This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/RR99FO1MHftvjP9bcBY2QbdAgWQ.roa File: RR99FO1MHftvjP9bcBY2QbdAgWQ.roa (raw, json) Hash identifier: o3nC8L428AcsLPElOi9+wM9CY0O6e0dpRq1RiMNnWY8= Subject key identifier: 45:1F:7D:14:ED:4C:1D:FB:6F:8C:FF:5B:70:16:36:41:B7:40:81:64 Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Certificate serial: 019B7EA753753349C04C0FDA31D9A434B558 Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/RR99FO1MHftvjP9bcBY2QbdAgWQ.roa Signing time: Fri 02 Jan 2026 12:20:53 +0000 ROA not before: Fri 02 Jan 2026 12:20:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204909 IP address blocks: 2a06:e881:3700::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:53:75:33:49:c0:4c:0f:da:31:d9:a4:34:b5:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Validity Not Before: Jan 2 12:20:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=451f7d14ed4c1dfb6f8cff5b70163641b7408164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7b:3e:48:13:d7:eb:c3:15:fb:9c:4f:a2:7f: fa:98:ea:23:fd:0c:a4:1d:5f:65:cf:0f:36:ab:1f: e0:e1:1f:6a:4b:4b:0f:2c:c5:99:81:e7:55:0b:97: aa:ea:6b:5b:d1:02:ff:58:e6:b5:52:eb:f3:d5:27: 3c:20:b4:aa:1a:75:97:c8:6d:e7:c7:0a:27:4c:b6: 9d:32:46:90:7a:d6:ad:05:3b:f4:50:41:d1:73:f3: 00:cc:52:41:ba:6e:9b:2f:32:eb:15:0f:93:e2:79: b9:ca:0f:1e:bd:7e:17:9b:74:61:06:6c:5c:1a:59: 8f:0c:d6:85:80:6d:91:49:67:d2:4b:c6:b9:2a:50: df:9c:b1:f0:81:d6:ed:95:8c:43:b0:cf:90:4c:1f: a0:4b:92:4f:06:60:2a:da:c4:48:43:ac:64:b0:9e: 5c:65:57:2d:9d:b1:df:64:61:56:b6:26:5f:e0:5f: a4:50:c8:d4:4e:37:a9:5f:c0:8a:63:13:13:18:60: 1d:e7:20:11:3e:f0:7c:bf:49:24:c0:66:e7:1b:6c: 46:35:bb:ac:59:02:44:2d:45:61:7c:c4:3e:02:1f: c9:fa:9b:d4:1f:26:d9:5f:78:21:a5:83:b5:62:6c: 17:ca:ea:dc:b1:d8:71:f5:1d:bd:79:99:f1:fd:57: 9b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:1F:7D:14:ED:4C:1D:FB:6F:8C:FF:5B:70:16:36:41:B7:40:81:64 X509v3 Authority Key Identifier: keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/RR99FO1MHftvjP9bcBY2QbdAgWQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:e881:3700::/44 Signature Algorithm: sha256WithRSAEncryption 64:d6:91:b4:40:3b:c3:85:47:51:98:90:54:4c:68:ba:32:72: 81:c3:44:99:b5:d3:fd:fe:97:25:10:da:3d:7a:90:30:f9:bb: dc:18:67:92:88:10:73:1b:65:fc:54:e2:47:a6:0f:7e:2c:46: 59:a1:b0:d7:84:d4:57:14:88:06:f9:24:10:05:af:2d:34:b1: 87:20:53:56:f3:5f:b9:78:8e:f4:76:ee:d0:9f:99:e1:d5:16: 10:15:1d:eb:2f:3c:61:9b:77:21:f3:33:1a:fb:34:1b:fc:82: e8:cd:12:a7:a3:48:38:90:b7:80:b2:cb:96:5f:fb:5d:bf:2c: 06:80:da:84:74:1e:a6:e6:bc:e7:3e:3d:d8:30:96:c7:34:dd: 4a:9c:8b:02:4f:d6:51:5a:67:b4:4e:f8:1d:25:f8:c4:9e:ff: e8:b3:4d:eb:eb:af:ac:01:fa:4a:3a:6f:ad:d4:7e:77:1a:5b: 52:a8:51:86:60:e7:67:1c:af:85:a9:f4:f7:cc:e4:4f:ce:3f: 0d:4d:01:56:db:11:22:10:74:46:3f:d4:ee:57:3d:c2:16:d5: 5d:c9:18:b6:a3:60:86:5b:2b:4b:7e:65:c8:30:5e:17:fe:87: c5:b7:c3:23:b2:63:12:02:93:b6:ee:74:a2:4f:f8:0b:d2:ff: 9c:f6:e6:83 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+p1N1M0nATA/aMdmkNLVYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl ZDc5NTQwHhcNMjYwMTAyMTIyMDUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTFmN2QxNGVkNGMxZGZiNmY4Y2ZmNWI3MDE2MzY0MWI3NDA4MTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApns+SBPX68MV+5xPon/6mOoj/Qyk HV9lzw82qx/g4R9qS0sPLMWZgedVC5eq6mtb0QL/WOa1Uuvz1Sc8ILSqGnWXyG3n xwonTLadMkaQetatBTv0UEHRc/MAzFJBum6bLzLrFQ+T4nm5yg8evX4Xm3RhBmxc GlmPDNaFgG2RSWfSS8a5KlDfnLHwgdbtlYxDsM+QTB+gS5JPBmAq2sRIQ6xksJ5c ZVctnbHfZGFWtiZf4F+kUMjUTjepX8CKYxMTGGAd5yARPvB8v0kkwGbnG2xGNbus WQJELUVhfMQ+Ah/J+pvUHybZX3ghpYO1YmwXyurcsdhx9R29eZnx/VebgwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEUffRTtTB37b4z/W3AWNkG3QIFkMB8GA1UdIwQY MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt M2Q5MWVkZTViMmIxLzEvUlI5OUZPMU1IZnR2alA5YmNCWTJRYmRBZ1dRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgbogTcA MA0GCSqGSIb3DQEBCwUAA4IBAQBk1pG0QDvDhUdRmJBUTGi6MnKBw0SZtdP9/pcl ENo9epAw+bvcGGeSiBBzG2X8VOJHpg9+LEZZobDXhNRXFIgG+SQQBa8tNLGHIFNW 81+5eI70du7Qn5nh1RYQFR3rLzxhm3ch8zMa+zQb/ILozRKno0g4kLeAssuWX/td vywGgNqEdB6m5rznPj3YMJbHNN1KnIsCT9ZRWme0TvgdJfjEnv/os03r66+sAfpK Om+t1H53GltSqFGGYOdnHK+FqfT3zORPzj8NTQFW2xEiEHRGP9TuVz3CFtVdyRi2 o2CGWytLfmXIMF4X/ofFt8MjsmMSApO27nSiT/gL0v+c9uaD -----END CERTIFICATE-----Generated at Tue Jan 20 22:47:41 2026 by rpki-client