This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9_C5QcKVba_o6u1jiiv7uxsQbbI.roa File: 9_C5QcKVba_o6u1jiiv7uxsQbbI.roa (raw, json) Hash identifier: qtPtMr0iWdTb/hqisQshs8v7YNVpwohjGq3x3fXGBPI= Subject key identifier: F7:F0:B9:41:C2:95:6D:AF:E8:EA:ED:63:8A:2B:FB:BB:1B:10:6D:B2 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D30C00866B083ED5F5DC6531292B7 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9_C5QcKVba_o6u1jiiv7uxsQbbI.roa Signing time: Fri 02 Jan 2026 06:20:17 +0000 ROA not before: Fri 02 Jan 2026 06:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210980 IP address blocks: 2a0e:b107:ae0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:30:c0:08:66:b0:83:ed:5f:5d:c6:53:12:92:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7f0b941c2956dafe8eaed638a2bfbbb1b106db2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:aa:10:30:67:e7:9e:60:4a:a5:08:cd:6c:57: 6d:16:92:b4:43:2c:fc:39:6f:4b:a0:3e:ef:f3:4a: 3c:7f:cc:a0:d3:57:6a:fb:a5:55:6d:cb:8d:ae:2d: a5:fe:21:24:a6:b9:b6:0b:a7:57:95:0b:02:38:a6: c4:eb:84:c7:67:b6:92:ce:5e:fe:09:97:6c:0b:bb: 63:52:a0:a7:96:70:75:a7:49:c0:29:2e:7c:04:0a: 34:5d:a4:12:56:c9:38:c1:42:07:b4:db:94:57:f8: c1:fa:20:63:93:41:52:71:1e:3d:99:36:d8:2a:d4: 72:1a:87:16:5e:9e:2e:c4:59:6f:bf:7d:01:2e:7c: 8d:f4:bf:4d:df:28:f3:33:45:71:14:ee:1a:0b:47: c6:0b:ec:01:ad:84:0c:bc:29:3c:69:02:e5:48:ad: 1c:75:6a:46:7e:be:26:f9:cf:f1:b3:a1:e0:2c:9d: 13:91:b2:4b:b8:72:6b:20:c1:1b:37:1e:ec:a2:b0: eb:0b:fe:91:56:ec:61:84:4a:00:2d:e2:82:b3:11: 72:71:d8:a1:65:c2:30:5a:bc:a2:90:58:c2:55:d0: 32:ca:c3:8b:12:ea:c7:7e:d7:93:de:2a:08:dc:f5: ac:67:29:ec:59:8a:28:a4:e8:e3:5a:7e:dd:58:88: b2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:F0:B9:41:C2:95:6D:AF:E8:EA:ED:63:8A:2B:FB:BB:1B:10:6D:B2 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9_C5QcKVba_o6u1jiiv7uxsQbbI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:ae0::/44 Signature Algorithm: sha256WithRSAEncryption 3a:82:27:8d:37:bc:9b:05:4b:4f:52:98:cf:ac:54:62:ad:c4: 58:aa:cc:e8:72:6a:d8:30:a6:5b:dd:c8:dc:c8:12:5e:e3:00: 70:55:b0:44:4f:72:02:ae:5f:5e:36:a1:d0:91:2a:8e:b3:34: e9:73:cc:4c:47:58:1d:de:3e:e1:70:b6:7f:77:b7:a6:da:a1: b1:0f:ad:3e:74:b9:bd:06:9a:f5:94:1d:f8:fe:98:a7:0c:f8: db:2e:1a:00:f9:92:ba:21:c1:de:f6:ba:6f:a2:76:0b:d6:80: 6d:3f:d3:16:2a:79:2e:17:02:5b:a7:fd:22:eb:7e:26:43:09: 9b:b4:92:f2:ea:90:5c:60:14:6d:d0:b0:2e:3b:68:2c:4b:4b: 1f:20:d9:5a:3a:5e:37:a3:36:af:e8:67:0b:af:19:39:ab:de: ea:13:f9:6e:06:b3:d4:45:aa:1a:fd:de:38:bf:d7:a3:62:e9: 20:dd:be:88:9e:54:a5:18:f4:b9:5b:aa:cd:97:9d:15:cd:6b: aa:ed:90:30:02:d0:83:f0:6a:ac:b1:60:e8:08:38:85:ed:8b: 56:45:3c:e2:e5:28:55:67:b4:79:8e:2e:45:46:2b:bc:e5:f9: 93:86:3c:22:e6:49:9b:dc:10:d1:73:2a:f6:0f:97:7b:6d:dd: b8:61:ce:c9 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XTDACGawg+1fXcZTEpK3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2YwYjk0MWMyOTU2ZGFmZThlYWVkNjM4YTJiZmJiYjFiMTA2ZGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKoQMGfnnmBKpQjNbFdtFpK0Qyz8 OW9LoD7v80o8f8yg01dq+6VVbcuNri2l/iEkprm2C6dXlQsCOKbE64THZ7aSzl7+ CZdsC7tjUqCnlnB1p0nAKS58BAo0XaQSVsk4wUIHtNuUV/jB+iBjk0FScR49mTbY KtRyGocWXp4uxFlvv30BLnyN9L9N3yjzM0VxFO4aC0fGC+wBrYQMvCk8aQLlSK0c dWpGfr4m+c/xs6HgLJ0TkbJLuHJrIMEbNx7sorDrC/6RVuxhhEoALeKCsxFycdih ZcIwWryikFjCVdAyysOLEurHfteT3ioI3PWsZynsWYoopOjjWn7dWIiyaQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPfwuUHClW2v6OrtY4or+7sbEG2yMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvOV9DNVFjS1ZiYV9vNnUxamlpdjd1eHNRYmJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBwrg MA0GCSqGSIb3DQEBCwUAA4IBAQA6gieNN7ybBUtPUpjPrFRircRYqszocmrYMKZb 3cjcyBJe4wBwVbBET3ICrl9eNqHQkSqOszTpc8xMR1gd3j7hcLZ/d7em2qGxD60+ dLm9Bpr1lB34/pinDPjbLhoA+ZK6IcHe9rpvonYL1oBtP9MWKnkuFwJbp/0i634m QwmbtJLy6pBcYBRt0LAuO2gsS0sfINlaOl43ozav6GcLrxk5q97qE/luBrPURaoa /d44v9ejYukg3b6InlSlGPS5W6rNl50VzWuq7ZAwAtCD8GqssWDoCDiF7YtWRTzi 5ShVZ7R5ji5FRiu85fmThjwi5kmb3BDRcyr2D5d7bd24Yc7J -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:27 2026 by rpki-client