This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/9xQF87Qd7srsKaI6hsI2yH5_6A0.roa File: 9xQF87Qd7srsKaI6hsI2yH5_6A0.roa (raw, json) Hash identifier: SYaEasVNPZuOEWtiF6qa3qkHyYwDEYqHB2TQDNFRY6Q= Subject key identifier: F7:14:05:F3:B4:1D:EE:CA:EC:29:A2:3A:86:C2:36:C8:7E:7F:E8:0D Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0 Certificate serial: 019B7758EA3EC8CD9558E164ABD2E5894D19 Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/9xQF87Qd7srsKaI6hsI2yH5_6A0.roa Signing time: Thu 01 Jan 2026 02:17:54 +0000 ROA not before: Thu 01 Jan 2026 02:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210023 IP address blocks: 2a0f:5707:29::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:ea:3e:c8:cd:95:58:e1:64:ab:d2:e5:89:4d:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0 Validity Not Before: Jan 1 02:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f71405f3b41deecaec29a23a86c236c87e7fe80d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:81:e5:08:80:2e:e2:f0:c9:b7:5b:5b:18:04: 98:de:37:2d:54:5d:a5:bc:e3:54:d2:ee:df:af:d0: 8e:41:f7:07:61:71:d5:2d:18:e6:40:3e:43:36:03: ea:35:fd:09:3a:55:58:56:ce:7c:e3:24:2f:ec:9f: dc:ac:d0:eb:6d:29:ac:04:47:d1:02:38:3e:6a:04: 13:42:ec:3c:f6:71:5d:bb:62:72:fb:6f:ee:c3:2f: ca:24:0b:86:ea:90:5d:ed:dc:c6:fa:1f:76:79:da: 22:6e:de:0a:cb:b9:77:84:ae:b9:11:51:43:d3:b1: d9:b3:71:d0:b4:ff:fb:e5:61:0f:d8:1c:81:78:21: 3c:1b:0e:a9:3d:f4:6f:f4:78:78:c4:1f:d2:e9:9d: 72:20:37:61:f0:b4:6e:f2:be:4f:a0:84:3e:16:e5: 36:ba:a7:4d:e2:91:b0:10:8c:9d:92:11:e2:dd:44: c1:a4:f2:83:c1:b2:c5:97:02:63:fc:43:aa:a7:35: a5:84:59:5b:af:44:74:35:0b:84:0d:19:1b:a9:69: 39:db:04:fc:4e:1d:ac:8d:36:ea:8a:93:45:35:61: 58:91:cc:a9:5d:e8:d9:69:d9:e8:df:35:7b:07:f9: a2:f2:16:61:26:63:cc:36:db:06:93:de:d7:28:e5: 90:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:14:05:F3:B4:1D:EE:CA:EC:29:A2:3A:86:C2:36:C8:7E:7F:E8:0D X509v3 Authority Key Identifier: keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/9xQF87Qd7srsKaI6hsI2yH5_6A0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:5707:29::/48 Signature Algorithm: sha256WithRSAEncryption 5c:f0:66:48:e7:6e:74:3d:89:bb:f7:7f:48:d8:21:05:64:a5: 6d:45:4f:e4:a5:1e:5a:63:3c:fc:4d:d0:6a:dd:fe:d1:2d:9a: 6e:91:59:ea:c7:e9:bd:f0:74:4e:c6:10:5b:4a:cc:dc:d4:5c: 82:ba:24:84:50:da:67:4f:40:00:26:41:3d:4b:2c:3f:4f:d5: 8c:7d:06:0c:2a:71:c6:2d:65:e3:54:79:dc:3c:a2:ec:a2:62: 59:8a:4e:c1:dc:dc:e0:90:28:db:04:a0:44:68:1a:bb:0f:80: 7d:1d:bb:9a:bf:5e:5f:53:31:f3:5b:43:2d:a9:ed:4c:e7:bf: b1:5c:0d:db:73:b4:53:ba:63:88:27:87:77:fc:3b:64:ab:13: d7:b2:6d:63:7e:cb:72:b0:fd:ff:ac:b7:8b:1a:2d:98:50:c7: b8:2f:bd:2b:fd:6c:6f:1d:6c:13:47:77:9f:b4:da:cd:b6:5c: ee:6c:8b:88:4e:78:c2:33:14:f3:a0:da:0c:28:91:24:59:a1: 31:3c:7e:49:7c:78:29:48:70:aa:0c:d0:a3:a6:17:1e:7e:5b: 0a:8c:09:82:af:db:e1:36:b9:31:36:cc:fa:82:df:74:75:37: 67:3e:df:c0:ca:47:0c:fb:b7:fd:05:77:19:7a:65:69:c0:a6: 6a:d8:c6:46 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WOo+yM2VWOFkq9LliU0ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNjQ0YzExNTY4NTE4MDNmMzdhZGVlYzA4NzZjY2Y5ODlk NWFlZjAwHhcNMjYwMTAxMDIxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzE0MDVmM2I0MWRlZWNhZWMyOWEyM2E4NmMyMzZjODdlN2ZlODBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4HlCIAu4vDJt1tbGASY3jctVF2l vONU0u7fr9COQfcHYXHVLRjmQD5DNgPqNf0JOlVYVs584yQv7J/crNDrbSmsBEfR Ajg+agQTQuw89nFdu2Jy+2/uwy/KJAuG6pBd7dzG+h92edoibt4Ky7l3hK65EVFD 07HZs3HQtP/75WEP2ByBeCE8Gw6pPfRv9Hh4xB/S6Z1yIDdh8LRu8r5PoIQ+FuU2 uqdN4pGwEIydkhHi3UTBpPKDwbLFlwJj/EOqpzWlhFlbr0R0NQuEDRkbqWk52wT8 Th2sjTbqipNFNWFYkcypXejZadno3zV7B/mi8hZhJmPMNtsGk97XKOWQRwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPcUBfO0He7K7CmiOobCNsh+f+gNMB8GA1UdIwQY MBaAFEpkTBFWhRgD83re7Ah2zPmJ1a7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3Mzkt Y2MxYzliNWY2NjQwLzEvOXhRRjg3UWQ3c3JzS2FJNmhzSTJ5SDVfNkEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3MzktY2MxYzliNWY2NjQw LzEvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9XBwAp MA0GCSqGSIb3DQEBCwUAA4IBAQBc8GZI5250PYm7939I2CEFZKVtRU/kpR5aYzz8 TdBq3f7RLZpukVnqx+m98HROxhBbSszc1FyCuiSEUNpnT0AAJkE9Syw/T9WMfQYM KnHGLWXjVHncPKLsomJZik7B3NzgkCjbBKBEaBq7D4B9Hbuav15fUzHzW0Mtqe1M 57+xXA3bc7RTumOIJ4d3/DtkqxPXsm1jfstysP3/rLeLGi2YUMe4L70r/WxvHWwT R3eftNrNtlzubIuITnjCMxTzoNoMKJEkWaExPH5JfHgpSHCqDNCjphceflsKjAmC r9vhNrkxNsz6gt90dTdnPt/AykcM+7f9BXcZemVpwKZq2MZG -----END CERTIFICATE-----Generated at Mon Jan 26 12:31:38 2026 by rpki-client