This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/9-N6pNClbD9TW9GB1CAgMdzr4Tk.roa File: 9-N6pNClbD9TW9GB1CAgMdzr4Tk.roa (raw, json) Hash identifier: 5ZEJ2hAJfJWVHDDR0yYyaLfl4wYzvQGgrMUVflW8yik= Subject key identifier: F7:E3:7A:A4:D0:A5:6C:3F:53:5B:D1:81:D4:20:20:31:DC:EB:E1:39 Certificate issuer: /CN=c85106daad3a973fde98914f7cc1ccd35d8cc3c3 Certificate serial: 019B7F8532B639BFD38F99AB957450077B95 Authority key identifier: C8:51:06:DA:AD:3A:97:3F:DE:98:91:4F:7C:C1:CC:D3:5D:8C:C3:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/9-N6pNClbD9TW9GB1CAgMdzr4Tk.roa Signing time: Fri 02 Jan 2026 16:23:14 +0000 ROA not before: Fri 02 Jan 2026 16:23:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214343 IP address blocks: 2001:3e80::/29 maxlen: 29 2001:3e81::/32 maxlen: 32 2001:3e82::/32 maxlen: 32 2001:3e83::/32 maxlen: 32 2001:3e84::/32 maxlen: 32 2001:3e85::/32 maxlen: 32 2001:3e86::/32 maxlen: 32 2001:3e87::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.crl rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:32:b6:39:bf:d3:8f:99:ab:95:74:50:07:7b:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c85106daad3a973fde98914f7cc1ccd35d8cc3c3 Validity Not Before: Jan 2 16:23:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7e37aa4d0a56c3f535bd181d4202031dcebe139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8d:bb:0a:37:63:92:e8:6e:fd:0e:68:a0:d4: e6:fe:81:e5:ee:74:ec:18:f2:01:81:e7:1c:8f:0e: 55:22:38:90:f3:fc:b7:06:9a:40:78:18:09:de:7a: 74:75:b5:de:7f:5f:85:6b:03:b9:ab:0b:fe:af:ee: 6c:93:0b:05:0d:e5:51:04:77:4f:c4:c7:8f:cf:d7: 77:9f:d4:9d:70:f6:98:bd:e4:46:39:2a:8c:58:69: 9a:a8:8b:ab:ae:86:4e:b6:7d:3b:39:1f:a1:2a:da: 29:c8:85:4d:17:7a:ca:aa:7b:0c:8b:78:f6:ad:09: bd:b7:33:0d:ce:46:af:da:09:23:79:64:10:55:41: 43:4d:8f:64:43:2a:82:5c:3f:c9:7b:a9:9d:75:6d: 63:f9:ee:50:4f:0c:cf:a4:6d:5d:c0:fb:c3:19:ac: 59:64:c7:4a:aa:80:3d:c3:cd:c2:3d:95:54:52:c4: 8e:9c:4f:3e:15:0a:12:67:b4:79:bc:a9:86:14:90: 8a:ac:7c:dc:13:32:6f:f7:d5:78:32:f8:ff:cf:b4: ae:18:11:44:ce:b2:7a:10:e4:b5:f8:50:7f:00:34: db:1c:00:b9:9f:ae:03:98:c7:d6:7d:be:22:49:6f: a7:f2:36:52:70:b2:87:56:3f:60:bf:8c:0d:a7:33: 07:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E3:7A:A4:D0:A5:6C:3F:53:5B:D1:81:D4:20:20:31:DC:EB:E1:39 X509v3 Authority Key Identifier: keyid:C8:51:06:DA:AD:3A:97:3F:DE:98:91:4F:7C:C1:CC:D3:5D:8C:C3:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/9-N6pNClbD9TW9GB1CAgMdzr4Tk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:3e80::/29 Signature Algorithm: sha256WithRSAEncryption 5a:8c:8a:f6:35:9d:69:59:34:47:d9:35:6f:81:4d:fe:63:ad: 07:da:96:40:c0:90:a1:d4:0e:84:2a:38:27:44:14:b2:8a:a6: 25:44:a0:c0:83:38:9a:1f:b3:fd:5e:5d:0a:7c:54:5d:dd:a1: d2:c9:f9:71:08:41:d5:81:4e:96:a9:00:1a:a8:ea:90:8f:e3: ac:08:c0:bd:d0:57:61:71:34:c3:60:c3:ae:ec:8a:42:af:de: 08:af:08:92:e1:a2:db:ed:0c:2d:c2:09:ab:5f:19:11:87:b8: da:9b:06:9c:c2:fa:83:b2:0e:e7:f9:bc:c3:ca:aa:66:d6:d3: 2d:26:cb:d2:14:8e:7c:92:18:cc:d7:0b:5a:9c:98:96:52:a9: f4:0c:b2:f2:d7:ec:c1:22:ed:67:d7:2b:d2:3f:1b:a8:bd:a2: 73:7f:de:50:63:da:2c:54:4d:66:31:51:30:e2:ef:7b:b3:d3: 74:e4:c7:3f:42:3b:1e:cd:e5:67:7f:3a:f1:8e:b1:14:e7:1b: e4:5d:78:26:b6:b3:02:91:3d:e3:4e:73:0b:54:cb:02:7e:b9: a7:46:bb:f2:e4:41:55:15:cd:3a:1d:63:9b:13:23:7e:28:c2: 93:24:f3:6c:46:ff:8a:59:1c:a7:52:d5:f3:f6:ce:19:5b:a4: c6:33:63:48 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/hTK2Ob/Tj5mrlXRQB3uVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NTEwNmRhYWQzYTk3M2ZkZTk4OTE0ZjdjYzFjY2QzNWQ4 Y2MzYzMwHhcNMjYwMTAyMTYyMzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2UzN2FhNGQwYTU2YzNmNTM1YmQxODFkNDIwMjAzMWRjZWJlMTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAto27Cjdjkuhu/Q5ooNTm/oHl7nTs GPIBgeccjw5VIjiQ8/y3BppAeBgJ3np0dbXef1+FawO5qwv+r+5skwsFDeVRBHdP xMePz9d3n9SdcPaYveRGOSqMWGmaqIurroZOtn07OR+hKtopyIVNF3rKqnsMi3j2 rQm9tzMNzkav2gkjeWQQVUFDTY9kQyqCXD/Je6mddW1j+e5QTwzPpG1dwPvDGaxZ ZMdKqoA9w83CPZVUUsSOnE8+FQoSZ7R5vKmGFJCKrHzcEzJv99V4Mvj/z7SuGBFE zrJ6EOS1+FB/ADTbHAC5n64DmMfWfb4iSW+n8jZScLKHVj9gv4wNpzMH1QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPfjeqTQpWw/U1vRgdQgIDHc6+E5MB8GA1UdIwQY MBaAFMhRBtqtOpc/3piRT3zBzNNdjMPDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUZFRzJxMDZsel9lbUpGUGZNSE0wMTJNdzhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC84Yzg4YmItNDRkYy00ZjA4LWJlZWUt ZmVmNDg3MTJhY2FiLzEvOS1ONnBOQ2xiRDlUVzlHQjFDQWdNZHpyNFRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC84Yzg4YmItNDRkYy00ZjA4LWJlZWUtZmVmNDg3MTJhY2Fi LzEveUZFRzJxMDZsel9lbUpGUGZNSE0wMTJNdzhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDIAE+gDAN BgkqhkiG9w0BAQsFAAOCAQEAWoyK9jWdaVk0R9k1b4FN/mOtB9qWQMCQodQOhCo4 J0QUsoqmJUSgwIM4mh+z/V5dCnxUXd2h0sn5cQhB1YFOlqkAGqjqkI/jrAjAvdBX YXE0w2DDruyKQq/eCK8IkuGi2+0MLcIJq18ZEYe42psGnML6g7IO5/m8w8qqZtbT LSbL0hSOfJIYzNcLWpyYllKp9Ayy8tfswSLtZ9cr0j8bqL2ic3/eUGPaLFRNZjFR MOLve7PTdOTHP0I7Hs3lZ3868Y6xFOcb5F14JrazApE9405zC1TLAn65p0a78uRB VRXNOh1jmxMjfijCkyTzbEb/ilkcp1LV8/bOGVukxjNjSA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:29:38 2026 by rpki-client