This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9Y_F_k9DhdcKzid6fqjxbgrRNuc.roa File: 9Y_F_k9DhdcKzid6fqjxbgrRNuc.roa (raw, json) Hash identifier: djlPYtjrgx1SZUDCBicUjjqVRfrivoPS1yVJ7my6o2k= Subject key identifier: F5:8F:C5:FE:4F:43:85:D7:0A:CE:27:7A:7E:A8:F1:6E:0A:D1:36:E7 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CB57E03AA0C9BA6D1F7E1C66E0403 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9Y_F_k9DhdcKzid6fqjxbgrRNuc.roa Signing time: Fri 02 Jan 2026 06:19:46 +0000 ROA not before: Fri 02 Jan 2026 06:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49922 IP address blocks: 2a0e:97c0:b80::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:b5:7e:03:aa:0c:9b:a6:d1:f7:e1:c6:6e:04:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f58fc5fe4f4385d70ace277a7ea8f16e0ad136e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:e8:9c:7d:71:9d:bb:28:21:95:e0:bb:f8:4a: 6e:b8:32:85:cd:0c:84:55:3b:3e:14:26:26:2e:cd: f5:d6:13:de:3e:12:79:f9:a6:70:18:43:3c:89:a3: 61:d8:7e:86:1c:2d:78:d4:c1:ca:fe:9e:f8:d4:2c: 86:5b:0e:72:8c:80:d1:b4:cc:92:2b:27:36:84:36: 2a:17:d6:7c:a8:8c:77:71:ca:9d:fb:c8:95:f9:a0: ef:73:78:68:2a:4e:f2:4a:eb:bf:f5:74:30:18:d2: aa:c9:5f:3c:13:82:a7:40:0f:5f:e9:94:9d:25:45: b5:cc:c2:95:c6:10:b5:cd:68:7e:1d:c0:bf:72:f2: 10:dc:1a:6e:3d:6c:3c:16:c9:b4:63:70:c8:52:c2: 0e:a7:45:e5:11:f3:b6:a3:25:e0:ca:b1:57:2c:64: 76:58:d6:38:e2:02:61:a5:dc:73:cb:ad:67:93:4f: c4:4c:45:db:01:c3:1c:89:6f:b6:ba:6e:99:7c:f1: 9c:8b:78:ef:e0:aa:6a:b7:ab:29:5c:80:47:89:2f: df:f6:df:e9:f5:5c:8b:d7:48:e8:3a:66:85:3c:fe: 45:c0:f3:32:c5:7a:31:93:38:59:c3:5b:60:bd:6e: 7f:16:23:cf:f7:77:d7:38:a2:e9:9b:fb:b6:5c:2a: 2d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:8F:C5:FE:4F:43:85:D7:0A:CE:27:7A:7E:A8:F1:6E:0A:D1:36:E7 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9Y_F_k9DhdcKzid6fqjxbgrRNuc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:b80::/44 Signature Algorithm: sha256WithRSAEncryption 4f:3e:ff:f6:8a:9f:82:5b:37:41:e8:57:25:22:db:8b:4f:7d: 83:bb:7a:3a:a8:16:df:21:23:6a:19:e4:8c:50:bb:f7:10:48: e2:9b:9e:6d:94:86:15:26:92:b3:5f:f6:16:e7:6a:88:9d:bc: 9a:c2:88:17:2d:5d:ec:59:ad:b2:2e:88:ba:f8:5e:34:52:1b: de:df:e4:c2:52:88:f1:d7:65:70:d0:70:05:32:35:0c:21:1f: e0:ae:28:9b:32:43:4d:99:1a:3e:97:fd:ff:ba:f2:18:4b:86: eb:58:cc:f7:ef:89:a0:23:20:2e:ed:fc:75:68:69:05:dc:38: 62:a2:71:17:45:7c:7f:7e:b8:a1:9c:d9:2f:de:db:64:07:3d: 01:ce:c7:f8:a2:51:9e:41:8c:7d:4a:e0:6b:e1:ea:0e:f4:39: 3c:ca:f1:a0:54:e0:fc:a0:30:81:d6:40:e1:7d:e0:30:90:6a: ab:2f:ef:d1:3e:53:7e:28:32:8d:64:a1:eb:ac:ee:48:6d:8c: e4:63:6b:06:15:53:82:60:6a:8e:31:cd:6f:1f:b3:27:45:bb: 7d:7f:41:bd:2f:04:b2:4f:3d:9e:61:bb:b1:61:46:e4:08:a4: 7d:46:a6:cf:e4:70:0d:f7:2c:08:1f:83:4f:ca:13:21:1e:3b: 33:48:fc:02 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XLV+A6oMm6bR9+HGbgQDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNThmYzVmZTRmNDM4NWQ3MGFjZTI3N2E3ZWE4ZjE2ZTBhZDEzNmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9OicfXGduyghleC7+EpuuDKFzQyE VTs+FCYmLs311hPePhJ5+aZwGEM8iaNh2H6GHC141MHK/p741CyGWw5yjIDRtMyS Kyc2hDYqF9Z8qIx3ccqd+8iV+aDvc3hoKk7ySuu/9XQwGNKqyV88E4KnQA9f6ZSd JUW1zMKVxhC1zWh+HcC/cvIQ3BpuPWw8Fsm0Y3DIUsIOp0XlEfO2oyXgyrFXLGR2 WNY44gJhpdxzy61nk0/ETEXbAcMciW+2um6ZfPGci3jv4Kpqt6spXIBHiS/f9t/p 9VyL10joOmaFPP5FwPMyxXoxkzhZw1tgvW5/FiPP93fXOKLpm/u2XCotPwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPWPxf5PQ4XXCs4nen6o8W4K0TbnMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvOVlfRl9rOURoZGNLemlkNmZxanhiZ3JSTnVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAuA MA0GCSqGSIb3DQEBCwUAA4IBAQBPPv/2ip+CWzdB6FclItuLT32Du3o6qBbfISNq GeSMULv3EEjim55tlIYVJpKzX/YW52qInbyawogXLV3sWa2yLoi6+F40Uhve3+TC Uojx12Vw0HAFMjUMIR/griibMkNNmRo+l/3/uvIYS4brWMz374mgIyAu7fx1aGkF 3DhionEXRXx/frihnNkv3ttkBz0Bzsf4olGeQYx9SuBr4eoO9Dk8yvGgVOD8oDCB 1kDhfeAwkGqrL+/RPlN+KDKNZKHrrO5IbYzkY2sGFVOCYGqOMc1vH7MnRbt9f0G9 LwSyTz2eYbuxYUbkCKR9RqbP5HAN9ywIH4NPyhMhHjszSPwC -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:08 2026 by rpki-client