This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/9AbUngTypkaoNALibGKyeTkaz4o.roa File: 9AbUngTypkaoNALibGKyeTkaz4o.roa (raw, json) Hash identifier: 8et21MYSocigMDejcXNZOBoqIIUukvEWNLqIqh49CVQ= Subject key identifier: F4:06:D4:9E:04:F2:A6:46:A8:34:02:E2:6C:62:B2:79:39:1A:CF:8A Certificate issuer: /CN=24ba4f52ac1be0755d34bc5483c061bdf293447e Certificate serial: 019B7D5CF16F091E95F8835A6EAA3229251E Authority key identifier: 24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/9AbUngTypkaoNALibGKyeTkaz4o.roa Signing time: Fri 02 Jan 2026 06:20:01 +0000 ROA not before: Fri 02 Jan 2026 06:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28852 IP address blocks: 2001:1a10:9120::/45 maxlen: 45 2001:1a10:9128::/45 maxlen: 45 2001:1a10:9130::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:f1:6f:09:1e:95:f8:83:5a:6e:aa:32:29:25:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24ba4f52ac1be0755d34bc5483c061bdf293447e Validity Not Before: Jan 2 06:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f406d49e04f2a646a83402e26c62b279391acf8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:35:b7:e8:d7:60:6a:12:96:2e:2c:7c:97:70: de:90:fd:40:1c:c6:73:6d:32:c0:f2:2e:94:33:7e: 9c:4a:b6:bc:3e:cd:39:65:e2:49:de:35:f4:61:c1: 13:6e:bf:1b:26:02:81:ac:29:66:f0:17:00:c5:61: 4d:c1:73:3f:f9:05:b2:ee:5b:98:d8:16:42:b8:20: 60:e8:76:23:85:e8:1e:2f:62:b1:45:c5:80:07:2e: 63:33:db:26:4b:ad:68:3c:03:85:a1:9e:ee:d5:c7: b3:37:fb:ae:6c:d7:47:9c:85:52:ba:63:62:c1:04: 02:f6:73:c1:75:38:5a:1e:d7:83:3c:cd:97:98:6d: 08:d5:35:a4:0e:46:cd:bd:39:c4:e7:38:8d:1e:fd: 3d:2b:c8:7c:c7:b2:fd:be:d8:87:4f:c4:58:bc:c0: 0c:b6:bb:6b:4e:84:7b:68:6d:01:1e:1f:34:ef:29: 4c:66:c6:5a:55:53:73:dc:91:20:87:19:f8:fb:4a: 70:b7:42:60:c2:34:9a:58:72:14:0c:0d:28:85:46: 9c:32:0c:66:53:e0:11:04:0a:c6:9e:69:a0:06:de: 10:f5:e6:48:0e:d6:91:33:30:90:cd:b1:f5:ff:67: ba:3c:0e:63:bb:89:86:46:b8:26:56:2b:bf:3c:42: 67:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:06:D4:9E:04:F2:A6:46:A8:34:02:E2:6C:62:B2:79:39:1A:CF:8A X509v3 Authority Key Identifier: keyid:24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/9AbUngTypkaoNALibGKyeTkaz4o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:1a10:9120::-2001:1a10:9137:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 57:51:e5:e9:be:d3:69:7e:ea:bb:07:75:59:68:dc:34:00:43: 22:5e:ae:5f:9d:37:ee:51:a2:0a:a0:f6:9e:6c:bc:99:d8:c7: d9:6a:1f:88:95:26:6e:dc:41:88:c4:c9:35:ef:7d:da:c9:c4: 76:99:c0:a9:33:cc:96:a2:8b:8d:7b:a4:cb:22:9b:60:3a:7d: b2:16:98:1f:9d:0d:ca:ce:b5:22:a8:63:5e:f4:04:cb:f0:74: dc:87:ab:cb:b9:76:f8:b4:af:30:a5:8c:d6:1d:9c:b1:fa:0a: 1f:14:fd:75:3c:3c:71:45:79:e5:c8:71:6a:0e:65:8e:53:85: 85:6f:27:ca:11:b8:a7:01:4f:c6:5e:ad:0b:4b:04:1c:23:bb: 31:81:85:68:a3:82:6a:3c:de:99:e0:fc:02:dd:79:92:e5:34: 7c:62:b5:c9:72:73:b3:51:7f:00:92:54:c7:2b:a4:54:f7:87: 3c:4d:7c:f6:a7:11:db:78:6e:54:cd:66:7a:a5:75:fd:e1:e9: bc:a7:9b:46:c3:b1:84:6d:f3:79:63:00:82:45:02:53:7e:40: 90:87:42:49:c7:49:76:54:6f:86:18:fd:8b:51:a2:02:17:1c: aa:75:3e:ea:02:4b:a7:8c:e7:b6:16:51:03:9f:fb:69:5e:a7: dd:ff:87:0b -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt9XPFvCR6V+INabqoyKSUeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0YmE0ZjUyYWMxYmUwNzU1ZDM0YmM1NDgzYzA2MWJkZjI5 MzQ0N2UwHhcNMjYwMTAyMDYyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDA2ZDQ5ZTA0ZjJhNjQ2YTgzNDAyZTI2YzYyYjI3OTM5MWFjZjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTW36NdgahKWLix8l3DekP1AHMZz bTLA8i6UM36cSra8Ps05ZeJJ3jX0YcETbr8bJgKBrClm8BcAxWFNwXM/+QWy7luY 2BZCuCBg6HYjhegeL2KxRcWABy5jM9smS61oPAOFoZ7u1cezN/uubNdHnIVSumNi wQQC9nPBdThaHteDPM2XmG0I1TWkDkbNvTnE5ziNHv09K8h8x7L9vtiHT8RYvMAM trtrToR7aG0BHh807ylMZsZaVVNz3JEghxn4+0pwt0JgwjSaWHIUDA0ohUacMgxm U+ARBArGnmmgBt4Q9eZIDtaRMzCQzbH1/2e6PA5ju4mGRrgmViu/PEJnSwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFPQG1J4E8qZGqDQC4mxisnk5Gs+KMB8GA1UdIwQY MBaAFCS6T1KsG+B1XTS8VIPAYb3yk0R+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkxwUFVxd2I0SFZkTkx4VWc4Qmh2ZktUUkg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zOTc1NDYtZGM3Yi00NjYwLThhNTEt YmY1OWZjMWNiMjZkLzEvOUFiVW5nVHlwa2FvTkFMaWJHS3llVGthejRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8zOTc1NDYtZGM3Yi00NjYwLThhNTEtYmY1OWZjMWNiMjZk LzEvSkxwUFVxd2I0SFZkTkx4VWc4Qmh2ZktUUkg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwUgARoQ kSADBwMgARoQkTAwDQYJKoZIhvcNAQELBQADggEBAFdR5em+02l+6rsHdVlo3DQA QyJerl+dN+5Rogqg9p5svJnYx9lqH4iVJm7cQYjEyTXvfdrJxHaZwKkzzJaii417 pMsim2A6fbIWmB+dDcrOtSKoY170BMvwdNyHq8u5dvi0rzCljNYdnLH6Ch8U/XU8 PHFFeeXIcWoOZY5ThYVvJ8oRuKcBT8ZerQtLBBwjuzGBhWijgmo83png/ALdeZLl NHxitclyc7NRfwCSVMcrpFT3hzxNfPanEdt4blTNZnqldf3h6bynm0bDsYRt83lj AIJFAlN+QJCHQknHSXZUb4YY/YtRogIXHKp1PuoCS6eM57YWUQOf+2lep93/hws= -----END CERTIFICATE-----Generated at Sun Jan 25 21:05:38 2026 by rpki-client