This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/9agfB9dVL-Kd6aIq8hf6VJQFr-c.roa File: 9agfB9dVL-Kd6aIq8hf6VJQFr-c.roa (raw, json) Hash identifier: 0rqJmTL+IHF4zuPR+5EuCzywtP32Y0FzvoOjmasnRjI= Subject key identifier: F5:A8:1F:07:D7:55:2F:E2:9D:E9:A2:2A:F2:17:FA:54:94:05:AF:E7 Certificate issuer: /CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212 Certificate serial: 019B7C7F39F9DAEF7256F2BEEFDDBDFE0A78 Authority key identifier: EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/9agfB9dVL-Kd6aIq8hf6VJQFr-c.roa Signing time: Fri 02 Jan 2026 02:17:51 +0000 ROA not before: Fri 02 Jan 2026 02:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197942 IP address blocks: 2001:678:538::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:39:f9:da:ef:72:56:f2:be:ef:dd:bd:fe:0a:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212 Validity Not Before: Jan 2 02:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5a81f07d7552fe29de9a22af217fa549405afe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:88:d8:7e:4f:69:be:d6:91:75:9a:8a:6a:04: c6:30:74:c7:b7:ad:8b:28:66:34:e4:7f:e8:bf:71: f1:5e:99:d6:c4:df:a0:35:f1:86:ac:ba:91:3d:98: 46:07:19:44:ca:f3:c5:eb:99:23:9a:36:91:58:0a: 17:68:01:79:c9:d0:71:fd:a0:62:9c:2f:94:1b:4a: 6a:70:ab:1b:2e:84:f5:4c:60:72:45:94:29:1d:42: 25:9a:f1:b3:97:0c:c3:dd:bf:da:77:69:fa:7b:f8: 8b:f2:6b:f8:f6:ac:9d:2a:b6:22:cf:30:2a:9d:ac: d7:d4:cb:40:0e:1c:86:e2:9f:9f:65:d7:83:59:6b: 91:f8:a0:23:1e:c9:8f:38:4e:f0:63:d7:a6:b7:a2: 20:60:e0:be:ec:57:e8:07:19:2b:5c:5f:b8:ae:bf: 87:44:82:4c:bd:4f:48:7b:c8:07:20:c0:73:5a:8e: d5:95:48:71:3c:b2:03:e4:d2:d9:1a:55:d1:95:24: 3a:8e:f0:f2:4c:87:9a:c3:27:46:a5:99:52:5c:17: c0:40:50:4d:07:f0:f2:18:2a:0f:64:f2:74:45:1d: 44:42:1d:cd:e0:58:6f:f7:f7:ac:1f:6f:09:44:70: e1:3c:3c:89:d2:04:1d:1f:17:8c:57:b1:30:33:46: 3e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:A8:1F:07:D7:55:2F:E2:9D:E9:A2:2A:F2:17:FA:54:94:05:AF:E7 X509v3 Authority Key Identifier: keyid:EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/9agfB9dVL-Kd6aIq8hf6VJQFr-c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:538::/48 Signature Algorithm: sha256WithRSAEncryption 48:f4:c6:bf:4e:bc:7a:55:1d:ac:4a:5d:8e:99:d9:ed:64:6e: 87:a7:2f:12:d4:66:3f:96:6a:79:dd:34:9a:6f:eb:0d:4e:56: 07:fa:de:41:f8:25:c0:14:75:b4:4f:90:89:93:b0:8a:da:98: d6:86:5e:ee:58:ff:08:ec:cc:17:ca:f8:7c:a3:58:55:a7:a8: 1b:57:e5:ea:cc:89:ec:85:62:66:2b:3c:e7:6e:e6:3e:9e:47: 8b:38:37:36:97:fc:c8:6c:dc:7c:d5:77:00:7d:7e:69:77:8d: e5:f7:6e:10:fb:c5:7a:0c:6f:ae:73:79:52:e9:75:fe:83:6c: 3b:17:2d:d6:3d:10:d4:01:49:f4:35:3c:b5:7c:58:67:f5:ae: be:05:fd:2e:47:7b:e9:51:3f:44:54:b3:dd:52:84:e9:88:be: aa:27:79:9d:b1:e1:7a:e1:97:95:1c:a3:5d:0b:aa:e0:eb:9d: 14:5c:47:0e:13:cf:2e:c8:a9:f4:f8:74:56:5b:03:42:13:75: 96:8b:6e:60:b1:78:55:8b:45:0c:2e:0e:f3:f6:b1:54:ba:a4: 3a:a8:b6:ba:49:95:97:47:e7:1b:4f:80:09:f1:b1:33:f9:00: e1:0f:2b:15:1a:af:c4:d4:8c:89:48:84:3e:c7:5a:cb:56:a3: eb:7f:65:29 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8fzn52u9yVvK+7929/gp4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMzk2N2FkMGE0NThiODI4MjllZTllMmNjZDZhZTk2MzFk NTQyMTIwHhcNMjYwMTAyMDIxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNWE4MWYwN2Q3NTUyZmUyOWRlOWEyMmFmMjE3ZmE1NDk0MDVhZmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ojYfk9pvtaRdZqKagTGMHTHt62L KGY05H/ov3HxXpnWxN+gNfGGrLqRPZhGBxlEyvPF65kjmjaRWAoXaAF5ydBx/aBi nC+UG0pqcKsbLoT1TGByRZQpHUIlmvGzlwzD3b/ad2n6e/iL8mv49qydKrYizzAq nazX1MtADhyG4p+fZdeDWWuR+KAjHsmPOE7wY9emt6IgYOC+7FfoBxkrXF+4rr+H RIJMvU9Ie8gHIMBzWo7VlUhxPLID5NLZGlXRlSQ6jvDyTIeawydGpZlSXBfAQFBN B/DyGCoPZPJ0RR1EQh3N4Fhv9/esH28JRHDhPDyJ0gQdHxeMV7EwM0Y+bwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPWoHwfXVS/inemiKvIX+lSUBa/nMB8GA1UdIwQY MBaAFO45Z60KRYuCgp7p4szWrpYx1UISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2psbnJRcEZpNEtDbnVuaXpOYXVsakhWUWhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC82NmVjNDMtMGE0OS00M2FiLWFkOWQt MmYzMjgxNmU3NzYwLzEvOWFnZkI5ZFZMLUtkNmFJcThoZjZWSlFGci1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC82NmVjNDMtMGE0OS00M2FiLWFkOWQtMmYzMjgxNmU3NzYw LzEvN2psbnJRcEZpNEtDbnVuaXpOYXVsakhWUWhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAU4 MA0GCSqGSIb3DQEBCwUAA4IBAQBI9Ma/Trx6VR2sSl2OmdntZG6Hpy8S1GY/lmp5 3TSab+sNTlYH+t5B+CXAFHW0T5CJk7CK2pjWhl7uWP8I7MwXyvh8o1hVp6gbV+Xq zInshWJmKzznbuY+nkeLODc2l/zIbNx81XcAfX5pd43l924Q+8V6DG+uc3lS6XX+ g2w7Fy3WPRDUAUn0NTy1fFhn9a6+Bf0uR3vpUT9EVLPdUoTpiL6qJ3mdseF64ZeV HKNdC6rg650UXEcOE88uyKn0+HRWWwNCE3WWi25gsXhVi0UMLg7z9rFUuqQ6qLa6 SZWXR+cbT4AJ8bEz+QDhDysVGq/E1IyJSIQ+x1rLVqPrf2Up -----END CERTIFICATE-----Generated at Mon Feb 2 08:07:40 2026 by rpki-client