This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/N9fOb5o_lEC84F_KqcX-cFrp5vc.roa File: N9fOb5o_lEC84F_KqcX-cFrp5vc.roa (raw, json) Hash identifier: EFcD7czYRge4Jz7yZcyL00HN/fp+QSX09dQR2RLa4Ws= Subject key identifier: 37:D7:CE:6F:9A:3F:94:40:BC:E0:5F:CA:A9:C5:FE:70:5A:E9:E6:F7 Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce Certificate serial: 019B7CEDEC4B97BFDD951570C5DCE8300232 Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/N9fOb5o_lEC84F_KqcX-cFrp5vc.roa Signing time: Fri 02 Jan 2026 04:18:45 +0000 ROA not before: Fri 02 Jan 2026 04:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136918 IP address blocks: 2a05:1082:1::/48 maxlen: 48 2a05:1082:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:ec:4b:97:bf:dd:95:15:70:c5:dc:e8:30:02:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce Validity Not Before: Jan 2 04:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=37d7ce6f9a3f9440bce05fcaa9c5fe705ae9e6f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:db:01:45:f1:5b:83:55:c4:b6:9f:2a:3a:ae: 14:81:44:0d:ff:51:b8:c5:37:46:66:38:75:cb:27: 0f:2d:60:c7:da:8b:c4:0a:03:a0:59:f8:dd:d8:8d: f1:7c:30:43:fa:65:a2:73:be:71:b9:8e:ac:95:37: 87:4c:8e:7e:27:72:31:47:99:9a:4d:7e:f6:58:ae: 09:ab:0e:85:29:8a:a7:32:69:5a:b2:95:7b:3d:56: 8c:b3:5c:58:02:77:c1:51:72:a4:ed:0b:b7:dc:1c: fd:ef:7b:8e:9e:42:16:01:3d:41:e5:af:0e:5a:c7: 2c:3e:63:3c:94:c3:d2:5d:7a:dd:f8:a1:00:1e:bd: 1d:50:90:2d:a3:06:17:a7:aa:be:33:4c:63:66:8c: 18:a5:8c:ce:84:be:ec:19:ed:4b:eb:c0:fa:0d:d9: ec:76:11:fe:ff:ee:d6:64:ff:f4:53:c4:f4:2b:52: 82:46:b3:44:e6:df:ee:62:fa:2b:48:cd:eb:4c:07: 80:89:aa:c2:c0:71:96:85:86:70:64:ff:f6:b7:5b: d5:3a:65:5d:35:01:6d:72:a9:ca:f3:20:75:38:1d: ae:71:42:3e:cb:e9:9b:b1:12:1d:bf:ef:85:f0:bc: e8:43:05:29:ba:7d:ec:c4:50:72:1c:16:0b:23:5e: 08:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:D7:CE:6F:9A:3F:94:40:BC:E0:5F:CA:A9:C5:FE:70:5A:E9:E6:F7 X509v3 Authority Key Identifier: keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/N9fOb5o_lEC84F_KqcX-cFrp5vc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:1082:1::/48 2a05:1082:5::/48 Signature Algorithm: sha256WithRSAEncryption 03:87:ca:50:4e:dd:25:4b:68:bb:fb:bd:51:bd:bd:2a:80:c9: 0a:39:09:f9:30:f5:4f:bf:fc:c0:03:d0:44:ba:de:9b:dd:12: f8:31:c8:17:d0:ec:fe:9d:49:35:72:29:05:5c:d4:93:d2:7e: 26:44:c6:f4:dd:59:24:8f:56:25:2e:33:b7:96:9e:b8:c2:10: 9f:ef:15:fa:e3:2f:7a:db:54:79:11:73:dd:0f:ab:15:df:08: a5:eb:d7:45:60:cb:d2:e8:0d:31:a5:db:f6:70:2c:8c:f6:66: 9d:18:0b:93:0c:01:ee:d5:83:67:d9:c3:85:03:99:7e:5f:3c: 16:ae:a9:b7:e4:54:1c:af:fc:61:66:9e:74:42:32:c3:a9:6c: 81:63:6e:93:0b:53:f9:42:c7:72:74:e8:c3:e1:81:c1:8a:83: 75:6d:1a:0f:6e:dc:10:3a:a3:ba:08:9e:c5:b4:c3:1b:d2:a9: c9:83:55:66:be:47:e3:9d:c6:cc:f8:d1:d9:b2:d5:03:69:66: 1e:d5:d2:12:f1:61:8e:67:a1:3c:c5:ae:ed:ed:bc:b5:18:65: bf:23:10:67:5f:66:47:7b:04:ed:db:2f:b9:61:0e:78:8a:73: 6d:7c:d3:c9:8a:13:42:50:ca:59:46:2e:ac:21:ef:10:ce:91: 62:7b:8f:67 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt87exLl7/dlRVwxdzoMAIyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczYzY5ZDA0NTgzNTAwYzVlZjgxMTM2ODMxMjM3NTkzZTBi Yjg2Y2UwHhcNMjYwMTAyMDQxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzN2Q3Y2U2ZjlhM2Y5NDQwYmNlMDVmY2FhOWM1ZmU3MDVhZTllNmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NsBRfFbg1XEtp8qOq4UgUQN/1G4 xTdGZjh1yycPLWDH2ovECgOgWfjd2I3xfDBD+mWic75xuY6slTeHTI5+J3IxR5ma TX72WK4Jqw6FKYqnMmlaspV7PVaMs1xYAnfBUXKk7Qu33Bz973uOnkIWAT1B5a8O WscsPmM8lMPSXXrd+KEAHr0dUJAtowYXp6q+M0xjZowYpYzOhL7sGe1L68D6Ddns dhH+/+7WZP/0U8T0K1KCRrNE5t/uYvorSM3rTAeAiarCwHGWhYZwZP/2t1vVOmVd NQFtcqnK8yB1OB2ucUI+y+mbsRIdv++F8LzoQwUpun3sxFByHBYLI14IcwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDfXzm+aP5RAvOBfyqnF/nBa6eb3MB8GA1UdIwQY MBaAFHPGnQRYNQDF74ETaDEjdZPgu4bOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQt ZjljYjBhN2IyMDZjLzEvTjlmT2I1b19sRUM4NEZfS3FjWC1jRnJwNXZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQtZjljYjBhN2IyMDZj LzEvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgUQggAB AwcAKgUQggAFMA0GCSqGSIb3DQEBCwUAA4IBAQADh8pQTt0lS2i7+71Rvb0qgMkK OQn5MPVPv/zAA9BEut6b3RL4McgX0Oz+nUk1cikFXNST0n4mRMb03Vkkj1YlLjO3 lp64whCf7xX64y9621R5EXPdD6sV3wil69dFYMvS6A0xpdv2cCyM9madGAuTDAHu 1YNn2cOFA5l+XzwWrqm35FQcr/xhZp50QjLDqWyBY26TC1P5QsdydOjD4YHBioN1 bRoPbtwQOqO6CJ7FtMMb0qnJg1VmvkfjncbM+NHZstUDaWYe1dIS8WGOZ6E8xa7t 7by1GGW/IxBnX2ZHewTt2y+5YQ54inNtfNPJihNCUMpZRi6sIe8QzpFie49n -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:47 2026 by rpki-client