This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/9qV0mW2ia-2OR-SkYKC9xwGTJ6w.roa File: 9qV0mW2ia-2OR-SkYKC9xwGTJ6w.roa (raw, json) Hash identifier: SoSvqfnQLKFn05LffsfjlMnv43OqaQmrvJqr1M8+Itw= Subject key identifier: F6:A5:74:99:6D:A2:6B:ED:8E:47:E4:A4:60:A0:BD:C7:01:93:27:AC Certificate issuer: /CN=ef55459645979c413d0bc6f7454f0d36e40e99f9 Certificate serial: 019B7C8057C0F203B7899DB92CAE84364474 Authority key identifier: EF:55:45:96:45:97:9C:41:3D:0B:C6:F7:45:4F:0D:36:E4:0E:99:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/9qV0mW2ia-2OR-SkYKC9xwGTJ6w.roa Signing time: Fri 02 Jan 2026 02:19:04 +0000 ROA not before: Fri 02 Jan 2026 02:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213512 IP address blocks: 2a14:47c0::/32 maxlen: 32 2a14:47c0:fe00::/40 maxlen: 40 2a14:47c0:fe01::/48 maxlen: 48 2a14:47c0:fe02::/48 maxlen: 48 2a14:47c0:fe03::/48 maxlen: 48 2a14:47c0:fe04::/48 maxlen: 48 2a14:47c0:ff00::/40 maxlen: 40 2a14:47c0:fffe::/48 maxlen: 48 2a14:47c0:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.crl rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:57:c0:f2:03:b7:89:9d:b9:2c:ae:84:36:44:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef55459645979c413d0bc6f7454f0d36e40e99f9 Validity Not Before: Jan 2 02:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6a574996da26bed8e47e4a460a0bdc7019327ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:86:16:b2:ab:22:0c:de:56:ed:f8:52:59:2e: f9:47:bc:33:f5:75:3c:41:36:da:16:6a:88:65:5d: 40:67:43:25:9a:8c:1b:23:e2:9a:61:a6:92:c6:55: 8f:d2:56:ed:79:c4:89:dd:94:1b:3c:7e:13:09:b5: de:a4:09:3c:7a:4d:42:7b:b5:df:40:d5:1d:c2:50: 97:d5:dd:a0:22:4b:d9:54:8e:26:51:f4:7b:d9:fa: 11:46:da:3c:c4:66:ea:68:96:98:98:6a:3d:89:90: 04:3f:3a:35:b1:9f:02:9b:12:1a:8a:8d:62:9b:d6: 64:83:39:6e:90:7a:9b:6b:cd:da:18:51:93:42:b0: 5e:2b:e4:d8:10:56:a0:e5:82:10:88:66:ae:87:a9: 99:8a:87:97:a0:06:56:ea:cf:3c:41:bc:c3:d9:8e: b1:70:07:b3:6e:b9:28:d0:df:0b:ba:63:8f:2d:b1: 3b:0e:87:cc:3b:1b:fa:32:74:5e:94:da:db:01:68: e8:ae:30:80:30:de:f9:78:4c:8e:9b:9b:8e:9e:eb: aa:a1:41:d8:80:de:4d:7c:dc:a7:a7:ff:50:52:22: 7c:da:79:86:00:2a:99:f6:f1:e9:74:e6:a0:5c:ed: ed:4b:a6:11:b2:5a:bd:a7:05:a7:68:66:63:df:9c: a6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:A5:74:99:6D:A2:6B:ED:8E:47:E4:A4:60:A0:BD:C7:01:93:27:AC X509v3 Authority Key Identifier: keyid:EF:55:45:96:45:97:9C:41:3D:0B:C6:F7:45:4F:0D:36:E4:0E:99:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/9qV0mW2ia-2OR-SkYKC9xwGTJ6w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:47c0::/32 Signature Algorithm: sha256WithRSAEncryption 9b:fd:ac:e0:34:ce:4e:22:df:4c:ab:7e:27:f1:80:0b:99:60: 48:1a:19:19:c1:50:05:02:aa:e3:fa:28:ad:b2:97:18:5f:75: 44:c9:96:10:82:64:cb:c3:48:00:41:56:88:37:82:44:3f:ec: 5a:d2:03:fb:9f:d9:d0:34:0e:2f:7a:fe:46:10:9f:9a:0c:29: dc:a6:3c:e9:59:19:71:74:4b:87:1e:c6:90:60:22:47:5e:13: 87:b4:18:a6:df:3a:b4:59:6d:52:ff:32:1e:c1:e2:61:e4:be: 1d:81:f3:cb:b3:5c:05:af:63:07:3c:4a:d0:5a:bf:73:1a:a6: b1:43:9f:25:ae:47:1d:d5:93:b0:3b:15:a5:6c:63:26:79:c7: 07:02:95:f1:66:39:82:6d:d5:85:49:94:6f:89:70:61:e6:31: b2:1d:dc:87:05:64:f0:ce:9b:2a:78:ba:95:67:16:60:c3:06: ab:62:f9:f5:6a:40:61:c4:e3:e5:03:e2:76:73:d0:f0:eb:5c: 38:c1:a2:a0:18:3d:64:b8:a5:fd:28:21:2a:2b:ea:39:fa:32: b5:0d:e3:cf:94:1b:1c:24:7c:77:16:46:47:93:a2:db:6d:23: 42:d7:4a:88:af:c0:38:ca:f1:e0:42:1e:65:dc:7a:fd:5b:d0: 92:76:6a:ec -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8gFfA8gO3iZ25LK6ENkR0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTU0NTk2NDU5NzljNDEzZDBiYzZmNzQ1NGYwZDM2ZTQw ZTk5ZjkwHhcNMjYwMTAyMDIxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmE1NzQ5OTZkYTI2YmVkOGU0N2U0YTQ2MGEwYmRjNzAxOTMyN2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04YWsqsiDN5W7fhSWS75R7wz9XU8 QTbaFmqIZV1AZ0MlmowbI+KaYaaSxlWP0lbtecSJ3ZQbPH4TCbXepAk8ek1Ce7Xf QNUdwlCX1d2gIkvZVI4mUfR72foRRto8xGbqaJaYmGo9iZAEPzo1sZ8CmxIaio1i m9ZkgzlukHqba83aGFGTQrBeK+TYEFag5YIQiGauh6mZioeXoAZW6s88QbzD2Y6x cAezbrko0N8LumOPLbE7DofMOxv6MnRelNrbAWjorjCAMN75eEyOm5uOnuuqoUHY gN5NfNynp/9QUiJ82nmGACqZ9vHpdOagXO3tS6YRslq9pwWnaGZj35ymWQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPaldJltomvtjkfkpGCgvccBkyesMB8GA1UdIwQY MBaAFO9VRZZFl5xBPQvG90VPDTbkDpn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFWRmxrV1huRUU5QzhiM1JVOE5OdVFPbWZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8wNTEyZGYtN2QwYy00NjNiLTg3MjQt ODI1MzFlOWM3ODA0LzEvOXFWMG1XMmlhLTJPUi1Ta1lLQzl4d0dUSjZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8wNTEyZGYtN2QwYy00NjNiLTg3MjQtODI1MzFlOWM3ODA0 LzEvNzFWRmxrV1huRUU5QzhiM1JVOE5OdVFPbWZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhRHwDAN BgkqhkiG9w0BAQsFAAOCAQEAm/2s4DTOTiLfTKt+J/GAC5lgSBoZGcFQBQKq4/oo rbKXGF91RMmWEIJky8NIAEFWiDeCRD/sWtID+5/Z0DQOL3r+RhCfmgwp3KY86VkZ cXRLhx7GkGAiR14Th7QYpt86tFltUv8yHsHiYeS+HYHzy7NcBa9jBzxK0Fq/cxqm sUOfJa5HHdWTsDsVpWxjJnnHBwKV8WY5gm3VhUmUb4lwYeYxsh3chwVk8M6bKni6 lWcWYMMGq2L59WpAYcTj5QPidnPQ8OtcOMGioBg9ZLil/SghKivqOfoytQ3jz5Qb HCR8dxZGR5Oi220jQtdKiK/AOMrx4EIeZdx6/VvQknZq7A== -----END CERTIFICATE-----Generated at Sun Jan 25 20:58:54 2026 by rpki-client