This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/wNvTbqiRkYRCnJ3nQLdbTGvVzqc.roa File: wNvTbqiRkYRCnJ3nQLdbTGvVzqc.roa (raw, json) Hash identifier: ha513dU8OL1XShpsf0aB/B0EAwDT/1qjvtPsDWuFCok= Subject key identifier: C0:DB:D3:6E:A8:91:91:84:42:9C:9D:E7:40:B7:5B:4C:6B:D5:CE:A7 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA70F2D706E883D58E27BE8D033886D Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/wNvTbqiRkYRCnJ3nQLdbTGvVzqc.roa Signing time: Fri 02 Jan 2026 12:20:36 +0000 ROA not before: Fri 02 Jan 2026 12:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215129 IP address blocks: 2a0c:9a40:8560::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:0f:2d:70:6e:88:3d:58:e2:7b:e8:d0:33:88:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0dbd36ea8919184429c9de740b75b4c6bd5cea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ef:77:d1:90:e3:0b:fc:ba:e0:6c:d1:fd:4e: d1:ea:fa:ce:d2:d6:50:b2:aa:c7:32:f5:28:e0:5a: d0:fc:aa:b0:2b:18:30:33:37:39:35:35:a3:7d:fb: 89:83:f8:45:c5:cc:69:68:84:10:37:f8:03:a7:9b: 91:aa:41:83:19:91:40:f4:46:1a:2d:e4:35:a4:d6: 55:a1:64:96:94:e5:84:93:0a:0d:f4:c5:de:78:e1: 0b:f8:fe:ec:8b:fa:c8:46:d4:e5:1b:12:e5:17:ac: 4c:db:5d:59:37:aa:1b:2f:6b:86:ee:dc:d5:8d:3e: c8:2c:cf:00:f1:7b:89:da:a3:33:6c:4f:80:cd:e2: 11:e3:3b:93:81:60:70:d2:75:9a:fe:00:d1:4e:a1: 9f:e0:48:97:12:de:2f:ab:93:c9:87:96:af:9f:86: 83:6c:6a:c7:06:7b:83:8b:c3:05:cb:00:2f:28:8e: 1e:df:b2:26:83:7b:0c:be:38:bf:f9:77:ee:f9:8b: e2:86:4e:9c:98:37:32:23:79:56:4c:75:cf:e6:51: 16:bf:c7:35:d3:0c:81:4c:ab:3f:6a:21:4c:c8:64: ff:c7:27:7f:6e:25:9d:67:4f:ce:84:17:31:86:0d: 18:5e:cb:ad:bd:c3:0f:19:49:7c:fa:b6:0d:df:df: 69:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:DB:D3:6E:A8:91:91:84:42:9C:9D:E7:40:B7:5B:4C:6B:D5:CE:A7 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/wNvTbqiRkYRCnJ3nQLdbTGvVzqc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8560::/44 Signature Algorithm: sha256WithRSAEncryption 97:f4:d4:ff:67:27:3b:09:4e:6a:e8:ce:06:51:0c:60:1a:fb: ae:57:ee:09:a3:a3:3c:95:fa:d8:4f:53:fb:2e:8e:6b:5e:f8: c6:84:0b:c7:21:c4:b5:c3:b8:61:b6:88:63:b2:4b:e1:0f:c9: 8c:bb:5a:ed:29:10:c4:49:48:90:e9:08:f3:15:22:f3:c2:32: 8e:12:a7:0b:9e:e6:ce:f1:f1:eb:69:b2:13:cb:20:45:e4:53: 05:0a:b0:c5:2c:1b:8e:78:18:cd:30:ee:4b:f1:d9:9e:b7:3e: b1:e3:26:88:f2:4a:e0:77:3a:fa:90:1f:9d:ef:7c:26:cf:82: 36:bf:45:1a:ef:85:38:9c:f7:9b:85:08:fd:7b:06:67:a6:57: 29:75:a0:0d:6f:e1:98:1b:4f:7d:f6:45:78:ec:0b:ba:3e:15: 06:c7:23:d6:d5:f5:41:0c:a7:ae:98:6a:e2:55:17:1e:a0:61: 89:15:dc:7a:68:5e:a4:66:ae:9b:4f:ea:3b:9b:2e:4d:dc:b4: 9a:a6:95:c3:6b:a2:d4:d5:ec:bc:9b:f9:61:8a:18:39:ca:1c: 06:aa:04:87:78:af:a2:81:9f:a2:de:89:85:fc:57:16:3b:f8: c3:3f:f3:2c:2f:05:be:0a:1c:11:d2:5c:a9:31:57:92:72:6c: 15:4a:49:35 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pw8tcG6IPVjie+jQM4htMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMGRiZDM2ZWE4OTE5MTg0NDI5YzlkZTc0MGI3NWI0YzZiZDVjZWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0O930ZDjC/y64GzR/U7R6vrO0tZQ sqrHMvUo4FrQ/KqwKxgwMzc5NTWjffuJg/hFxcxpaIQQN/gDp5uRqkGDGZFA9EYa LeQ1pNZVoWSWlOWEkwoN9MXeeOEL+P7si/rIRtTlGxLlF6xM211ZN6obL2uG7tzV jT7ILM8A8XuJ2qMzbE+AzeIR4zuTgWBw0nWa/gDRTqGf4EiXEt4vq5PJh5avn4aD bGrHBnuDi8MFywAvKI4e37Img3sMvji/+Xfu+Yvihk6cmDcyI3lWTHXP5lEWv8c1 0wyBTKs/aiFMyGT/xyd/biWdZ0/OhBcxhg0YXsutvcMPGUl8+rYN399plQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMDb026okZGEQpyd50C3W0xr1c6nMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvd052VGJxaVJrWVJDbkozblFMZGJUR3ZWenFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgyaQIVg MA0GCSqGSIb3DQEBCwUAA4IBAQCX9NT/Zyc7CU5q6M4GUQxgGvuuV+4Jo6M8lfrY T1P7Lo5rXvjGhAvHIcS1w7hhtohjskvhD8mMu1rtKRDESUiQ6QjzFSLzwjKOEqcL nubO8fHrabITyyBF5FMFCrDFLBuOeBjNMO5L8dmetz6x4yaI8krgdzr6kB+d73wm z4I2v0Ua74U4nPebhQj9ewZnplcpdaANb+GYG0999kV47Au6PhUGxyPW1fVBDKeu mGriVRceoGGJFdx6aF6kZq6bT+o7my5N3LSappXDa6LU1ey8m/lhihg5yhwGqgSH eK+igZ+i3omF/FcWO/jDP/MsLwW+ChwR0lypMVeScmwVSkk1 -----END CERTIFICATE-----Generated at Tue Jan 20 09:04:38 2026 by rpki-client