This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/p9afRUC51SfaJyMaCVZSnQiB2hY.roa File: p9afRUC51SfaJyMaCVZSnQiB2hY.roa (raw, json) Hash identifier: 6VxOCyWy4+A0UX6VtaLP95X/pFp2fxpWhbFoynGWOGE= Subject key identifier: A7:D6:9F:45:40:B9:D5:27:DA:27:23:1A:09:56:52:9D:08:81:DA:16 Certificate issuer: /CN=3bd9fb57f4b0f253f9af858303e6b46a529c194e Certificate serial: 019B7DCA780F72F9D2AE5EE75423F70D274B Authority key identifier: 3B:D9:FB:57:F4:B0:F2:53:F9:AF:85:83:03:E6:B4:6A:52:9C:19:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/p9afRUC51SfaJyMaCVZSnQiB2hY.roa Signing time: Fri 02 Jan 2026 08:19:39 +0000 ROA not before: Fri 02 Jan 2026 08:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212135 IP address blocks: 2001:678:efc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:78:0f:72:f9:d2:ae:5e:e7:54:23:f7:0d:27:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bd9fb57f4b0f253f9af858303e6b46a529c194e Validity Not Before: Jan 2 08:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a7d69f4540b9d527da27231a0956529d0881da16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d0:1d:dd:87:40:8e:8b:b3:c2:30:dd:46:3c: 53:1f:fd:d2:a4:77:c7:ae:fc:3b:5f:1d:0c:fa:a1: cb:13:d0:9a:a6:8a:9f:01:ee:ce:46:3d:a0:62:c3: ac:1c:62:72:a6:d4:dd:03:2b:0e:10:1f:83:9a:4f: 1b:fb:b3:ef:75:c4:7b:d1:b2:dd:3c:b1:91:7c:a8: dc:90:cb:04:49:f8:9f:0b:e3:26:8a:d3:3a:b7:38: 99:3a:2c:48:4a:c0:ed:7d:b2:80:cf:28:a3:0b:b6: ff:74:c4:95:d1:63:d3:a9:64:0c:e1:f3:15:5c:4a: ed:31:8a:9a:36:e0:29:b9:90:77:3b:12:7c:57:07: 61:0e:e1:b9:ec:05:00:be:28:23:d4:cf:f4:8b:7c: 5d:bf:16:44:3d:af:b0:11:f8:e6:e3:a8:3f:b7:e2: 2f:e1:03:7e:7e:b8:51:49:f4:6f:04:9b:d9:9c:ae: 5c:e6:62:88:f9:6d:19:76:c6:55:45:8f:a5:69:eb: 50:cc:39:bb:da:f1:be:e5:f0:52:71:cf:ce:7c:57: d6:94:75:1d:cc:3d:b2:12:d6:fd:07:39:de:15:e5: a8:47:cf:09:53:c6:ff:af:75:52:55:fb:72:b9:f6: f3:05:82:4d:66:5d:9e:1e:42:6c:ff:67:1f:b6:18: c2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:D6:9F:45:40:B9:D5:27:DA:27:23:1A:09:56:52:9D:08:81:DA:16 X509v3 Authority Key Identifier: keyid:3B:D9:FB:57:F4:B0:F2:53:F9:AF:85:83:03:E6:B4:6A:52:9C:19:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/p9afRUC51SfaJyMaCVZSnQiB2hY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:efc::/48 Signature Algorithm: sha256WithRSAEncryption 24:74:fd:b5:de:72:38:ff:e3:0d:13:52:f0:0f:89:bd:b6:44: e2:98:3a:94:1d:e7:6c:3a:76:e9:f3:84:77:f9:b1:0e:5a:99: 2c:31:e5:12:c6:3e:95:dc:fc:30:0d:f8:8b:b6:35:19:7f:ff: a3:40:37:e4:ef:dd:6b:48:93:58:bc:e7:9e:e7:7b:77:62:ae: 52:8f:35:34:a9:9a:01:37:87:39:8c:97:0b:32:de:20:3c:ef: 2f:57:c4:e1:fc:35:26:9c:c6:8e:7e:95:d7:31:0d:50:5c:91: 84:e2:ca:08:2c:c9:f3:3a:47:2a:3d:c9:04:0a:17:70:57:e3: 5d:51:68:9f:ce:5b:3a:3f:b2:e3:2b:01:66:1c:a7:50:df:e5: 56:cf:65:a2:2b:bf:79:92:8c:b3:8d:33:3f:49:8a:3f:4c:4d: 48:ff:59:59:2e:55:6e:56:95:14:f6:a8:eb:28:be:01:27:9f: 40:68:13:3b:be:b0:73:3f:12:50:e1:fc:d8:a6:b6:99:a1:a0: c8:e0:8b:f5:03:aa:04:12:a5:b9:7f:91:c3:84:99:3d:e1:7f: 31:7a:ae:a7:57:de:63:22:46:8b:72:2b:85:10:cf:4b:3c:cb: 5c:b1:a7:6e:78:08:78:a3:2f:a4:b6:5a:50:1f:d0:c8:9f:f3: c5:d0:4f:92 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9yngPcvnSrl7nVCP3DSdLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZDlmYjU3ZjRiMGYyNTNmOWFmODU4MzAzZTZiNDZhNTI5 YzE5NGUwHhcNMjYwMTAyMDgxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2Q2OWY0NTQwYjlkNTI3ZGEyNzIzMWEwOTU2NTI5ZDA4ODFkYTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtAd3YdAjouzwjDdRjxTH/3SpHfH rvw7Xx0M+qHLE9CapoqfAe7ORj2gYsOsHGJyptTdAysOEB+Dmk8b+7PvdcR70bLd PLGRfKjckMsESfifC+MmitM6tziZOixISsDtfbKAzyijC7b/dMSV0WPTqWQM4fMV XErtMYqaNuApuZB3OxJ8VwdhDuG57AUAvigj1M/0i3xdvxZEPa+wEfjm46g/t+Iv 4QN+frhRSfRvBJvZnK5c5mKI+W0ZdsZVRY+laetQzDm72vG+5fBScc/OfFfWlHUd zD2yEtb9BzneFeWoR88JU8b/r3VSVftyufbzBYJNZl2eHkJs/2cfthjCcwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKfWn0VAudUn2icjGglWUp0IgdoWMB8GA1UdIwQY MBaAFDvZ+1f0sPJT+a+FgwPmtGpSnBlOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzluN1ZfU3c4bFA1cjRXREEtYTBhbEtjR1U0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8yMDRjZGYtZjZlNy00ODc0LTk4MDIt NjUwZGQxMzhlNmEyLzEvcDlhZlJVQzUxU2ZhSnlNYUNWWlNuUWlCMmhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8yMDRjZGYtZjZlNy00ODc0LTk4MDItNjUwZGQxMzhlNmEy LzEvTzluN1ZfU3c4bFA1cjRXREEtYTBhbEtjR1U0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA78 MA0GCSqGSIb3DQEBCwUAA4IBAQAkdP213nI4/+MNE1LwD4m9tkTimDqUHedsOnbp 84R3+bEOWpksMeUSxj6V3PwwDfiLtjUZf/+jQDfk791rSJNYvOee53t3Yq5SjzU0 qZoBN4c5jJcLMt4gPO8vV8Th/DUmnMaOfpXXMQ1QXJGE4soILMnzOkcqPckEChdw V+NdUWifzls6P7LjKwFmHKdQ3+VWz2WiK795koyzjTM/SYo/TE1I/1lZLlVuVpUU 9qjrKL4BJ59AaBM7vrBzPxJQ4fzYpraZoaDI4Iv1A6oEEqW5f5HDhJk94X8xeq6n V95jIkaLciuFEM9LPMtcsadueAh4oy+ktlpQH9DIn/PF0E+S -----END CERTIFICATE-----Generated at Mon Feb 9 21:25:36 2026 by rpki-client