This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/B9eEu8e4yIdtPqrh_iA5W7OUpOQ.roa File: B9eEu8e4yIdtPqrh_iA5W7OUpOQ.roa (raw, json) Hash identifier: 8CVCh5ZQ80XsLZZ+eaWcwJcJBHEenQUirqskEgN4w2A= Subject key identifier: 07:D7:84:BB:C7:B8:C8:87:6D:3E:AA:E1:FE:20:39:5B:B3:94:A4:E4 Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071 Certificate serial: 019B7E38999D9B062B8E9729445ECB528738 Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/B9eEu8e4yIdtPqrh_iA5W7OUpOQ.roa Signing time: Fri 02 Jan 2026 10:19:57 +0000 ROA not before: Fri 02 Jan 2026 10:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31898 IP address blocks: 2a04:9a00:14c0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:99:9d:9b:06:2b:8e:97:29:44:5e:cb:52:87:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071 Validity Not Before: Jan 2 10:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07d784bbc7b8c8876d3eaae1fe20395bb394a4e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:23:dc:d8:0c:b0:52:48:ef:86:88:15:6b:d4: 1e:30:c0:32:35:d2:ef:82:30:be:c6:5b:24:ea:58: d9:5e:06:cc:7f:90:63:c6:3d:ba:ea:9a:e5:5f:f4: 58:75:9f:f6:b6:0c:61:e7:84:e7:bc:76:b6:f0:78: 38:55:4b:c4:0b:62:f0:16:e5:c2:59:69:3a:4d:f1: d8:eb:e8:61:4e:fb:74:6e:92:96:85:43:c6:ac:cc: 8e:3a:44:e5:95:94:5c:45:ea:1f:c1:6f:6b:8e:71: 4c:75:55:d6:16:52:fc:91:53:fe:89:cc:f1:93:5e: 48:a0:87:f1:a5:a6:ed:a0:15:43:35:e8:4b:c6:7b: 61:b7:38:6b:8c:21:d1:9e:b8:7f:3d:12:2b:df:4f: 75:d9:84:f0:9c:a4:30:b4:66:3e:9a:e7:c2:88:f1: fa:12:6a:5f:39:87:3c:ff:4e:54:03:96:bf:0a:1f: fd:35:63:07:0b:c0:e9:a0:f1:51:ef:f9:59:31:54: 7b:2a:11:63:c8:da:cf:5f:b5:c2:27:62:6b:26:bf: 8f:a3:c2:8e:9e:15:5b:c6:6f:b4:1d:57:c1:0c:ec: 47:19:97:a3:f9:e9:e8:8e:c3:52:28:7d:25:41:14: 51:9a:00:2e:5f:53:8f:22:5e:0d:b6:89:2f:3b:a4: cb:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:D7:84:BB:C7:B8:C8:87:6D:3E:AA:E1:FE:20:39:5B:B3:94:A4:E4 X509v3 Authority Key Identifier: keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/B9eEu8e4yIdtPqrh_iA5W7OUpOQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:9a00:14c0::/44 Signature Algorithm: sha256WithRSAEncryption 45:18:7e:ba:43:22:28:e4:43:ec:2f:d8:04:22:bf:53:84:76: e5:d0:99:8d:03:36:1c:a6:15:0b:3c:aa:c5:e2:52:11:64:04: 01:64:a2:f2:a8:65:7e:8f:d7:3b:c1:57:83:64:ba:5f:1a:f1: 86:5d:9a:0e:9c:11:cc:84:ae:a1:54:37:3c:37:dc:95:8c:6e: de:1e:56:2d:3b:b9:1c:9d:43:89:06:f3:cd:0e:ed:21:1c:a4: 35:4a:42:20:c5:2e:89:e5:cc:da:22:9b:4b:e0:8c:c7:22:7b: 95:46:9e:80:93:22:02:ad:b6:88:4b:17:a0:a3:ee:a8:3a:0d: 74:04:85:3a:f6:87:ed:8c:d0:bf:e2:74:35:26:34:e4:34:88: d0:58:49:98:b1:a5:8c:20:ec:ed:66:42:b5:68:cf:38:cb:9f: 03:63:58:ac:e5:b2:7d:c5:1c:6b:18:ab:19:6f:64:38:73:a7: c8:de:41:a1:b4:10:7d:8d:c7:e0:88:01:4e:fc:c0:95:e6:63: 36:24:b3:27:01:9b:dc:92:14:23:af:3a:e0:59:ae:b7:b2:9e: e3:de:fc:d4:37:7c:dc:38:2e:e7:44:d5:ba:fb:a6:4a:d2:f4: 8d:e2:dc:60:73:19:30:c5:18:7d:d3:2f:57:53:ea:6a:a6:38: ae:8e:11:63 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OJmdmwYrjpcpRF7LUoc4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNWQyOGQxNjYyNmJjNWRjYWJmMmU5MTU0MzU3ODJiOTZl MTQwNzEwHhcNMjYwMTAyMTAxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwN2Q3ODRiYmM3YjhjODg3NmQzZWFhZTFmZTIwMzk1YmIzOTRhNGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yPc2AywUkjvhogVa9QeMMAyNdLv gjC+xlsk6ljZXgbMf5Bjxj266prlX/RYdZ/2tgxh54TnvHa28Hg4VUvEC2LwFuXC WWk6TfHY6+hhTvt0bpKWhUPGrMyOOkTllZRcReofwW9rjnFMdVXWFlL8kVP+iczx k15IoIfxpabtoBVDNehLxnthtzhrjCHRnrh/PRIr30912YTwnKQwtGY+mufCiPH6 EmpfOYc8/05UA5a/Ch/9NWMHC8DpoPFR7/lZMVR7KhFjyNrPX7XCJ2JrJr+Po8KO nhVbxm+0HVfBDOxHGZej+enojsNSKH0lQRRRmgAuX1OPIl4NtokvO6TLYQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAfXhLvHuMiHbT6q4f4gOVuzlKTkMB8GA1UdIwQY MBaAFLBdKNFmJrxdyr8ukVQ1eCuW4UBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEt YWQ1NzU1MjJiMzY1LzEvQjllRXU4ZTR5SWR0UHFyaF9pQTVXN09VcE9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEtYWQ1NzU1MjJiMzY1 LzEvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgSaABTA MA0GCSqGSIb3DQEBCwUAA4IBAQBFGH66QyIo5EPsL9gEIr9ThHbl0JmNAzYcphUL PKrF4lIRZAQBZKLyqGV+j9c7wVeDZLpfGvGGXZoOnBHMhK6hVDc8N9yVjG7eHlYt O7kcnUOJBvPNDu0hHKQ1SkIgxS6J5czaIptL4IzHInuVRp6AkyICrbaISxego+6o Og10BIU69oftjNC/4nQ1JjTkNIjQWEmYsaWMIOztZkK1aM84y58DY1is5bJ9xRxr GKsZb2Q4c6fI3kGhtBB9jcfgiAFO/MCV5mM2JLMnAZvckhQjrzrgWa63sp7j3vzU N3zcOC7nRNW6+6ZK0vSN4txgcxkwxRh90y9XU+pqpjiujhFj -----END CERTIFICATE-----Generated at Sat Jan 10 20:50:15 2026 by rpki-client