This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/9KLhgHdDNsZBBUFEIyheUzLt-c0.roa File: 9KLhgHdDNsZBBUFEIyheUzLt-c0.roa (raw, json) Hash identifier: c+1HpuSdzLNeAztTtHz4t/e6e0WWME4OFHOVd3MSwEs= Subject key identifier: F4:A2:E1:80:77:43:36:C6:41:05:41:44:23:28:5E:53:32:ED:F9:CD Certificate issuer: /CN=c8e90b172f88be21bb99d573fd75b27f5bf745c2 Certificate serial: 019B7F8500AC580A956DF61579405F7659AB Authority key identifier: C8:E9:0B:17:2F:88:BE:21:BB:99:D5:73:FD:75:B2:7F:5B:F7:45:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/9KLhgHdDNsZBBUFEIyheUzLt-c0.roa Signing time: Fri 02 Jan 2026 16:23:01 +0000 ROA not before: Fri 02 Jan 2026 16:23:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212002 IP address blocks: 2001:67c:229c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:00:ac:58:0a:95:6d:f6:15:79:40:5f:76:59:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8e90b172f88be21bb99d573fd75b27f5bf745c2 Validity Not Before: Jan 2 16:23:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4a2e180774336c64105414423285e5332edf9cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f1:8d:29:b0:6a:51:6e:67:1b:92:ea:21:ce: 9d:25:6f:51:83:52:0d:ac:94:c9:3a:cf:e6:80:1c: 76:41:86:f8:d6:6f:43:c2:db:ef:f7:60:9f:ca:a7: 88:4c:59:d2:08:32:bb:2f:5b:e4:68:b2:43:3b:cf: 46:63:cd:e0:35:bd:50:00:4a:d4:e3:28:26:e0:8e: db:77:b3:9d:ec:d7:78:e0:35:79:7e:78:02:26:da: d2:d0:23:95:45:66:74:a4:11:5b:36:c2:d7:d3:66: 00:e6:17:be:73:1c:1b:3e:85:cf:0f:8c:49:23:b0: 95:04:3d:c6:39:2e:e4:fb:65:31:34:da:3e:ba:b0: fd:ba:b5:58:19:92:d9:e3:bf:29:d9:db:12:ac:ad: 9f:0a:08:f6:b8:f6:24:c2:47:6f:c5:cd:00:18:67: 4b:ca:27:50:1f:48:ba:c7:86:12:4c:ea:df:ee:b1: 6d:c4:5a:3b:95:38:05:87:c8:43:2e:24:e9:19:27: db:50:02:f2:db:40:2e:2b:1d:50:62:f5:2d:de:04: 25:03:6f:71:86:81:37:fc:84:fa:71:87:f8:02:7c: ba:e7:a8:cb:b6:63:da:5d:87:68:4c:3d:25:f2:f8: c9:87:d1:35:39:dd:80:44:f6:b1:c5:57:f0:40:bd: 60:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:A2:E1:80:77:43:36:C6:41:05:41:44:23:28:5E:53:32:ED:F9:CD X509v3 Authority Key Identifier: keyid:C8:E9:0B:17:2F:88:BE:21:BB:99:D5:73:FD:75:B2:7F:5B:F7:45:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/9KLhgHdDNsZBBUFEIyheUzLt-c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:229c::/48 Signature Algorithm: sha256WithRSAEncryption 00:96:65:e6:92:b0:e6:53:2e:b9:b1:d1:0d:50:4a:7e:19:76: a6:d2:5b:3f:f6:28:17:18:88:42:59:38:d2:ff:94:57:a7:74: c2:b2:37:db:ee:05:c0:e3:f7:a0:6e:5f:2c:61:fe:28:c1:7c: d4:20:d3:a6:a6:8f:ee:89:0c:6b:a5:2c:0f:b0:1f:77:35:bc: c7:74:82:f6:6e:af:f7:0a:e0:37:eb:5c:d0:9d:0f:2c:88:3f: bd:cb:de:b6:08:8b:ed:03:bd:f8:20:84:02:8c:65:3a:61:e8: cf:73:b3:42:d6:79:5d:2d:b4:f6:44:d6:56:84:c8:6d:27:59: ba:bf:3a:3f:c9:8f:b0:2f:11:00:8d:44:d7:7a:86:3c:21:be: b7:ab:92:90:0f:cd:ce:51:27:cc:d8:a4:8f:f5:16:d8:9e:93: f9:ba:78:93:93:89:b4:79:69:70:19:60:50:1a:d0:6e:33:de: 01:48:07:b1:65:b4:39:8f:e5:7a:12:88:16:9c:5c:42:fc:2b: 75:c1:fe:62:ae:8b:d7:1a:95:da:a4:70:07:da:e6:87:25:03: 6a:8a:94:cf:de:bc:d8:9d:fe:71:8f:94:39:53:f8:a3:e0:da: 17:d1:b2:a5:4e:d4:39:cd:56:e8:3c:5b:fe:d4:5c:6b:29:fe: 02:4a:78:04 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/hQCsWAqVbfYVeUBfdlmrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4ZTkwYjE3MmY4OGJlMjFiYjk5ZDU3M2ZkNzViMjdmNWJm NzQ1YzIwHhcNMjYwMTAyMTYyMzAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNGEyZTE4MDc3NDMzNmM2NDEwNTQxNDQyMzI4NWU1MzMyZWRmOWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPGNKbBqUW5nG5LqIc6dJW9Rg1IN rJTJOs/mgBx2QYb41m9Dwtvv92CfyqeITFnSCDK7L1vkaLJDO89GY83gNb1QAErU 4ygm4I7bd7Od7Nd44DV5fngCJtrS0COVRWZ0pBFbNsLX02YA5he+cxwbPoXPD4xJ I7CVBD3GOS7k+2UxNNo+urD9urVYGZLZ478p2dsSrK2fCgj2uPYkwkdvxc0AGGdL yidQH0i6x4YSTOrf7rFtxFo7lTgFh8hDLiTpGSfbUALy20AuKx1QYvUt3gQlA29x hoE3/IT6cYf4Any656jLtmPaXYdoTD0l8vjJh9E1Od2ARPaxxVfwQL1gywIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPSi4YB3QzbGQQVBRCMoXlMy7fnNMB8GA1UdIwQY MBaAFMjpCxcviL4hu5nVc/11sn9b90XCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveU9rTEZ5LUl2aUc3bWRWel9YV3lmMXYzUmNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wOGM0YTctNGQyYS00ZDFjLThiOGUt NTZjNWQ3NmRkY2Q4LzEvOUtMaGdIZEROc1pCQlVGRUl5aGVVekx0LWMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wOGM0YTctNGQyYS00ZDFjLThiOGUtNTZjNWQ3NmRkY2Q4 LzEveU9rTEZ5LUl2aUc3bWRWel9YV3lmMXYzUmNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCKc MA0GCSqGSIb3DQEBCwUAA4IBAQAAlmXmkrDmUy65sdENUEp+GXam0ls/9igXGIhC WTjS/5RXp3TCsjfb7gXA4/egbl8sYf4owXzUINOmpo/uiQxrpSwPsB93NbzHdIL2 bq/3CuA361zQnQ8siD+9y962CIvtA734IIQCjGU6YejPc7NC1nldLbT2RNZWhMht J1m6vzo/yY+wLxEAjUTXeoY8Ib63q5KQD83OUSfM2KSP9RbYnpP5uniTk4m0eWlw GWBQGtBuM94BSAexZbQ5j+V6EogWnFxC/Ct1wf5irovXGpXapHAH2uaHJQNqipTP 3rzYnf5xj5Q5U/ij4NoX0bKlTtQ5zVboPFv+1FxrKf4CSngE -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:29 2026 by rpki-client