This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/9P4hqblliSkSOMVcrNMKmijKGcM.roa File: 9P4hqblliSkSOMVcrNMKmijKGcM.roa (raw, json) Hash identifier: q15PjwzdZRYltlXramnsmodNMs8JDfmkAg/Nz7jTEMY= Subject key identifier: F4:FE:21:A9:B9:65:89:29:12:38:C5:5C:AC:D3:0A:9A:28:CA:19:C3 Certificate issuer: /CN=7bab6c11d41162db0306858f83e5e65121132a6b Certificate serial: 019B79113010D39D208923057D6D5599ECC0 Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/9P4hqblliSkSOMVcrNMKmijKGcM.roa Signing time: Thu 01 Jan 2026 10:18:48 +0000 ROA not before: Thu 01 Jan 2026 10:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207740 IP address blocks: 2a07:22c1:ffe5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:30:10:d3:9d:20:89:23:05:7d:6d:55:99:ec:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b Validity Not Before: Jan 1 10:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4fe21a9b96589291238c55cacd30a9a28ca19c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8d:b0:db:08:ee:47:4e:e5:5e:11:6c:3d:7b: 28:fd:44:32:7b:a2:b4:05:be:99:34:e8:a1:ea:21: ff:df:67:fa:7b:ac:d3:5c:aa:68:1b:05:4c:c9:d5: 9c:d6:09:1f:c8:33:e1:d2:60:86:21:a5:72:c5:db: aa:a9:47:a2:50:62:3b:88:ae:d5:5b:70:2d:08:56: a2:5d:b9:a6:51:1e:c9:ad:bc:90:33:a4:83:a1:68: 5b:ff:76:92:6d:3a:40:68:c8:1e:93:21:c9:bb:c2: d1:4d:df:5f:29:f9:5e:e8:b6:29:31:4b:42:e5:37: 74:62:49:a1:0a:e3:ac:9e:9e:da:c1:9d:1b:2a:e8: 16:bd:e3:14:e6:6b:a6:55:62:87:05:f6:d9:c2:72: 23:c4:2a:9a:36:ea:b4:5e:ab:10:91:78:3d:22:e2: 66:d2:38:ce:0c:4c:ab:e3:e4:16:b9:f8:bd:36:67: d8:5f:f9:ba:c6:8a:00:67:c1:2c:0c:d0:00:cb:64: 1d:2e:6b:a4:6a:b2:02:17:02:63:c0:5e:21:94:a7: 1d:20:ab:e9:fe:db:8e:90:61:a3:b9:e8:2b:22:9f: fa:f0:5b:70:55:39:aa:0a:35:4f:3d:1b:3c:e3:e7: ae:be:9e:63:b2:5a:c8:52:aa:44:55:f3:e8:95:87: 35:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:FE:21:A9:B9:65:89:29:12:38:C5:5C:AC:D3:0A:9A:28:CA:19:C3 X509v3 Authority Key Identifier: keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/9P4hqblliSkSOMVcrNMKmijKGcM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:22c1:ffe5::/48 Signature Algorithm: sha256WithRSAEncryption 40:ad:b7:38:ae:c1:9d:32:03:7e:da:f2:c6:9f:d4:16:43:5a: 76:7b:d0:a0:6a:61:c9:04:ce:54:f5:c0:33:a2:0b:55:2d:e7: 18:15:cd:7b:b7:3c:22:20:40:42:53:8a:64:f5:b4:cf:2d:90: 17:54:d8:61:07:ca:c1:02:07:9c:f6:b7:8f:22:09:e9:11:38: a5:25:a8:17:ec:b8:9d:9a:62:40:78:95:4a:c7:e1:34:c8:4c: e2:fc:a7:49:fa:3f:0b:9a:26:34:47:76:66:12:fb:31:09:db: 15:ac:15:b2:57:52:36:90:42:41:45:cf:b0:3e:86:5e:8a:59: 66:e4:dd:2d:33:f4:fc:37:17:16:16:30:60:94:22:42:42:bc: 7a:30:bf:10:e0:fe:a1:7e:57:a0:ec:b7:86:e1:fb:6f:81:06: 12:4b:83:9e:e3:e0:75:9a:04:2a:dd:28:13:f6:8f:7f:47:4d: b8:8d:ff:25:d3:84:c3:2d:4f:bd:a5:33:7d:7b:8a:1d:5e:ab: 44:71:86:c2:1e:e0:2c:e9:b2:08:af:30:91:28:53:21:cb:17: b6:aa:3b:d0:d0:f6:88:51:e6:8c:c5:da:cf:dc:e8:01:af:2c: 86:fb:ae:fb:9b:bc:f7:c0:df:a2:01:60:94:a7:05:d7:8a:3c: 6e:2a:1f:05 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5ETAQ050giSMFfW1VmezAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiYWI2YzExZDQxMTYyZGIwMzA2ODU4ZjgzZTVlNjUxMjEx MzJhNmIwHhcNMjYwMTAxMTAxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNGZlMjFhOWI5NjU4OTI5MTIzOGM1NWNhY2QzMGE5YTI4Y2ExOWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwY2w2wjuR07lXhFsPXso/UQye6K0 Bb6ZNOih6iH/32f6e6zTXKpoGwVMydWc1gkfyDPh0mCGIaVyxduqqUeiUGI7iK7V W3AtCFaiXbmmUR7JrbyQM6SDoWhb/3aSbTpAaMgekyHJu8LRTd9fKfle6LYpMUtC 5Td0YkmhCuOsnp7awZ0bKugWveMU5mumVWKHBfbZwnIjxCqaNuq0XqsQkXg9IuJm 0jjODEyr4+QWufi9NmfYX/m6xooAZ8EsDNAAy2QdLmukarICFwJjwF4hlKcdIKvp /tuOkGGjuegrIp/68FtwVTmqCjVPPRs84+euvp5jslrIUqpEVfPolYc1TwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPT+Iam5ZYkpEjjFXKzTCpooyhnDMB8GA1UdIwQY MBaAFHurbBHUEWLbAwaFj4Pl5lEhEyprMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTZ0c0VkUVJZdHNEQm9XUGctWG1VU0VUS21zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9kMzM0YWQtNTI0MC00ZGFhLWEwNTAt OWY1YmY3MzY3MjBlLzEvOVA0aHFibGxpU2tTT01WY3JOTUttaWpLR2NNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9kMzM0YWQtNTI0MC00ZGFhLWEwNTAtOWY1YmY3MzY3MjBl LzEvZTZ0c0VkUVJZdHNEQm9XUGctWG1VU0VUS21zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgciwf/l MA0GCSqGSIb3DQEBCwUAA4IBAQBArbc4rsGdMgN+2vLGn9QWQ1p2e9CgamHJBM5U 9cAzogtVLecYFc17tzwiIEBCU4pk9bTPLZAXVNhhB8rBAgec9rePIgnpETilJagX 7LidmmJAeJVKx+E0yEzi/KdJ+j8LmiY0R3ZmEvsxCdsVrBWyV1I2kEJBRc+wPoZe illm5N0tM/T8NxcWFjBglCJCQrx6ML8Q4P6hfleg7LeG4ftvgQYSS4Oe4+B1mgQq 3SgT9o9/R024jf8l04TDLU+9pTN9e4odXqtEcYbCHuAs6bIIrzCRKFMhyxe2qjvQ 0PaIUeaMxdrP3OgBryyG+677m7z3wN+iAWCUpwXXijxuKh8F -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:16 2026 by rpki-client