This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/M9QqXd8v7oflgeNXYsIu3m2alWw.roa File: M9QqXd8v7oflgeNXYsIu3m2alWw.roa (raw, json) Hash identifier: iGKw5QgXZmHRkJE0iQ30jRT38KYg6bJaXqTRwLJvUGU= Subject key identifier: 33:D4:2A:5D:DF:2F:EE:87:E5:81:E3:57:62:C2:2E:DE:6D:9A:95:6C Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82BF2B9603A6052495969780EA9FEB Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/M9QqXd8v7oflgeNXYsIu3m2alWw.roa Signing time: Fri 02 Jan 2026 16:20:33 +0000 ROA not before: Fri 02 Jan 2026 16:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51992 IP address blocks: 2a0b:b86:3b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:bf:2b:96:03:a6:05:24:95:96:97:80:ea:9f:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=33d42a5ddf2fee87e581e35762c22ede6d9a956c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c1:e0:7c:6e:8d:97:3c:26:06:2b:5d:d7:34: 05:f0:ed:60:85:dc:40:f2:47:e6:1e:92:a1:4e:96: 1d:0a:12:1a:17:4b:ff:77:f8:6b:a5:57:f7:ce:b5: 2f:bf:30:50:4a:30:68:77:1d:30:70:75:c2:96:d3: 76:6b:18:dc:19:0d:55:33:2e:e6:a6:80:95:40:38: f4:d6:c6:04:b8:1f:03:bc:a8:4c:59:f8:a1:a9:0a: c6:e7:a7:28:3e:98:7b:78:5f:c8:2e:b1:78:1b:44: 3c:04:cc:71:3c:9e:ef:72:e6:96:04:85:0d:54:8a: ca:13:dd:cc:a8:99:bd:16:9a:16:11:f5:96:60:28: a8:76:b6:1b:a9:f1:77:91:3a:01:79:96:02:83:63: 01:8f:44:49:a8:42:9a:c6:d1:59:2e:2b:23:1d:49: 8c:7a:8d:6c:11:0e:12:88:29:4a:36:d2:fd:e0:44: b5:a4:a5:0a:7a:92:2c:2c:0b:08:43:ad:a9:7f:e7: 66:e8:18:7a:d4:01:45:fe:27:0b:54:26:d3:29:75: 88:c4:59:7b:c2:b6:db:06:79:f2:f4:25:ee:9a:18: 7c:3f:96:6f:8d:cf:2c:13:eb:b0:eb:03:90:67:d5: 75:f6:3c:df:d1:bc:a8:63:14:ea:21:96:5d:94:ce: dc:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D4:2A:5D:DF:2F:EE:87:E5:81:E3:57:62:C2:2E:DE:6D:9A:95:6C X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/M9QqXd8v7oflgeNXYsIu3m2alWw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:b86:3b::/48 Signature Algorithm: sha256WithRSAEncryption c7:a0:35:db:1e:c3:51:11:5a:8b:55:4d:98:e7:49:9a:55:ae: 99:68:68:8f:28:8a:01:b6:aa:ee:43:b4:64:ff:63:b5:cb:4e: 8f:62:ad:63:51:e3:8b:2a:d0:a9:88:64:57:76:f8:20:13:86: 91:e9:87:f9:3f:06:5b:19:28:2a:87:e4:1f:cd:ff:ed:f8:81: f6:8d:ad:45:d7:c6:26:b2:74:ae:94:ca:30:67:88:94:41:5f: 5c:77:49:60:09:3e:b1:be:82:51:16:1f:c1:10:6c:a6:1c:6e: 5a:fa:9c:1b:0a:70:41:e7:c3:bc:57:1d:19:35:f9:61:cd:28: bb:c5:de:fd:1f:12:8b:04:aa:46:6a:dc:69:0d:5f:c2:67:d4: 06:19:0c:f3:9c:69:d3:a6:5a:bf:68:c9:84:fc:13:c9:8f:73: 42:6f:49:60:47:cd:ff:8f:56:73:b5:c2:b4:77:c4:55:8d:c7: 62:3d:dd:b9:2d:78:6f:25:70:6c:40:72:71:56:09:2b:9e:75: 09:67:ca:1d:6b:3a:2a:27:d7:19:98:eb:b6:ff:c5:18:de:b1: ff:62:91:d1:e8:75:eb:22:5f:cb:48:d6:10:b1:94:5e:54:ac: d6:ec:57:2b:c8:63:00:08:85:88:5c:e6:4c:a3:23:7f:76:c1: 84:43:10:40 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/gr8rlgOmBSSVlpeA6p/rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzM2Q0MmE1ZGRmMmZlZTg3ZTU4MWUzNTc2MmMyMmVkZTZkOWE5NTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsHgfG6NlzwmBitd1zQF8O1ghdxA 8kfmHpKhTpYdChIaF0v/d/hrpVf3zrUvvzBQSjBodx0wcHXCltN2axjcGQ1VMy7m poCVQDj01sYEuB8DvKhMWfihqQrG56coPph7eF/ILrF4G0Q8BMxxPJ7vcuaWBIUN VIrKE93MqJm9FpoWEfWWYCiodrYbqfF3kToBeZYCg2MBj0RJqEKaxtFZLisjHUmM eo1sEQ4SiClKNtL94ES1pKUKepIsLAsIQ62pf+dm6Bh61AFF/icLVCbTKXWIxFl7 wrbbBnny9CXumhh8P5Zvjc8sE+uw6wOQZ9V19jzf0byoYxTqIZZdlM7cRQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDPUKl3fL+6H5YHjV2LCLt5tmpVsMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvTTlRcVhkOHY3b2ZsZ2VOWFlzSXUzbTJhbFd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgsLhgA7 MA0GCSqGSIb3DQEBCwUAA4IBAQDHoDXbHsNREVqLVU2Y50maVa6ZaGiPKIoBtqru Q7Rk/2O1y06PYq1jUeOLKtCpiGRXdvggE4aR6Yf5PwZbGSgqh+Qfzf/t+IH2ja1F 18YmsnSulMowZ4iUQV9cd0lgCT6xvoJRFh/BEGymHG5a+pwbCnBB58O8Vx0ZNflh zSi7xd79HxKLBKpGatxpDV/CZ9QGGQzznGnTplq/aMmE/BPJj3NCb0lgR83/j1Zz tcK0d8RVjcdiPd25LXhvJXBsQHJxVgkrnnUJZ8odazoqJ9cZmOu2/8UY3rH/YpHR 6HXrIl/LSNYQsZReVKzW7FcryGMACIWIXOZMoyN/dsGEQxBA -----END CERTIFICATE-----Generated at Tue Jan 20 15:21:19 2026 by rpki-client