This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/xn1LSCHeZbMi8BbpolVn0AeSugM.roa File: xn1LSCHeZbMi8BbpolVn0AeSugM.roa (raw, json) Hash identifier: xAx1AdCysfBgMiJIyuQlVayPMpHAQCowm7Ur2PPp0tE= Subject key identifier: C6:7D:4B:48:21:DE:65:B3:22:F0:16:E9:A2:55:67:D0:07:92:BA:03 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6C5DB6D2C1604D2570C4C724F15C6 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/xn1LSCHeZbMi8BbpolVn0AeSugM.roa Signing time: Fri 02 Jan 2026 12:20:17 +0000 ROA not before: Fri 02 Jan 2026 12:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 38230 IP address blocks: 2a0e:7d46::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:c5:db:6d:2c:16:04:d2:57:0c:4c:72:4f:15:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c67d4b4821de65b322f016e9a25567d00792ba03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f8:f9:77:60:6a:ab:84:dc:42:31:8e:38:a7: eb:a0:ed:8a:a7:40:4f:17:22:ed:94:b6:f3:80:5f: 8b:bb:6c:d6:31:8f:bf:ee:9a:0d:31:36:27:0e:f5: 7d:cc:35:46:00:8c:20:75:ca:88:de:e2:f5:3c:3f: 9d:6a:0c:25:fe:b8:3e:97:ca:56:0d:74:9a:fc:72: 6a:d5:db:b4:05:ef:d8:52:ba:92:c6:df:4c:27:02: 58:9c:9f:58:da:4d:1b:a6:f4:d6:fd:7f:d2:d5:dc: 4d:af:bd:15:df:25:ca:9d:3a:b1:20:d7:65:a4:b3: f7:b5:89:1b:f1:00:72:76:44:1c:00:89:5f:88:dc: 0b:aa:3b:c7:1d:8e:04:cf:77:87:b3:5f:2c:89:13: 7d:9b:7f:61:f0:b5:c1:81:de:53:e7:07:81:b9:13: 6f:2b:a0:d2:51:8e:de:df:6e:fe:2d:0c:ec:27:0b: 1e:12:d9:b8:1f:83:b2:f1:34:e3:4c:ea:38:ed:9f: 17:17:7d:25:25:7b:0a:fc:93:11:cd:cc:e7:34:dd: 5d:a2:a6:cc:b9:d3:a1:c2:c9:bf:f1:c2:b8:23:13: a9:b6:be:de:ee:28:c5:8e:df:50:4a:bb:8b:21:90: 43:b6:61:76:32:5b:19:5a:55:cd:0b:8f:da:f7:c6: 8c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:7D:4B:48:21:DE:65:B3:22:F0:16:E9:A2:55:67:D0:07:92:BA:03 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/xn1LSCHeZbMi8BbpolVn0AeSugM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:7d46::/32 Signature Algorithm: sha256WithRSAEncryption b2:89:2a:fc:da:db:c6:3b:5c:df:bf:e8:f8:5f:a4:d9:95:a3: 78:c3:c8:87:15:fd:66:e1:c1:16:91:90:94:7b:2c:ae:7b:41: da:67:49:91:85:35:5f:47:37:9b:73:6a:c9:97:de:0d:19:3b: 48:23:53:cd:ae:87:74:84:7c:6a:ba:7d:63:0c:4e:95:a7:05: b2:fa:15:12:b6:2d:3e:30:68:62:c2:0c:40:34:cf:27:3a:c3: 3a:35:92:59:dd:e6:46:25:f3:4d:30:f6:c6:82:54:b4:98:44: 92:56:64:1a:47:60:41:51:c8:71:99:57:5d:52:af:df:09:2f: ac:23:3f:2a:75:22:2a:54:32:d2:2f:61:7c:ab:0f:27:74:65: 8b:33:d3:ab:28:45:f8:e9:53:1a:2c:4d:ce:4b:0b:f1:a7:a4: 3a:80:8c:66:83:83:5c:e7:d3:4a:5c:97:8a:e7:84:4e:59:22: 1e:82:c2:c2:7f:07:28:ef:78:2f:45:2b:52:14:ba:4b:b7:0a: 59:14:3f:a1:e6:38:5c:83:17:9e:78:f5:3f:20:8b:3c:a5:0f: 05:08:56:57:5c:b9:e8:9f:91:4b:4f:a6:13:db:4d:13:28:5a: 15:5e:d5:ca:be:97:2a:aa:d5:77:9f:0a:8e:66:c9:08:9b:2b: fe:34:f8:e3 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+psXbbSwWBNJXDExyTxXGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjdkNGI0ODIxZGU2NWIzMjJmMDE2ZTlhMjU1NjdkMDA3OTJiYTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfj5d2Bqq4TcQjGOOKfroO2Kp0BP FyLtlLbzgF+Lu2zWMY+/7poNMTYnDvV9zDVGAIwgdcqI3uL1PD+dagwl/rg+l8pW DXSa/HJq1du0Be/YUrqSxt9MJwJYnJ9Y2k0bpvTW/X/S1dxNr70V3yXKnTqxINdl pLP3tYkb8QBydkQcAIlfiNwLqjvHHY4Ez3eHs18siRN9m39h8LXBgd5T5weBuRNv K6DSUY7e327+LQzsJwseEtm4H4Oy8TTjTOo47Z8XF30lJXsK/JMRzcznNN1doqbM udOhwsm/8cK4IxOptr7e7ijFjt9QSruLIZBDtmF2MlsZWlXNC4/a98aMDQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFMZ9S0gh3mWzIvAW6aJVZ9AHkroDMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEveG4xTFNDSGVaYk1pOEJicG9sVm4wQWVTdWdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg59RjAN BgkqhkiG9w0BAQsFAAOCAQEAsokq/Nrbxjtc37/o+F+k2ZWjeMPIhxX9ZuHBFpGQ lHssrntB2mdJkYU1X0c3m3NqyZfeDRk7SCNTza6HdIR8arp9YwxOlacFsvoVErYt PjBoYsIMQDTPJzrDOjWSWd3mRiXzTTD2xoJUtJhEklZkGkdgQVHIcZlXXVKv3wkv rCM/KnUiKlQy0i9hfKsPJ3RlizPTqyhF+OlTGixNzksL8aekOoCMZoODXOfTSlyX iueETlkiHoLCwn8HKO94L0UrUhS6S7cKWRQ/oeY4XIMXnnj1PyCLPKUPBQhWV1y5 6J+RS0+mE9tNEyhaFV7Vyr6XKqrVd58KjmbJCJsr/jT44w== -----END CERTIFICATE-----Generated at Tue Jan 20 09:03:20 2026 by rpki-client