This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/9KMoQY1gowbZEM4SdiT6qdPcaoY.roa File: 9KMoQY1gowbZEM4SdiT6qdPcaoY.roa (raw, json) Hash identifier: 9tjgCLIhVP4gdJ0NRTzxaWLBRQyFzOb16vRDQVUO7SM= Subject key identifier: F4:A3:28:41:8D:60:A3:06:D9:10:CE:12:76:24:FA:A9:D3:DC:6A:86 Certificate issuer: /CN=07f0ba59b1c76cf20dc4382e5a2854d7142c26ba Certificate serial: 019B7CED3D0D51375D31BA12BB7C3E2ADAAD Authority key identifier: 07:F0:BA:59:B1:C7:6C:F2:0D:C4:38:2E:5A:28:54:D7:14:2C:26:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_C6WbHHbPINxDguWihU1xQsJro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/9KMoQY1gowbZEM4SdiT6qdPcaoY.roa Signing time: Fri 02 Jan 2026 04:18:01 +0000 ROA not before: Fri 02 Jan 2026 04:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 2a14:6:11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.mft rsync://rpki.ripe.net/repository/DEFAULT/B_C6WbHHbPINxDguWihU1xQsJro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:3d:0d:51:37:5d:31:ba:12:bb:7c:3e:2a:da:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07f0ba59b1c76cf20dc4382e5a2854d7142c26ba Validity Not Before: Jan 2 04:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4a328418d60a306d910ce127624faa9d3dc6a86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bc:bf:36:85:fa:60:51:55:57:4a:50:e9:aa: 4f:fd:ba:e9:2e:cf:d1:b8:e9:e6:b5:71:c7:34:81: f5:4f:1b:21:61:b1:f2:47:af:47:c1:38:ab:f4:f8: 99:34:c5:0f:1e:68:ae:35:88:0b:ba:fa:0a:4c:a4: fb:91:1f:65:25:5e:27:eb:46:c2:12:4a:40:92:dc: 4e:09:37:42:28:2e:c8:b7:e9:1d:14:01:a6:ae:9c: 5c:da:45:16:fd:ca:7e:f3:5f:d2:1b:ab:41:3b:ce: 45:d1:70:a7:ed:50:0b:19:68:bf:9a:4b:64:12:9e: 06:f8:0c:24:76:46:31:9f:ba:b4:53:62:95:9d:62: 8e:59:1b:7b:f3:57:a2:a4:ce:d5:d4:3d:13:6f:76: a4:c4:ed:91:01:df:28:bf:d2:02:e7:a2:49:de:e5: 1e:5e:67:97:6a:d0:dc:97:9b:58:3c:cc:9b:ca:d4: 42:44:48:fc:b2:6e:dc:42:d5:1d:a5:c8:ae:54:87: 79:5b:15:37:17:33:12:ab:09:03:0c:7c:78:91:7d: 24:e8:cd:67:fa:5d:bb:0d:8a:21:dc:c5:13:5c:25: 49:28:ad:0f:bc:a5:d1:64:79:76:0f:f3:0b:8a:9a: ab:0a:e5:2c:cf:7b:2f:f4:34:3a:d1:27:b6:16:e0: 77:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:A3:28:41:8D:60:A3:06:D9:10:CE:12:76:24:FA:A9:D3:DC:6A:86 X509v3 Authority Key Identifier: keyid:07:F0:BA:59:B1:C7:6C:F2:0D:C4:38:2E:5A:28:54:D7:14:2C:26:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_C6WbHHbPINxDguWihU1xQsJro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/9KMoQY1gowbZEM4SdiT6qdPcaoY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:6:11::/48 Signature Algorithm: sha256WithRSAEncryption b0:02:9c:f8:aa:81:3b:02:f7:04:be:f1:48:2e:56:8c:fb:16: 33:7f:76:c3:d9:5c:fc:26:05:0f:3f:d5:5f:f8:d8:65:61:70: c2:fb:09:f2:64:8a:ce:f5:01:61:7c:ea:7b:80:fd:be:b2:99: ee:9f:fc:cb:1a:ba:eb:a7:a7:d4:a5:dd:50:c6:9b:71:9a:6f: b6:f7:84:60:28:d1:74:06:b5:f2:6a:66:90:b9:f6:5d:cf:9a: 5b:80:b1:52:2e:a8:ab:ed:8b:fb:c7:38:01:8d:12:65:bd:e7: 33:1c:32:76:8e:c7:bf:4a:71:48:03:11:5b:1c:ac:f7:8f:e8: 5e:76:df:40:a0:da:c9:99:0e:4a:04:f3:aa:da:e4:dd:32:90: 1f:26:86:94:e1:41:e7:b5:91:bd:cb:ae:ae:a9:c3:32:0f:1c: 80:d2:7f:4d:18:e4:24:e2:28:e8:d5:8a:28:7a:d9:44:50:61: 05:19:db:79:ce:be:aa:62:c2:97:a5:70:70:ed:45:33:98:30: 2c:93:ae:31:5e:43:b1:3c:50:29:b4:2a:45:b0:41:5a:86:78: 7d:b4:dc:9f:8c:6a:fd:90:d9:b8:23:c7:b3:02:7b:29:3a:67: ec:bd:c3:25:5e:fd:bb:8e:67:63:d5:57:6a:c9:5e:da:ab:9e: c1:b5:3a:fb -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt87T0NUTddMboSu3w+KtqtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZjBiYTU5YjFjNzZjZjIwZGM0MzgyZTVhMjg1NGQ3MTQy YzI2YmEwHhcNMjYwMTAyMDQxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNGEzMjg0MThkNjBhMzA2ZDkxMGNlMTI3NjI0ZmFhOWQzZGM2YTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLy/NoX6YFFVV0pQ6apP/brpLs/R uOnmtXHHNIH1TxshYbHyR69HwTir9PiZNMUPHmiuNYgLuvoKTKT7kR9lJV4n60bC EkpAktxOCTdCKC7It+kdFAGmrpxc2kUW/cp+81/SG6tBO85F0XCn7VALGWi/mktk Ep4G+AwkdkYxn7q0U2KVnWKOWRt781eipM7V1D0Tb3akxO2RAd8ov9IC56JJ3uUe XmeXatDcl5tYPMybytRCREj8sm7cQtUdpciuVId5WxU3FzMSqwkDDHx4kX0k6M1n +l27DYoh3MUTXCVJKK0PvKXRZHl2D/MLipqrCuUsz3sv9DQ60Se2FuB30wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPSjKEGNYKMG2RDOEnYk+qnT3GqGMB8GA1UdIwQY MBaAFAfwulmxx2zyDcQ4LlooVNcULCa6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQl9DNldiSEhiUElOeERndVdpaFUxeFFzSnJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8yOTZhNzgtMDFlMi00OTZkLWJhNTkt MjIwMGIzY2M1N2U2LzEvOUtNb1FZMWdvd2JaRU00U2RpVDZxZFBjYW9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8yOTZhNzgtMDFlMi00OTZkLWJhNTktMjIwMGIzY2M1N2U2 LzEvQl9DNldiSEhiUElOeERndVdpaFUxeFFzSnJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhQABgAR MA0GCSqGSIb3DQEBCwUAA4IBAQCwApz4qoE7AvcEvvFILlaM+xYzf3bD2Vz8JgUP P9Vf+NhlYXDC+wnyZIrO9QFhfOp7gP2+spnun/zLGrrrp6fUpd1Qxptxmm+294Rg KNF0BrXyamaQufZdz5pbgLFSLqir7Yv7xzgBjRJlveczHDJ2jse/SnFIAxFbHKz3 j+hedt9AoNrJmQ5KBPOq2uTdMpAfJoaU4UHntZG9y66uqcMyDxyA0n9NGOQk4ijo 1YooetlEUGEFGdt5zr6qYsKXpXBw7UUzmDAsk64xXkOxPFAptCpFsEFahnh9tNyf jGr9kNm4I8ezAnspOmfsvcMlXv27jmdj1VdqyV7aq57BtTr7 -----END CERTIFICATE-----Generated at Fri Jan 2 11:04:00 2026 by rpki-client