This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/InfV9R-nF6VXgEwoWeDEy1TtkNc.roa File: InfV9R-nF6VXgEwoWeDEy1TtkNc.roa (raw, json) Hash identifier: EbRlQBCLujQozG8dH5bBOZMiWc3JptJd6quq82HKnBM= Subject key identifier: 22:77:D5:F5:1F:A7:17:A5:57:80:4C:28:59:E0:C4:CB:54:ED:90:D7 Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EABA5B5B0EF86AFFCFB4BEF2F99C8 Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/InfV9R-nF6VXgEwoWeDEy1TtkNc.roa Signing time: Thu 01 Jan 2026 12:18:23 +0000 ROA not before: Thu 01 Jan 2026 12:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206843 IP address blocks: 2a0e:aa07:e00e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:ab:a5:b5:b0:ef:86:af:fc:fb:4b:ef:2f:99:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2277d5f51fa717a557804c2859e0c4cb54ed90d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a6:9e:e3:4b:3a:df:34:ed:84:87:6f:47:ad: 76:e0:d0:44:8f:b3:02:df:fe:79:2f:d9:3d:9b:f3: ed:bd:99:88:85:e9:97:92:18:a7:70:c2:78:63:c5: 19:2b:68:1d:31:ee:53:28:00:1b:d2:18:fe:dd:6e: 6e:e7:e7:2b:35:9f:c3:0a:36:6c:04:9e:e0:93:1b: 33:ba:cf:87:95:9a:5f:e8:7b:30:e5:76:3d:73:b5: b0:41:e3:44:23:1f:cc:0c:83:9b:a9:b5:a2:8b:72: 04:0f:e3:9b:cf:d8:b5:e7:41:c8:f9:6e:00:82:70: d2:8a:59:62:20:52:98:df:15:71:51:de:ac:3d:1d: 62:4c:af:71:39:a4:91:7a:d9:6b:10:bd:52:7b:c7: 8b:73:74:00:f7:2b:f0:ad:7c:cc:79:68:31:d4:03: c5:19:46:81:c8:41:5f:a6:17:90:87:e9:36:13:55: 23:01:fe:e7:28:05:ba:26:86:fa:cd:94:3e:64:7c: 2b:1e:25:b7:e7:99:9e:8c:5e:c5:db:b5:ec:17:96: 76:62:36:d9:17:ae:42:b5:82:92:85:c9:c0:3b:a6: f3:0f:90:d1:5a:df:89:ca:9f:f4:6a:4a:c1:5f:f8: d7:ac:3f:e9:b6:ae:00:ce:1c:2d:42:b9:42:47:49: 75:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:77:D5:F5:1F:A7:17:A5:57:80:4C:28:59:E0:C4:CB:54:ED:90:D7 X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/InfV9R-nF6VXgEwoWeDEy1TtkNc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa07:e00e::/48 Signature Algorithm: sha256WithRSAEncryption 93:51:ba:1a:56:cc:c1:34:99:a4:13:c6:4e:f1:96:d6:bb:72: 2b:1f:92:98:06:45:6f:03:9d:d1:37:03:47:48:d4:91:8b:3b: 23:d4:d8:49:7a:a2:7d:78:b4:f0:c9:08:a6:92:32:7a:10:56: 83:30:73:4f:2a:95:78:87:2a:e1:76:3e:49:f1:7f:57:2b:6d: b6:8d:0d:9b:c7:83:0c:bb:b7:8b:b2:c2:36:77:ec:e7:e8:b3: 0e:0a:84:63:db:a7:93:1f:6c:df:2f:18:f3:88:32:29:f2:c3: a2:9d:3e:51:79:56:fa:08:73:c3:67:e2:0f:de:c1:8b:f6:aa: d5:a7:bc:5c:04:eb:45:b8:96:08:49:23:95:4c:6e:d1:4e:72: 4b:4c:cb:1f:db:b5:6f:c1:8c:2e:26:21:98:bb:27:6b:08:5a: 7a:fa:f5:51:e6:96:43:af:73:2a:06:35:19:40:24:fb:d1:28: 33:e9:1b:5f:73:2a:a1:9a:7e:db:10:39:d8:75:40:60:ae:55: 1d:51:8b:d9:49:42:c1:63:f5:7c:ba:23:2c:f5:65:45:fb:25: bf:1d:08:5c:87:7a:39:65:7e:af:94:b8:00:48:e1:17:8a:44: 32:26:9c:e2:5a:7b:be:f1:56:ec:39:4f:fb:ad:d2:72:4b:ea: 79:77:09:c8 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fqultbDvhq/8+0vvL5nIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjc3ZDVmNTFmYTcxN2E1NTc4MDRjMjg1OWUwYzRjYjU0ZWQ5MGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Kae40s63zTthIdvR6124NBEj7MC 3/55L9k9m/PtvZmIhemXkhincMJ4Y8UZK2gdMe5TKAAb0hj+3W5u5+crNZ/DCjZs BJ7gkxszus+HlZpf6Hsw5XY9c7WwQeNEIx/MDIObqbWii3IED+Obz9i150HI+W4A gnDSilliIFKY3xVxUd6sPR1iTK9xOaSRetlrEL1Se8eLc3QA9yvwrXzMeWgx1APF GUaByEFfpheQh+k2E1UjAf7nKAW6Job6zZQ+ZHwrHiW355mejF7F27XsF5Z2YjbZ F65CtYKShcnAO6bzD5DRWt+Jyp/0akrBX/jXrD/ptq4AzhwtQrlCR0l1LQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCJ31fUfpxelV4BMKFngxMtU7ZDXMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvSW5mVjlSLW5GNlZYZ0V3b1dlREV5MVR0a05jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6qB+AO MA0GCSqGSIb3DQEBCwUAA4IBAQCTUboaVszBNJmkE8ZO8ZbWu3IrH5KYBkVvA53R NwNHSNSRizsj1NhJeqJ9eLTwyQimkjJ6EFaDMHNPKpV4hyrhdj5J8X9XK222jQ2b x4MMu7eLssI2d+zn6LMOCoRj26eTH2zfLxjziDIp8sOinT5ReVb6CHPDZ+IP3sGL 9qrVp7xcBOtFuJYISSOVTG7RTnJLTMsf27VvwYwuJiGYuydrCFp6+vVR5pZDr3Mq BjUZQCT70Sgz6Rtfcyqhmn7bEDnYdUBgrlUdUYvZSULBY/V8uiMs9WVF+yW/HQhc h3o5ZX6vlLgASOEXikQyJpziWnu+8VbsOU/7rdJyS+p5dwnI -----END CERTIFICATE-----Generated at Tue Jan 6 21:30:58 2026 by rpki-client