This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9b30d2-efb5-4873-ac5c-0096d2bf7e98/1/fXpodyVA3WZ3yE6AFcycQEQ4zL8.roa File: fXpodyVA3WZ3yE6AFcycQEQ4zL8.roa (raw, json) Hash identifier: qo/0VSFdRTlbBUdogpMuZyTuh2Z1RS6/CzcPPqWEZ+o= Subject key identifier: 7D:7A:68:77:25:40:DD:66:77:C8:4E:80:15:CC:9C:40:44:38:CC:BF Certificate issuer: /CN=9cb352a5bdc622937b63787d4da8124f77201bbf Certificate serial: 019BC383467F18D0F84761F5FDB69266B807 Authority key identifier: 9C:B3:52:A5:BD:C6:22:93:7B:63:78:7D:4D:A8:12:4F:77:20:1B:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLNSpb3GIpN7Y3h9TagST3cgG78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/9b30d2-efb5-4873-ac5c-0096d2bf7e98/1/fXpodyVA3WZ3yE6AFcycQEQ4zL8.roa Signing time: Thu 15 Jan 2026 21:15:18 +0000 ROA not before: Thu 15 Jan 2026 21:15:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204235 IP address blocks: 2a05:cfc0:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/9b30d2-efb5-4873-ac5c-0096d2bf7e98/1/nLNSpb3GIpN7Y3h9TagST3cgG78.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/9b30d2-efb5-4873-ac5c-0096d2bf7e98/1/nLNSpb3GIpN7Y3h9TagST3cgG78.mft rsync://rpki.ripe.net/repository/DEFAULT/nLNSpb3GIpN7Y3h9TagST3cgG78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c3:83:46:7f:18:d0:f8:47:61:f5:fd:b6:92:66:b8:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cb352a5bdc622937b63787d4da8124f77201bbf Validity Not Before: Jan 15 21:15:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d7a68772540dd6677c84e8015cc9c404438ccbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8e:d0:6b:b0:9e:17:8f:47:f4:77:60:5d:36: 04:c8:ba:ea:33:4c:07:ab:0d:87:43:fc:b3:df:ca: 69:b9:63:b2:5a:a4:bb:a8:1b:77:65:91:91:99:6e: fd:19:f4:0b:73:c8:3e:a8:a0:73:43:fd:48:2e:7a: 48:04:75:45:d7:44:90:a0:69:8f:5f:27:78:41:de: 84:07:bd:18:28:8c:3a:dd:81:c9:29:7c:f7:94:7b: 90:c7:20:28:b9:ef:af:86:33:3a:ff:f3:93:b2:f2: 62:3d:d8:58:ab:c7:e5:73:59:b1:5c:aa:c9:a5:70: bb:ea:97:ce:b7:51:50:04:58:e7:fc:74:fd:52:be: 43:79:67:8f:cf:bf:04:1f:6c:2a:d5:96:8c:d9:1f: 59:51:26:72:fb:63:fc:4e:a4:88:59:55:f6:03:ea: f7:cd:48:73:ae:34:97:f6:aa:93:26:d6:f6:36:d4: d9:41:c0:48:e5:c6:ae:5d:7f:b5:d7:f5:c1:51:f9: 11:00:79:31:c7:3b:36:73:77:ab:38:ff:05:a1:5b: 51:e3:42:5a:37:5d:94:bf:f1:75:81:0f:23:88:67: 88:29:61:64:1c:a1:5f:21:f4:51:b2:ec:56:f9:3e: d5:5e:db:42:c8:f9:ff:b2:29:dd:fb:c4:9c:e9:f6: ff:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:7A:68:77:25:40:DD:66:77:C8:4E:80:15:CC:9C:40:44:38:CC:BF X509v3 Authority Key Identifier: keyid:9C:B3:52:A5:BD:C6:22:93:7B:63:78:7D:4D:A8:12:4F:77:20:1B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLNSpb3GIpN7Y3h9TagST3cgG78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9b30d2-efb5-4873-ac5c-0096d2bf7e98/1/fXpodyVA3WZ3yE6AFcycQEQ4zL8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9b30d2-efb5-4873-ac5c-0096d2bf7e98/1/nLNSpb3GIpN7Y3h9TagST3cgG78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:cfc0:5::/48 Signature Algorithm: sha256WithRSAEncryption 81:f7:5a:f1:f2:f5:11:0b:6e:e0:b9:39:15:95:7b:0c:63:59: 92:6b:14:5a:41:1e:c8:b6:58:d9:da:65:92:96:00:36:1a:a5: e3:1d:30:45:57:be:23:5a:51:1e:7f:f9:9d:27:f1:85:33:4f: b2:38:5b:df:a9:fe:8a:b2:89:66:0e:62:7a:4f:13:99:48:0e: b2:6d:01:26:04:b2:e6:50:bf:6a:67:e3:5d:29:97:6e:3f:50: ec:9e:37:a6:05:b3:46:d1:ce:e1:6f:ae:1e:1e:08:0e:3d:f6: fc:85:a6:75:96:cb:fe:2e:46:96:8a:f1:ff:08:66:02:02:77: 83:9c:4a:5d:00:6d:ca:3b:f8:85:66:19:ef:58:18:f7:21:3e: 30:72:d1:8f:05:a9:03:44:c0:f0:cf:23:a1:26:d1:05:06:f2: 72:e3:95:b5:63:b9:87:c1:75:d5:f4:b6:3b:a3:32:52:31:98: 36:6c:66:8c:00:e0:6d:e9:a1:74:ae:e2:8e:69:27:3f:77:ce: a2:8d:1d:ab:e8:2e:03:65:6f:c6:ea:84:c9:29:69:2c:89:07: 34:80:19:dc:36:18:b4:73:39:b7:be:01:9d:5c:c8:d9:2b:0e: 03:9d:24:9c:67:08:53:d0:74:88:24:f2:38:c5:d9:c1:64:96: 9c:06:5a:4e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZvDg0Z/GND4R2H1/baSZrgHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYjM1MmE1YmRjNjIyOTM3YjYzNzg3ZDRkYTgxMjRmNzcy MDFiYmYwHhcNMjYwMTE1MjExNTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDdhNjg3NzI1NDBkZDY2NzdjODRlODAxNWNjOWM0MDQ0MzhjY2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmY7Qa7CeF49H9HdgXTYEyLrqM0wH qw2HQ/yz38ppuWOyWqS7qBt3ZZGRmW79GfQLc8g+qKBzQ/1ILnpIBHVF10SQoGmP Xyd4Qd6EB70YKIw63YHJKXz3lHuQxyAoue+vhjM6//OTsvJiPdhYq8flc1mxXKrJ pXC76pfOt1FQBFjn/HT9Ur5DeWePz78EH2wq1ZaM2R9ZUSZy+2P8TqSIWVX2A+r3 zUhzrjSX9qqTJtb2NtTZQcBI5cauXX+11/XBUfkRAHkxxzs2c3erOP8FoVtR40Ja N12Uv/F1gQ8jiGeIKWFkHKFfIfRRsuxW+T7VXttCyPn/sind+8Sc6fb/wwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFH16aHclQN1md8hOgBXMnEBEOMy/MB8GA1UdIwQY MBaAFJyzUqW9xiKTe2N4fU2oEk93IBu/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkxOU3BiM0dJcE43WTNoOVRhZ1NUM2NnRzc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85YjMwZDItZWZiNS00ODczLWFjNWMt MDA5NmQyYmY3ZTk4LzEvZlhwb2R5VkEzV1ozeUU2QUZjeWNRRVE0ekw4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi85YjMwZDItZWZiNS00ODczLWFjNWMtMDA5NmQyYmY3ZTk4 LzEvbkxOU3BiM0dJcE43WTNoOVRhZ1NUM2NnRzc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXPwAAF MA0GCSqGSIb3DQEBCwUAA4IBAQCB91rx8vURC27guTkVlXsMY1mSaxRaQR7ItljZ 2mWSlgA2GqXjHTBFV74jWlEef/mdJ/GFM0+yOFvfqf6KsolmDmJ6TxOZSA6ybQEm BLLmUL9qZ+NdKZduP1DsnjemBbNG0c7hb64eHggOPfb8haZ1lsv+LkaWivH/CGYC AneDnEpdAG3KO/iFZhnvWBj3IT4wctGPBakDRMDwzyOhJtEFBvJy45W1Y7mHwXXV 9LY7ozJSMZg2bGaMAOBt6aF0ruKOaSc/d86ijR2r6C4DZW/G6oTJKWksiQc0gBnc Nhi0czm3vgGdXMjZKw4DnSScZwhT0HSIJPI4xdnBZJacBlpO -----END CERTIFICATE-----Generated at Mon Jan 26 01:01:45 2026 by rpki-client