This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/n1rxwfyEu4ovtxs-PIPRbHD7WkE.roa File: n1rxwfyEu4ovtxs-PIPRbHD7WkE.roa (raw, json) Hash identifier: I78sxSB0+1+LczQU4FM6Dhvmm31U8fYmSaTLfz+uB/Q= Subject key identifier: 9F:5A:F1:C1:FC:84:BB:8A:2F:B7:1B:3E:3C:83:D1:6C:70:FB:5A:41 Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Certificate serial: 019BD7F11D51EAFAB5B9761455717A7232FD Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/n1rxwfyEu4ovtxs-PIPRbHD7WkE.roa Signing time: Mon 19 Jan 2026 20:27:41 +0000 ROA not before: Mon 19 Jan 2026 20:27:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215096 IP address blocks: 2a0d:d940:9000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d7:f1:1d:51:ea:fa:b5:b9:76:14:55:71:7a:72:32:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Validity Not Before: Jan 19 20:27:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f5af1c1fc84bb8a2fb71b3e3c83d16c70fb5a41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:71:67:9c:b4:78:ac:15:5e:25:d6:f1:45:cb: 36:d5:2b:5f:4c:a7:37:24:34:36:fb:5c:b9:5e:5b: 1d:e5:8c:20:70:b1:cb:f8:d8:42:e5:2a:e4:cd:83: c8:c6:18:9a:fe:3b:bd:fa:7d:24:1a:19:f5:ab:fa: fe:27:d8:66:3c:ee:41:3e:f7:57:12:f6:11:be:a0: a0:89:a1:51:80:41:bc:2c:94:c1:d4:f9:ff:8b:a7: ba:3a:45:8c:d4:32:a7:26:cb:b4:94:dc:ab:55:ce: 10:b8:88:36:35:28:8b:d9:fc:c8:a8:c1:25:a6:e9: 41:f7:3d:bc:3c:ed:28:31:21:fb:f0:74:99:cb:45: 25:d9:06:75:64:95:9c:ba:f1:6a:0c:59:d3:53:61: c6:08:5c:c1:e5:28:47:7a:86:68:62:b6:47:96:94: 57:f6:fb:d6:9f:1b:cd:d3:a4:60:6d:d6:ae:da:de: 6c:22:23:77:de:8a:6a:6f:ec:93:70:08:ad:99:4f: 6d:47:76:b3:a9:de:9d:f6:57:94:9d:63:d7:3a:1d: 61:11:87:20:5a:31:86:a1:04:d3:b2:23:a2:fa:b6: 30:f6:82:97:78:43:d7:86:89:15:3c:7f:af:bc:b2: 20:f1:c9:ff:b0:d2:19:f6:b1:c3:72:be:fa:5b:ec: 33:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:5A:F1:C1:FC:84:BB:8A:2F:B7:1B:3E:3C:83:D1:6C:70:FB:5A:41 X509v3 Authority Key Identifier: keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/n1rxwfyEu4ovtxs-PIPRbHD7WkE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:d940:9000::/48 Signature Algorithm: sha256WithRSAEncryption e7:be:e7:0b:49:3f:24:df:0b:fa:aa:56:35:98:a9:6d:62:9e: eb:4b:24:59:f3:24:70:32:40:39:ba:cc:03:94:f6:2c:f7:45: 16:4d:0f:fc:df:86:69:da:8c:01:60:9b:c5:3f:27:ad:f0:b4: 2d:ce:6a:e3:20:7c:0b:ed:51:96:a2:2c:0d:24:80:9c:05:07: 49:0a:54:23:98:ef:2c:54:e0:53:ff:04:fa:6b:6f:9c:2e:1c: 36:20:79:72:66:ca:26:77:8a:94:1a:2e:e6:ad:a9:f4:92:b9: c7:2f:1b:77:6a:9d:e4:66:59:80:87:7b:fc:2f:f6:6b:df:5c: 9f:0d:28:9f:79:10:3f:8b:1d:5b:30:e3:fc:5a:d8:e5:f0:80: c5:0f:1d:6c:ea:1d:20:43:a4:73:9b:cb:be:2e:6a:e5:df:bd: c3:8b:dd:e4:5b:0f:21:bb:40:fe:71:95:ef:ca:ae:9d:2d:30: ec:13:d7:f9:98:b1:b7:2e:20:72:81:ef:09:51:6a:66:f7:02: 7b:79:dd:1b:cd:b8:3a:e6:8c:fe:d6:4a:de:74:cd:52:85:4a: f1:1d:26:9d:a6:a3:9c:fe:ef:31:25:65:c1:1d:e1:32:af:7e: 6b:ac:ba:7f:e1:5c:eb:bd:80:29:f7:ce:3c:9a:4d:6e:ed:1b: d8:89:65:49 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZvX8R1R6vq1uXYUVXF6cjL9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj YmJjNzQwHhcNMjYwMTE5MjAyNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjVhZjFjMWZjODRiYjhhMmZiNzFiM2UzYzgzZDE2YzcwZmI1YTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA83FnnLR4rBVeJdbxRcs21StfTKc3 JDQ2+1y5Xlsd5YwgcLHL+NhC5SrkzYPIxhia/ju9+n0kGhn1q/r+J9hmPO5BPvdX EvYRvqCgiaFRgEG8LJTB1Pn/i6e6OkWM1DKnJsu0lNyrVc4QuIg2NSiL2fzIqMEl pulB9z28PO0oMSH78HSZy0Ul2QZ1ZJWcuvFqDFnTU2HGCFzB5ShHeoZoYrZHlpRX 9vvWnxvN06Rgbdau2t5sIiN33opqb+yTcAitmU9tR3azqd6d9leUnWPXOh1hEYcg WjGGoQTTsiOi+rYw9oKXeEPXhokVPH+vvLIg8cn/sNIZ9rHDcr76W+wzZQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJ9a8cH8hLuKL7cbPjyD0Wxw+1pBMB8GA1UdIwQY MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt MTRkMjM4NTI3ODM1LzEvbjFyeHdmeUV1NG92dHhzLVBJUFJiSEQ3V2tFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1 LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg3ZQJAA MA0GCSqGSIb3DQEBCwUAA4IBAQDnvucLST8k3wv6qlY1mKltYp7rSyRZ8yRwMkA5 uswDlPYs90UWTQ/834Zp2owBYJvFPyet8LQtzmrjIHwL7VGWoiwNJICcBQdJClQj mO8sVOBT/wT6a2+cLhw2IHlyZsomd4qUGi7mran0krnHLxt3ap3kZlmAh3v8L/Zr 31yfDSifeRA/ix1bMOP8Wtjl8IDFDx1s6h0gQ6Rzm8u+Lmrl373Di93kWw8hu0D+ cZXvyq6dLTDsE9f5mLG3LiByge8JUWpm9wJ7ed0bzbg65oz+1kredM1ShUrxHSad pqOc/u8xJWXBHeEyr35rrLp/4VzrvYAp9848mk1u7RvYiWVJ -----END CERTIFICATE-----Generated at Wed Jan 21 16:59:20 2026 by rpki-client