This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/9Gw91riyJOvWdO1UGfwpGVU9DEE.roa File: 9Gw91riyJOvWdO1UGfwpGVU9DEE.roa (raw, json) Hash identifier: Ly1IL/BVXWgH9KBecBDNaAQzuSy9DkifByJn+f8EHH8= Subject key identifier: F4:6C:3D:D6:B8:B2:24:EB:D6:74:ED:54:19:FC:29:19:55:3D:0C:41 Certificate issuer: /CN=2874e46bf636ea63e5d12362f551b80b27714780 Certificate serial: 019B7FF2449431DBAAC901CDBEF66D35759F Authority key identifier: 28:74:E4:6B:F6:36:EA:63:E5:D1:23:62:F5:51:B8:0B:27:71:47:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/9Gw91riyJOvWdO1UGfwpGVU9DEE.roa Signing time: Fri 02 Jan 2026 18:22:22 +0000 ROA not before: Fri 02 Jan 2026 18:22:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203871 IP address blocks: 2a00:4cc6::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.mft rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:44:94:31:db:aa:c9:01:cd:be:f6:6d:35:75:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2874e46bf636ea63e5d12362f551b80b27714780 Validity Not Before: Jan 2 18:22:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f46c3dd6b8b224ebd674ed5419fc2919553d0c41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:78:ca:06:f3:59:fd:9e:f6:07:95:45:47:6f: d0:ad:0d:ae:bf:56:12:48:a8:2e:8e:29:1c:80:a3: 82:87:4d:3c:d9:ad:de:b0:b4:f7:8e:e7:6a:eb:6f: b4:39:d5:1b:e7:1a:bf:f4:2f:83:c2:ec:43:ae:6f: 1f:73:47:7b:03:ac:3f:44:2d:cc:4e:63:dd:ed:be: da:8f:25:c5:5c:10:12:bd:fc:88:74:86:26:ad:3a: 75:8e:9b:86:d1:0b:f6:54:1f:ac:20:26:f3:d5:f3: 85:8c:7e:b3:a0:5a:1d:5a:06:eb:0e:02:d8:67:ad: 15:6c:a2:d1:97:6b:1a:c5:8e:86:55:5d:e4:7c:6f: ee:9d:99:83:1e:bf:bf:d7:1c:5d:11:7c:56:58:a1: 79:56:02:e9:a1:8c:ac:d7:b7:8c:86:ae:e8:29:38: d3:0e:aa:ec:68:55:34:cb:36:50:d9:e3:81:06:28: 07:af:2b:b7:d3:0d:73:22:b3:87:79:75:86:87:65: f4:e4:a9:8a:6d:85:6f:b2:94:3d:17:ac:49:ec:d0: 04:2b:3e:02:ad:bd:76:f3:65:cb:b9:97:22:09:db: 3c:50:ee:b8:17:51:f1:75:b9:19:d7:79:4e:04:02: d8:1e:b3:4a:77:dd:89:5b:15:e0:dd:59:9b:0b:44: 3d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:6C:3D:D6:B8:B2:24:EB:D6:74:ED:54:19:FC:29:19:55:3D:0C:41 X509v3 Authority Key Identifier: keyid:28:74:E4:6B:F6:36:EA:63:E5:D1:23:62:F5:51:B8:0B:27:71:47:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/9Gw91riyJOvWdO1UGfwpGVU9DEE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:4cc6::/32 Signature Algorithm: sha256WithRSAEncryption 38:8b:92:03:dc:62:5a:8e:b0:cf:61:15:30:14:24:0f:bd:a3: 6d:de:64:66:ff:b1:be:69:2d:9b:c2:de:f9:44:d2:af:5f:ef: e5:6f:53:31:27:d3:8e:3f:52:d1:de:5c:0d:97:2a:b5:b4:4a: 51:69:4f:c1:18:4c:da:1b:f0:59:4a:a7:69:de:66:ae:2a:66: df:71:b8:75:9c:e0:ab:3e:b7:0f:98:72:6c:d8:3d:5f:a9:b8: 95:56:94:d8:cd:08:9e:2c:be:88:95:a1:c0:c2:d0:6b:5d:89: e0:22:1c:cc:f1:da:57:d9:59:37:7d:37:b5:3d:ce:8f:7a:f3: 27:47:cd:91:fc:b9:36:c2:1a:8e:5b:43:61:83:ee:26:61:9f: 38:5e:ee:4c:13:87:0a:c4:f8:4e:fd:c9:43:15:ed:c5:62:db: 42:d3:5d:98:5c:6f:6b:5d:38:99:fe:ea:10:a8:0b:17:14:e3: 36:0b:98:36:19:1a:d8:01:9d:e3:8c:00:66:47:e3:91:2f:aa: fa:30:ef:32:97:a4:cf:22:c7:8f:8d:fd:67:25:f4:1c:f4:ea: d0:79:40:0d:a0:3a:f6:cf:f2:fe:cc:80:04:fa:ff:ee:8d:5c: b3:da:f1:6a:9d:dd:4e:67:b0:99:da:d2:f3:63:69:3e:82:3b: 0b:5a:fe:64 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/8kSUMduqyQHNvvZtNXWfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4NzRlNDZiZjYzNmVhNjNlNWQxMjM2MmY1NTFiODBiMjc3 MTQ3ODAwHhcNMjYwMTAyMTgyMjIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDZjM2RkNmI4YjIyNGViZDY3NGVkNTQxOWZjMjkxOTU1M2QwYzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3jKBvNZ/Z72B5VFR2/QrQ2uv1YS SKgujikcgKOCh0082a3esLT3judq62+0OdUb5xq/9C+DwuxDrm8fc0d7A6w/RC3M TmPd7b7ajyXFXBASvfyIdIYmrTp1jpuG0Qv2VB+sICbz1fOFjH6zoFodWgbrDgLY Z60VbKLRl2saxY6GVV3kfG/unZmDHr+/1xxdEXxWWKF5VgLpoYys17eMhq7oKTjT DqrsaFU0yzZQ2eOBBigHryu30w1zIrOHeXWGh2X05KmKbYVvspQ9F6xJ7NAEKz4C rb1282XLuZciCds8UO64F1HxdbkZ13lOBALYHrNKd92JWxXg3VmbC0Q9wwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPRsPda4siTr1nTtVBn8KRlVPQxBMB8GA1UdIwQY MBaAFCh05Gv2Nupj5dEjYvVRuAsncUeAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0hUa2FfWTI2bVBsMFNOaTlWRzRDeWR4UjRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9lZGRjMDUtNDAyZC00ZGE3LTk3ZWYt YzEwZGE2YWFjMWIxLzEvOUd3OTFyaXlKT3ZXZE8xVUdmd3BHVlU5REVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9lZGRjMDUtNDAyZC00ZGE3LTk3ZWYtYzEwZGE2YWFjMWIx LzEvS0hUa2FfWTI2bVBsMFNOaTlWRzRDeWR4UjRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgBMxjAN BgkqhkiG9w0BAQsFAAOCAQEAOIuSA9xiWo6wz2EVMBQkD72jbd5kZv+xvmktm8Le +UTSr1/v5W9TMSfTjj9S0d5cDZcqtbRKUWlPwRhM2hvwWUqnad5mripm33G4dZzg qz63D5hybNg9X6m4lVaU2M0Iniy+iJWhwMLQa12J4CIczPHaV9lZN303tT3Oj3rz J0fNkfy5NsIajltDYYPuJmGfOF7uTBOHCsT4Tv3JQxXtxWLbQtNdmFxva104mf7q EKgLFxTjNguYNhka2AGd44wAZkfjkS+q+jDvMpekzyLHj439ZyX0HPTq0HlADaA6 9s/y/syABPr/7o1cs9rxap3dTmewmdrS82NpPoI7C1r+ZA== -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:35 2026 by rpki-client