This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/183182-430b-4d68-9149-3513992ebea9/1/ta9-hmsXDdcT5Pp4Y9mCbC034Go.roa File: ta9-hmsXDdcT5Pp4Y9mCbC034Go.roa (raw, json) Hash identifier: 0QadywFAHc4SL15ht4ZbxaN0Z0JFWJUhVv2d5xulTUY= Subject key identifier: B5:AF:7E:86:6B:17:0D:D7:13:E4:FA:78:63:D9:82:6C:2D:37:E0:6A Certificate issuer: /CN=156f67d500ca96a48d0e4b6a47c41b233b7466bd Certificate serial: 019C22EA114F7E0DCFBEBE895659760DE0F7 Authority key identifier: 15:6F:67:D5:00:CA:96:A4:8D:0E:4B:6A:47:C4:1B:23:3B:74:66:BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FW9n1QDKlqSNDktqR8QbIzt0Zr0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/183182-430b-4d68-9149-3513992ebea9/1/ta9-hmsXDdcT5Pp4Y9mCbC034Go.roa Signing time: Tue 03 Feb 2026 09:51:31 +0000 ROA not before: Tue 03 Feb 2026 09:51:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211593 IP address blocks: 2a0b:b600:3c05::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/183182-430b-4d68-9149-3513992ebea9/1/FW9n1QDKlqSNDktqR8QbIzt0Zr0.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/183182-430b-4d68-9149-3513992ebea9/1/FW9n1QDKlqSNDktqR8QbIzt0Zr0.mft rsync://rpki.ripe.net/repository/DEFAULT/FW9n1QDKlqSNDktqR8QbIzt0Zr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:22:ea:11:4f:7e:0d:cf:be:be:89:56:59:76:0d:e0:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=156f67d500ca96a48d0e4b6a47c41b233b7466bd Validity Not Before: Feb 3 09:51:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5af7e866b170dd713e4fa7863d9826c2d37e06a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:cf:cf:72:3d:9a:c3:7c:0a:31:e0:5b:1f:d4: f4:6d:89:55:a1:f7:2f:f9:15:4d:67:57:3c:16:c1: a2:0e:d5:e9:1c:d2:c6:36:d3:3b:20:ea:75:54:fa: 32:38:b3:07:a0:2d:f8:c6:e2:d3:db:fd:47:6d:3d: 7f:fe:da:0d:63:b8:69:04:48:f7:9c:8f:c9:72:83: 73:90:10:75:93:56:dc:81:ab:e1:1e:81:18:38:5d: cc:89:48:95:81:70:73:ae:0b:6d:ec:6b:8e:eb:b0: 38:2d:6e:15:ba:8d:a9:fe:f5:1b:f8:6b:dd:f0:d1: a1:94:eb:b6:de:cb:0d:50:2b:93:12:77:de:c6:70: c9:ee:d4:3a:45:ef:70:54:cc:3b:ef:56:f8:85:01: 96:fb:da:86:bc:ef:14:c2:27:57:c9:7e:6b:10:cb: a8:72:6c:3c:7f:57:75:03:8e:2b:d6:e6:ea:39:28: 20:1c:88:de:5c:c2:d8:04:85:93:4f:35:bd:8c:1e: 16:ff:48:9e:6d:6d:2a:03:8a:51:c3:e8:83:d1:c6: 2b:14:e8:8e:6c:8a:ce:32:c2:96:65:37:2e:d3:6d: 07:13:19:12:82:88:a8:88:39:f4:2c:28:ee:21:5a: c2:3d:b4:60:f1:8d:44:04:35:7f:0c:58:d8:65:f1: ac:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:AF:7E:86:6B:17:0D:D7:13:E4:FA:78:63:D9:82:6C:2D:37:E0:6A X509v3 Authority Key Identifier: keyid:15:6F:67:D5:00:CA:96:A4:8D:0E:4B:6A:47:C4:1B:23:3B:74:66:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FW9n1QDKlqSNDktqR8QbIzt0Zr0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/183182-430b-4d68-9149-3513992ebea9/1/ta9-hmsXDdcT5Pp4Y9mCbC034Go.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/183182-430b-4d68-9149-3513992ebea9/1/FW9n1QDKlqSNDktqR8QbIzt0Zr0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:b600:3c05::/48 Signature Algorithm: sha256WithRSAEncryption 33:76:9a:8e:27:e2:45:34:16:de:b0:a8:d6:dd:a7:69:95:fa: a7:6f:d1:b5:b5:31:bc:44:74:0b:60:6e:36:09:8f:63:f6:6c: a7:05:d3:41:8c:7a:95:05:e7:43:f1:55:fd:85:5c:0f:25:ae: 5d:b6:4a:b0:8e:a1:c3:e8:6a:14:c1:e7:e9:3e:a5:40:04:08: 9a:5e:7c:4c:7b:78:b6:2f:86:c3:69:ce:cf:62:1a:ae:cf:00: 42:19:61:f4:44:ef:8f:8b:d1:50:00:47:e6:c2:80:3a:91:df: 9e:21:c2:c6:85:28:a9:08:97:41:fe:9b:ba:cb:4b:86:7d:39: f0:70:dc:fd:16:2f:4f:73:c2:46:cd:9d:5b:84:93:ef:6a:aa: b3:c9:12:1b:49:be:1e:8a:cf:13:cd:d4:d5:f2:a6:55:a7:2a: f4:e5:ac:a3:13:01:d8:1d:cd:94:1c:9a:ad:4c:28:bb:53:a9: db:b4:8c:71:c1:1e:51:95:bd:15:1e:08:e0:30:d8:a8:bf:a9: f0:fa:4f:5a:47:4f:70:6e:ef:8e:f2:e2:76:74:bd:dc:55:6e: 50:61:c2:4f:ef:31:9b:ec:84:98:26:25:7f:6d:2b:40:15:e7: 12:14:53:78:b6:61:d1:45:3c:7a:1e:93:8a:44:c4:b6:0d:4b: e3:07:3f:59 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZwi6hFPfg3Pvr6JVll2DeD3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1NmY2N2Q1MDBjYTk2YTQ4ZDBlNGI2YTQ3YzQxYjIzM2I3 NDY2YmQwHhcNMjYwMjAzMDk1MTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNWFmN2U4NjZiMTcwZGQ3MTNlNGZhNzg2M2Q5ODI2YzJkMzdlMDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8/Pcj2aw3wKMeBbH9T0bYlVofcv +RVNZ1c8FsGiDtXpHNLGNtM7IOp1VPoyOLMHoC34xuLT2/1HbT1//toNY7hpBEj3 nI/JcoNzkBB1k1bcgavhHoEYOF3MiUiVgXBzrgtt7GuO67A4LW4Vuo2p/vUb+Gvd 8NGhlOu23ssNUCuTEnfexnDJ7tQ6Re9wVMw771b4hQGW+9qGvO8UwidXyX5rEMuo cmw8f1d1A44r1ubqOSggHIjeXMLYBIWTTzW9jB4W/0iebW0qA4pRw+iD0cYrFOiO bIrOMsKWZTcu020HExkSgoioiDn0LCjuIVrCPbRg8Y1EBDV/DFjYZfGsDQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLWvfoZrFw3XE+T6eGPZgmwtN+BqMB8GA1UdIwQY MBaAFBVvZ9UAypakjQ5LakfEGyM7dGa9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlc5bjFRREtscVNORGt0cVI4UWJJenQwWnIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xODMxODItNDMwYi00ZDY4LTkxNDkt MzUxMzk5MmViZWE5LzEvdGE5LWhtc1hEZGNUNVBwNFk5bUNiQzAzNEdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xODMxODItNDMwYi00ZDY4LTkxNDktMzUxMzk5MmViZWE5 LzEvRlc5bjFRREtscVNORGt0cVI4UWJJenQwWnIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgu2ADwF MA0GCSqGSIb3DQEBCwUAA4IBAQAzdpqOJ+JFNBbesKjW3adplfqnb9G1tTG8RHQL YG42CY9j9mynBdNBjHqVBedD8VX9hVwPJa5dtkqwjqHD6GoUwefpPqVABAiaXnxM e3i2L4bDac7PYhquzwBCGWH0RO+Pi9FQAEfmwoA6kd+eIcLGhSipCJdB/pu6y0uG fTnwcNz9Fi9Pc8JGzZ1bhJPvaqqzyRIbSb4eis8TzdTV8qZVpyr05ayjEwHYHc2U HJqtTCi7U6nbtIxxwR5Rlb0VHgjgMNiov6nw+k9aR09wbu+O8uJ2dL3cVW5QYcJP 7zGb7ISYJiV/bStAFecSFFN4tmHRRTx6HpOKRMS2DUvjBz9Z -----END CERTIFICATE-----Generated at Mon Feb 9 19:38:44 2026 by rpki-client