This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/b9AIQo2x9jntukrx1Uj7sPuI_aU.roa File: b9AIQo2x9jntukrx1Uj7sPuI_aU.roa (raw, json) Hash identifier: aFgDzZZcyVKX26cN4A82A1C39YCM2w3yZIzMCv2edgs= Subject key identifier: 6F:D0:08:42:8D:B1:F6:39:ED:BA:4A:F1:D5:48:FB:B0:FB:88:FD:A5 Certificate issuer: /CN=836462c62c7f63d2f5d787a701d779ab696e2236 Certificate serial: 019B35D4FDFC5855876BFEF485C2ECCE794F Authority key identifier: 83:64:62:C6:2C:7F:63:D2:F5:D7:87:A7:01:D7:79:AB:69:6E:22:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/b9AIQo2x9jntukrx1Uj7sPuI_aU.roa Signing time: Fri 19 Dec 2025 08:58:29 +0000 ROA not before: Fri 19 Dec 2025 08:58:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 396982 IP address blocks: 2a0d:5980:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.crl rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d4:fd:fc:58:55:87:6b:fe:f4:85:c2:ec:ce:79:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=836462c62c7f63d2f5d787a701d779ab696e2236 Validity Not Before: Dec 19 08:58:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6fd008428db1f639edba4af1d548fbb0fb88fda5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:97:89:8d:02:b5:64:f2:a0:8f:1e:cc:cd:dc: dd:4b:4f:44:d5:9d:29:f7:18:d6:81:15:96:1b:d6: 4c:3c:56:14:07:03:62:c6:9f:a7:2f:b2:e9:29:08: 2a:d7:5a:30:81:b1:ea:b6:28:37:ea:d9:21:9d:64: a0:34:81:39:fe:da:0c:f5:a6:10:cb:1f:21:63:f8: 12:5a:5d:e1:50:36:83:c9:b5:6b:50:80:7d:a1:2f: fb:4e:ca:00:ff:b4:f6:38:a7:40:45:a6:4b:c7:4a: 45:08:02:04:c1:e2:b5:1b:9c:2b:f7:97:0d:8d:c0: 26:e1:11:c5:cd:8e:39:98:21:d5:de:26:c8:a4:08: 6f:01:aa:0b:7a:c5:d6:ad:7f:9d:a8:58:90:5f:3a: 00:eb:e5:c9:e9:34:d6:d2:9c:44:47:14:a4:23:4a: 70:f8:a4:a3:ef:43:64:0b:2e:e5:29:75:21:0a:52: ea:4d:b9:bb:db:66:17:85:53:1b:03:c0:89:f7:da: ef:6e:78:a9:2d:b9:90:4e:d3:16:38:1e:e6:22:e7: b7:09:92:33:35:49:80:5f:00:06:f0:ea:36:fc:7f: b0:8c:1b:54:e5:63:55:3c:07:8d:9b:9c:91:8f:72: 20:23:69:21:68:9f:a1:3d:7d:86:69:a3:c8:bb:ad: 9f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:D0:08:42:8D:B1:F6:39:ED:BA:4A:F1:D5:48:FB:B0:FB:88:FD:A5 X509v3 Authority Key Identifier: keyid:83:64:62:C6:2C:7F:63:D2:F5:D7:87:A7:01:D7:79:AB:69:6E:22:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/b9AIQo2x9jntukrx1Uj7sPuI_aU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:5980:100::/48 Signature Algorithm: sha256WithRSAEncryption 21:03:31:56:eb:e5:72:e6:e4:82:04:c6:56:6a:76:8c:b9:96: d3:49:f2:1f:33:2b:b1:59:94:39:ba:08:05:fa:17:70:7c:8c: 7f:7d:08:86:1c:00:4f:66:4a:a5:07:0f:59:c8:ce:45:1e:2e: 4d:8c:b0:cc:f2:28:b7:88:74:b8:f5:2f:5a:ec:af:ac:5a:4d: d0:6a:9f:d4:3a:27:72:e6:55:bf:03:4a:07:96:02:a9:79:43: d5:a1:cf:3b:71:7c:35:f4:a6:ca:d9:7a:30:8a:ae:1e:eb:d3: fa:f7:86:a8:03:a2:44:c7:c2:d0:4c:29:7f:98:ea:22:de:8a: 78:2f:0c:9d:43:ad:53:50:d2:a9:88:02:a5:c2:40:b5:f9:1a: 9d:5a:42:69:e2:39:11:46:88:f2:36:4c:df:97:51:1c:de:8a: e4:18:d2:e8:65:72:90:09:98:4b:1f:c8:be:43:4d:9f:4e:73: 07:20:2a:a0:a4:a0:3a:3e:cc:2c:e3:8d:df:82:8a:8d:7d:ef: d3:87:a5:8d:da:fe:c3:90:e4:99:d0:9e:0f:70:f8:14:f1:da: b8:bf:3a:ea:50:bb:b6:49:bb:2f:c1:b5:75:80:dd:b6:26:66: 4e:4e:a5:cc:c6:af:a2:2c:3b:6c:71:3e:7f:99:ef:92:ee:84: f0:0e:66:d6 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZs11P38WFWHa/70hcLsznlPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNjQ2MmM2MmM3ZjYzZDJmNWQ3ODdhNzAxZDc3OWFiNjk2 ZTIyMzYwHhcNMjUxMjE5MDg1ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZmQwMDg0MjhkYjFmNjM5ZWRiYTRhZjFkNTQ4ZmJiMGZiODhmZGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJeJjQK1ZPKgjx7MzdzdS09E1Z0p 9xjWgRWWG9ZMPFYUBwNixp+nL7LpKQgq11owgbHqtig36tkhnWSgNIE5/toM9aYQ yx8hY/gSWl3hUDaDybVrUIB9oS/7TsoA/7T2OKdARaZLx0pFCAIEweK1G5wr95cN jcAm4RHFzY45mCHV3ibIpAhvAaoLesXWrX+dqFiQXzoA6+XJ6TTW0pxERxSkI0pw +KSj70NkCy7lKXUhClLqTbm722YXhVMbA8CJ99rvbnipLbmQTtMWOB7mIue3CZIz NUmAXwAG8Oo2/H+wjBtU5WNVPAeNm5yRj3IgI2khaJ+hPX2GaaPIu62fZQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFG/QCEKNsfY57bpK8dVI+7D7iP2lMB8GA1UdIwQY MBaAFINkYsYsf2PS9deHpwHXeatpbiI2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzJSaXhpeF9ZOUwxMTRlbkFkZDVxMmx1SWpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8zNzE3Y2YtZmEzOC00ZTNlLWFlZmMt ZjkxMGU1MTc2YjVlLzEvYjlBSVFvMng5am50dWtyeDFVajdzUHVJX2FVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8zNzE3Y2YtZmEzOC00ZTNlLWFlZmMtZjkxMGU1MTc2YjVl LzEvZzJSaXhpeF9ZOUwxMTRlbkFkZDVxMmx1SWpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg1ZgAEA MA0GCSqGSIb3DQEBCwUAA4IBAQAhAzFW6+Vy5uSCBMZWanaMuZbTSfIfMyuxWZQ5 uggF+hdwfIx/fQiGHABPZkqlBw9ZyM5FHi5NjLDM8ii3iHS49S9a7K+sWk3Qap/U Oidy5lW/A0oHlgKpeUPVoc87cXw19KbK2Xowiq4e69P694aoA6JEx8LQTCl/mOoi 3op4LwydQ61TUNKpiAKlwkC1+RqdWkJp4jkRRojyNkzfl1Ec3orkGNLoZXKQCZhL H8i+Q02fTnMHICqgpKA6Psws443fgoqNfe/Th6WN2v7DkOSZ0J4PcPgU8dq4vzrq ULu2SbsvwbV1gN22JmZOTqXMxq+iLDtscT5/me+S7oTwDmbW -----END CERTIFICATE-----Generated at Tue Dec 23 13:32:13 2025 by rpki-client