This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/nGqAG9uiydaGUDo_SHA87321Gio.roa File: nGqAG9uiydaGUDo_SHA87321Gio.roa (raw, json) Hash identifier: q2fA7JXNQtryU/WKKkZWZWu9qdUEd7VO5mOGP3MhM4A= Subject key identifier: 9C:6A:80:1B:DB:A2:C9:D6:86:50:3A:3F:48:70:3C:EF:7D:B5:1A:2A Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EC0A9FC3E121FBA39F5B4B732D7DA Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/nGqAG9uiydaGUDo_SHA87321Gio.roa Signing time: Thu 01 Jan 2026 12:18:28 +0000 ROA not before: Thu 01 Jan 2026 12:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215848 IP address blocks: 2a0e:aa07:e160::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c0:a9:fc:3e:12:1f:ba:39:f5:b4:b7:32:d7:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c6a801bdba2c9d686503a3f48703cef7db51a2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:85:0b:15:bb:bd:26:2f:63:7e:49:e2:9d:69: 1d:1a:86:e0:3a:88:2f:09:03:a5:ce:d3:c9:da:fb: 37:6a:68:fc:ce:ec:79:25:66:85:c5:6f:f8:ca:46: a9:fa:ed:fb:89:4b:34:bb:d3:9f:23:a5:0c:c2:0d: 30:bc:37:c2:47:1d:32:34:4f:20:42:c4:70:b3:d9: ee:e0:39:70:c8:fa:30:6e:69:b5:5e:ae:c1:1b:94: 2a:f1:8f:2b:04:f4:34:ec:af:c1:0e:a8:87:81:1f: 09:c8:ad:0c:fe:06:03:70:ec:13:94:54:30:be:b0: a0:31:63:b3:f4:d4:66:5d:ad:2b:87:12:8d:44:4d: 99:5d:08:82:32:06:81:39:9e:ea:a5:bf:9d:26:44: c5:2c:00:cd:f1:26:ad:14:b3:25:07:5d:00:c9:b4: ff:91:d5:94:14:96:6c:dc:62:51:04:04:a6:e0:20: 5e:8d:94:0c:76:64:e8:f7:d4:c0:3f:01:2d:7c:12: a6:62:70:eb:ad:67:8c:7a:3c:ae:1e:4e:41:c4:c8: 0f:f5:c2:a5:a9:a5:5c:e2:8a:01:40:19:eb:0a:dc: 11:fb:ba:37:af:9c:91:52:4f:b2:d5:57:bb:28:d1: ec:1c:15:49:89:1b:95:1d:40:f1:7d:ff:69:7f:3a: 49:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:6A:80:1B:DB:A2:C9:D6:86:50:3A:3F:48:70:3C:EF:7D:B5:1A:2A X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/nGqAG9uiydaGUDo_SHA87321Gio.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa07:e160::/44 Signature Algorithm: sha256WithRSAEncryption 10:5c:06:26:ce:1a:51:f5:6b:60:76:97:f5:5b:ca:7f:24:7a: cd:f6:f8:97:9d:0b:94:3d:ce:50:c8:73:e5:e2:7c:82:2e:2a: e9:d4:b9:ed:ed:68:22:55:69:7b:6f:d2:5c:c8:cf:1e:67:65: ad:07:8d:ab:28:09:4f:67:e3:fb:f6:50:65:c9:91:c8:2c:5f: c6:d9:0c:88:00:dd:b7:36:79:a0:ce:91:97:f1:c4:02:45:ce: 0e:bf:be:f4:d4:48:07:9e:8a:e8:e3:26:91:21:eb:8c:ea:09: d9:55:2f:24:64:0a:37:f7:02:dc:1c:9f:7e:8d:31:98:5b:67: c8:f6:94:cc:b9:83:16:4c:e5:5a:ea:ff:9b:44:a5:80:7b:24: 88:c5:1d:ce:02:73:b0:8c:48:73:41:1f:ec:0e:09:ad:f8:74: ce:16:48:f1:ff:a6:3e:65:5d:d1:3f:7c:48:39:3b:26:96:1f: 71:f4:eb:d2:91:b7:34:71:20:14:62:c1:68:3c:32:4e:bc:e8: 4d:e9:0b:d3:6b:80:6b:b6:b2:b0:80:cf:43:bd:70:73:3f:ae: 4a:5d:e4:52:5e:f0:35:01:90:3d:c7:fd:f8:55:b7:97:21:04: 00:77:cc:4e:9e:e6:b6:a3:50:50:22:af:87:30:60:c0:86:52: 47:58:c2:67 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fsCp/D4SH7o59bS3MtfaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzZhODAxYmRiYTJjOWQ2ODY1MDNhM2Y0ODcwM2NlZjdkYjUxYTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7oULFbu9Ji9jfkninWkdGobgOogv CQOlztPJ2vs3amj8zux5JWaFxW/4ykap+u37iUs0u9OfI6UMwg0wvDfCRx0yNE8g QsRws9nu4DlwyPowbmm1Xq7BG5Qq8Y8rBPQ07K/BDqiHgR8JyK0M/gYDcOwTlFQw vrCgMWOz9NRmXa0rhxKNRE2ZXQiCMgaBOZ7qpb+dJkTFLADN8SatFLMlB10AybT/ kdWUFJZs3GJRBASm4CBejZQMdmTo99TAPwEtfBKmYnDrrWeMejyuHk5BxMgP9cKl qaVc4ooBQBnrCtwR+7o3r5yRUk+y1Ve7KNHsHBVJiRuVHUDxff9pfzpJkQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJxqgBvbosnWhlA6P0hwPO99tRoqMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvbkdxQUc5dWl5ZGFHVURvX1NIQTg3MzIxR2lvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6qB+Fg MA0GCSqGSIb3DQEBCwUAA4IBAQAQXAYmzhpR9Wtgdpf1W8p/JHrN9viXnQuUPc5Q yHPl4nyCLirp1Lnt7WgiVWl7b9JcyM8eZ2WtB42rKAlPZ+P79lBlyZHILF/G2QyI AN23NnmgzpGX8cQCRc4Ov7701EgHnoro4yaRIeuM6gnZVS8kZAo39wLcHJ9+jTGY W2fI9pTMuYMWTOVa6v+bRKWAeySIxR3OAnOwjEhzQR/sDgmt+HTOFkjx/6Y+ZV3R P3xIOTsmlh9x9OvSkbc0cSAUYsFoPDJOvOhN6QvTa4BrtrKwgM9DvXBzP65KXeRS XvA1AZA9x/34VbeXIQQAd8xOnua2o1BQIq+HMGDAhlJHWMJn -----END CERTIFICATE-----Generated at Tue Jan 6 21:30:41 2026 by rpki-client