This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/330e6b-5675-4a26-b849-f1c259dbe63e/1/9Pq-Sb3grrW64Sf_9Ud99U3jJE8.roa File: 9Pq-Sb3grrW64Sf_9Ud99U3jJE8.roa (raw, json) Hash identifier: UvG3lMMpHAs1Kqa7iKgc9zEnznEf/HzGZcTb0fKC5kU= Subject key identifier: F4:FA:BE:49:BD:E0:AE:B5:BA:E1:27:FF:F5:47:7D:F5:4D:E3:24:4F Certificate issuer: /CN=f2285d740a5e892cd0be6f224f4d3f4e9d6dd1c4 Certificate serial: 019B7C80471741FF78C20EA0967CD2E6D58D Authority key identifier: F2:28:5D:74:0A:5E:89:2C:D0:BE:6F:22:4F:4D:3F:4E:9D:6D:D1:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ihddApeiSzQvm8iT00_Tp1t0cQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/330e6b-5675-4a26-b849-f1c259dbe63e/1/9Pq-Sb3grrW64Sf_9Ud99U3jJE8.roa Signing time: Fri 02 Jan 2026 02:19:00 +0000 ROA not before: Fri 02 Jan 2026 02:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203312 IP address blocks: 2001:678:9e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/330e6b-5675-4a26-b849-f1c259dbe63e/1/8ihddApeiSzQvm8iT00_Tp1t0cQ.crl rsync://rpki.ripe.net/repository/DEFAULT/56/330e6b-5675-4a26-b849-f1c259dbe63e/1/8ihddApeiSzQvm8iT00_Tp1t0cQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8ihddApeiSzQvm8iT00_Tp1t0cQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:47:17:41:ff:78:c2:0e:a0:96:7c:d2:e6:d5:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2285d740a5e892cd0be6f224f4d3f4e9d6dd1c4 Validity Not Before: Jan 2 02:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4fabe49bde0aeb5bae127fff5477df54de3244f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:85:80:b6:2b:d0:10:fb:cb:be:75:21:ba:a0: bf:8d:f5:51:ee:8b:f4:df:d9:6e:da:a9:ea:1c:6a: 3a:5c:76:7d:8b:48:63:73:d9:77:6e:17:7c:c2:21: 32:20:77:f8:58:0f:16:8c:1e:c0:64:d8:ff:aa:83: b0:e1:d7:9e:26:7e:5a:99:63:c9:7a:72:24:3a:f8: ba:55:a5:60:29:2c:e2:fd:b4:1e:8a:23:73:b5:6a: ac:ca:4e:3e:88:c8:36:17:94:30:50:c4:bd:c1:76: 2a:37:ff:88:97:00:2f:d5:26:ea:ca:c0:bf:29:af: 68:f0:42:5f:ec:f6:65:cc:96:28:0a:db:ce:69:ff: 5d:da:03:72:b5:d8:b2:3e:c3:01:07:79:fa:ed:22: de:16:7b:f2:fa:11:48:14:df:af:5b:22:36:b1:e0: 77:de:80:54:b7:1e:14:75:b6:ff:b6:15:a8:6d:95: ae:38:4b:1a:db:5b:b5:b4:f5:c6:e9:49:05:d3:fa: 3c:48:15:67:f8:a0:54:9e:19:43:cf:9c:87:14:fa: 75:1a:71:ff:3c:ca:fe:09:ca:5e:f7:50:28:6f:f7: f1:47:20:c7:b6:61:e8:a3:97:a8:8f:2d:03:1b:bb: c5:54:bc:16:71:0b:e1:9a:69:7e:3a:cc:ed:e9:fa: 8a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:FA:BE:49:BD:E0:AE:B5:BA:E1:27:FF:F5:47:7D:F5:4D:E3:24:4F X509v3 Authority Key Identifier: keyid:F2:28:5D:74:0A:5E:89:2C:D0:BE:6F:22:4F:4D:3F:4E:9D:6D:D1:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ihddApeiSzQvm8iT00_Tp1t0cQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/330e6b-5675-4a26-b849-f1c259dbe63e/1/9Pq-Sb3grrW64Sf_9Ud99U3jJE8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/330e6b-5675-4a26-b849-f1c259dbe63e/1/8ihddApeiSzQvm8iT00_Tp1t0cQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:9e0::/48 Signature Algorithm: sha256WithRSAEncryption 0a:74:2b:0e:24:1d:52:2d:51:0c:10:b7:a9:b6:44:3b:d1:62: 84:7f:0f:31:03:a5:f6:4a:cf:01:f0:bf:c6:05:0e:e7:e6:6a: 56:5f:d5:db:05:d6:ff:ae:94:46:43:06:ce:d0:71:40:37:37: e0:a4:98:25:24:85:21:27:67:71:d6:ce:02:1a:e8:34:18:bf: 8e:82:5f:08:36:af:65:5b:b3:7c:e8:ec:24:63:c2:0b:c0:78: 93:65:20:50:40:8f:df:87:ba:4a:5e:28:48:8e:e6:f7:b5:0a: f0:4e:b3:23:c1:d5:ef:e6:d0:35:43:b8:90:84:76:18:ec:bb: c5:7e:86:36:1c:bd:e2:2b:99:9c:b8:de:0c:30:e7:84:e1:75: c6:49:6c:ce:54:24:05:b2:66:76:2b:f3:71:a0:c2:2e:a3:12: d8:45:7d:c7:9e:f2:54:cc:6d:8e:d6:4d:d7:77:db:cc:cc:98: 6e:47:da:46:2f:ec:03:df:43:af:db:af:29:fb:32:77:7f:c3: 39:17:8b:36:92:ee:dc:60:e1:f1:ef:dc:18:f1:c5:ad:1e:7e: 89:4f:7f:b9:68:33:b0:a7:f3:d4:93:b0:a1:0a:0a:66:23:37: 4e:63:21:c7:ea:71:1d:13:81:25:13:dc:c4:84:6d:61:5c:8a: b1:c9:50:1a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8gEcXQf94wg6glnzS5tWNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMjg1ZDc0MGE1ZTg5MmNkMGJlNmYyMjRmNGQzZjRlOWQ2 ZGQxYzQwHhcNMjYwMTAyMDIxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNGZhYmU0OWJkZTBhZWI1YmFlMTI3ZmZmNTQ3N2RmNTRkZTMyNDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIWAtivQEPvLvnUhuqC/jfVR7ov0 39lu2qnqHGo6XHZ9i0hjc9l3bhd8wiEyIHf4WA8WjB7AZNj/qoOw4deeJn5amWPJ enIkOvi6VaVgKSzi/bQeiiNztWqsyk4+iMg2F5QwUMS9wXYqN/+IlwAv1SbqysC/ Ka9o8EJf7PZlzJYoCtvOaf9d2gNytdiyPsMBB3n67SLeFnvy+hFIFN+vWyI2seB3 3oBUtx4Udbb/thWobZWuOEsa21u1tPXG6UkF0/o8SBVn+KBUnhlDz5yHFPp1GnH/ PMr+Ccpe91Aob/fxRyDHtmHoo5eojy0DG7vFVLwWcQvhmml+Oszt6fqKJwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPT6vkm94K61uuEn//VHffVN4yRPMB8GA1UdIwQY MBaAFPIoXXQKXoks0L5vIk9NP06dbdHEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGloZGRBcGVpU3pRdm04aVQwMF9UcDF0MGNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zMzBlNmItNTY3NS00YTI2LWI4NDkt ZjFjMjU5ZGJlNjNlLzEvOVBxLVNiM2dyclc2NFNmXzlVZDk5VTNqSkU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni8zMzBlNmItNTY3NS00YTI2LWI4NDktZjFjMjU5ZGJlNjNl LzEvOGloZGRBcGVpU3pRdm04aVQwMF9UcDF0MGNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAng MA0GCSqGSIb3DQEBCwUAA4IBAQAKdCsOJB1SLVEMELeptkQ70WKEfw8xA6X2Ss8B 8L/GBQ7n5mpWX9XbBdb/rpRGQwbO0HFANzfgpJglJIUhJ2dx1s4CGug0GL+Ogl8I Nq9lW7N86OwkY8ILwHiTZSBQQI/fh7pKXihIjub3tQrwTrMjwdXv5tA1Q7iQhHYY 7LvFfoY2HL3iK5mcuN4MMOeE4XXGSWzOVCQFsmZ2K/NxoMIuoxLYRX3HnvJUzG2O 1k3Xd9vMzJhuR9pGL+wD30Ov268p+zJ3f8M5F4s2ku7cYOHx79wY8cWtHn6JT3+5 aDOwp/PUk7ChCgpmIzdOYyHH6nEdE4ElE9zEhG1hXIqxyVAa -----END CERTIFICATE-----Generated at Mon Feb 9 22:23:29 2026 by rpki-client