This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/psH6HdJWDliNBYmhkqUkdCyJFzc.roa File: psH6HdJWDliNBYmhkqUkdCyJFzc.roa (raw, json) Hash identifier: T3ba/3iZB6qbyJx5NHJJKtSaxrqJqq00vN2XoX8swxY= Subject key identifier: A6:C1:FA:1D:D2:56:0E:58:8D:05:89:A1:92:A5:24:74:2C:89:17:37 Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Certificate serial: 019B7EA7676F1430FDF380F9CC3576843EF7 Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/psH6HdJWDliNBYmhkqUkdCyJFzc.roa Signing time: Fri 02 Jan 2026 12:20:58 +0000 ROA not before: Fri 02 Jan 2026 12:20:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215041 IP address blocks: 2a0a:79c0:300::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:67:6f:14:30:fd:f3:80:f9:cc:35:76:84:3e:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Validity Not Before: Jan 2 12:20:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6c1fa1dd2560e588d0589a192a524742c891737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:32:cc:1e:0d:df:61:00:d7:86:7d:3e:60:cf: 22:a9:e0:d3:18:4d:bd:c8:62:cc:3c:d6:0a:be:ef: 10:eb:3d:fc:6e:04:2e:c3:25:f5:ac:89:56:55:53: a7:02:7a:7d:05:9b:b3:c9:88:f8:ce:c5:6b:7d:2e: cd:ed:46:6f:6f:f2:96:16:a7:b8:e9:d7:89:09:9f: 41:6c:ff:14:66:4c:d9:48:02:53:c4:97:11:53:0f: 65:e8:db:77:80:15:e6:84:bb:c3:e4:97:57:3a:b8: 38:ff:e4:33:a4:e2:98:61:88:18:e9:87:28:20:3a: 8b:12:b2:02:71:88:f9:51:c7:9b:03:5b:da:c8:49: 00:b7:5b:10:83:f5:52:7d:fa:24:37:4c:31:f0:79: 9d:64:bf:2a:51:cc:94:4b:7b:90:69:6a:dc:fd:c2: 75:15:25:66:3d:e4:58:d5:08:53:7b:14:3b:10:54: 74:8d:5c:5e:34:2b:e7:70:3a:94:44:7d:2c:78:e1: 92:89:8e:95:5b:de:57:7d:9e:9a:ec:18:13:2b:92: 44:ac:16:1d:0d:d2:ee:8a:ac:15:ee:86:95:a5:9a: 7b:74:10:31:06:e0:89:d6:f3:9e:42:d7:75:e6:18: 52:86:13:e5:61:88:c2:a0:33:1b:b8:2c:e8:8c:21: 8f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C1:FA:1D:D2:56:0E:58:8D:05:89:A1:92:A5:24:74:2C:89:17:37 X509v3 Authority Key Identifier: keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/psH6HdJWDliNBYmhkqUkdCyJFzc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:79c0:300::/40 Signature Algorithm: sha256WithRSAEncryption b1:5c:2e:c8:83:7c:bb:69:77:3d:b3:d8:68:b3:d4:ed:9c:6d: 3a:b8:59:ef:fc:c0:b3:02:ec:f3:f8:1a:fa:aa:fb:dc:be:27: bf:ba:d8:44:42:cc:8b:64:fd:47:e9:18:5a:1a:ea:f2:da:8e: 02:a2:66:f8:1e:81:2a:49:95:53:dc:01:6b:4c:92:82:22:7b: 81:07:0d:5a:70:8a:bb:81:ba:4c:78:2c:c4:ce:4e:9f:51:80: d3:47:12:8f:2e:df:79:d5:31:66:76:38:86:c6:57:65:ef:78: 14:f3:da:f6:4d:ee:ce:e5:83:2c:a8:66:76:d9:ab:e4:15:63: 2e:b5:b3:72:d2:d5:24:98:19:35:11:f8:98:10:27:d5:aa:ca: 50:fb:8d:87:c6:ec:7c:60:78:ba:86:d3:13:21:51:37:5d:59: eb:95:c1:3a:c6:30:4c:80:57:fd:7e:2f:dd:5f:71:7d:08:b5: 9f:bd:84:eb:12:68:10:a1:d5:29:71:33:15:54:34:f7:c9:a5: cb:7e:b7:4e:e3:1f:e9:75:ba:ce:0f:0d:45:f3:ce:ae:c6:e2: 54:8a:1c:d6:b6:ea:5c:db:fa:de:ce:fb:21:61:4a:df:40:34: d8:09:29:fe:f2:2c:d5:e6:21:e4:99:fb:e9:a1:a3:94:ea:f4: d2:da:ef:85 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+p2dvFDD984D5zDV2hD73MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl ZDc5NTQwHhcNMjYwMTAyMTIyMDU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmMxZmExZGQyNTYwZTU4OGQwNTg5YTE5MmE1MjQ3NDJjODkxNzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTLMHg3fYQDXhn0+YM8iqeDTGE29 yGLMPNYKvu8Q6z38bgQuwyX1rIlWVVOnAnp9BZuzyYj4zsVrfS7N7UZvb/KWFqe4 6deJCZ9BbP8UZkzZSAJTxJcRUw9l6Nt3gBXmhLvD5JdXOrg4/+QzpOKYYYgY6Yco IDqLErICcYj5UcebA1vayEkAt1sQg/VSffokN0wx8HmdZL8qUcyUS3uQaWrc/cJ1 FSVmPeRY1QhTexQ7EFR0jVxeNCvncDqURH0seOGSiY6VW95XfZ6a7BgTK5JErBYd DdLuiqwV7oaVpZp7dBAxBuCJ1vOeQtd15hhShhPlYYjCoDMbuCzojCGPRwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFKbB+h3SVg5YjQWJoZKlJHQsiRc3MB8GA1UdIwQY MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt M2Q5MWVkZTViMmIxLzEvcHNINkhkSldEbGlOQlltaGtxVWtkQ3lKRnpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgp5wAMw DQYJKoZIhvcNAQELBQADggEBALFcLsiDfLtpdz2z2Giz1O2cbTq4We/8wLMC7PP4 Gvqq+9y+J7+62ERCzItk/UfpGFoa6vLajgKiZvgegSpJlVPcAWtMkoIie4EHDVpw iruBukx4LMTOTp9RgNNHEo8u33nVMWZ2OIbGV2XveBTz2vZN7s7lgyyoZnbZq+QV Yy61s3LS1SSYGTUR+JgQJ9WqylD7jYfG7HxgeLqG0xMhUTddWeuVwTrGMEyAV/1+ L91fcX0ItZ+9hOsSaBCh1SlxMxVUNPfJpct+t07jH+l1us4PDUXzzq7G4lSKHNa2 6lzb+t7O+yFhSt9ANNgJKf7yLNXmIeSZ++mho5Tq9NLa74U= -----END CERTIFICATE-----Generated at Tue Jan 20 22:47:37 2026 by rpki-client