This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/r9NWEPI6u6L0HITxoVcmXnXadCs.roa File: r9NWEPI6u6L0HITxoVcmXnXadCs.roa (raw, json) Hash identifier: os9y7CavhWu63QlaCtuG1FYwA+ohXqqwFQrtt1Hmj8Y= Subject key identifier: AF:D3:56:10:F2:3A:BB:A2:F4:1C:84:F1:A1:57:26:5E:75:DA:74:2B Certificate issuer: /CN=7e6e2e6966e06ab25ca0e1da66e1e3d64248b3a1 Certificate serial: 019B7C80BFDC916B5E1CAEA274402A5F0E14 Authority key identifier: 7E:6E:2E:69:66:E0:6A:B2:5C:A0:E1:DA:66:E1:E3:D6:42:48:B3:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/r9NWEPI6u6L0HITxoVcmXnXadCs.roa Signing time: Fri 02 Jan 2026 02:19:31 +0000 ROA not before: Fri 02 Jan 2026 02:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212540 IP address blocks: 2a14:9b80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:bf:dc:91:6b:5e:1c:ae:a2:74:40:2a:5f:0e:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e6e2e6966e06ab25ca0e1da66e1e3d64248b3a1 Validity Not Before: Jan 2 02:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=afd35610f23abba2f41c84f1a157265e75da742b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:33:e4:47:0f:a3:29:b7:4e:41:7a:5d:47:8d: 5e:1a:d4:e2:b1:2a:1c:c6:a7:cb:fb:7d:0a:c2:6a: 26:76:ec:ef:2b:bf:ed:a6:4e:28:a1:aa:e6:ca:cd: dc:e6:c9:d8:7e:17:7b:95:f9:31:42:96:9b:d1:e5: bb:8d:a1:87:b0:a8:92:2a:a3:10:d9:2b:16:a5:56: b2:6b:57:86:dd:f0:0f:38:d3:e5:88:7e:66:bc:d0: fd:20:e7:07:46:4c:45:09:92:36:b9:fd:df:c0:3e: 22:14:ed:c9:c4:b1:4a:a9:71:31:b1:e7:1b:a4:ce: 72:4f:e5:be:c5:1d:4c:9b:04:eb:51:f8:08:b1:98: c2:6b:7e:25:23:2d:47:62:83:26:3c:0a:57:52:5f: ca:56:43:0a:19:55:06:cb:35:25:61:95:8c:43:93: 98:ae:ad:4d:78:57:70:99:e9:28:be:ea:63:49:5c: 6f:b6:c9:32:1e:63:d8:9e:12:81:88:6f:a2:26:4e: e1:54:19:37:3d:2c:3b:23:d7:71:60:a6:88:ed:12: ef:26:ee:31:e9:02:6c:f6:5b:1f:ca:b7:48:65:fa: 44:49:4e:d9:ab:62:f0:5c:5a:ae:f0:d2:04:81:57: 43:b0:e8:40:ed:5a:62:2c:89:f7:c3:a2:02:38:f3: 84:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D3:56:10:F2:3A:BB:A2:F4:1C:84:F1:A1:57:26:5E:75:DA:74:2B X509v3 Authority Key Identifier: keyid:7E:6E:2E:69:66:E0:6A:B2:5C:A0:E1:DA:66:E1:E3:D6:42:48:B3:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/r9NWEPI6u6L0HITxoVcmXnXadCs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:9b80::/32 Signature Algorithm: sha256WithRSAEncryption 65:93:56:38:bd:d6:48:e2:44:c3:1c:23:ea:68:b2:c2:f6:11: 25:03:43:75:1e:a8:6e:06:6c:09:e8:29:3a:76:b8:39:7c:22: 4b:3d:65:64:6b:35:7f:8c:f6:b8:bb:c2:32:98:fe:3d:65:ac: 20:fb:d2:73:61:bb:06:b2:eb:33:df:04:b3:43:2b:b3:a9:de: d4:f3:bf:26:21:c3:8a:0f:ac:25:96:09:76:fe:40:ba:20:41: 3e:90:de:49:50:53:fd:fb:c4:7c:fd:80:c2:06:80:a7:ee:8c: 8c:8a:d5:f7:5b:4f:8d:d2:7c:f3:c6:20:08:85:c1:a9:18:ec: f6:aa:11:be:02:0a:a1:bf:14:87:24:65:ba:f0:2a:e4:72:65: 31:ce:ae:69:f1:10:dd:86:e3:f1:1c:6f:94:a2:12:15:1f:4f: fe:b2:c7:c8:fa:71:ab:55:f7:4c:e6:42:91:0e:89:0b:5b:c5: 7b:77:c8:d1:ab:9e:93:6c:43:de:c4:9a:ce:1d:51:fd:65:28: c4:72:d9:bf:e6:86:c7:27:94:b7:92:f4:f6:32:79:38:cc:29: 35:9e:73:0a:57:b3:01:a6:03:84:30:8f:df:05:b2:6b:14:c1: a0:9c:96:36:c0:b4:bc:7a:a6:02:7c:ec:7f:5d:aa:a2:64:49: 93:87:b9:cc -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8gL/ckWteHK6idEAqXw4UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlNmUyZTY5NjZlMDZhYjI1Y2EwZTFkYTY2ZTFlM2Q2NDI0 OGIzYTEwHhcNMjYwMTAyMDIxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmQzNTYxMGYyM2FiYmEyZjQxYzg0ZjFhMTU3MjY1ZTc1ZGE3NDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDPkRw+jKbdOQXpdR41eGtTisSoc xqfL+30KwmomduzvK7/tpk4ooarmys3c5snYfhd7lfkxQpab0eW7jaGHsKiSKqMQ 2SsWpVaya1eG3fAPONPliH5mvND9IOcHRkxFCZI2uf3fwD4iFO3JxLFKqXExsecb pM5yT+W+xR1MmwTrUfgIsZjCa34lIy1HYoMmPApXUl/KVkMKGVUGyzUlYZWMQ5OY rq1NeFdwmekovupjSVxvtskyHmPYnhKBiG+iJk7hVBk3PSw7I9dxYKaI7RLvJu4x 6QJs9lsfyrdIZfpESU7Zq2LwXFqu8NIEgVdDsOhA7VpiLIn3w6ICOPOE3wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFK/TVhDyOrui9ByE8aFXJl512nQrMB8GA1UdIwQY MBaAFH5uLmlm4GqyXKDh2mbh49ZCSLOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZm00dWFXYmdhckpjb09IYVp1SGoxa0pJczZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9hNzUzOGEtNjliZS00ZmJlLTk3ZTEt ODdkOTdlMmFhZGM0LzEvcjlOV0VQSTZ1NkwwSElUeG9WY21YblhhZENzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9hNzUzOGEtNjliZS00ZmJlLTk3ZTEtODdkOTdlMmFhZGM0 LzEvZm00dWFXYmdhckpjb09IYVp1SGoxa0pJczZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhSbgDAN BgkqhkiG9w0BAQsFAAOCAQEAZZNWOL3WSOJEwxwj6miywvYRJQNDdR6obgZsCegp Ona4OXwiSz1lZGs1f4z2uLvCMpj+PWWsIPvSc2G7BrLrM98Es0Mrs6ne1PO/JiHD ig+sJZYJdv5AuiBBPpDeSVBT/fvEfP2AwgaAp+6MjIrV91tPjdJ888YgCIXBqRjs 9qoRvgIKob8UhyRluvAq5HJlMc6uafEQ3Ybj8RxvlKISFR9P/rLHyPpxq1X3TOZC kQ6JC1vFe3fI0auek2xD3sSazh1R/WUoxHLZv+aGxyeUt5L09jJ5OMwpNZ5zClez AaYDhDCP3wWyaxTBoJyWNsC0vHqmAnzsf12qomRJk4e5zA== -----END CERTIFICATE-----Generated at Mon Jan 26 09:22:47 2026 by rpki-client