This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9_9TjCDFFvYkoiRqg9-Osq7oUSo.roa File: 9_9TjCDFFvYkoiRqg9-Osq7oUSo.roa (raw, json) Hash identifier: 0pLgftv6Y46vbnkBhq0CTr8Qm+QiK0x3yS7ZNKk6jEY= Subject key identifier: F7:FF:53:8C:20:C5:16:F6:24:A2:24:6A:83:DF:8E:B2:AE:E8:51:2A Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B7FF1A5B576BEE8F3BCE24F45DF72E0D9 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9_9TjCDFFvYkoiRqg9-Osq7oUSo.roa Signing time: Fri 02 Jan 2026 18:21:41 +0000 ROA not before: Fri 02 Jan 2026 18:21:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 22612 IP address blocks: 2a12:ac47::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:a5:b5:76:be:e8:f3:bc:e2:4f:45:df:72:e0:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 2 18:21:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7ff538c20c516f624a2246a83df8eb2aee8512a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:dc:f0:29:2c:0d:97:48:78:ed:d0:91:d5:0d: 9c:8d:17:42:f7:2e:0b:c2:37:95:64:17:d8:29:99: 9f:ac:a6:51:8a:83:da:0b:c9:97:b9:df:47:a0:ac: 85:c4:2c:c6:2e:34:31:19:f3:09:3a:f1:a5:00:71: b4:c6:77:bc:8a:df:82:72:77:e1:e9:e2:34:31:52: f2:36:72:be:82:78:aa:a1:33:0e:86:ce:36:09:46: dc:e3:97:ed:ec:e4:93:b7:1b:a0:a8:d4:b0:8d:bc: b7:fb:9c:9b:ca:d3:f4:7d:74:24:b1:44:f7:fe:37: 40:a4:c4:ff:e1:bf:14:ea:67:9d:eb:ff:d7:3f:de: 86:13:91:09:c9:75:8f:bd:5f:ca:1b:96:01:4e:dd: 55:bf:d5:7d:48:6c:01:b1:53:fe:49:e0:cb:c9:14: d4:71:55:8c:f5:e7:cf:50:d0:af:32:4a:7b:7f:05: 41:fb:47:c9:5f:33:36:eb:01:88:c2:5d:bc:82:91: 11:3a:28:3a:10:c8:60:35:96:99:69:a5:c4:e9:92: b5:ed:bd:a1:fb:37:4d:f9:56:e8:73:9d:9a:0d:b8: 23:92:f6:be:d0:d4:5c:36:d9:09:1b:7a:bb:f7:a4: ee:a8:aa:d4:f6:fe:1e:50:1e:65:7b:7b:5d:e1:24: d5:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:FF:53:8C:20:C5:16:F6:24:A2:24:6A:83:DF:8E:B2:AE:E8:51:2A X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9_9TjCDFFvYkoiRqg9-Osq7oUSo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:ac47::/32 Signature Algorithm: sha256WithRSAEncryption 2d:31:b5:d4:6b:ce:08:34:e2:cb:fa:cf:31:fe:1e:43:f2:55: 14:5a:ef:aa:a9:9e:2b:1f:88:f5:30:78:61:54:a3:dd:50:75: 7e:96:52:d2:e5:3f:05:5c:b8:c1:b7:5d:2a:a2:ae:e1:23:f6: 3a:22:07:67:2f:f9:6d:28:57:05:b0:3a:3b:5a:61:95:23:f8: e7:8d:b5:42:32:68:5e:52:0e:9b:10:c1:fe:d5:38:eb:fe:ce: 0a:1c:cf:ed:5d:78:49:36:27:dc:c1:51:63:2e:a7:c8:ec:a3: a1:b6:d6:34:94:dd:bf:62:8f:67:04:66:a6:91:f0:0b:b7:fb: 03:78:12:08:81:4e:7c:1a:cd:62:6a:3b:69:53:b7:5c:9e:3f: 93:d6:6c:7a:79:ac:4e:a7:5f:4e:4f:98:ab:ae:cb:e7:3e:6e: 8f:9c:7c:ad:53:54:bc:32:26:d7:8b:0e:52:38:c2:a6:38:69: 69:f4:3d:1f:22:2b:38:e5:c9:4e:33:44:91:24:31:0a:fc:b7: e5:4c:9b:be:02:74:35:7b:98:6c:77:6e:75:4d:65:47:af:94: 59:02:b7:0d:54:d4:e6:23:a1:5b:35:ca:7c:48:6d:13:ca:77: d0:b4:7a:4b:03:83:9d:ea:e8:ba:cd:07:06:94:c8:56:f8:04: ba:c9:02:87 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/8aW1dr7o87ziT0XfcuDZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTAyMTgyMTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2ZmNTM4YzIwYzUxNmY2MjRhMjI0NmE4M2RmOGViMmFlZTg1MTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNzwKSwNl0h47dCR1Q2cjRdC9y4L wjeVZBfYKZmfrKZRioPaC8mXud9HoKyFxCzGLjQxGfMJOvGlAHG0xne8it+Ccnfh 6eI0MVLyNnK+gniqoTMOhs42CUbc45ft7OSTtxugqNSwjby3+5ybytP0fXQksUT3 /jdApMT/4b8U6med6//XP96GE5EJyXWPvV/KG5YBTt1Vv9V9SGwBsVP+SeDLyRTU cVWM9efPUNCvMkp7fwVB+0fJXzM26wGIwl28gpEROig6EMhgNZaZaaXE6ZK17b2h +zdN+Vboc52aDbgjkva+0NRcNtkJG3q796TuqKrU9v4eUB5le3td4STVdwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPf/U4wgxRb2JKIkaoPfjrKu6FEqMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvOV85VGpDREZGdllrb2lScWc5LU9zcTdvVVNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhKsRzAN BgkqhkiG9w0BAQsFAAOCAQEALTG11GvOCDTiy/rPMf4eQ/JVFFrvqqmeKx+I9TB4 YVSj3VB1fpZS0uU/BVy4wbddKqKu4SP2OiIHZy/5bShXBbA6O1phlSP45421QjJo XlIOmxDB/tU46/7OChzP7V14STYn3MFRYy6nyOyjobbWNJTdv2KPZwRmppHwC7f7 A3gSCIFOfBrNYmo7aVO3XJ4/k9ZsenmsTqdfTk+Yq67L5z5uj5x8rVNUvDIm14sO UjjCpjhpafQ9HyIrOOXJTjNEkSQxCvy35UybvgJ0NXuYbHdudU1lR6+UWQK3DVTU 5iOhWzXKfEhtE8p30LR6SwODnerous0HBpTIVvgEuskChw== -----END CERTIFICATE-----Generated at Tue Jan 20 09:07:41 2026 by rpki-client