This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/ck9fph3pnGBfD51d6ySumkAZbWw.roa File: ck9fph3pnGBfD51d6ySumkAZbWw.roa (raw, json) Hash identifier: cePM5hzSAL7gxgiyzP8i8tA4JspwG2EEsvqQZVUTIU0= Subject key identifier: 72:4F:5F:A6:1D:E9:9C:60:5F:0F:9D:5D:EB:24:AE:9A:40:19:6D:6C Certificate issuer: /CN=74b42a6de4e01fc31250d1bbe322281046ee61aa Certificate serial: 019B77587713C0C5061E3CDA62C68B1876FA Authority key identifier: 74:B4:2A:6D:E4:E0:1F:C3:12:50:D1:BB:E3:22:28:10:46:EE:61:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/ck9fph3pnGBfD51d6ySumkAZbWw.roa Signing time: Thu 01 Jan 2026 02:17:24 +0000 ROA not before: Thu 01 Jan 2026 02:17:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39686 IP address blocks: 2a10:dac0:101::/48 maxlen: 48 2a10:dac0:102::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.crl rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:77:13:c0:c5:06:1e:3c:da:62:c6:8b:18:76:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b42a6de4e01fc31250d1bbe322281046ee61aa Validity Not Before: Jan 1 02:17:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=724f5fa61de99c605f0f9d5deb24ae9a40196d6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:70:f0:b9:5f:3d:e4:a8:25:04:77:29:49:6c: 1d:7d:c6:a6:38:e2:b9:d5:6b:c3:9c:75:b1:5b:4c: a3:5c:25:eb:ec:e4:09:8d:80:fb:81:df:23:e0:7f: ee:94:91:c7:71:90:35:1d:4b:0b:f3:a1:04:31:f2: 1e:3f:86:49:d3:63:9f:10:1f:04:7f:17:95:49:7f: 5f:fb:e8:dd:30:07:92:8d:c4:c8:f6:fc:90:4c:cf: e0:c6:6f:6d:f4:61:41:5f:d4:76:ba:3a:b9:ed:ae: 23:36:2f:8a:04:ee:2f:63:6d:58:0c:81:3b:01:02: b7:17:75:46:54:ca:78:b9:66:01:ca:48:da:4a:89: 47:ea:23:a2:65:97:93:ac:04:57:ba:8d:2f:bb:06: f6:48:f8:98:2d:74:6a:9d:12:04:5f:e5:70:35:3a: 26:d5:38:06:74:66:db:5a:29:4d:85:f4:cc:7a:3b: d2:2a:d4:24:29:38:0f:9f:70:91:0c:80:e1:a0:24: c8:1d:fc:a3:6a:6c:72:ee:76:89:5c:4f:90:8e:b9: 03:9a:23:f4:54:91:c0:96:e2:ba:e2:f3:60:40:64: a1:0a:8c:eb:ba:f5:0a:1e:ee:fc:31:88:4a:85:e5: f2:21:47:12:57:12:9a:2c:88:e8:bc:6f:de:1d:f7: ab:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:4F:5F:A6:1D:E9:9C:60:5F:0F:9D:5D:EB:24:AE:9A:40:19:6D:6C X509v3 Authority Key Identifier: keyid:74:B4:2A:6D:E4:E0:1F:C3:12:50:D1:BB:E3:22:28:10:46:EE:61:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/ck9fph3pnGBfD51d6ySumkAZbWw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:dac0:101::-2a10:dac0:102:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 7a:63:c6:be:06:0e:51:ca:03:19:68:60:4f:0e:b6:54:4a:9c: 59:a8:76:4d:db:1f:60:9e:94:e6:d7:2a:d1:1c:c6:c0:75:f2: 0a:86:83:ea:6f:91:3b:3c:a1:70:3d:c9:51:11:7c:ae:0a:a0: 21:ac:6b:ba:b5:7f:8c:63:b2:d4:bb:11:be:40:8c:07:96:ea: 46:f7:e7:39:ae:54:29:c5:67:d5:d2:ad:18:ab:8c:67:e5:3a: bb:3d:2f:bc:4f:fd:1c:93:17:05:be:2e:1e:f1:5b:17:1c:ab: d9:c3:d6:f6:8a:ee:36:ce:06:57:8b:66:1d:57:cc:8d:d1:c5: cd:fa:aa:b9:39:83:36:32:72:86:8d:e9:5a:e2:45:6c:bc:4e: 79:75:0c:38:ba:d9:a0:68:4b:b1:0a:29:31:ce:94:75:f9:9d: d6:b9:99:53:6d:3d:b6:10:cd:0f:9f:4c:2e:43:33:b3:fa:aa: 6c:12:30:72:e8:d4:3d:35:f1:97:4c:c2:fc:86:a6:c6:28:dc: 36:ab:92:1e:75:c8:79:3c:8f:15:1a:f3:84:c9:56:5a:b8:79: 34:4c:4b:7d:d6:09:86:68:95:45:05:4b:02:35:89:37:b9:7d: 56:e1:4c:e3:5f:d0:72:e9:f5:76:89:f3:7b:3b:5e:8a:2e:0d: ae:44:f6:9b -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt3WHcTwMUGHjzaYsaLGHb6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0YjQyYTZkZTRlMDFmYzMxMjUwZDFiYmUzMjIyODEwNDZl ZTYxYWEwHhcNMjYwMTAxMDIxNzI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjRmNWZhNjFkZTk5YzYwNWYwZjlkNWRlYjI0YWU5YTQwMTk2ZDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXDwuV895KglBHcpSWwdfcamOOK5 1WvDnHWxW0yjXCXr7OQJjYD7gd8j4H/ulJHHcZA1HUsL86EEMfIeP4ZJ02OfEB8E fxeVSX9f++jdMAeSjcTI9vyQTM/gxm9t9GFBX9R2ujq57a4jNi+KBO4vY21YDIE7 AQK3F3VGVMp4uWYBykjaSolH6iOiZZeTrARXuo0vuwb2SPiYLXRqnRIEX+VwNTom 1TgGdGbbWilNhfTMejvSKtQkKTgPn3CRDIDhoCTIHfyjamxy7naJXE+QjrkDmiP0 VJHAluK64vNgQGShCozruvUKHu78MYhKheXyIUcSVxKaLIjovG/eHfer+QIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFHJPX6Yd6ZxgXw+dXeskrppAGW1sMB8GA1UdIwQY MBaAFHS0Km3k4B/DElDRu+MiKBBG7mGqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZExRcWJlVGdIOE1TVU5HNzR5SW9FRWJ1WWFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9lNTU1NmMtY2ZlYS00OTcyLWFhZjgt MTdhMWRjZGNjNmUwLzEvY2s5ZnBoM3BuR0JmRDUxZDZ5U3Vta0FaYld3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9lNTU1NmMtY2ZlYS00OTcyLWFhZjgtMTdhMWRjZGNjNmUw LzEvZExRcWJlVGdIOE1TVU5HNzR5SW9FRWJ1WWFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAqENrA AQEDBwAqENrAAQIwDQYJKoZIhvcNAQELBQADggEBAHpjxr4GDlHKAxloYE8OtlRK nFmodk3bH2CelObXKtEcxsB18gqGg+pvkTs8oXA9yVERfK4KoCGsa7q1f4xjstS7 Eb5AjAeW6kb35zmuVCnFZ9XSrRirjGflOrs9L7xP/RyTFwW+Lh7xWxccq9nD1vaK 7jbOBleLZh1XzI3Rxc36qrk5gzYycoaN6VriRWy8Tnl1DDi62aBoS7EKKTHOlHX5 nda5mVNtPbYQzQ+fTC5DM7P6qmwSMHLo1D018ZdMwvyGpsYo3Darkh51yHk8jxUa 84TJVlq4eTRMS33WCYZolUUFSwI1iTe5fVbhTONf0HLp9XaJ83s7XoouDa5E9ps= -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:27 2026 by rpki-client