This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/9gagLc8xAr9SSqQdYdIZ1zfaBKw.roa File: 9gagLc8xAr9SSqQdYdIZ1zfaBKw.roa (raw, json) Hash identifier: iM8Na7dvGFvo72VLT8IKayhJnCnY1zW2QdozCRvv1JE= Subject key identifier: F6:06:A0:2D:CF:31:02:BF:52:4A:A4:1D:61:D2:19:D7:37:DA:04:AC Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EA8D7703A7C8DCBD66A00CA2C6EFF Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/9gagLc8xAr9SSqQdYdIZ1zfaBKw.roa Signing time: Thu 01 Jan 2026 12:18:22 +0000 ROA not before: Thu 01 Jan 2026 12:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200078 IP address blocks: 2a0e:aa07:e050::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:a8:d7:70:3a:7c:8d:cb:d6:6a:00:ca:2c:6e:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f606a02dcf3102bf524aa41d61d219d737da04ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:e1:d1:eb:ce:4e:26:a6:9b:7b:0e:da:47:d8: bb:69:cf:74:58:33:cf:d7:95:47:69:a0:30:3f:77: ef:ed:20:f0:09:29:56:e7:bc:82:0a:d6:fb:c4:74: f2:2d:e3:bb:c2:e2:50:61:46:c5:b6:ff:3f:e9:68: 98:51:26:0c:29:e3:49:e6:e4:76:3e:33:00:4a:51: dd:cd:75:e4:76:ea:76:01:29:9c:03:51:1f:a8:5f: b8:17:10:45:18:cf:e6:a0:95:bb:d6:d4:b8:ca:20: e9:5d:e7:bd:d8:c8:b4:e1:40:79:8b:46:26:26:70: 42:94:37:e4:4d:4a:89:aa:4e:95:5b:d2:65:de:8e: b1:22:32:dd:da:83:4e:06:60:84:4e:31:3e:c1:9b: df:ad:bc:e7:f6:f7:2f:64:76:83:da:7e:b3:62:9d: c1:87:0a:3b:5c:fd:15:5b:b6:46:c3:93:9a:6e:4b: 01:22:2c:94:c2:1a:ef:1f:01:57:aa:98:45:fc:61: cc:2c:b6:b5:40:57:ca:96:c9:7c:a8:cd:28:4c:5b: e3:83:fa:9b:c9:28:8c:39:c3:f5:73:7a:97:8d:4f: 75:65:4a:5d:9c:d8:5e:b0:7a:74:de:04:42:00:84: e5:c7:7a:12:98:f5:3b:af:e4:cd:3b:9e:44:87:1f: 5e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:06:A0:2D:CF:31:02:BF:52:4A:A4:1D:61:D2:19:D7:37:DA:04:AC X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/9gagLc8xAr9SSqQdYdIZ1zfaBKw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa07:e050::/44 Signature Algorithm: sha256WithRSAEncryption 1b:21:47:99:42:12:49:81:bc:e7:d5:75:62:a7:a0:2e:81:ab: a3:01:5c:4b:85:a0:1a:b0:b9:82:6d:8e:77:3c:f5:5a:40:5b: d8:86:ee:31:54:38:5a:db:e0:de:d0:b2:db:71:e7:1c:e6:2e: f9:fb:40:1c:50:c4:83:70:c4:1c:17:5e:82:e7:47:77:36:45: 4a:b6:c4:f0:24:0d:03:84:2f:22:8e:9c:02:4a:cc:5f:09:d3: fa:69:1c:27:ed:c1:eb:3c:52:da:32:95:a9:37:8b:37:4c:9c: 58:d1:e0:56:a4:25:17:92:4c:c8:61:51:fb:89:23:92:cf:ef: aa:bf:4b:16:d9:f4:0e:97:e1:87:11:37:7e:5f:98:75:07:68: e1:fa:a0:c5:63:d2:52:0a:24:7b:cb:fa:67:ab:26:ec:5c:d9: 1a:f0:d5:93:f8:b2:d0:54:76:dd:7f:0b:b9:f9:c6:b4:91:79: e7:68:63:9b:23:65:e7:ab:c4:5c:7a:df:27:bb:1d:de:08:d9: a1:0f:3c:40:5b:e3:a2:ff:93:03:e1:69:57:0f:73:4b:04:4d: da:e7:9f:d0:5b:e6:9a:e4:5d:88:0c:2d:e0:6a:05:ad:c8:8d: 20:97:37:2e:0d:85:64:ee:24:9c:0e:0e:81:f9:7c:85:27:6c: 51:3a:6a:51 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fqjXcDp8jcvWagDKLG7/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjA2YTAyZGNmMzEwMmJmNTI0YWE0MWQ2MWQyMTlkNzM3ZGEwNGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9uHR685OJqabew7aR9i7ac90WDPP 15VHaaAwP3fv7SDwCSlW57yCCtb7xHTyLeO7wuJQYUbFtv8/6WiYUSYMKeNJ5uR2 PjMASlHdzXXkdup2ASmcA1EfqF+4FxBFGM/moJW71tS4yiDpXee92Mi04UB5i0Ym JnBClDfkTUqJqk6VW9Jl3o6xIjLd2oNOBmCETjE+wZvfrbzn9vcvZHaD2n6zYp3B hwo7XP0VW7ZGw5OabksBIiyUwhrvHwFXqphF/GHMLLa1QFfKlsl8qM0oTFvjg/qb ySiMOcP1c3qXjU91ZUpdnNhesHp03gRCAITlx3oSmPU7r+TNO55Ehx9eBwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPYGoC3PMQK/UkqkHWHSGdc32gSsMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvOWdhZ0xjOHhBcjlTU3FRZFlkSVoxemZhQkt3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6qB+BQ MA0GCSqGSIb3DQEBCwUAA4IBAQAbIUeZQhJJgbzn1XVip6AugaujAVxLhaAasLmC bY53PPVaQFvYhu4xVDha2+De0LLbcecc5i75+0AcUMSDcMQcF16C50d3NkVKtsTw JA0DhC8ijpwCSsxfCdP6aRwn7cHrPFLaMpWpN4s3TJxY0eBWpCUXkkzIYVH7iSOS z++qv0sW2fQOl+GHETd+X5h1B2jh+qDFY9JSCiR7y/pnqybsXNka8NWT+LLQVHbd fwu5+ca0kXnnaGObI2Xnq8Rcet8nux3eCNmhDzxAW+Oi/5MD4WlXD3NLBE3a55/Q W+aa5F2IDC3gagWtyI0glzcuDYVk7iScDg6B+XyFJ2xROmpR -----END CERTIFICATE-----Generated at Tue Jan 6 21:30:42 2026 by rpki-client