This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9JMnCxt_UmbNCTPic_nemVW_MWw.roa File: 9JMnCxt_UmbNCTPic_nemVW_MWw.roa (raw, json) Hash identifier: hurxcgqM0K5ILMndn/n4Ta2C5p7hmp2uI1EhpjOSCu4= Subject key identifier: F4:93:27:0B:1B:7F:52:66:CD:09:33:E2:73:F9:DE:99:55:BF:31:6C Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CE5A6B16AEF1DF7967D03F7941B4F Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9JMnCxt_UmbNCTPic_nemVW_MWw.roa Signing time: Fri 02 Jan 2026 06:19:58 +0000 ROA not before: Fri 02 Jan 2026 06:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200730 IP address blocks: 2a0e:b107:1fc0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:e5:a6:b1:6a:ef:1d:f7:96:7d:03:f7:94:1b:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f493270b1b7f5266cd0933e273f9de9955bf316c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:78:6a:21:0a:66:49:fe:82:05:29:c8:12:5d: f2:d9:87:eb:e5:fe:9b:20:de:02:a2:5e:de:46:3b: 29:99:09:b0:fc:01:36:1f:30:dd:0e:b9:59:5f:bc: 8c:57:0e:90:29:27:79:73:18:92:1d:9e:99:a5:06: f4:0f:2a:c4:75:bf:b1:b5:29:e3:88:7f:0f:3a:f7: 4b:77:be:7d:a0:42:48:95:1c:eb:b3:e5:7b:91:17: 43:c0:25:1c:7b:05:7e:ca:a8:06:ff:15:b4:95:f7: ed:54:f3:97:9e:d2:f4:e8:65:ea:fc:cb:a5:e6:b3: 66:e3:ac:9e:2e:e1:88:c7:17:97:63:5a:d5:dd:0d: c6:20:a7:66:40:5f:a6:7e:b5:22:f0:d2:26:2e:21: 0e:29:42:07:bc:f7:8f:fd:24:c0:cf:a5:b9:67:f2: 7d:27:ff:24:61:8e:24:d7:aa:93:69:df:bd:5e:97: 70:64:4f:4e:26:fe:e3:85:15:45:f8:d6:a2:b3:f6: e6:61:c4:1a:8d:c6:db:6c:86:07:82:46:1e:a7:47: 2b:8b:29:4b:54:d5:71:2f:a0:9a:23:3f:b7:2b:94: ee:f2:73:8b:33:13:b9:ed:07:5f:f6:07:e2:46:89: 24:37:fb:7b:73:05:4f:bd:71:24:26:bd:2b:9c:c9: fc:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:93:27:0B:1B:7F:52:66:CD:09:33:E2:73:F9:DE:99:55:BF:31:6C X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9JMnCxt_UmbNCTPic_nemVW_MWw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:1fc0::/44 Signature Algorithm: sha256WithRSAEncryption 4c:47:32:08:10:73:a0:fe:e9:26:d2:d7:56:98:45:a0:0b:04: 78:fb:3c:5c:40:c8:31:18:4d:0a:83:57:00:21:28:75:47:1a: 2b:46:25:b0:16:58:c2:96:cb:64:44:ac:b5:80:84:c9:eb:15: a9:20:37:15:c8:4c:a3:91:9f:97:f2:8c:78:dc:6f:7a:c0:b4: d8:af:d9:f3:cc:ce:2c:cf:9d:06:7f:37:81:d9:f7:51:74:ef: 8e:bc:db:69:ff:5b:e7:1e:7c:fc:75:09:77:47:5d:f2:61:76: 5f:0f:fe:dd:3a:af:ba:ec:c5:97:78:5f:c3:49:56:d9:cb:d5: 99:d2:71:ae:b0:6a:07:eb:09:45:31:44:70:6e:c9:07:cd:23: b5:91:0b:aa:ff:b3:0c:67:2f:1d:6a:95:87:03:46:27:c8:1c: d9:10:db:45:08:98:67:0d:d4:14:3c:fa:29:a8:7a:90:cb:34: 16:e8:b1:93:3e:63:ee:d7:f3:5b:71:d3:72:eb:4e:03:c8:27: e6:f5:fc:9d:23:42:53:1f:4c:95:35:9f:06:af:20:b7:73:4a: 06:3b:19:37:ff:8a:62:25:41:a7:fe:28:35:60:76:42:94:57: f7:9c:1a:23:0a:24:61:a4:08:a6:45:61:7c:d1:a0:32:7e:9f: 4a:ea:3e:8a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XOWmsWrvHfeWfQP3lBtPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDkzMjcwYjFiN2Y1MjY2Y2QwOTMzZTI3M2Y5ZGU5OTU1YmYzMTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHhqIQpmSf6CBSnIEl3y2Yfr5f6b IN4Col7eRjspmQmw/AE2HzDdDrlZX7yMVw6QKSd5cxiSHZ6ZpQb0DyrEdb+xtSnj iH8POvdLd759oEJIlRzrs+V7kRdDwCUcewV+yqgG/xW0lfftVPOXntL06GXq/Mul 5rNm46yeLuGIxxeXY1rV3Q3GIKdmQF+mfrUi8NImLiEOKUIHvPeP/STAz6W5Z/J9 J/8kYY4k16qTad+9XpdwZE9OJv7jhRVF+Nais/bmYcQajcbbbIYHgkYep0criylL VNVxL6CaIz+3K5Tu8nOLMxO57Qdf9gfiRokkN/t7cwVPvXEkJr0rnMn8HwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPSTJwsbf1JmzQkz4nP53plVvzFsMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvOUpNbkN4dF9VbWJOQ1RQaWNfbmVtVldfTVd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBx/A MA0GCSqGSIb3DQEBCwUAA4IBAQBMRzIIEHOg/ukm0tdWmEWgCwR4+zxcQMgxGE0K g1cAISh1RxorRiWwFljClstkRKy1gITJ6xWpIDcVyEyjkZ+X8ox43G96wLTYr9nz zM4sz50GfzeB2fdRdO+OvNtp/1vnHnz8dQl3R13yYXZfD/7dOq+67MWXeF/DSVbZ y9WZ0nGusGoH6wlFMURwbskHzSO1kQuq/7MMZy8dapWHA0YnyBzZENtFCJhnDdQU PPopqHqQyzQW6LGTPmPu1/NbcdNy604DyCfm9fydI0JTH0yVNZ8GryC3c0oGOxk3 /4piJUGn/ig1YHZClFf3nBojCiRhpAimRWF80aAyfp9K6j6K -----END CERTIFICATE-----Generated at Fri Jan 9 13:12:06 2026 by rpki-client