This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/lE9bYROvMOgfAcJMOq1buSFu5Oc.roa File: lE9bYROvMOgfAcJMOq1buSFu5Oc.roa (raw, json) Hash identifier: uM/UbNoBafoN3u4NQaCJ1CV+W48Aj8GUgTcEvh/o4kw= Subject key identifier: 94:4F:5B:61:13:AF:30:E8:1F:01:C2:4C:3A:AD:5B:B9:21:6E:E4:E7 Certificate issuer: /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Certificate serial: 019B7C804DA0CB75FFC30815F4C30F1F77D0 Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/lE9bYROvMOgfAcJMOq1buSFu5Oc.roa Signing time: Fri 02 Jan 2026 02:19:01 +0000 ROA not before: Fri 02 Jan 2026 02:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58044 IP address blocks: 2a10:d182::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:4d:a0:cb:75:ff:c3:08:15:f4:c3:0f:1f:77:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Validity Not Before: Jan 2 02:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=944f5b6113af30e81f01c24c3aad5bb9216ee4e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:28:21:c2:01:5d:e3:6e:9b:9d:59:8f:6c:c3: 69:4a:0f:24:f2:f4:2a:34:bb:bc:3c:25:09:47:c2: 80:ff:a4:8d:c3:7c:d5:43:54:fe:c4:a0:b4:66:7b: c1:3a:94:39:b7:ce:59:83:7a:24:f0:05:dc:13:14: b9:2d:25:d0:68:ea:16:f2:a1:0a:9f:a2:63:4d:21: 98:14:71:91:cc:7b:47:95:8e:2a:4d:df:df:10:44: 83:71:26:59:ef:2f:7d:89:15:6d:70:e8:61:9e:81: 00:58:2a:2e:12:09:1e:9d:6f:a2:ff:f8:ab:7e:3e: d8:40:07:f7:ac:6a:5e:68:08:7f:cb:3b:c9:68:3e: eb:c2:a9:1c:a4:82:2b:4e:b7:12:a1:52:06:a3:a2: 11:94:b4:d0:9d:c3:cf:27:ff:c4:7a:b7:f3:0c:81: 1d:d2:d3:f5:01:0f:e6:7a:f0:f6:f4:db:d2:29:a7: 90:31:0d:d0:87:99:f0:57:70:35:dd:46:5a:00:4a: 2e:69:04:a9:ec:2e:78:05:5f:7b:38:ee:03:03:af: 5a:0a:9f:6e:01:d0:37:65:56:2d:da:1a:f0:ce:0b: 38:79:02:1a:2a:4a:c2:84:74:4c:60:6a:7d:a0:92: f2:95:ea:14:a9:22:a9:19:d7:1a:5f:79:73:05:05: 98:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:4F:5B:61:13:AF:30:E8:1F:01:C2:4C:3A:AD:5B:B9:21:6E:E4:E7 X509v3 Authority Key Identifier: keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/lE9bYROvMOgfAcJMOq1buSFu5Oc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:d182::/32 Signature Algorithm: sha256WithRSAEncryption 47:83:d5:0f:23:91:cf:d0:09:f2:cd:35:3c:c2:f0:28:e6:ce: 98:9a:e8:86:3e:d5:1e:ea:82:bb:65:22:a0:d1:84:75:74:4a: 7a:ff:d0:92:ee:f9:b6:c0:78:df:34:29:dd:08:38:47:02:f9: 79:b6:d2:74:8b:8b:52:50:c9:4b:4a:bb:31:dd:54:70:cd:b5: 60:6d:ec:7f:fc:0b:9e:a4:e5:ea:c1:50:4e:0c:14:5b:c3:c7: 10:98:76:7d:c1:41:57:f8:65:b8:b5:5b:50:fe:c0:88:c7:65: ef:e4:38:d3:0a:57:21:b1:8d:31:58:bd:cd:0a:70:44:a2:59: 20:74:38:c0:7f:1a:b4:5c:0f:bd:ac:48:4d:f1:4d:f6:62:c4: 18:cd:06:01:3d:0e:2f:fe:db:e6:4b:9d:c2:55:0a:94:19:be: 9a:e0:0d:f7:c2:91:66:5a:93:2d:ca:6d:ab:de:4d:1f:87:dd: 04:f9:27:6a:12:71:51:9a:9d:18:36:23:41:21:40:0f:00:1b: 7c:25:74:00:4e:80:67:e8:da:95:ea:df:fc:bc:5a:f8:29:06: 16:80:aa:6d:05:47:bc:df:61:b9:be:14:76:2e:07:81:96:ca: 0b:a8:81:14:58:59:82:e1:c1:8c:03:67:93:65:81:32:ee:d2: 5a:62:05:66 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8gE2gy3X/wwgV9MMPH3fQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNWU5M2Y5MDIzNTRjZTQ4MDRiNGNiMDQ5Y2Y2OGIyMGY3 NmFlYjIwHhcNMjYwMTAyMDIxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDRmNWI2MTEzYWYzMGU4MWYwMWMyNGMzYWFkNWJiOTIxNmVlNGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCghwgFd426bnVmPbMNpSg8k8vQq NLu8PCUJR8KA/6SNw3zVQ1T+xKC0ZnvBOpQ5t85Zg3ok8AXcExS5LSXQaOoW8qEK n6JjTSGYFHGRzHtHlY4qTd/fEESDcSZZ7y99iRVtcOhhnoEAWCouEgkenW+i//ir fj7YQAf3rGpeaAh/yzvJaD7rwqkcpIIrTrcSoVIGo6IRlLTQncPPJ//EerfzDIEd 0tP1AQ/mevD29NvSKaeQMQ3Qh5nwV3A13UZaAEouaQSp7C54BV97OO4DA69aCp9u AdA3ZVYt2hrwzgs4eQIaKkrChHRMYGp9oJLyleoUqSKpGdcaX3lzBQWY/wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFJRPW2ETrzDoHwHCTDqtW7khbuTnMB8GA1UdIwQY MBaAFK9ek/kCNUzkgEtMsEnPaLIPdq6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWIt N2UwNWFkMDE5MGNlLzEvbEU5YllST3ZNT2dmQWNKTU9xMWJ1U0Z1NU9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWItN2UwNWFkMDE5MGNl LzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhDRgjAN BgkqhkiG9w0BAQsFAAOCAQEAR4PVDyORz9AJ8s01PMLwKObOmJrohj7VHuqCu2Ui oNGEdXRKev/Qku75tsB43zQp3Qg4RwL5ebbSdIuLUlDJS0q7Md1UcM21YG3sf/wL nqTl6sFQTgwUW8PHEJh2fcFBV/hluLVbUP7AiMdl7+Q40wpXIbGNMVi9zQpwRKJZ IHQ4wH8atFwPvaxITfFN9mLEGM0GAT0OL/7b5kudwlUKlBm+muAN98KRZlqTLcpt q95NH4fdBPknahJxUZqdGDYjQSFADwAbfCV0AE6AZ+jalerf/Lxa+CkGFoCqbQVH vN9hub4Udi4HgZbKC6iBFFhZguHBjANnk2WBMu7SWmIFZg== -----END CERTIFICATE-----Generated at Sun Jan 25 17:45:55 2026 by rpki-client