e6:23:f9:7d:df: 50:52:20:00:33:4d:77:96:3a:fa:4b:5c:83:af:62:0e:b7:a3: 02:38:1e:15:51:b2:9a:85:4b:2e:8c:11:7a:1f:aa:1d:15:bd: 93:ae:06:51:88:58:93:69:a5:ea:24:bb:cd:5c:a2:63:f5:f6: 5d:6b:df:b1:57:f5:c9:e8:ef:43:53:a3:22:7c:b3:21:29:c5: b7:d7:7f:4a:53:78:f5:f2:7c:63:91:c3:2c:bd:c8:29:ef:c0: 5c:66:d4:d8 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+ptzQVHOh8/wamvHFaHeIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjg1MmE2YWQyZjlkMjMwMzRkMDFhZTBkMWVhMDE1YjJiMjZmYWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcwYNRat2IYud89f+Xa9x2zIYSf+ UFClxP+mbHV54RnqI0xzx5zmm5EVSKdXF8ecwbHNfwHNDl4BQ/pQekBK42feHXGa RFSEVY/Ol+yhVZJT+XgIrYZtIfwCC51yuKDNcgY1d737m6ADn8K3GhW+rHmox+Wz 3szNiJvbJ5QwPVG5DuhN9QDh3VB3FN9TIghd4i8bb0GW6vh6Ag7UVcPzoOAXVQnb 6Q3TvzVM2maKYa5TRR8riXVcVRzTDsXTNLfi8zC09Kp1im5/5Zr3tIEXHAY+z32H Htpv2BavVQZIxGKd9TgsiddQ9xEPJCdL+guiDq6B56qLZC9HNqkqioIWCQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFL+FKmrS+dIwNNAa4NHqAVsrJvrlMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvdjRVcWF0TDUwakEwMEJyZzBlb0JXeXNtLXVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgyaQImA MA0GCSqGSIb3DQEBCwUAA4IBAQA5kzccxFJstZcx2CksacBkb92BKL1PdBP+Pbf5 RJMgkjpr4WM864vTxoPT0SLkMA+OP5FhLNNgc2NSnUCCKiY37YbdDk+eTt1OjST5 8ePfYVxCGKoHA/YoIYZpwZLabFBUcOcpx/JQ1qt+gULV9m7szmA3OXIb3xABxNBn il4ByazX76K1HGaOxCtdru5M77qKSJfgNCw3xhb+zODT5iP5fd9QUiAAM013ljr6 S1yDr2IOt6MCOB4VUbKahUsujBF6H6odFb2TrgZRiFiTaaXqJLvNXKJj9fZda9+x V/XJ6O9DU6MifLMhKcW3139KU3j18nxjkcMsvcgp78BcZtTY -----END CERTIFICATE-----Generated at Tue Jan 20 09:07:41 2026 by rpki-client