This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/9_w2Qt9LIJ4arhs6wfc4a4ZlnKk.roa File: 9_w2Qt9LIJ4arhs6wfc4a4ZlnKk.roa (raw, json) Hash identifier: ucWhEi345inpOraArjtr8ofCk92ovv+52gjTLzr3UoQ= Subject key identifier: F7:FC:36:42:DF:4B:20:9E:1A:AE:1B:3A:C1:F7:38:6B:86:65:9C:A9 Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82DE8A4C41FAF1CC29BD749D67D16F Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/9_w2Qt9LIJ4arhs6wfc4a4ZlnKk.roa Signing time: Fri 02 Jan 2026 16:20:41 +0000 ROA not before: Fri 02 Jan 2026 16:20:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212647 IP address blocks: 2a0b:b87:ffa0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:de:8a:4c:41:fa:f1:cc:29:bd:74:9d:67:d1:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7fc3642df4b209e1aae1b3ac1f7386b86659ca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:87:03:8d:85:d2:bd:10:4b:2b:0d:c5:6a:e2: 33:b3:43:87:3b:67:eb:31:24:87:34:16:e5:30:89: 90:17:8c:5a:5a:66:34:6d:b9:61:41:b4:7f:bc:2f: dd:f1:96:c9:b1:42:6a:a3:94:9c:69:26:30:90:c2: 76:8c:9a:04:0c:83:db:98:d0:7b:3f:3f:97:2e:68: fd:04:14:b2:ea:4f:7a:17:01:6a:79:28:ff:40:8d: 20:25:4e:d2:da:86:46:35:9e:ac:60:54:9d:5d:50: 74:28:fc:63:2f:47:95:cd:5c:28:e3:e8:1e:3e:f9: 36:a1:4f:05:f4:fe:d3:fa:23:64:8d:d5:1e:dd:b5: 87:b9:60:a5:ef:d7:54:52:99:74:c9:69:9c:9a:20: 11:b8:8b:97:4f:70:d6:4a:b4:a9:70:7a:95:43:1b: 3e:a0:d9:f4:0b:56:d9:a1:4f:d9:b2:00:b1:c3:44: 3d:04:a7:2e:6f:d2:9e:d1:65:55:1b:2a:ff:47:ee: 16:fc:bc:3c:87:d5:f8:d0:28:09:af:d6:92:a7:60: 9d:b0:cb:37:fc:62:0e:2e:46:cd:e0:34:e7:31:0d: 84:5a:e6:7a:32:e6:14:d6:60:8f:02:67:c2:21:3a: 2f:2a:d7:f4:7d:69:0b:91:bb:dd:46:8c:5d:d4:9b: a3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:FC:36:42:DF:4B:20:9E:1A:AE:1B:3A:C1:F7:38:6B:86:65:9C:A9 X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/9_w2Qt9LIJ4arhs6wfc4a4ZlnKk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:b87:ffa0::/48 Signature Algorithm: sha256WithRSAEncryption 6c:7e:99:b7:c0:7f:6e:8c:ce:90:05:e4:d3:fe:d5:4f:c3:72: 31:5f:d8:01:f6:09:e6:da:80:ed:91:df:7a:77:58:8a:20:2d: f9:4a:ea:fe:c6:a7:35:64:a4:5b:dd:11:72:ba:43:ad:c4:54: 3c:ae:be:8f:45:db:f2:36:74:9c:7a:83:79:2d:a3:4b:27:b9: 60:ba:36:e4:1d:c1:3a:b0:b3:97:6b:2a:77:26:34:65:65:e8: 29:2e:c3:e7:c4:43:61:3e:bc:ab:97:68:0e:20:7c:29:2a:9f: 4f:a5:d9:4d:17:ec:13:b1:a3:f1:97:bd:e3:8e:47:56:8d:16: 94:dc:6b:79:01:57:30:28:a7:74:9d:f0:47:5a:32:cb:75:c2: fa:04:7d:51:db:03:85:36:cb:9b:62:7c:ed:23:58:43:79:9e: 9d:a8:c9:7c:25:aa:87:83:93:e6:8e:36:37:77:fb:81:c3:67: be:f1:5e:6d:60:de:90:bc:ed:1f:65:4b:25:c5:6e:7d:54:9c: 53:84:3d:c7:97:27:19:b0:56:9a:e3:b7:8d:a1:c8:e1:dd:79: 19:3b:d3:c4:67:7a:de:28:6f:4a:9d:06:0f:f7:ee:f1:d1:12: 03:3d:40:23:47:11:22:83:09:df:c9:ec:3e:0c:dd:f8:f5:5b: 10:40:26:2d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/gt6KTEH68cwpvXSdZ9FvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2ZjMzY0MmRmNGIyMDllMWFhZTFiM2FjMWY3Mzg2Yjg2NjU5Y2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIcDjYXSvRBLKw3FauIzs0OHO2fr MSSHNBblMImQF4xaWmY0bblhQbR/vC/d8ZbJsUJqo5ScaSYwkMJ2jJoEDIPbmNB7 Pz+XLmj9BBSy6k96FwFqeSj/QI0gJU7S2oZGNZ6sYFSdXVB0KPxjL0eVzVwo4+ge Pvk2oU8F9P7T+iNkjdUe3bWHuWCl79dUUpl0yWmcmiARuIuXT3DWSrSpcHqVQxs+ oNn0C1bZoU/ZsgCxw0Q9BKcub9Ke0WVVGyr/R+4W/Lw8h9X40CgJr9aSp2CdsMs3 /GIOLkbN4DTnMQ2EWuZ6MuYU1mCPAmfCITovKtf0fWkLkbvdRoxd1JujuwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPf8NkLfSyCeGq4bOsH3OGuGZZypMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvOV93MlF0OUxJSjRhcmhzNndmYzRhNFpsbktrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgsLh/+g MA0GCSqGSIb3DQEBCwUAA4IBAQBsfpm3wH9ujM6QBeTT/tVPw3IxX9gB9gnm2oDt kd96d1iKIC35Sur+xqc1ZKRb3RFyukOtxFQ8rr6PRdvyNnSceoN5LaNLJ7lgujbk HcE6sLOXayp3JjRlZegpLsPnxENhPryrl2gOIHwpKp9PpdlNF+wTsaPxl73jjkdW jRaU3Gt5AVcwKKd0nfBHWjLLdcL6BH1R2wOFNsubYnztI1hDeZ6dqMl8JaqHg5Pm jjY3d/uBw2e+8V5tYN6QvO0fZUslxW59VJxThD3HlycZsFaa47eNocjh3XkZO9PE Z3reKG9KnQYP9+7x0RIDPUAjRxEigwnfyew+DN349VsQQCYt -----END CERTIFICATE-----Generated at Tue Jan 20 15:19:00 2026 by rpki-client