This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/R9yQDUpo9qSNelx0KQxWO9fm9iA.roa File: R9yQDUpo9qSNelx0KQxWO9fm9iA.roa (raw, json) Hash identifier: RSvmXKJf5yDyS1EyQpjsuSAr6t0VEWEQu/Rk/10QmtQ= Subject key identifier: 47:DC:90:0D:4A:68:F6:A4:8D:7A:5C:74:29:0C:56:3B:D7:E6:F6:20 Certificate issuer: /CN=d914da56e1a934649da02964ac12eba34c5cb84f Certificate serial: 019B7FF1DAF72BF64EF680E8269F41F50DE0 Authority key identifier: D9:14:DA:56:E1:A9:34:64:9D:A0:29:64:AC:12:EB:A3:4C:5C:B8:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2RTaVuGpNGSdoClkrBLro0xcuE8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/R9yQDUpo9qSNelx0KQxWO9fm9iA.roa Signing time: Fri 02 Jan 2026 18:21:55 +0000 ROA not before: Fri 02 Jan 2026 18:21:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215563 IP address blocks: 2a13:e3c2::/33 maxlen: 33 2a13:e3c2:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.crl rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.mft rsync://rpki.ripe.net/repository/DEFAULT/2RTaVuGpNGSdoClkrBLro0xcuE8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:da:f7:2b:f6:4e:f6:80:e8:26:9f:41:f5:0d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d914da56e1a934649da02964ac12eba34c5cb84f Validity Not Before: Jan 2 18:21:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47dc900d4a68f6a48d7a5c74290c563bd7e6f620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ba:1b:9f:35:48:17:a9:11:e4:57:e8:94:a5: b5:42:13:cd:ea:24:20:8c:51:77:71:b9:d2:28:15: d5:e2:17:7b:9d:ae:1d:0a:5c:54:29:f1:21:3e:ec: d4:31:e4:2c:d1:89:c9:d1:f8:26:c7:d0:dd:44:2a: ad:7d:30:a8:88:80:be:b5:a3:5f:c3:d6:e4:d3:4f: b0:97:b1:ec:05:1a:0e:1a:6a:5a:e5:22:2a:fe:e9: 5a:4e:14:9c:22:13:69:2d:9b:d2:2f:a6:09:22:7e: 92:79:80:06:80:3b:19:0e:9b:27:d6:b4:89:41:cc: 52:fb:d3:43:91:fd:0f:07:20:7c:f0:9c:e6:1f:f8: 7b:57:7f:b8:41:1e:46:52:4a:47:b7:7b:b3:40:d5: f8:40:7b:70:db:90:ae:71:24:0b:b0:cf:c9:49:0a: f4:c6:81:69:11:86:4c:82:d4:37:1f:6e:d2:01:08: 65:7d:d4:86:ac:f0:76:5d:8a:8d:a5:fa:2a:63:44: 31:61:7d:7a:1e:fa:90:02:f8:48:bb:64:47:7b:44: a4:40:91:49:0c:49:62:0e:01:e3:dd:ef:ce:06:c7: 68:88:81:06:13:1a:69:0c:84:44:0f:40:53:1b:a5: c2:f0:11:44:05:d8:eb:dd:71:fe:e8:ff:63:47:11: 24:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:DC:90:0D:4A:68:F6:A4:8D:7A:5C:74:29:0C:56:3B:D7:E6:F6:20 X509v3 Authority Key Identifier: keyid:D9:14:DA:56:E1:A9:34:64:9D:A0:29:64:AC:12:EB:A3:4C:5C:B8:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2RTaVuGpNGSdoClkrBLro0xcuE8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/R9yQDUpo9qSNelx0KQxWO9fm9iA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:e3c2::/32 Signature Algorithm: sha256WithRSAEncryption 75:72:45:51:f8:75:cf:2f:f7:93:75:74:70:12:29:97:bb:c9: ea:5f:b0:53:a2:d1:61:f9:ea:4e:1e:40:04:46:5d:58:4a:73: 31:b9:84:1c:54:21:ec:dc:cd:2b:ba:88:66:ce:50:50:1a:97: 4e:b9:4c:d3:90:be:be:04:50:0e:3c:a8:40:c2:83:52:21:cc: b1:2e:84:be:9e:1e:07:17:6a:de:d0:09:68:17:98:a2:e1:7f: b9:01:c9:d4:29:cf:ad:9b:83:64:4e:8e:70:f8:91:8c:50:c4: 26:26:79:96:b7:9e:a2:87:6b:3c:f5:af:89:28:de:65:5c:3d: 84:27:c0:06:2c:36:34:ac:31:22:1c:e3:68:25:6f:4a:0b:ff: 63:15:13:6c:6e:2c:00:be:32:c8:c5:09:ff:e2:39:c4:6e:01: 2b:f6:72:ac:1a:2b:02:1d:56:41:38:d4:b2:b9:63:84:83:3a: ad:2a:89:20:36:18:c6:6e:45:e0:6e:01:4f:e6:04:bf:d8:bb: 7c:9a:9b:7d:f2:c4:72:a8:21:66:40:03:eb:13:ba:dd:53:9d: 32:7c:ed:54:40:cf:c0:e3:f0:7d:89:e7:92:98:97:e5:13:fe: bd:e3:e7:c7:e2:7a:30:2d:a2:93:93:63:79:f6:e9:77:c6:08: a2:84:0f:34 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/8dr3K/ZO9oDoJp9B9Q3gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5MTRkYTU2ZTFhOTM0NjQ5ZGEwMjk2NGFjMTJlYmEzNGM1 Y2I4NGYwHhcNMjYwMTAyMTgyMTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0N2RjOTAwZDRhNjhmNmE0OGQ3YTVjNzQyOTBjNTYzYmQ3ZTZmNjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrobnzVIF6kR5FfolKW1QhPN6iQg jFF3cbnSKBXV4hd7na4dClxUKfEhPuzUMeQs0YnJ0fgmx9DdRCqtfTCoiIC+taNf w9bk00+wl7HsBRoOGmpa5SIq/ulaThScIhNpLZvSL6YJIn6SeYAGgDsZDpsn1rSJ QcxS+9NDkf0PByB88JzmH/h7V3+4QR5GUkpHt3uzQNX4QHtw25CucSQLsM/JSQr0 xoFpEYZMgtQ3H27SAQhlfdSGrPB2XYqNpfoqY0QxYX16HvqQAvhIu2RHe0SkQJFJ DEliDgHj3e/OBsdoiIEGExppDIRED0BTG6XC8BFEBdjr3XH+6P9jRxEkZQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFEfckA1KaPakjXpcdCkMVjvX5vYgMB8GA1UdIwQY MBaAFNkU2lbhqTRknaApZKwS66NMXLhPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlJUYVZ1R3BOR1Nkb0Nsa3JCTHJvMHhjdUU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS83YTExYjUtYTQwNS00MWNiLTgxY2It ZjZiY2NmMWU1MzFmLzEvUjl5UURVcG85cVNOZWx4MEtReFdPOWZtOWlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS83YTExYjUtYTQwNS00MWNiLTgxY2ItZjZiY2NmMWU1MzFm LzEvMlJUYVZ1R3BOR1Nkb0Nsa3JCTHJvMHhjdUU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhPjwjAN BgkqhkiG9w0BAQsFAAOCAQEAdXJFUfh1zy/3k3V0cBIpl7vJ6l+wU6LRYfnqTh5A BEZdWEpzMbmEHFQh7NzNK7qIZs5QUBqXTrlM05C+vgRQDjyoQMKDUiHMsS6Evp4e Bxdq3tAJaBeYouF/uQHJ1CnPrZuDZE6OcPiRjFDEJiZ5lreeoodrPPWviSjeZVw9 hCfABiw2NKwxIhzjaCVvSgv/YxUTbG4sAL4yyMUJ/+I5xG4BK/ZyrBorAh1WQTjU srljhIM6rSqJIDYYxm5F4G4BT+YEv9i7fJqbffLEcqghZkAD6xO63VOdMnztVEDP wOPwfYnnkpiX5RP+vePnx+J6MC2ik5Njefbpd8YIooQPNA== -----END CERTIFICATE-----Generated at Sun Jan 25 13:08:01 2026 by rpki-client