This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/a_b0RtO03m9umwvmGIisfH1ezxs.roa File: a_b0RtO03m9umwvmGIisfH1ezxs.roa (raw, json) Hash identifier: WnvfYu3njkCzDS9UXMUF95mscuNaF/URNqYfEe2vBrA= Subject key identifier: 6B:F6:F4:46:D3:B4:DE:6F:6E:9B:0B:E6:18:88:AC:7C:7D:5E:CF:1B Certificate issuer: /CN=8daf61f6608f9a9eac14b18224854807bcdc1324 Certificate serial: 019B7BA33A2A9B537C3D729703DE1C1BB8F6 Authority key identifier: 8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/a_b0RtO03m9umwvmGIisfH1ezxs.roa Signing time: Thu 01 Jan 2026 22:17:33 +0000 ROA not before: Thu 01 Jan 2026 22:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47263 IP address blocks: 2a09:9340:1800::/37 maxlen: 37 2a09:9340:1803::/48 maxlen: 48 2a09:9340:1806::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:3a:2a:9b:53:7c:3d:72:97:03:de:1c:1b:b8:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8daf61f6608f9a9eac14b18224854807bcdc1324 Validity Not Before: Jan 1 22:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6bf6f446d3b4de6f6e9b0be61888ac7c7d5ecf1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f2:21:92:77:02:cb:dd:2d:e6:14:67:b4:61: e2:33:1a:be:80:21:50:23:c7:cf:a1:0b:20:ce:f3: 32:05:34:4a:79:9c:94:20:94:a4:95:a1:98:c0:6e: 9c:77:6e:e7:f9:b8:11:fe:ac:bd:6e:27:3e:64:7d: 67:8a:34:e2:e6:e3:2e:e6:2a:7b:8b:78:e3:52:f6: 3f:e3:ff:1d:0a:f6:c9:97:ff:68:7b:ba:33:65:38: 8b:07:68:e1:07:3a:bb:7e:c0:67:35:59:eb:01:e0: 52:d8:b4:45:e7:50:33:c7:7c:ae:88:c9:43:3b:f6: 01:4b:d6:d1:52:5e:14:d4:22:8e:fa:6b:20:e3:37: 3b:fa:eb:e1:65:c0:c0:50:41:42:67:bc:19:da:ce: 53:a1:ba:d4:58:eb:5f:28:59:51:d2:b5:e1:b1:13: d4:19:18:05:4c:bd:4e:ff:4f:2e:8f:b1:27:31:9a: 63:3c:0d:1e:33:5f:01:b0:5a:09:91:68:bc:07:c6: 69:18:4b:e5:bf:33:b8:40:5f:47:97:4c:a4:db:f2: 36:0e:cb:19:74:5b:63:08:e3:5a:09:98:32:dd:a3: 1c:85:39:38:6f:5f:6a:77:53:70:dc:9f:4c:5c:ac: 42:7a:ce:dc:08:21:f7:84:66:85:f4:19:96:6b:a4: 73:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:F6:F4:46:D3:B4:DE:6F:6E:9B:0B:E6:18:88:AC:7C:7D:5E:CF:1B X509v3 Authority Key Identifier: keyid:8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/a_b0RtO03m9umwvmGIisfH1ezxs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:9340:1800::/37 Signature Algorithm: sha256WithRSAEncryption 7e:7a:ce:32:b6:16:d4:b6:3d:2e:79:22:c6:23:94:aa:c3:ca: 15:a3:2e:2f:be:cd:18:19:66:ff:b3:0c:a1:73:29:51:29:db: 47:ed:0b:50:b5:2f:1b:ac:96:bb:05:f3:47:1e:ef:6d:3a:91: a4:af:14:5e:50:82:64:42:ab:b6:dd:0d:9c:a1:fb:c9:7d:d6: d3:09:cf:87:59:62:4b:eb:53:de:b9:26:72:f9:58:23:61:77: 52:d2:7f:c5:04:b5:26:67:93:18:b0:8b:75:89:6c:9d:41:5e: c2:05:3a:bf:9a:ad:ac:60:84:3b:45:79:80:cd:0c:e7:e7:c5: c7:6f:b0:c3:fb:21:a4:db:e5:ed:ce:1d:6e:19:e3:0d:1a:2a: 7e:ab:04:c2:ec:e6:9a:7c:61:03:42:e3:0b:a8:95:e0:20:54: 5d:6a:70:fa:55:6c:0a:d8:17:ee:f1:59:0f:f3:ca:09:f2:45: 27:5a:4b:90:c2:a7:f3:af:bd:40:15:53:c2:d8:03:bd:b9:ee: de:9b:3f:7c:eb:18:be:46:dd:b4:01:8c:6d:b2:24:72:fb:55: 84:d4:0d:18:67:ce:3b:5b:d1:c4:a4:85:05:3f:45:a5:03:d7: 8c:3e:63:d0:62:fe:83:9d:55:42:39:56:3b:35:4a:8e:3c:f1: 27:15:8b:50 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt7ozoqm1N8PXKXA94cG7j2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYWY2MWY2NjA4ZjlhOWVhYzE0YjE4MjI0ODU0ODA3YmNk YzEzMjQwHhcNMjYwMTAxMjIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YmY2ZjQ0NmQzYjRkZTZmNmU5YjBiZTYxODg4YWM3YzdkNWVjZjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PIhkncCy90t5hRntGHiMxq+gCFQ I8fPoQsgzvMyBTRKeZyUIJSklaGYwG6cd27n+bgR/qy9bic+ZH1nijTi5uMu5ip7 i3jjUvY/4/8dCvbJl/9oe7ozZTiLB2jhBzq7fsBnNVnrAeBS2LRF51Azx3yuiMlD O/YBS9bRUl4U1CKO+msg4zc7+uvhZcDAUEFCZ7wZ2s5TobrUWOtfKFlR0rXhsRPU GRgFTL1O/08uj7EnMZpjPA0eM18BsFoJkWi8B8ZpGEvlvzO4QF9Hl0yk2/I2DssZ dFtjCONaCZgy3aMchTk4b19qd1Nw3J9MXKxCes7cCCH3hGaF9BmWa6RzrQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFGv29EbTtN5vbpsL5hiIrHx9Xs8bMB8GA1UdIwQY MBaAFI2vYfZgj5qerBSxgiSFSAe83BMkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamE5aDltQ1BtcDZzRkxHQ0pJVklCN3pjRXlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS81MGY5MzUtZDY3NS00MDg5LWFhZTUt ZmIyNGJlNzVhM2Y0LzEvYV9iMFJ0TzAzbTl1bXd2bUdJaXNmSDFlenhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS81MGY5MzUtZDY3NS00MDg5LWFhZTUtZmIyNGJlNzVhM2Y0 LzEvamE5aDltQ1BtcDZzRkxHQ0pJVklCN3pjRXlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYDKgmTQBgw DQYJKoZIhvcNAQELBQADggEBAH56zjK2FtS2PS55IsYjlKrDyhWjLi++zRgZZv+z DKFzKVEp20ftC1C1LxuslrsF80ce7206kaSvFF5QgmRCq7bdDZyh+8l91tMJz4dZ YkvrU965JnL5WCNhd1LSf8UEtSZnkxiwi3WJbJ1BXsIFOr+araxghDtFeYDNDOfn xcdvsMP7IaTb5e3OHW4Z4w0aKn6rBMLs5pp8YQNC4wuoleAgVF1qcPpVbArYF+7x WQ/zygnyRSdaS5DCp/OvvUAVU8LYA7257t6bP3zrGL5G3bQBjG2yJHL7VYTUDRhn zjtb0cSkhQU/RaUD14w+Y9Bi/oOdVUI5Vjs1So488ScVi1A= -----END CERTIFICATE-----Generated at Mon Feb 9 23:54:28 2026 by rpki-client