This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/9Y6XWJ6VWz8otzDPBalCUtCfzZU.roa File: 9Y6XWJ6VWz8otzDPBalCUtCfzZU.roa (raw, json) Hash identifier: sjrsCbBwaUlQ8V+c9dddc6DlyD0j++DkIm2cvSRmRTg= Subject key identifier: F5:8E:97:58:9E:95:5B:3F:28:B7:30:CF:05:A9:42:52:D0:9F:CD:95 Certificate issuer: /CN=77d2d928423104e5c3480e21b4a3ed1498b2a27e Certificate serial: 019B7F83C6DBBE77AA6E2AF55374F57A828A Authority key identifier: 77:D2:D9:28:42:31:04:E5:C3:48:0E:21:B4:A3:ED:14:98:B2:A2:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/9Y6XWJ6VWz8otzDPBalCUtCfzZU.roa Signing time: Fri 02 Jan 2026 16:21:41 +0000 ROA not before: Fri 02 Jan 2026 16:21:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56837 IP address blocks: 2001:67c:1808::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.crl rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:c6:db:be:77:aa:6e:2a:f5:53:74:f5:7a:82:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77d2d928423104e5c3480e21b4a3ed1498b2a27e Validity Not Before: Jan 2 16:21:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f58e97589e955b3f28b730cf05a94252d09fcd95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:be:6b:a7:27:f9:8a:45:7f:74:da:7d:53:6a: 39:71:76:e0:47:eb:3c:8f:cc:94:80:b9:4b:15:7f: c6:ee:5b:c3:24:31:24:95:13:3e:82:12:09:fb:e4: cd:0c:3a:9e:6b:c6:41:a8:ea:90:90:2a:b0:63:8a: 52:2f:3d:0b:c0:2d:ab:c5:f6:d1:99:c9:5e:a4:c8: db:24:00:48:01:e1:1c:86:77:3f:68:a3:0a:06:8c: 76:f4:e9:4d:2b:51:a2:91:2c:04:6f:7f:ff:81:23: 1d:5d:bb:1d:55:1b:b4:36:7f:0f:3f:7c:e7:be:90: 40:cb:1d:d5:a7:04:c7:1d:d6:40:34:be:42:7e:d9: df:7a:23:6d:60:05:52:d4:e1:ca:ba:8c:9c:4a:e4: e9:be:c8:30:a4:1b:6f:52:94:82:68:4b:57:0d:f1: 88:e6:f2:80:d0:d1:f8:fb:87:5a:a0:fd:9d:ff:d8: 34:a5:db:2e:3d:ba:41:11:47:00:9f:ea:96:3a:3e: ca:26:43:38:8b:8b:28:6f:7c:88:21:9c:ed:4e:df: c7:7c:9d:17:25:ab:cd:5a:e0:6d:0b:2d:d5:b8:4a: 49:5a:42:21:88:c2:a9:f7:32:3d:e6:a3:bf:1c:75: fa:3d:65:8a:bb:13:6f:66:93:ad:16:d1:be:02:44: a7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:8E:97:58:9E:95:5B:3F:28:B7:30:CF:05:A9:42:52:D0:9F:CD:95 X509v3 Authority Key Identifier: keyid:77:D2:D9:28:42:31:04:E5:C3:48:0E:21:B4:A3:ED:14:98:B2:A2:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/9Y6XWJ6VWz8otzDPBalCUtCfzZU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:1808::/48 Signature Algorithm: sha256WithRSAEncryption 7b:50:c8:8d:09:d0:b1:87:8f:6c:58:c2:d3:9a:2c:79:93:47: 27:83:2c:e5:ea:be:70:f7:01:93:1f:0d:03:9d:5d:90:f5:e7: 2d:c7:61:41:79:fc:56:eb:15:8a:56:33:53:5e:0c:3e:5e:bc: 21:05:e9:76:6a:7a:f1:b2:21:2e:19:5e:07:45:0c:d5:a8:6d: 29:27:d0:4a:41:81:33:fe:be:b6:59:39:0a:29:f5:9c:e3:57: 50:b6:25:2a:d5:ea:84:d3:3e:9d:d6:09:32:f8:6e:d9:ec:0c: f4:d4:9c:8d:ec:21:0c:25:2d:91:06:ce:ad:7b:b9:6c:9e:d1: d3:a4:e6:81:f4:d5:00:62:28:ba:c3:bd:13:8d:0b:60:b0:e2: ce:63:ed:3a:59:dd:c1:4b:ee:55:d0:40:ea:f8:67:85:3a:e3: bc:bf:6b:cc:51:fa:c2:4e:43:3d:96:71:71:ab:4f:cf:4d:1f: 1e:51:36:0b:7c:99:5a:dc:a2:ce:4b:b5:c4:b0:fa:ba:a8:ca: 80:f8:1b:32:cb:bc:70:62:98:ef:17:e4:65:8a:e5:c2:38:38: 14:b0:9c:ae:66:a7:03:8c:8a:07:42:3c:c1:8f:54:22:ef:fb: 0a:66:d5:27:89:9e:6b:a9:e1:13:01:1b:dc:aa:f9:ec:52:5f: 8e:ee:e5:39 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/g8bbvneqbir1U3T1eoKKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3ZDJkOTI4NDIzMTA0ZTVjMzQ4MGUyMWI0YTNlZDE0OThi MmEyN2UwHhcNMjYwMTAyMTYyMTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNThlOTc1ODllOTU1YjNmMjhiNzMwY2YwNWE5NDI1MmQwOWZjZDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqr5rpyf5ikV/dNp9U2o5cXbgR+s8 j8yUgLlLFX/G7lvDJDEklRM+ghIJ++TNDDqea8ZBqOqQkCqwY4pSLz0LwC2rxfbR mclepMjbJABIAeEchnc/aKMKBox29OlNK1GikSwEb3//gSMdXbsdVRu0Nn8PP3zn vpBAyx3VpwTHHdZANL5CftnfeiNtYAVS1OHKuoycSuTpvsgwpBtvUpSCaEtXDfGI 5vKA0NH4+4daoP2d/9g0pdsuPbpBEUcAn+qWOj7KJkM4i4sob3yIIZztTt/HfJ0X JavNWuBtCy3VuEpJWkIhiMKp9zI95qO/HHX6PWWKuxNvZpOtFtG+AkSnhwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPWOl1ielVs/KLcwzwWpQlLQn82VMB8GA1UdIwQY MBaAFHfS2ShCMQTlw0gOIbSj7RSYsqJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDlMWktFSXhCT1hEU0E0aHRLUHRGSml5b240LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8yYjllMjktZDU2OC00ZDUzLWIxMjgt NDg4NzkyMzg4ZTViLzEvOVk2WFdKNlZXejhvdHpEUEJhbENVdENmelpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8yYjllMjktZDU2OC00ZDUzLWIxMjgtNDg4NzkyMzg4ZTVi LzEvZDlMWktFSXhCT1hEU0E0aHRLUHRGSml5b240LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBgI MA0GCSqGSIb3DQEBCwUAA4IBAQB7UMiNCdCxh49sWMLTmix5k0cngyzl6r5w9wGT Hw0DnV2Q9ectx2FBefxW6xWKVjNTXgw+XrwhBel2anrxsiEuGV4HRQzVqG0pJ9BK QYEz/r62WTkKKfWc41dQtiUq1eqE0z6d1gky+G7Z7Az01JyN7CEMJS2RBs6te7ls ntHTpOaB9NUAYii6w70TjQtgsOLOY+06Wd3BS+5V0EDq+GeFOuO8v2vMUfrCTkM9 lnFxq0/PTR8eUTYLfJla3KLOS7XEsPq6qMqA+Bsyy7xwYpjvF+RliuXCODgUsJyu ZqcDjIoHQjzBj1Qi7/sKZtUniZ5rqeETARvcqvnsUl+O7uU5 -----END CERTIFICATE-----Generated at Mon Feb 9 19:39:58 2026 by rpki-client