This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/T9WsGMJ4PUaGvLnh6tBlUlYurbQ.roa File: T9WsGMJ4PUaGvLnh6tBlUlYurbQ.roa (raw, json) Hash identifier: ZaKGdKmvnL9CPvMQQppjI+R4JF+AX5Uhx5Z48yewKiE= Subject key identifier: 4F:D5:AC:18:C2:78:3D:46:86:BC:B9:E1:EA:D0:65:52:56:2E:AD:B4 Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1 Certificate serial: 019B7E38058E01874D9BC2515E64BD825B00 Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/T9WsGMJ4PUaGvLnh6tBlUlYurbQ.roa Signing time: Fri 02 Jan 2026 10:19:19 +0000 ROA not before: Fri 02 Jan 2026 10:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29226 IP address blocks: 2a09:3b04::/32 maxlen: 32 2a12:7c07::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 13:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:05:8e:01:87:4d:9b:c2:51:5e:64:bd:82:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1 Validity Not Before: Jan 2 10:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4fd5ac18c2783d4686bcb9e1ead06552562eadb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e9:c5:7b:79:57:83:9c:b7:f2:5d:96:4d:00: 1a:7d:bc:53:4a:f5:99:c8:98:07:c8:d9:72:91:ab: 2a:a5:0a:9b:68:b6:a6:ec:e8:7c:8c:a4:b2:16:b0: 64:bd:0c:e8:14:ca:7a:ac:d7:f6:1a:e1:d9:f6:67: ec:0c:fb:58:dd:5d:60:fa:d4:32:f7:fd:79:81:81: a9:da:0b:d4:a8:18:14:d5:59:dc:31:c6:c1:bb:21: 3e:8a:21:17:b2:c9:80:68:1d:99:9d:05:8c:5c:a1: 6a:09:34:2e:b4:52:c8:ca:2a:f2:b2:fb:f4:5a:7a: 2b:d1:24:5a:86:d4:51:9f:33:3e:15:36:10:4b:23: e5:f9:a0:8e:3f:c8:26:b8:82:b3:82:89:02:02:07: 22:70:ab:3c:ab:24:2e:02:44:d2:84:9a:2c:49:64: 13:b5:44:58:50:1b:f1:68:e7:d6:89:5e:22:8e:f3: 7c:84:a7:84:dd:1d:3f:da:79:39:f9:9a:59:06:bd: 2e:57:05:0d:32:7c:61:90:64:92:86:de:f1:96:a4: 93:20:51:c6:e3:5f:51:2c:87:92:5c:a9:45:7c:6e: 16:bf:a8:48:8e:02:66:28:19:cf:da:b1:6b:25:e8: ea:05:47:ff:5c:d4:2f:75:40:10:43:0e:b3:c2:4f: 1a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D5:AC:18:C2:78:3D:46:86:BC:B9:E1:EA:D0:65:52:56:2E:AD:B4 X509v3 Authority Key Identifier: keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/T9WsGMJ4PUaGvLnh6tBlUlYurbQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:3b04::/32 2a12:7c07::/32 Signature Algorithm: sha256WithRSAEncryption ae:59:a9:fb:2b:a5:63:45:41:ee:aa:b2:be:56:c9:3f:43:4e: a6:33:26:e5:4f:d7:f5:41:f1:31:11:ca:f7:b6:4d:c9:20:f1: d4:c3:d2:40:4c:34:46:d5:f0:ba:1a:b0:3b:51:bd:aa:2b:d7: 7c:4e:f5:98:80:e6:ed:79:1e:55:77:7f:aa:83:ab:16:e3:72: d2:42:fd:46:98:99:4f:78:17:35:8b:29:55:02:49:48:02:a4: ea:9d:f1:f4:2d:47:47:44:f7:9c:25:e4:03:47:b5:23:2d:35: 36:d7:b7:1a:73:ad:bd:40:c0:6e:a8:41:26:95:00:70:3f:58: 29:ba:84:f6:ee:d5:5c:ce:9a:bb:bf:0d:4f:0a:4b:c3:ba:d0: d3:66:88:74:1d:8f:76:25:d1:f3:49:28:f3:1c:3f:da:d9:f2: 9d:ef:32:25:05:b8:69:a8:dd:6a:d1:18:8c:73:92:af:95:44: 8b:c2:f1:a2:e3:39:83:d4:fb:3d:c9:e7:b5:e4:8c:31:b0:b7: b6:6a:3c:b2:35:9f:ca:6e:15:a0:ad:d4:78:44:c5:6b:54:33: 39:37:23:f9:e2:10:e4:ae:74:e3:0c:36:ad:28:e8:b0:5b:00: b3:4b:dc:22:a7:f5:1a:e5:68:9e:11:86:a5:e8:43:26:93:10: 93:e8:d9:7b -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt+OAWOAYdNm8JRXmS9glsAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTllYzJhNWZkNTM5MDljNTIzOWY0Y2M4ZDZkMzI5YTI3 NzliYjEwHhcNMjYwMTAyMTAxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZmQ1YWMxOGMyNzgzZDQ2ODZiY2I5ZTFlYWQwNjU1MjU2MmVhZGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsenFe3lXg5y38l2WTQAafbxTSvWZ yJgHyNlykasqpQqbaLam7Oh8jKSyFrBkvQzoFMp6rNf2GuHZ9mfsDPtY3V1g+tQy 9/15gYGp2gvUqBgU1VncMcbBuyE+iiEXssmAaB2ZnQWMXKFqCTQutFLIyirysvv0 Wnor0SRahtRRnzM+FTYQSyPl+aCOP8gmuIKzgokCAgcicKs8qyQuAkTShJosSWQT tURYUBvxaOfWiV4ijvN8hKeE3R0/2nk5+ZpZBr0uVwUNMnxhkGSSht7xlqSTIFHG 419RLIeSXKlFfG4Wv6hIjgJmKBnP2rFrJejqBUf/XNQvdUAQQw6zwk8aZwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFE/VrBjCeD1Ghry54erQZVJWLq20MB8GA1UdIwQY MBaAFERZ7Cpf1TkJxSOfTMjW0ymid5uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTkt NmI0MzcyNjAyMDk2LzEvVDlXc0dNSjRQVWFHdkxuaDZ0QmxVbFl1cmJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTktNmI0MzcyNjAyMDk2 LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAKgk7BAMF ACoSfAcwDQYJKoZIhvcNAQELBQADggEBAK5ZqfsrpWNFQe6qsr5WyT9DTqYzJuVP 1/VB8TERyve2Tckg8dTD0kBMNEbV8LoasDtRvaor13xO9ZiA5u15HlV3f6qDqxbj ctJC/UaYmU94FzWLKVUCSUgCpOqd8fQtR0dE95wl5ANHtSMtNTbXtxpzrb1AwG6o QSaVAHA/WCm6hPbu1VzOmru/DU8KS8O60NNmiHQdj3Yl0fNJKPMcP9rZ8p3vMiUF uGmo3WrRGIxzkq+VRIvC8aLjOYPU+z3J57XkjDGwt7ZqPLI1n8puFaCt1HhExWtU Mzk3I/niEOSudOMMNq0o6LBbALNL3CKn9RrlaJ4RhqXoQyaTEJPo2Xs= -----END CERTIFICATE-----Generated at Tue Jan 20 17:19:08 2026 by rpki-client