This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/cKqvG9BsZG6su7we84q3E8DeV-0.roa File: cKqvG9BsZG6su7we84q3E8DeV-0.roa (raw, json) Hash identifier: yebnJKVbgSkS4D7E+ORpv+scwNkFgxpLo5cTVCzh2rI= Subject key identifier: 70:AA:AF:1B:D0:6C:64:6E:AC:BB:BC:1E:F3:8A:B7:13:C0:DE:57:ED Certificate issuer: /CN=8daf61f6608f9a9eac14b18224854807bcdc1324 Certificate serial: 019B7BA33CD6F598121C819761270907EC12 Authority key identifier: 8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/cKqvG9BsZG6su7we84q3E8DeV-0.roa Signing time: Thu 01 Jan 2026 22:17:34 +0000 ROA not before: Thu 01 Jan 2026 22:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216296 IP address blocks: 2a09:9340:1809::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:3c:d6:f5:98:12:1c:81:97:61:27:09:07:ec:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8daf61f6608f9a9eac14b18224854807bcdc1324 Validity Not Before: Jan 1 22:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70aaaf1bd06c646eacbbbc1ef38ab713c0de57ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c7:f6:61:53:d8:d9:44:06:ab:fd:d9:b2:24: bb:c8:58:0c:fe:35:46:53:fe:ab:0b:be:0f:ef:2d: ed:e9:67:e6:8b:f3:8e:70:82:f9:cb:b8:d6:3c:15: c2:a1:67:c9:d8:e3:6f:88:3a:c4:af:36:fe:6b:fd: 70:69:e1:81:fd:15:f8:bb:b9:b5:69:53:e8:7b:00: a0:9a:3d:e5:86:87:bd:99:4d:d9:75:35:dd:46:10: a1:dc:f0:13:1c:f8:a9:2c:26:9b:b1:c8:91:44:7a: d6:db:2c:d2:5c:e7:7f:e1:8c:cd:fe:3a:56:6e:72: b1:5b:f4:81:24:36:a0:f7:b6:77:ba:80:5f:42:a4: 13:4f:ee:5b:c2:9d:43:b8:08:96:05:5d:52:ba:64: f5:06:35:22:e8:44:6b:9f:2e:a1:59:5f:a1:a0:97: 48:c0:a1:e0:a2:6b:d6:9d:6a:a7:b1:bc:06:1e:a6: 3c:5a:8e:52:fd:df:0f:c6:cd:a5:ea:cb:5b:94:56: 59:b3:52:2b:09:f7:19:fa:6a:b0:e4:df:87:1b:f8: d0:43:38:64:70:85:0b:cf:8b:94:f6:56:c0:61:1b: f2:f6:05:a3:72:88:73:86:01:f6:ea:89:40:c0:f1: 58:6c:92:b2:6e:26:5e:2d:60:1c:cd:3f:c0:65:03: 3e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:AA:AF:1B:D0:6C:64:6E:AC:BB:BC:1E:F3:8A:B7:13:C0:DE:57:ED X509v3 Authority Key Identifier: keyid:8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/cKqvG9BsZG6su7we84q3E8DeV-0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:9340:1809::/48 Signature Algorithm: sha256WithRSAEncryption 77:a8:c5:6b:41:d7:64:bc:56:db:36:0b:97:db:ef:92:5e:ec: 40:b8:6e:7b:42:6d:aa:52:fd:99:ef:97:35:85:ed:a8:e1:29: 31:da:88:af:06:37:0c:9d:8c:85:34:16:6b:09:1f:c5:56:2f: 9e:ff:20:b0:8c:fd:8a:07:57:41:5a:5d:47:ea:cd:c4:13:1b: 0b:79:c3:25:77:dd:ae:55:f8:88:ae:9a:02:92:28:24:58:be: 45:dc:27:27:39:8b:0a:c2:e6:10:d6:2a:ec:35:b4:66:82:b5: 40:32:ff:dd:a4:2f:08:9d:0a:d4:82:6d:ea:99:a0:3f:fa:7f: bc:e6:5c:2c:6c:86:b9:9d:40:78:dc:a4:e1:36:73:6a:ea:5b: b6:e6:bb:c1:b5:01:2a:9e:fb:7a:fe:2a:1d:d0:d4:ba:98:76: a3:a7:c2:40:5d:b9:74:53:39:1f:47:87:b4:11:35:bf:87:31: 99:7f:1e:d7:21:45:d5:e5:06:72:66:63:87:7a:d9:04:7a:76: e2:bb:e8:69:de:db:79:17:11:b8:85:0c:3d:db:45:82:64:48: 1b:d6:2d:52:f4:68:e5:72:19:8e:5b:4e:4c:b4:64:1e:ae:24: 92:c2:2b:94:d2:ed:83:24:14:e8:67:96:65:14:0c:6d:2e:45: c7:e5:67:21 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7ozzW9ZgSHIGXYScJB+wSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYWY2MWY2NjA4ZjlhOWVhYzE0YjE4MjI0ODU0ODA3YmNk YzEzMjQwHhcNMjYwMTAxMjIxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGFhYWYxYmQwNmM2NDZlYWNiYmJjMWVmMzhhYjcxM2MwZGU1N2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsf2YVPY2UQGq/3ZsiS7yFgM/jVG U/6rC74P7y3t6Wfmi/OOcIL5y7jWPBXCoWfJ2ONviDrErzb+a/1waeGB/RX4u7m1 aVPoewCgmj3lhoe9mU3ZdTXdRhCh3PATHPipLCabsciRRHrW2yzSXOd/4YzN/jpW bnKxW/SBJDag97Z3uoBfQqQTT+5bwp1DuAiWBV1SumT1BjUi6ERrny6hWV+hoJdI wKHgomvWnWqnsbwGHqY8Wo5S/d8Pxs2l6stblFZZs1IrCfcZ+mqw5N+HG/jQQzhk cIULz4uU9lbAYRvy9gWjcohzhgH26olAwPFYbJKybiZeLWAczT/AZQM+swIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHCqrxvQbGRurLu8HvOKtxPA3lftMB8GA1UdIwQY MBaAFI2vYfZgj5qerBSxgiSFSAe83BMkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamE5aDltQ1BtcDZzRkxHQ0pJVklCN3pjRXlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS81MGY5MzUtZDY3NS00MDg5LWFhZTUt ZmIyNGJlNzVhM2Y0LzEvY0txdkc5QnNaRzZzdTd3ZTg0cTNFOERlVi0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS81MGY5MzUtZDY3NS00MDg5LWFhZTUtZmIyNGJlNzVhM2Y0 LzEvamE5aDltQ1BtcDZzRkxHQ0pJVklCN3pjRXlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgmTQBgJ MA0GCSqGSIb3DQEBCwUAA4IBAQB3qMVrQddkvFbbNguX2++SXuxAuG57Qm2qUv2Z 75c1he2o4Skx2oivBjcMnYyFNBZrCR/FVi+e/yCwjP2KB1dBWl1H6s3EExsLecMl d92uVfiIrpoCkigkWL5F3CcnOYsKwuYQ1irsNbRmgrVAMv/dpC8InQrUgm3qmaA/ +n+85lwsbIa5nUB43KThNnNq6lu25rvBtQEqnvt6/iod0NS6mHajp8JAXbl0Uzkf R4e0ETW/hzGZfx7XIUXV5QZyZmOHetkEenbiu+hp3tt5FxG4hQw920WCZEgb1i1S 9GjlchmOW05MtGQeriSSwiuU0u2DJBToZ5ZlFAxtLkXH5Wch -----END CERTIFICATE-----Generated at Mon Feb 9 23:51:49 2026 by rpki-client