This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/9pPf8N-xbMT9o8UBJiPr7d92dmo.roa File: 9pPf8N-xbMT9o8UBJiPr7d92dmo.roa (raw, json) Hash identifier: QOYbkI9+2diJOwe6krK7d78idH2agB/NPLIUaIdszRQ= Subject key identifier: F6:93:DF:F0:DF:B1:6C:C4:FD:A3:C5:01:26:23:EB:ED:DF:76:76:6A Certificate issuer: /CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81 Certificate serial: 019B7EA6D123908718D76935BAB17A4B3507 Authority key identifier: 69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/9pPf8N-xbMT9o8UBJiPr7d92dmo.roa Signing time: Fri 02 Jan 2026 12:20:20 +0000 ROA not before: Fri 02 Jan 2026 12:20:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214731 IP address blocks: 2a01:e281:ad00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:d1:23:90:87:18:d7:69:35:ba:b1:7a:4b:35:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81 Validity Not Before: Jan 2 12:20:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f693dff0dfb16cc4fda3c5012623ebeddf76766a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f5:d4:8f:4d:84:c1:d7:84:fc:ec:e3:fc:89: cf:a4:49:9c:af:b7:d6:b7:3a:52:33:bb:fb:30:6f: 6b:7b:00:86:6c:2a:a2:70:a5:55:3e:00:1c:8d:83: fb:3b:a6:82:d3:59:f2:2d:8c:01:64:d5:4a:9e:80: 6a:e1:27:01:eb:ca:cd:9f:e8:8e:dc:f5:e8:15:92: e5:74:91:7b:ea:ab:64:2c:76:ed:92:29:d8:28:a3: 8d:8c:56:b6:af:1e:a2:61:83:52:af:d2:7c:a5:45: c2:84:2a:a2:22:22:1b:c7:f0:31:af:1c:70:9c:d8: 82:61:aa:2f:b5:86:50:89:ca:5e:b4:60:31:28:15: 1e:0f:35:f1:b0:5e:53:42:9c:59:84:af:00:90:38: 50:9b:60:ce:11:4a:dc:55:11:79:68:c1:0f:a9:e0: f8:3b:ba:53:94:f5:8d:f9:84:6e:3c:c0:0c:a5:75: ef:b9:d7:0f:3d:50:16:52:49:2f:e2:42:d2:6c:13: 47:c5:47:03:8d:e1:18:b1:17:50:5b:04:db:6c:75: 24:21:81:2b:9d:90:b5:93:2d:3e:9f:ca:1b:4e:0b: 5a:1c:7b:ab:fd:7b:ee:e1:a7:f4:be:5e:7c:b5:d8: ed:ce:09:40:97:38:cd:86:e1:a5:81:54:51:03:5f: 03:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:93:DF:F0:DF:B1:6C:C4:FD:A3:C5:01:26:23:EB:ED:DF:76:76:6A X509v3 Authority Key Identifier: keyid:69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/9pPf8N-xbMT9o8UBJiPr7d92dmo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:e281:ad00::/40 Signature Algorithm: sha256WithRSAEncryption cc:c8:d0:72:d5:c2:86:9f:f5:5f:3e:50:6e:86:37:e1:2d:98: 5a:14:1e:f3:2d:fb:fe:9a:fe:0b:20:5c:e2:08:17:45:86:24: 3d:e7:6d:1d:f4:a2:3c:54:0d:ec:c0:0a:fc:49:ea:08:cd:84: 9b:1f:a4:02:15:55:0f:47:86:74:2b:cd:bc:e2:ee:cd:99:c8: a4:81:1c:31:6f:00:1b:79:00:22:00:c7:5a:b6:86:57:ae:1c: f0:ae:7f:fb:46:43:98:3d:04:91:1d:42:a1:59:89:05:62:71: a2:6a:90:33:09:ff:ac:14:77:ec:40:36:d1:7c:f9:40:78:d2: 50:c6:f4:d6:b6:14:6e:e0:f9:ab:70:e1:fd:66:03:eb:c8:d8: ae:0b:26:e5:cb:6f:c1:67:28:3f:0b:b6:6a:6f:8b:8c:8b:76: f7:dd:a2:db:4e:d7:f6:65:e4:35:0e:62:cb:45:de:a2:06:8f: 7b:8a:da:2b:8a:f6:31:f9:fe:72:95:6d:0a:1f:49:f6:c3:d9: 79:12:05:e1:cc:a5:d2:1a:bc:65:87:22:03:46:53:40:7f:af: 21:df:3e:e2:5c:c8:41:5a:be:92:bc:e8:a4:95:de:0b:5e:49: eb:b8:ac:c6:b7:98:8b:4b:92:1f:b4:d0:b2:a2:f5:1d:08:46: 90:9a:e9:83 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+ptEjkIcY12k1urF6SzUHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZGJlMWU3ZDllODdkNjg3MDFhNDAzNWE3NmM1MWJmZWNk ODhkODEwHhcNMjYwMTAyMTIyMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjkzZGZmMGRmYjE2Y2M0ZmRhM2M1MDEyNjIzZWJlZGRmNzY3NjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPXUj02EwdeE/Ozj/InPpEmcr7fW tzpSM7v7MG9rewCGbCqicKVVPgAcjYP7O6aC01nyLYwBZNVKnoBq4ScB68rNn+iO 3PXoFZLldJF76qtkLHbtkinYKKONjFa2rx6iYYNSr9J8pUXChCqiIiIbx/Axrxxw nNiCYaovtYZQicpetGAxKBUeDzXxsF5TQpxZhK8AkDhQm2DOEUrcVRF5aMEPqeD4 O7pTlPWN+YRuPMAMpXXvudcPPVAWUkkv4kLSbBNHxUcDjeEYsRdQWwTbbHUkIYEr nZC1ky0+n8obTgtaHHur/Xvu4af0vl58tdjtzglAlzjNhuGlgVRRA18DEQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFPaT3/DfsWzE/aPFASYj6+3fdnZqMB8GA1UdIwQY MBaAFGnb4efZ6H1ocBpANadsUb/s2I2BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWR2aDU5bm9mV2h3R2tBMXAyeFJ2LXpZallFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83MjcwMTUtZTE0ZS00ZDQxLWIwNWIt OGQ5NDU1M2I3NWUxLzEvOXBQZjhOLXhiTVQ5bzhVQkppUHI3ZDkyZG1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC83MjcwMTUtZTE0ZS00ZDQxLWIwNWItOGQ5NDU1M2I3NWUx LzEvYWR2aDU5bm9mV2h3R2tBMXAyeFJ2LXpZallFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgHiga0w DQYJKoZIhvcNAQELBQADggEBAMzI0HLVwoaf9V8+UG6GN+EtmFoUHvMt+/6a/gsg XOIIF0WGJD3nbR30ojxUDezACvxJ6gjNhJsfpAIVVQ9HhnQrzbzi7s2ZyKSBHDFv ABt5ACIAx1q2hleuHPCuf/tGQ5g9BJEdQqFZiQVicaJqkDMJ/6wUd+xANtF8+UB4 0lDG9Na2FG7g+atw4f1mA+vI2K4LJuXLb8FnKD8Ltmpvi4yLdvfdottO1/Zl5DUO YstF3qIGj3uK2iuK9jH5/nKVbQofSfbD2XkSBeHMpdIavGWHIgNGU0B/ryHfPuJc yEFavpK86KSV3gteSeu4rMa3mItLkh+00LKi9R0IRpCa6YM= -----END CERTIFICATE-----Generated at Sun Jan 25 13:00:21 2026 by rpki-client