This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/X9pqJ_bWAmfpFd9hCW3HufAy5B4.roa File: X9pqJ_bWAmfpFd9hCW3HufAy5B4.roa (raw, json) Hash identifier: SE7pkhcUNXRDeV5ZRqQnZ58B47F0LyM4s+/68mhkYxQ= Subject key identifier: 5F:DA:6A:27:F6:D6:02:67:E9:15:DF:61:09:6D:C7:B9:F0:32:E4:1E Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8 Certificate serial: 019B7D5D246668252E04CE8E925E911DABE2 Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/X9pqJ_bWAmfpFd9hCW3HufAy5B4.roa Signing time: Fri 02 Jan 2026 06:20:14 +0000 ROA not before: Fri 02 Jan 2026 06:20:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209183 IP address blocks: 2a0b:6600::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:24:66:68:25:2e:04:ce:8e:92:5e:91:1d:ab:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8 Validity Not Before: Jan 2 06:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5fda6a27f6d60267e915df61096dc7b9f032e41e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2a:a3:2f:5a:d3:09:ab:86:96:c2:57:75:79: 4f:5a:fc:25:e4:f1:b5:cc:7b:2c:9d:74:08:8e:30: ce:ec:69:52:dc:e5:6e:21:e6:28:fb:fb:be:2c:75: cd:34:e7:29:a0:da:14:45:2b:56:27:dc:36:5a:d9: 2c:4f:40:5f:af:41:bc:52:49:bb:3a:19:77:1e:9e: 3e:b0:0a:c2:ea:2d:7d:10:8c:fe:b9:d5:2d:ec:0d: dc:d5:8f:8f:67:ce:50:50:86:d6:13:9d:84:29:2d: 40:b2:03:8c:e8:60:2d:f8:74:22:dd:94:ad:81:92: 2c:ca:50:ad:d6:51:14:e2:28:02:93:b8:fc:b3:60: 14:da:90:bd:80:3a:de:bb:42:7c:00:d2:8a:2c:a6: 37:a2:b8:63:e4:4b:f8:47:74:ab:8d:4d:79:7b:5a: 0a:80:87:38:7d:70:2c:d9:7e:67:82:ed:4c:ad:a4: 57:00:3d:d1:fc:66:dc:ec:c2:b3:ae:6e:02:f3:1e: b7:c2:bf:91:93:ff:f0:b9:44:ac:cc:51:15:9d:6c: e6:ba:50:2a:43:fd:a9:21:4d:7e:f9:6c:8b:1a:0d: 3d:b9:fb:9f:b8:3b:00:b5:e5:a3:26:ca:7b:a8:a8: 18:30:7f:2c:fb:a0:40:9f:3c:5d:bf:bf:84:68:20: da:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:DA:6A:27:F6:D6:02:67:E9:15:DF:61:09:6D:C7:B9:F0:32:E4:1E X509v3 Authority Key Identifier: keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/X9pqJ_bWAmfpFd9hCW3HufAy5B4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:6600::/32 Signature Algorithm: sha256WithRSAEncryption 94:77:de:55:35:82:2c:14:89:9c:03:f2:90:fa:89:1e:f3:46: 05:8a:9b:40:70:ac:ca:b3:a4:ca:06:e6:53:0c:0e:98:bc:ec: 5a:53:27:0a:0b:aa:f9:60:c8:d0:b9:2c:da:93:40:a6:d9:05: 16:bd:95:88:ec:a4:c6:d1:41:87:ef:ce:d8:3c:82:11:ce:c7: 5f:07:98:20:0d:65:2b:c3:24:f2:80:cb:d5:83:00:84:c2:62: 80:2d:6d:a6:b1:46:9f:16:24:90:c4:a3:1e:98:a9:5b:14:ee: 1b:04:89:d4:30:25:4c:14:64:1e:93:7d:7b:a5:72:81:c6:ce: bc:5a:fa:a1:08:f7:d3:a9:40:ab:72:92:3e:cd:20:e0:2a:5f: e1:8a:7b:0a:e8:65:66:36:78:3c:47:bd:e4:ae:1d:9e:12:b8: db:ee:9b:f8:f8:83:f7:07:16:8c:aa:61:21:90:3b:1a:56:d9: 4a:ca:34:f8:4a:61:71:d4:d3:c3:fc:83:4c:ad:6f:cd:37:b5: 81:10:93:b4:13:aa:50:16:6e:7b:bb:ff:b5:20:44:d0:44:55: 49:31:82:f1:7c:f7:ba:33:ee:74:bd:4c:7d:63:36:b6:de:15: af:99:10:26:4f:84:75:56:72:e5:72:01:a2:03:1d:c2:5a:76: 7d:79:91:a6 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9XSRmaCUuBM6Okl6RHaviMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYTAxMGY4N2EwNDliNmUyMWFiZWQ5YjQwOTgzYjA0ZjNm MWM3ZTgwHhcNMjYwMTAyMDYyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmRhNmEyN2Y2ZDYwMjY3ZTkxNWRmNjEwOTZkYzdiOWYwMzJlNDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSqjL1rTCauGlsJXdXlPWvwl5PG1 zHssnXQIjjDO7GlS3OVuIeYo+/u+LHXNNOcpoNoURStWJ9w2WtksT0Bfr0G8Ukm7 Ohl3Hp4+sArC6i19EIz+udUt7A3c1Y+PZ85QUIbWE52EKS1AsgOM6GAt+HQi3ZSt gZIsylCt1lEU4igCk7j8s2AU2pC9gDreu0J8ANKKLKY3orhj5Ev4R3SrjU15e1oK gIc4fXAs2X5ngu1MraRXAD3R/Gbc7MKzrm4C8x63wr+Rk//wuUSszFEVnWzmulAq Q/2pIU1++WyLGg09ufufuDsAteWjJsp7qKgYMH8s+6BAnzxdv7+EaCDa4QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFF/aaif21gJn6RXfYQltx7nwMuQeMB8GA1UdIwQY MBaAFBGgEPh6BJtuIavtm0CYOwTz8cfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUt ZWU3NDY1NzU0ZmY2LzEvWDlwcUpfYldBbWZwRmQ5aENXM0h1ZkF5NUI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUtZWU3NDY1NzU0ZmY2 LzEvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgtmADAN BgkqhkiG9w0BAQsFAAOCAQEAlHfeVTWCLBSJnAPykPqJHvNGBYqbQHCsyrOkygbm UwwOmLzsWlMnCguq+WDI0Lks2pNAptkFFr2ViOykxtFBh+/O2DyCEc7HXweYIA1l K8Mk8oDL1YMAhMJigC1tprFGnxYkkMSjHpipWxTuGwSJ1DAlTBRkHpN9e6VygcbO vFr6oQj306lAq3KSPs0g4Cpf4Yp7CuhlZjZ4PEe95K4dnhK42+6b+PiD9wcWjKph IZA7GlbZSso0+EphcdTTw/yDTK1vzTe1gRCTtBOqUBZue7v/tSBE0ERVSTGC8Xz3 ujPudL1MfWM2tt4Vr5kQJk+EdVZy5XIBogMdwlp2fXmRpg== -----END CERTIFICATE-----Generated at Wed Jan 21 12:44:15 2026 by rpki-client