This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/NO6elNzGLksZRxNIMj99ABsp0vY.roa File: NO6elNzGLksZRxNIMj99ABsp0vY.roa (raw, json) Hash identifier: 6aDQFlOqVMzfn/Vv9q1u2jKNlvtxj1u4mWSmlSLPZI0= Subject key identifier: 34:EE:9E:94:DC:C6:2E:4B:19:47:13:48:32:3F:7D:00:1B:29:D2:F6 Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Certificate serial: 019B7EA74D515F4937024846BC1D8F45464D Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/NO6elNzGLksZRxNIMj99ABsp0vY.roa Signing time: Fri 02 Jan 2026 12:20:52 +0000 ROA not before: Fri 02 Jan 2026 12:20:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 53667 IP address blocks: 2a06:e881:9100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:4d:51:5f:49:37:02:48:46:bc:1d:8f:45:46:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Validity Not Before: Jan 2 12:20:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34ee9e94dcc62e4b19471348323f7d001b29d2f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f3:83:fc:1f:75:0f:1f:af:e3:69:2b:3e:ca: c0:4a:8c:58:af:57:66:ec:8d:80:47:a6:b4:6f:51: 6d:8d:16:ab:bb:6c:49:39:8b:ce:26:05:83:71:e0: c0:11:66:02:16:a1:a0:de:5c:38:13:5b:b8:14:21: ec:9b:98:f4:ce:0c:d5:5d:11:58:88:ee:4b:13:dc: 72:aa:59:f1:48:21:e0:b0:9e:fd:29:21:08:c7:4f: c6:f7:bf:d6:ad:bf:e5:35:44:67:1d:6c:00:f8:6d: 94:5d:97:ac:23:90:56:11:d4:20:d8:ba:78:3e:f8: a6:30:94:6b:11:f3:17:ad:4e:37:17:a6:80:1f:78: f3:5f:bd:9d:65:50:16:d1:56:34:56:21:63:1e:23: 21:7a:08:5d:32:41:06:1c:ee:ae:38:54:d4:47:05: 72:74:94:bb:b5:2b:fd:54:77:e0:f6:fb:3f:6b:cd: f8:fc:3f:16:23:20:a2:c7:9f:d2:11:ba:e1:f2:04: 4f:18:e3:a4:1d:3d:05:e1:0b:1d:9b:b6:8a:3d:7d: 77:e8:55:6a:b3:85:27:df:ff:21:1c:27:5e:37:2a: 42:22:d2:46:d4:b5:3d:53:77:09:dc:c2:12:2e:f8: b9:98:79:70:11:39:f1:93:ca:bf:a7:02:b9:fd:76: 46:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:EE:9E:94:DC:C6:2E:4B:19:47:13:48:32:3F:7D:00:1B:29:D2:F6 X509v3 Authority Key Identifier: keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/NO6elNzGLksZRxNIMj99ABsp0vY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:e881:9100::/40 Signature Algorithm: sha256WithRSAEncryption 32:ca:c3:9b:4c:04:ad:93:92:81:92:57:66:c8:0a:d4:e7:53: c3:71:c3:d8:1b:ba:f6:b9:99:f9:84:71:d4:c5:ac:10:c4:68: 56:6e:19:f3:01:2b:40:be:0e:80:58:e5:10:7f:66:d9:08:7c: 09:ab:1c:e4:bd:d3:93:20:5a:21:a1:a3:79:2c:77:96:b3:72: 17:f0:45:d5:4e:bb:e9:31:00:5c:24:f2:d3:de:39:bd:bc:6b: 6f:d3:5b:12:7f:01:36:75:39:e1:b0:74:59:74:9f:ab:e5:e7: ab:2e:00:d4:b6:b7:0b:97:1c:98:29:84:dc:0e:96:54:78:df: 43:32:01:50:c0:02:14:70:fc:48:c1:0b:42:b8:2a:0c:fb:fa: ac:8e:ac:55:45:74:e0:30:9d:be:0b:af:6c:ab:29:59:84:38: d2:f0:7b:ff:ff:56:dd:2c:18:6d:80:b1:68:3b:48:bf:4b:db: 1c:3d:52:1a:be:03:8a:e8:a6:bf:d8:8f:76:71:7d:16:f6:51: 7c:a0:84:1c:c5:00:8d:10:82:c2:ed:e1:7e:46:f2:3c:9c:55: 36:8a:00:98:3e:44:a5:11:80:2a:23:5c:c0:53:72:c8:73:2b: 4e:c8:8b:c6:01:39:d5:b1:5b:98:26:6b:9f:96:40:bd:34:31: 92:c0:c7:39 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+p01RX0k3AkhGvB2PRUZNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl ZDc5NTQwHhcNMjYwMTAyMTIyMDUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNGVlOWU5NGRjYzYyZTRiMTk0NzEzNDgzMjNmN2QwMDFiMjlkMmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/OD/B91Dx+v42krPsrASoxYr1dm 7I2AR6a0b1FtjRaru2xJOYvOJgWDceDAEWYCFqGg3lw4E1u4FCHsm5j0zgzVXRFY iO5LE9xyqlnxSCHgsJ79KSEIx0/G97/Wrb/lNURnHWwA+G2UXZesI5BWEdQg2Lp4 PvimMJRrEfMXrU43F6aAH3jzX72dZVAW0VY0ViFjHiMheghdMkEGHO6uOFTURwVy dJS7tSv9VHfg9vs/a834/D8WIyCix5/SEbrh8gRPGOOkHT0F4Qsdm7aKPX136FVq s4Un3/8hHCdeNypCItJG1LU9U3cJ3MISLvi5mHlwETnxk8q/pwK5/XZGhwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFDTunpTcxi5LGUcTSDI/fQAbKdL2MB8GA1UdIwQY MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt M2Q5MWVkZTViMmIxLzEvTk82ZWxOekdMa3NaUnhOSU1qOTlBQnNwMHZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgbogZEw DQYJKoZIhvcNAQELBQADggEBADLKw5tMBK2TkoGSV2bICtTnU8Nxw9gbuva5mfmE cdTFrBDEaFZuGfMBK0C+DoBY5RB/ZtkIfAmrHOS905MgWiGho3ksd5azchfwRdVO u+kxAFwk8tPeOb28a2/TWxJ/ATZ1OeGwdFl0n6vl56suANS2twuXHJgphNwOllR4 30MyAVDAAhRw/EjBC0K4Kgz7+qyOrFVFdOAwnb4Lr2yrKVmEONLwe///Vt0sGG2A sWg7SL9L2xw9Uhq+A4ropr/Yj3ZxfRb2UXyghBzFAI0QgsLt4X5G8jycVTaKAJg+ RKURgCojXMBTcshzK07Ii8YBOdWxW5gma5+WQL00MZLAxzk= -----END CERTIFICATE-----Generated at Tue Jan 20 22:47:38 2026 by rpki-client