This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/924k9PtmvBKoZn2JZ_oEEnxMl5M.roa File: 924k9PtmvBKoZn2JZ_oEEnxMl5M.roa (raw, json) Hash identifier: Ba06FMRpB8IxFtbOIaeR6ZIwgJRK6jpUml4Ydgvgwdk= Subject key identifier: F7:6E:24:F4:FB:66:BC:12:A8:66:7D:89:67:FA:04:12:7C:4C:97:93 Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82D627DB14072FC3ED2863BA9DDC5D Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/924k9PtmvBKoZn2JZ_oEEnxMl5M.roa Signing time: Fri 02 Jan 2026 16:20:39 +0000 ROA not before: Fri 02 Jan 2026 16:20:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210902 IP address blocks: 2a0b:b87:ff10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:d6:27:db:14:07:2f:c3:ed:28:63:ba:9d:dc:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f76e24f4fb66bc12a8667d8967fa04127c4c9793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:78:ba:c0:50:12:cd:14:1b:53:d3:92:00:97: c1:52:29:b4:76:1f:76:ac:56:29:99:15:5f:a7:b4: 67:1d:7c:69:18:8e:ac:5e:c4:b0:a8:c0:07:3a:fb: 93:8b:d6:6a:e8:0f:1c:0f:7e:ee:18:32:2a:c7:50: a8:c7:91:a2:1d:cd:17:2a:91:5e:ec:2f:ba:75:51: 57:34:6b:56:b1:2a:b0:2c:3f:f4:cc:f7:ac:80:93: fc:9e:89:0b:49:a5:9a:52:ad:1a:f5:f5:1c:78:1c: 1d:6b:dd:0f:cc:a5:e5:db:5d:f7:aa:4f:21:5a:3a: 0c:c2:46:cd:c3:0b:53:f0:eb:3d:bb:54:a4:ee:08: 4f:a5:84:25:a1:b1:28:0a:e2:7f:32:68:aa:d5:d9: 53:1a:17:6f:a8:63:4c:95:88:1a:42:b0:89:4c:85: 00:35:25:a3:ae:82:83:a1:89:1e:49:8c:06:2b:dc: e4:16:6d:be:24:03:cf:24:15:5e:32:b4:ce:42:ee: 8b:f1:84:24:b4:91:eb:ae:ad:84:bc:df:05:79:57: 1b:2b:65:b2:14:84:44:d0:44:ce:4c:6e:a2:dc:fa: bf:3a:fb:2a:5b:2c:d4:75:2e:31:88:c8:b8:4a:12: fa:fa:51:ee:d3:a3:fb:e8:19:fc:77:3b:b0:f9:d3: 55:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:6E:24:F4:FB:66:BC:12:A8:66:7D:89:67:FA:04:12:7C:4C:97:93 X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/924k9PtmvBKoZn2JZ_oEEnxMl5M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:b87:ff10::/48 Signature Algorithm: sha256WithRSAEncryption 5b:95:d8:5c:52:63:2c:0b:e0:4c:d3:26:0d:29:cb:0d:1d:07: 89:3c:a8:d1:3a:2e:fa:d5:d3:4b:3d:96:8a:3d:af:d8:7a:ba: 84:75:a0:c3:23:3b:09:75:2e:03:e3:3e:3c:50:da:9a:e3:6a: 23:f8:b6:e0:e2:79:f5:f6:ec:52:a4:d1:f5:5f:31:b4:3e:f5: 58:ac:87:4c:5f:48:e5:4f:fc:82:94:91:31:8d:e8:49:a8:35: 86:cf:da:90:4f:9e:d2:9e:9f:a4:a4:b4:a7:d3:8b:37:a2:07: 2f:f1:01:0d:c8:58:bd:e8:af:50:c6:91:4e:dc:d7:cb:d4:1d: c8:2f:95:86:aa:89:93:07:77:a0:7e:56:db:ce:d8:56:7a:89: ee:45:75:17:bf:dc:b2:7a:e0:48:0c:2b:15:67:c5:f5:f5:5a: b0:a6:fc:68:8d:e7:ec:b4:38:90:34:4a:1e:1f:61:d9:23:2c: ea:6a:04:5c:af:4b:f9:60:1b:5e:08:22:91:73:db:8e:c2:df: 5c:c2:87:f9:51:81:ab:03:b6:6f:ac:8b:dd:fc:86:61:d2:e2: 55:18:08:1e:52:c4:8e:13:71:e6:6f:78:6a:9d:82:0b:bf:a4: 74:1e:13:14:14:d9:00:75:78:88:bb:71:4c:d3:7a:da:15:5f: 91:81:62:09 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/gtYn2xQHL8PtKGO6ndxdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzZlMjRmNGZiNjZiYzEyYTg2NjdkODk2N2ZhMDQxMjdjNGM5NzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3i6wFASzRQbU9OSAJfBUim0dh92 rFYpmRVfp7RnHXxpGI6sXsSwqMAHOvuTi9Zq6A8cD37uGDIqx1Cox5GiHc0XKpFe 7C+6dVFXNGtWsSqwLD/0zPesgJP8nokLSaWaUq0a9fUceBwda90PzKXl2133qk8h WjoMwkbNwwtT8Os9u1Sk7ghPpYQlobEoCuJ/Mmiq1dlTGhdvqGNMlYgaQrCJTIUA NSWjroKDoYkeSYwGK9zkFm2+JAPPJBVeMrTOQu6L8YQktJHrrq2EvN8FeVcbK2Wy FIRE0ETOTG6i3Pq/OvsqWyzUdS4xiMi4ShL6+lHu06P76Bn8dzuw+dNVbQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPduJPT7ZrwSqGZ9iWf6BBJ8TJeTMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvOTI0azlQdG12QktvWm4ySlpfb0VFbnhNbDVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgsLh/8Q MA0GCSqGSIb3DQEBCwUAA4IBAQBbldhcUmMsC+BM0yYNKcsNHQeJPKjROi761dNL PZaKPa/YerqEdaDDIzsJdS4D4z48UNqa42oj+Lbg4nn19uxSpNH1XzG0PvVYrIdM X0jlT/yClJExjehJqDWGz9qQT57Snp+kpLSn04s3ogcv8QENyFi96K9QxpFO3NfL 1B3IL5WGqomTB3egflbbzthWeonuRXUXv9yyeuBIDCsVZ8X19VqwpvxojefstDiQ NEoeH2HZIyzqagRcr0v5YBteCCKRc9uOwt9cwof5UYGrA7ZvrIvd/IZh0uJVGAge UsSOE3Hmb3hqnYILv6R0HhMUFNkAdXiIu3FM03raFV+RgWIJ -----END CERTIFICATE-----Generated at Tue Jan 20 15:20:22 2026 by rpki-client