This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/Ph4OxET3tieFrV8MnvQLj8gej1o.roa File: Ph4OxET3tieFrV8MnvQLj8gej1o.roa (raw, json) Hash identifier: vC0jxPzqId/7PJeY4FmkNIhST9+9OsO4nRtJba60qi4= Subject key identifier: 3E:1E:0E:C4:44:F7:B6:27:85:AD:5F:0C:9E:F4:0B:8F:C8:1E:8F:5A Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Certificate serial: 019B7EA74B762B1397B59F0B6BCE64F00148 Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/Ph4OxET3tieFrV8MnvQLj8gej1o.roa Signing time: Fri 02 Jan 2026 12:20:51 +0000 ROA not before: Fri 02 Jan 2026 12:20:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 23507 IP address blocks: 2a0a:79c7:f400::/40 maxlen: 40 2a0a:79c7:f700::/40 maxlen: 40 2a0a:79c7:fb00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:4b:76:2b:13:97:b5:9f:0b:6b:ce:64:f0:01:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Validity Not Before: Jan 2 12:20:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e1e0ec444f7b62785ad5f0c9ef40b8fc81e8f5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:02:01:ab:1e:2e:58:87:f0:6b:61:88:64:f9: e7:a8:9f:cb:2e:de:a6:4b:35:7e:09:5e:c1:07:ad: af:ba:dc:af:4f:80:fb:11:05:7f:c0:21:27:e7:7c: 79:29:54:10:f9:27:73:b3:5e:fb:18:72:5c:d5:fa: 8a:91:b1:d8:56:6c:2a:01:bc:85:6b:9c:ed:a2:5a: 97:a6:47:f3:49:a2:1c:e4:5c:c6:8c:37:cf:2f:22: 64:fd:ee:75:91:b1:44:2f:33:3c:b3:cf:b0:19:bc: eb:71:56:3b:45:62:b3:5c:b3:ab:6b:72:eb:ae:cc: ae:98:5b:1a:fc:76:9d:f4:ea:38:1b:42:29:8d:56: 42:df:c4:a7:98:8e:ff:b7:fb:67:30:98:ab:0e:b7: db:6e:56:b1:51:06:9a:29:e5:26:ea:a8:f2:9f:05: 8d:9b:37:60:4c:16:fd:75:cb:d5:c2:3f:f8:e0:96: ad:4f:ee:da:c3:f2:e3:c4:9f:c3:58:52:f2:33:5e: a1:67:45:f0:ff:15:d4:b2:f6:03:92:07:86:e5:4f: 4a:20:de:d6:b2:ed:65:f7:86:8d:84:73:5e:19:56: c1:fd:4c:ef:35:80:f8:3b:12:ad:a3:c1:22:54:e3: 78:e5:30:f9:f2:0d:be:d5:4d:53:74:2e:82:95:85: 92:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:1E:0E:C4:44:F7:B6:27:85:AD:5F:0C:9E:F4:0B:8F:C8:1E:8F:5A X509v3 Authority Key Identifier: keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/Ph4OxET3tieFrV8MnvQLj8gej1o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:79c7:f400::/40 2a0a:79c7:f700::/40 2a0a:79c7:fb00::/40 Signature Algorithm: sha256WithRSAEncryption 89:86:10:11:7d:f3:05:66:b7:a6:d1:64:a7:29:16:dd:ea:ee: da:3e:23:36:b0:8c:8d:45:f0:94:5f:97:ad:e5:af:27:b7:83: aa:e7:49:75:53:8b:f4:d2:49:71:1a:bc:a2:fe:1a:24:46:b0: f3:bd:af:2d:3a:74:8c:77:eb:c9:67:85:e2:87:28:33:88:33: 39:da:f6:75:7c:53:41:83:4d:4a:f6:2b:ff:55:6b:6c:23:d4: 30:a7:22:73:46:eb:40:8d:1c:9f:f7:54:ad:a4:2c:32:6e:c7: 13:d1:da:5a:07:2d:c2:24:89:7e:7a:5a:6a:06:09:85:60:eb: cc:35:29:48:22:9b:b5:3c:75:90:fe:70:5f:02:62:56:0e:8f: e1:cb:58:76:55:42:7b:cc:f4:52:94:5e:a1:ac:fe:ad:b0:f9: ff:3f:97:c9:19:1e:15:4e:b9:80:8f:82:f4:cb:0e:1f:9c:7c: 38:2a:dc:11:3b:9d:54:48:df:22:46:9b:1e:e6:0d:f2:60:9e: 02:73:98:42:c2:5f:ad:02:ec:8b:e8:d2:4a:75:0d:38:ea:2b: c8:a2:a2:f8:94:48:91:78:73:69:0d:43:11:12:9e:32:63:9f: 75:7e:92:dc:1f:96:94:6b:9b:c6:5f:76:7e:4b:3a:8e:5c:34: 10:a1:c7:36 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+p0t2KxOXtZ8La85k8AFIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl ZDc5NTQwHhcNMjYwMTAyMTIyMDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTFlMGVjNDQ0ZjdiNjI3ODVhZDVmMGM5ZWY0MGI4ZmM4MWU4ZjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwIBqx4uWIfwa2GIZPnnqJ/LLt6m SzV+CV7BB62vutyvT4D7EQV/wCEn53x5KVQQ+Sdzs177GHJc1fqKkbHYVmwqAbyF a5ztolqXpkfzSaIc5FzGjDfPLyJk/e51kbFELzM8s8+wGbzrcVY7RWKzXLOra3Lr rsyumFsa/Had9Oo4G0IpjVZC38SnmI7/t/tnMJirDrfbblaxUQaaKeUm6qjynwWN mzdgTBb9dcvVwj/44JatT+7aw/LjxJ/DWFLyM16hZ0Xw/xXUsvYDkgeG5U9KIN7W su1l94aNhHNeGVbB/UzvNYD4OxKto8EiVON45TD58g2+1U1TdC6ClYWSVQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFD4eDsRE97Ynha1fDJ70C4/IHo9aMB8GA1UdIwQY MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt M2Q5MWVkZTViMmIxLzEvUGg0T3hFVDN0aWVGclY4TW52UUxqOGdlajFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAAjAYAwYAKgp5x/QD BgAqCnnH9wMGACoKecf7MA0GCSqGSIb3DQEBCwUAA4IBAQCJhhARffMFZrem0WSn KRbd6u7aPiM2sIyNRfCUX5et5a8nt4Oq50l1U4v00klxGryi/hokRrDzva8tOnSM d+vJZ4XihygziDM52vZ1fFNBg01K9iv/VWtsI9QwpyJzRutAjRyf91StpCwybscT 0dpaBy3CJIl+elpqBgmFYOvMNSlIIpu1PHWQ/nBfAmJWDo/hy1h2VUJ7zPRSlF6h rP6tsPn/P5fJGR4VTrmAj4L0yw4fnHw4KtwRO51USN8iRpse5g3yYJ4Cc5hCwl+t AuyL6NJKdQ046ivIoqL4lEiReHNpDUMREp4yY591fpLcH5aUa5vGX3Z+SzqOXDQQ occ2 -----END CERTIFICATE-----Generated at Tue Jan 20 22:47:38 2026 by rpki-client