This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/9IstXTnrDsT1Pg7Di202GweaYgk.roa File: 9IstXTnrDsT1Pg7Di202GweaYgk.roa (raw, json) Hash identifier: 4EPQgXfXuuqqFIsUlruO85OgfJahHx8B4T+nGawDKG4= Subject key identifier: F4:8B:2D:5D:39:EB:0E:C4:F5:3E:0E:C3:8B:6D:36:1B:07:9A:62:09 Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B7C8018069EB5A83EAB252926F2F10EC2 Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/9IstXTnrDsT1Pg7Di202GweaYgk.roa Signing time: Fri 02 Jan 2026 02:18:48 +0000 ROA not before: Fri 02 Jan 2026 02:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 2a0f:7803:fd11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:18:06:9e:b5:a8:3e:ab:25:29:26:f2:f1:0e:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Jan 2 02:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f48b2d5d39eb0ec4f53e0ec38b6d361b079a6209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:55:e9:d9:84:c6:01:af:c5:0f:c9:24:d3:d2: 6f:e4:73:f9:64:36:15:f7:7f:c5:72:d5:a9:9a:99: a0:81:94:55:dc:d2:84:c1:4d:56:a4:17:2f:42:6e: 6f:73:84:92:c6:ae:70:18:dd:ca:3e:a1:ab:5f:fd: a1:f6:24:bf:f4:ac:0e:2a:5c:43:03:81:cc:c6:99: 0e:62:f6:ae:b4:01:6b:da:bc:75:3c:13:da:16:b7: e8:0f:4c:6e:4e:dc:10:10:1f:84:a3:5b:65:88:07: 46:ac:06:41:8d:9f:41:e9:98:93:b8:e7:0a:10:b1: c7:ce:d4:13:28:89:1d:5d:08:10:63:6c:f5:83:67: 92:ff:c0:dd:9f:cd:48:20:89:cb:d5:33:ad:f4:95: 52:c9:35:14:0c:8f:78:8d:9a:18:1f:e0:77:d8:ed: 31:b2:d0:36:46:b8:c6:6e:3b:87:25:3b:63:d5:ee: d4:be:46:ba:35:d5:24:b1:c1:21:4f:09:ab:f4:7a: fd:31:01:0e:7f:ef:52:36:81:23:c6:53:d3:41:55: 6e:5c:3e:01:1a:ac:24:29:d8:e4:99:0f:ed:fb:de: c1:51:ab:e0:66:c1:f3:22:6c:42:63:9d:97:75:70: a4:07:36:2a:3b:68:ef:93:69:0c:4c:b7:b1:15:f4: 6e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:8B:2D:5D:39:EB:0E:C4:F5:3E:0E:C3:8B:6D:36:1B:07:9A:62:09 X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/9IstXTnrDsT1Pg7Di202GweaYgk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7803:fd11::/48 Signature Algorithm: sha256WithRSAEncryption 1d:f9:7a:2c:e1:ef:8e:fb:77:a1:8f:5d:00:d9:b9:ad:ed:24: 35:d8:af:78:dd:5b:e4:3f:56:61:29:6e:94:58:b3:7b:7f:1c: 28:6f:ab:e5:52:67:9e:75:19:99:2a:0b:f6:02:37:a1:2e:7e: 69:b3:b9:88:19:8d:02:19:6f:c1:32:93:f9:06:e0:5a:f7:e9: 92:18:fb:f8:26:6d:78:be:5d:16:44:4c:2d:c8:f0:78:1b:15: 3f:16:4f:64:d7:e9:b8:1b:b4:f1:c9:61:aa:23:a5:24:fd:d4: f0:fa:03:9e:8a:d3:69:bf:4f:09:eb:6a:9b:fb:84:aa:7b:f5: 61:04:b7:5d:9a:0b:fd:b2:ba:ff:9d:50:0c:0c:16:b6:48:a8: e0:27:cf:74:a2:93:91:14:86:bc:e5:53:a9:13:ea:83:d5:ed: ce:87:a1:23:f9:c7:58:18:be:f5:f2:63:0e:cd:32:dc:9d:6c: 2c:1f:fe:e4:4f:30:e2:d7:c6:91:b6:d0:93:c8:17:22:bc:ec: 9b:73:fe:8f:5f:9b:64:1d:38:83:e1:c4:e7:7c:1a:b1:54:89: 72:fe:57:85:af:41:ba:7c:38:74:cb:e1:43:78:51:f3:ad:d3: ec:97:b6:62:22:9c:bd:ac:a8:42:97:38:aa:15:b4:0e:67:2b: ff:2f:1f:02 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8gBgGnrWoPqslKSby8Q7CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjYwMTAyMDIxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDhiMmQ1ZDM5ZWIwZWM0ZjUzZTBlYzM4YjZkMzYxYjA3OWE2MjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6FXp2YTGAa/FD8kk09Jv5HP5ZDYV 93/FctWpmpmggZRV3NKEwU1WpBcvQm5vc4SSxq5wGN3KPqGrX/2h9iS/9KwOKlxD A4HMxpkOYvautAFr2rx1PBPaFrfoD0xuTtwQEB+Eo1tliAdGrAZBjZ9B6ZiTuOcK ELHHztQTKIkdXQgQY2z1g2eS/8Ddn81IIInL1TOt9JVSyTUUDI94jZoYH+B32O0x stA2RrjGbjuHJTtj1e7Uvka6NdUkscEhTwmr9Hr9MQEOf+9SNoEjxlPTQVVuXD4B GqwkKdjkmQ/t+97BUavgZsHzImxCY52XdXCkBzYqO2jvk2kMTLexFfRu7QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPSLLV056w7E9T4Ow4ttNhsHmmIJMB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvOUlzdFhUbnJEc1QxUGc3RGkyMDJHd2VhWWdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg94A/0R MA0GCSqGSIb3DQEBCwUAA4IBAQAd+Xos4e+O+3ehj10A2bmt7SQ12K943VvkP1Zh KW6UWLN7fxwob6vlUmeedRmZKgv2AjehLn5ps7mIGY0CGW/BMpP5BuBa9+mSGPv4 Jm14vl0WREwtyPB4GxU/Fk9k1+m4G7TxyWGqI6Uk/dTw+gOeitNpv08J62qb+4Sq e/VhBLddmgv9srr/nVAMDBa2SKjgJ890opORFIa85VOpE+qD1e3Oh6Ej+cdYGL71 8mMOzTLcnWwsH/7kTzDi18aRttCTyBcivOybc/6PX5tkHTiD4cTnfBqxVIly/leF r0G6fDh0y+FDeFHzrdPsl7ZiIpy9rKhClziqFbQOZyv/Lx8C -----END CERTIFICATE-----Generated at Wed Jan 21 16:58:22 2026 by rpki-client