This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/9Cp-MTJ4qLd92W1VLnGQl0LXr-c.roa File: 9Cp-MTJ4qLd92W1VLnGQl0LXr-c.roa (raw, json) Hash identifier: 5gwGzTjze+ZsjYP/6JdA+Sy/zd3Nz2uvd4XnkQoXRfg= Subject key identifier: F4:2A:7E:31:32:78:A8:B7:7D:D9:6D:55:2E:71:90:97:42:D7:AF:E7 Certificate issuer: /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Certificate serial: 019B7F80D4D147B2DECF8B5CF177B3FACA34 Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/9Cp-MTJ4qLd92W1VLnGQl0LXr-c.roa Signing time: Fri 02 Jan 2026 16:18:28 +0000 ROA not before: Fri 02 Jan 2026 16:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29290 IP address blocks: 2a00:f10:141::/48 maxlen: 48 2a0b:8f80:100::/40 maxlen: 40 2a0b:8f80:101::/48 maxlen: 48 2a0b:8f80:103::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:d4:d1:47:b2:de:cf:8b:5c:f1:77:b3:fa:ca:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Validity Not Before: Jan 2 16:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f42a7e313278a8b77dd96d552e71909742d7afe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4d:c1:f8:a0:ae:24:5b:af:f1:0c:51:ad:87: 64:ac:69:dc:e8:62:43:76:27:38:25:b3:3b:8d:dc: 2b:c3:73:9d:31:fd:39:53:49:b4:45:54:eb:b4:01: 4f:aa:bb:60:85:53:e7:bd:9d:a8:ae:33:be:c4:7d: 17:a3:3c:fc:b8:f8:7d:72:df:2c:d9:6b:36:ff:03: 33:e9:ac:f1:8a:94:67:ff:e3:39:5f:79:b6:61:dc: 8e:1f:22:cb:31:79:35:ed:a5:84:4b:a2:86:70:b7: 67:28:98:31:70:8d:f1:16:c3:c3:c3:97:14:81:a4: ed:a1:6b:9b:da:0a:22:1a:b2:c4:76:ba:39:8c:30: 8a:02:50:83:58:62:86:6b:60:33:e9:22:47:2a:99: f1:42:ad:71:cb:41:af:73:1c:8e:77:66:f9:60:0c: 8d:dc:bf:1f:b8:4c:15:b2:0c:bb:53:9e:75:92:ff: 92:d6:36:7a:bf:8a:17:e7:f2:c0:4d:7d:b5:47:38: 21:54:6f:f8:f6:95:c6:ea:8b:87:b5:f5:a2:9d:2d: ef:b7:ee:35:cd:44:5a:af:8f:7d:92:5e:6a:83:39: 0e:c4:a7:de:5f:d0:d5:11:e3:95:9d:32:d3:b6:6f: ed:a5:d5:2e:4a:7b:4f:28:d7:15:87:36:a6:e5:82: 58:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:2A:7E:31:32:78:A8:B7:7D:D9:6D:55:2E:71:90:97:42:D7:AF:E7 X509v3 Authority Key Identifier: keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/9Cp-MTJ4qLd92W1VLnGQl0LXr-c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:f10:141::/48 2a0b:8f80:100::/40 Signature Algorithm: sha256WithRSAEncryption 7e:e0:48:ed:1b:b1:83:a4:6a:33:df:3c:aa:a1:72:6a:54:50: 78:90:51:a0:e2:0d:1e:ec:c5:db:3c:fd:dd:31:5b:d8:34:fb: 2b:95:c8:4c:28:72:2f:dd:72:c0:ca:6a:86:61:b2:c6:44:80: d8:a6:5b:0e:06:e0:84:73:d9:bb:bf:f1:51:bf:89:84:da:8b: 7a:a6:02:c9:61:92:b4:59:2e:e1:d6:18:9d:60:ed:ce:f5:02: 23:1d:44:02:33:dd:91:2f:95:bc:c4:6a:0f:5e:7f:5e:4f:bf: ba:ff:9b:01:a3:4d:32:fe:2b:52:82:38:77:a3:5f:98:61:ca: 47:30:c8:37:17:77:f2:5d:c7:1e:ce:79:4a:e8:74:33:9b:e1: 86:f0:ab:38:67:2a:c8:53:5a:33:21:0b:d7:df:bd:97:ce:c1: bd:5c:fc:03:50:64:4c:29:3b:6b:63:ed:a5:42:16:83:e2:88: 57:fa:71:b7:aa:29:e2:aa:ce:fe:68:26:f6:2c:14:91:97:94: f0:86:62:b6:a8:2e:74:fb:28:e6:13:68:74:f2:6e:57:72:c8: f9:6e:29:e1:b5:9f:cc:53:61:5d:84:32:2a:8c:44:aa:ab:d3: c8:c0:97:06:fe:f7:fe:bf:72:bf:91:dd:05:67:6b:78:81:b8: 6b:00:e1:7c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgISAZt/gNTRR7Lez4tc8Xez+so0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4OGM2NWRjMzU5YjU4Y2E2YmE1ZDNkYWViODc0ZjA1ODY4 NGU4YzYwHhcNMjYwMTAyMTYxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDJhN2UzMTMyNzhhOGI3N2RkOTZkNTUyZTcxOTA5NzQyZDdhZmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuk3B+KCuJFuv8QxRrYdkrGnc6GJD dic4JbM7jdwrw3OdMf05U0m0RVTrtAFPqrtghVPnvZ2orjO+xH0Xozz8uPh9ct8s 2Ws2/wMz6azxipRn/+M5X3m2YdyOHyLLMXk17aWES6KGcLdnKJgxcI3xFsPDw5cU gaTtoWub2goiGrLEdro5jDCKAlCDWGKGa2Az6SJHKpnxQq1xy0GvcxyOd2b5YAyN 3L8fuEwVsgy7U551kv+S1jZ6v4oX5/LATX21RzghVG/49pXG6ouHtfWinS3vt+41 zURar499kl5qgzkOxKfeX9DVEeOVnTLTtm/tpdUuSntPKNcVhzam5YJYzQIDAQAB o4ICFDCCAhAwHQYDVR0OBBYEFPQqfjEyeKi3fdltVS5xkJdC16/nMB8GA1UdIwQY MBaAFEiMZdw1m1jKa6XT2uuHTwWGhOjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQt YjBkNzJlOTEwZWZlLzEvOUNwLU1USjRxTGQ5MlcxVkxuR1FsMExYci1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQtYjBkNzJlOTEwZWZl LzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcAKgAPEAFB AwYAKguPgAEwDQYJKoZIhvcNAQELBQADggEBAH7gSO0bsYOkajPfPKqhcmpUUHiQ UaDiDR7sxds8/d0xW9g0+yuVyEwoci/dcsDKaoZhssZEgNimWw4G4IRz2bu/8VG/ iYTai3qmAslhkrRZLuHWGJ1g7c71AiMdRAIz3ZEvlbzEag9ef15Pv7r/mwGjTTL+ K1KCOHejX5hhykcwyDcXd/Jdxx7OeUrodDOb4YbwqzhnKshTWjMhC9ffvZfOwb1c /ANQZEwpO2tj7aVCFoPiiFf6cbeqKeKqzv5oJvYsFJGXlPCGYraoLnT7KOYTaHTy bldyyPluKeG1n8xTYV2EMiqMRKqr08jAlwb+9/6/cr+R3QVna3iBuGsA4Xw= -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:27 2026 by rpki-client