This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/f9oKfNhX89jf9Pvy-Ba5oQaSTUU.roa File: f9oKfNhX89jf9Pvy-Ba5oQaSTUU.roa (raw, json) Hash identifier: pVZsMNdaHsUDa/+umrQSX9j6u35GXdOWv7ti1zKHLtA= Subject key identifier: 7F:DA:0A:7C:D8:57:F3:D8:DF:F4:FB:F2:F8:16:B9:A1:06:92:4D:45 Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Certificate serial: 019B78A37DF5923B070C8E9021C3867C9575 Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/f9oKfNhX89jf9Pvy-Ba5oQaSTUU.roa Signing time: Thu 01 Jan 2026 08:18:59 +0000 ROA not before: Thu 01 Jan 2026 08:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216024 IP address blocks: 2a10:9681::/32 maxlen: 32 2a10:9682::/32 maxlen: 32 2a10:9683::/32 maxlen: 32 2a10:9687::/32 maxlen: 32 2a11:c880::/29 maxlen: 29 2a12:6c40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:7d:f5:92:3b:07:0c:8e:90:21:c3:86:7c:95:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Validity Not Before: Jan 1 08:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7fda0a7cd857f3d8dff4fbf2f816b9a106924d45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:02:b9:80:f8:cf:4f:80:ef:00:d2:78:7b:3f: 66:b9:8f:aa:8f:8f:18:90:24:68:97:ed:96:db:48: 31:7c:bd:bc:6f:6a:fe:2b:3b:82:8d:f2:dc:1e:39: 05:81:35:7a:e7:f1:98:86:86:48:72:9b:b2:41:59: aa:7a:65:a5:f6:a8:5b:3a:5d:41:ff:83:8a:e2:01: b0:3e:db:10:a4:4d:50:7f:60:e0:0f:e8:aa:78:af: d3:ad:ad:5f:6c:7d:2f:74:08:c5:17:12:51:29:ed: 12:f5:89:3d:15:1b:28:0e:8f:62:53:65:97:fe:ad: 23:40:5a:be:d4:8e:29:e8:ad:45:2d:1e:85:c0:5e: e2:cd:6b:b6:43:78:ca:fb:8a:c8:a3:d4:55:d9:78: 3c:77:da:1d:cf:cc:de:97:8a:24:f3:eb:77:61:a1: f7:12:bd:ab:eb:ac:69:a8:a0:17:ca:f6:d3:1d:c3: a8:48:e9:70:64:42:f7:3a:2a:ea:c2:26:dc:9d:d8: 00:f7:02:be:7f:11:cf:be:59:08:78:2c:61:bf:92: 4f:bf:a7:1d:a8:80:bd:3d:5b:19:b3:0c:04:45:70: 26:bb:92:c8:7c:5d:a6:b2:7c:6a:b0:1c:87:56:ac: 9c:6c:e6:ca:12:b1:ba:8c:00:6d:3a:c7:54:92:09: 9f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:DA:0A:7C:D8:57:F3:D8:DF:F4:FB:F2:F8:16:B9:A1:06:92:4D:45 X509v3 Authority Key Identifier: keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/f9oKfNhX89jf9Pvy-Ba5oQaSTUU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:9681::-2a10:9683:ffff:ffff:ffff:ffff:ffff:ffff 2a10:9687::/32 2a11:c880::/29 2a12:6c40::/32 Signature Algorithm: sha256WithRSAEncryption 03:05:59:89:01:b7:ae:7d:1c:e1:28:db:c5:30:67:6e:f0:15: 60:ef:71:af:2d:41:c1:fb:b3:5c:a7:dd:9d:a0:c2:00:d0:7e: 51:52:ae:19:dd:35:81:cd:ae:61:f4:d1:7f:8c:38:08:79:a7: 78:c1:1f:7b:ae:86:9b:ce:1b:4e:86:52:01:1b:a9:da:f6:4f: f8:1e:b1:a1:f6:97:6f:c7:d1:be:f8:ee:b3:99:9b:0c:fc:3e: f8:bb:b5:47:f8:48:e8:58:dc:18:bf:fd:34:72:59:88:32:ac: 56:87:e2:bc:d2:54:f6:69:bb:8a:3c:43:c8:ef:03:87:e4:f8: 7f:94:b0:00:c6:b5:41:da:07:35:d4:c2:bb:77:72:3b:1a:ca: 69:9e:91:d2:1b:0c:31:65:1d:04:21:d7:ca:c9:24:a4:ce:c6: 6b:f0:c5:15:62:77:60:16:a6:27:11:8d:4d:8e:93:7a:a6:89: 26:e3:b9:a6:77:f4:07:6e:eb:0e:e3:0a:2d:55:28:28:90:06: dd:2e:d4:63:f8:15:45:f2:6d:3a:1a:f7:69:66:4a:40:49:16: 36:eb:5b:5c:cc:90:55:be:b5:c2:64:35:4a:fc:bb:ee:24:27: be:32:c5:2c:81:2f:82:03:4a:e5:56:f0:fd:c1:53:7d:f0:06: 84:e9:89:61 -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgISAZt4o331kjsHDI6QIcOGfJV1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMGZmOGFhZjc0NTMxMTQxNDcwMjhkNTRhZTFjNjkzYThh MTQ3YmMwHhcNMjYwMTAxMDgxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZmRhMGE3Y2Q4NTdmM2Q4ZGZmNGZiZjJmODE2YjlhMTA2OTI0ZDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQK5gPjPT4DvANJ4ez9muY+qj48Y kCRol+2W20gxfL28b2r+KzuCjfLcHjkFgTV65/GYhoZIcpuyQVmqemWl9qhbOl1B /4OK4gGwPtsQpE1Qf2DgD+iqeK/Tra1fbH0vdAjFFxJRKe0S9Yk9FRsoDo9iU2WX /q0jQFq+1I4p6K1FLR6FwF7izWu2Q3jK+4rIo9RV2Xg8d9odz8zel4ok8+t3YaH3 Er2r66xpqKAXyvbTHcOoSOlwZEL3OirqwibcndgA9wK+fxHPvlkIeCxhv5JPv6cd qIC9PVsZswwERXAmu5LIfF2msnxqsByHVqycbObKErG6jABtOsdUkgmfcQIDAQAB o4ICKDCCAiQwHQYDVR0OBBYEFH/aCnzYV/PY3/T78vgWuaEGkk1FMB8GA1UdIwQY MBaAFF4P+Kr3RTEUFHAo1UrhxpOooUe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEt ZDg3MjEzNzU2NDRhLzEvZjlvS2ZOaFg4OWpmOVB2eS1CYTVvUWFTVFVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEtZDg3MjEzNzU2NDRh LzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTArBAIAAjAlMA4DBQAqEJaB AwUCKhCWgAMFACoQlocDBQMqEciAAwUAKhJsQDANBgkqhkiG9w0BAQsFAAOCAQEA AwVZiQG3rn0c4SjbxTBnbvAVYO9xry1BwfuzXKfdnaDCANB+UVKuGd01gc2uYfTR f4w4CHmneMEfe66Gm84bToZSARup2vZP+B6xofaXb8fRvvjus5mbDPw++Lu1R/hI 6FjcGL/9NHJZiDKsVofivNJU9mm7ijxDyO8Dh+T4f5SwAMa1QdoHNdTCu3dyOxrK aZ6R0hsMMWUdBCHXyskkpM7Ga/DFFWJ3YBamJxGNTY6TeqaJJuO5pnf0B27rDuMK LVUoKJAG3S7UY/gVRfJtOhr3aWZKQEkWNutbXMyQVb61wmQ1Svy77iQnvjLFLIEv ggNK5Vbw/cFTffAGhOmJYQ== -----END CERTIFICATE-----Generated at Sun Jan 25 16:27:31 2026 by rpki-client