This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/yOriV3N0uFiwMdX7xZ8iCU6G2E0.roa File: yOriV3N0uFiwMdX7xZ8iCU6G2E0.roa (raw, json) Hash identifier: sdweaR6NQV1mF0fWlKgot4HmIFpxk1EKX8RzNpv3pHM= Subject key identifier: C8:EA:E2:57:73:74:B8:58:B0:31:D5:FB:C5:9F:22:09:4E:86:D8:4D Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA70CAB1083C8FB2183895D1E1DD4DC Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/yOriV3N0uFiwMdX7xZ8iCU6G2E0.roa Signing time: Fri 02 Jan 2026 12:20:35 +0000 ROA not before: Fri 02 Jan 2026 12:20:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214400 IP address blocks: 2a0c:9a46:100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:0c:ab:10:83:c8:fb:21:83:89:5d:1e:1d:d4:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8eae2577374b858b031d5fbc59f22094e86d84d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3f:f8:09:38:5f:42:14:00:fd:21:12:38:83: 13:31:61:33:95:04:9d:6a:8e:f1:f0:cb:ec:fc:82: 83:fe:cf:1d:21:39:11:ce:4d:57:e4:fb:dd:e9:fd: fe:b3:e5:1d:04:e4:d3:5d:39:d5:70:06:72:3a:d4: 7e:70:6a:ea:08:b3:17:07:52:1e:68:05:b6:65:92: 8b:ee:43:6c:62:a6:6a:8f:22:2e:da:dd:c5:ce:74: 4c:47:7b:56:40:1a:ec:07:20:44:96:25:a8:6f:b5: 6e:39:78:23:39:39:f4:6e:ef:85:5f:94:69:d4:b1: 0d:26:04:1e:d3:a3:27:40:de:5c:e4:8e:cb:bd:7a: e3:91:54:88:d2:6a:cb:b8:90:a0:b5:4d:2e:3a:ca: a7:29:8c:40:3b:76:df:c7:ef:bf:80:0b:e6:64:b7: 12:15:e1:8a:bd:eb:3a:c6:34:8a:67:a6:c4:df:24: b5:d2:17:ce:bc:50:13:39:bb:3c:6b:91:c3:dd:8b: c1:ae:6a:67:a1:f7:a4:31:26:ae:9e:7d:2d:d8:1e: 4e:da:46:fd:e9:66:1e:8b:bd:0b:ac:76:cd:6e:cd: 80:72:fb:c7:a8:ea:f8:4e:f0:0e:4c:ec:4d:5d:80: 9a:fb:cd:35:ea:a0:e5:51:9b:3c:ee:ca:80:b9:d4: 2f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:EA:E2:57:73:74:B8:58:B0:31:D5:FB:C5:9F:22:09:4E:86:D8:4D X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/yOriV3N0uFiwMdX7xZ8iCU6G2E0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a46:100::/40 Signature Algorithm: sha256WithRSAEncryption 50:05:82:0f:f6:11:64:6c:69:91:cd:66:84:a0:a0:64:08:6b: ca:f3:7e:99:61:65:bd:3d:87:0e:f3:15:c0:44:cc:c1:0f:97: e9:56:93:bb:b0:a9:be:de:7a:9d:ea:eb:48:1a:6c:64:15:a7: 39:68:fe:85:62:5c:bf:ab:1e:1a:90:16:ed:20:9c:6f:60:5e: 66:bb:b8:bc:3a:a8:ce:fc:37:de:7c:8b:35:5e:75:b5:b1:48: da:f2:23:25:7b:53:64:cc:7c:6a:19:ce:5c:a9:ba:e6:d3:00: 1c:99:6a:be:43:04:53:e4:22:87:f8:cf:7d:7a:e4:0c:74:04: d0:f1:3b:d0:93:a1:60:9f:cf:f8:56:5d:d0:44:ea:0c:da:15: c6:01:2e:ba:9d:fb:ab:9e:b9:67:72:4c:8d:dc:98:d9:46:5c: 60:d0:99:f0:f7:23:e4:8f:d4:b9:8f:c3:2b:87:44:b8:87:39: 07:49:c7:56:c1:8e:9a:bf:ab:fb:86:2b:02:09:6c:0c:88:3a: 1b:09:5a:29:ab:11:14:32:cf:4f:19:12:87:21:bd:ae:ac:94: 1c:eb:c8:d0:68:de:00:a7:f0:f5:f1:3f:09:24:5f:79:10:33: ec:48:65:2f:93:bc:8f:83:85:9c:85:7b:0f:aa:7c:f8:87:82: 5b:2c:c5:df -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+pwyrEIPI+yGDiV0eHdTcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGVhZTI1NzczNzRiODU4YjAzMWQ1ZmJjNTlmMjIwOTRlODZkODRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoT/4CThfQhQA/SESOIMTMWEzlQSd ao7x8Mvs/IKD/s8dITkRzk1X5Pvd6f3+s+UdBOTTXTnVcAZyOtR+cGrqCLMXB1Ie aAW2ZZKL7kNsYqZqjyIu2t3FznRMR3tWQBrsByBEliWob7VuOXgjOTn0bu+FX5Rp 1LENJgQe06MnQN5c5I7LvXrjkVSI0mrLuJCgtU0uOsqnKYxAO3bfx++/gAvmZLcS FeGKves6xjSKZ6bE3yS10hfOvFATObs8a5HD3YvBrmpnofekMSaunn0t2B5O2kb9 6WYei70LrHbNbs2AcvvHqOr4TvAOTOxNXYCa+8016qDlUZs87sqAudQvfwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFMjq4ldzdLhYsDHV+8WfIglOhthNMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEveU9yaVYzTjB1Rml3TWRYN3haOGlDVTZHMkUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgyaRgEw DQYJKoZIhvcNAQELBQADggEBAFAFgg/2EWRsaZHNZoSgoGQIa8rzfplhZb09hw7z FcBEzMEPl+lWk7uwqb7eep3q60gabGQVpzlo/oViXL+rHhqQFu0gnG9gXma7uLw6 qM78N958izVedbWxSNryIyV7U2TMfGoZzlypuubTAByZar5DBFPkIof4z3165Ax0 BNDxO9CToWCfz/hWXdBE6gzaFcYBLrqd+6ueuWdyTI3cmNlGXGDQmfD3I+SP1LmP wyuHRLiHOQdJx1bBjpq/q/uGKwIJbAyIOhsJWimrERQyz08ZEochva6slBzryNBo 3gCn8PXxPwkkX3kQM+xIZS+TvI+DhZyFew+qfPiHglssxd8= -----END CERTIFICATE-----Generated at Tue Jan 20 09:05:53 2026 by rpki-client