This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/J99XeamfX85WdvVj9bf7jMIVc1M.roa File: J99XeamfX85WdvVj9bf7jMIVc1M.roa (raw, json) Hash identifier: mqf7/m5EBvBpIA8HdJaRPy8S8x76AjMtaSPox8GG7EU= Subject key identifier: 27:DF:57:79:A9:9F:5F:CE:56:76:F5:63:F5:B7:FB:8C:C2:15:73:53 Certificate issuer: /CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Certificate serial: 019B76EAFC035DD0FF4735CD6466574AE835 Authority key identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/J99XeamfX85WdvVj9bf7jMIVc1M.roa Signing time: Thu 01 Jan 2026 00:17:49 +0000 ROA not before: Thu 01 Jan 2026 00:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48446 IP address blocks: 2a02:c47:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:fc:03:5d:d0:ff:47:35:cd:64:66:57:4a:e8:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Validity Not Before: Jan 1 00:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27df5779a99f5fce5676f563f5b7fb8cc2157353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:50:07:cc:85:bb:18:16:4f:00:36:88:68:36: 82:00:17:48:06:90:93:d8:66:31:34:cb:f3:59:a4: 32:18:33:35:95:61:50:d3:71:85:e9:3e:50:13:d4: 3e:75:2a:24:4b:60:38:db:0c:7a:e9:9e:56:ec:cf: e4:b1:61:ef:bf:68:2e:db:54:85:33:85:96:df:62: 1d:93:06:e0:75:5f:6e:1d:65:b4:6c:92:e6:b8:b3: 06:75:ec:de:cd:96:99:1a:ed:8a:ee:8b:ce:75:0b: 1b:6d:9b:ae:4c:3c:52:c9:4e:18:0b:10:dd:ce:d5: c4:d2:54:88:0a:49:57:5e:e7:a9:89:89:b7:ed:e2: 41:0c:64:6c:ed:04:6c:79:3f:e8:b7:50:79:57:b0: 79:e6:3f:be:b2:be:fe:8a:42:f6:6e:d2:72:e7:a0: 41:3d:30:e8:43:bd:95:7d:26:62:71:84:fd:43:73: 06:29:1c:77:1c:4f:18:e0:47:36:20:04:53:b0:f2: af:9c:31:3d:1f:e2:78:50:6c:be:7c:a1:4f:04:db: ad:82:82:a5:6c:9d:72:f6:4c:53:b8:5b:64:b4:cf: 79:60:6f:02:19:1d:65:f7:3b:99:ba:e8:3d:b1:48: d6:25:e4:b6:dd:9b:c2:4d:7d:22:0d:f2:a3:d5:78: 60:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:DF:57:79:A9:9F:5F:CE:56:76:F5:63:F5:B7:FB:8C:C2:15:73:53 X509v3 Authority Key Identifier: keyid:89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/J99XeamfX85WdvVj9bf7jMIVc1M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:c47:4::/48 Signature Algorithm: sha256WithRSAEncryption 1a:86:6f:db:45:77:38:60:73:38:05:3f:10:65:c4:2f:7c:54: e2:e9:16:9f:20:0f:c2:bf:35:b0:c8:da:ff:a9:f9:1e:e0:16: ac:e1:8b:8e:86:3e:60:e1:3d:1b:0b:24:58:5b:75:f2:1c:ce: c2:df:66:eb:3b:22:40:75:89:e1:ac:63:f4:59:e6:ff:11:57: e5:4d:75:e7:af:2f:3e:4a:0d:13:80:03:b9:b2:bf:63:b4:7f: 1c:4f:a2:b3:ba:93:97:8e:65:8d:3d:70:ab:0c:f3:f6:e2:b9: 8b:49:52:32:34:13:4b:3b:49:d7:11:f0:68:7d:fc:69:60:ca: 57:13:76:e9:62:74:39:ba:36:e8:8b:0d:c0:c5:56:21:8e:a3: c3:e2:a2:a7:74:71:7e:4c:e1:72:75:78:4a:d5:9a:8b:df:b4: d8:eb:d8:b9:e4:ac:75:95:6e:36:73:76:75:e4:0f:5b:53:43: 0f:d7:ce:9c:cc:ba:a5:2d:ac:2f:34:64:6f:4f:9e:8c:a7:ca: ca:05:b9:59:fb:c1:48:ed:71:8b:06:75:10:40:3d:80:1b:e7: bb:72:c9:56:52:70:85:d1:f0:0e:20:08:be:d9:96:c6:0f:7d: d1:c0:d1:96:ac:b6:32:53:05:47:4d:97:94:81:f8:4e:5a:7f: 31:57:6b:ab -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt26vwDXdD/RzXNZGZXSug1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YTZjZDlmNGJlYjdiMGMwNGQzMWZmZTVjNjc0YTg3YTc3 MzlkMjEwHhcNMjYwMTAxMDAxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyN2RmNTc3OWE5OWY1ZmNlNTY3NmY1NjNmNWI3ZmI4Y2MyMTU3MzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21AHzIW7GBZPADaIaDaCABdIBpCT 2GYxNMvzWaQyGDM1lWFQ03GF6T5QE9Q+dSokS2A42wx66Z5W7M/ksWHvv2gu21SF M4WW32IdkwbgdV9uHWW0bJLmuLMGdezezZaZGu2K7ovOdQsbbZuuTDxSyU4YCxDd ztXE0lSICklXXuepiYm37eJBDGRs7QRseT/ot1B5V7B55j++sr7+ikL2btJy56BB PTDoQ72VfSZicYT9Q3MGKRx3HE8Y4Ec2IARTsPKvnDE9H+J4UGy+fKFPBNutgoKl bJ1y9kxTuFtktM95YG8CGR1l9zuZuug9sUjWJeS23ZvCTX0iDfKj1Xhg1wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCffV3mpn1/OVnb1Y/W3+4zCFXNTMB8GA1UdIwQY MBaAFImmzZ9L63sMBNMf/lxnSoenc50hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYt MWY5MjQ0OTVmY2RkLzEvSjk5WGVhbWZYODVXZHZWajliZjdqTUlWYzFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYtMWY5MjQ0OTVmY2Rk LzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgIMRwAE MA0GCSqGSIb3DQEBCwUAA4IBAQAahm/bRXc4YHM4BT8QZcQvfFTi6RafIA/CvzWw yNr/qfke4Bas4YuOhj5g4T0bCyRYW3XyHM7C32brOyJAdYnhrGP0Web/EVflTXXn ry8+Sg0TgAO5sr9jtH8cT6KzupOXjmWNPXCrDPP24rmLSVIyNBNLO0nXEfBoffxp YMpXE3bpYnQ5ujboiw3AxVYhjqPD4qKndHF+TOFydXhK1ZqL37TY69i55Kx1lW42 c3Z15A9bU0MP186czLqlLawvNGRvT56Mp8rKBblZ+8FI7XGLBnUQQD2AG+e7cslW UnCF0fAOIAi+2ZbGD33RwNGWrLYyUwVHTZeUgfhOWn8xV2ur -----END CERTIFICATE-----Generated at Mon Jan 26 02:01:40 2026 by rpki-client