This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/a9jsfvYT5uq7cLphSIWekSBM3fE.roa File: a9jsfvYT5uq7cLphSIWekSBM3fE.roa (raw, json) Hash identifier: UxRKV2mmyTATSKYXQyGpA4Zfu3X4aIXNncXJMaKZcRI= Subject key identifier: 6B:D8:EC:7E:F6:13:E6:EA:BB:70:BA:61:48:85:9E:91:20:4C:DD:F1 Certificate issuer: /CN=f7b50c7e81d8cf264d1209b6ad5a3ccb82c16fdd Certificate serial: 019B7834E4892355C1E76029F9BF4CF96D6E Authority key identifier: F7:B5:0C:7E:81:D8:CF:26:4D:12:09:B6:AD:5A:3C:CB:82:C1:6F:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/a9jsfvYT5uq7cLphSIWekSBM3fE.roa Signing time: Thu 01 Jan 2026 06:18:10 +0000 ROA not before: Thu 01 Jan 2026 06:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43969 IP address blocks: 2a0a:c880::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:e4:89:23:55:c1:e7:60:29:f9:bf:4c:f9:6d:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7b50c7e81d8cf264d1209b6ad5a3ccb82c16fdd Validity Not Before: Jan 1 06:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6bd8ec7ef613e6eabb70ba6148859e91204cddf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:67:eb:44:02:92:18:6d:10:3b:1c:d8:df:4b: e5:52:ef:ce:90:56:9b:46:30:5f:2e:64:bc:64:c3: 45:80:1b:2b:0a:70:7e:c5:6a:ca:49:a2:f2:0e:29: 6b:89:25:93:d9:66:dd:db:d6:69:17:67:4c:0e:ac: 27:4f:3e:de:39:5a:a9:e9:0c:0c:2c:94:ac:52:d8: ba:5a:8c:6d:c8:99:e7:2e:a7:1d:9d:37:2b:2c:a7: 31:ef:6c:89:09:75:a4:0b:bb:be:6a:6c:a8:fd:bf: ff:07:45:60:92:21:2e:4d:85:aa:3d:89:63:b6:b7: 22:f5:13:fb:8b:e7:75:6a:98:fd:7b:97:55:ce:bb: 26:2b:40:95:1e:80:b9:5a:61:fa:62:29:e9:2f:41: cd:65:ff:43:27:88:ee:85:61:b5:1f:47:fe:e9:91: 35:63:d4:e9:65:ea:00:3d:b3:9d:80:5e:23:14:59: ec:d2:40:51:44:d3:fd:8b:e7:36:b7:46:92:75:94: 8e:31:e3:9a:bf:14:b9:37:12:7f:f5:5d:eb:c1:65: 40:0e:11:61:d8:25:bb:ca:6c:82:8a:a9:53:f8:69: e4:18:ad:25:cc:fd:b1:f1:95:ec:84:af:32:bb:e0: 4a:1d:c7:5e:e4:bf:da:02:ff:97:3a:3a:57:9f:05: 62:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:D8:EC:7E:F6:13:E6:EA:BB:70:BA:61:48:85:9E:91:20:4C:DD:F1 X509v3 Authority Key Identifier: keyid:F7:B5:0C:7E:81:D8:CF:26:4D:12:09:B6:AD:5A:3C:CB:82:C1:6F:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/a9jsfvYT5uq7cLphSIWekSBM3fE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:c880::/32 Signature Algorithm: sha256WithRSAEncryption 10:fd:47:02:bf:fe:a6:c7:05:0b:22:04:cb:20:ad:4a:c8:52: 0c:b5:0d:be:e0:46:f6:73:2c:5c:a9:a9:3c:e9:01:a8:a5:c4: 2a:d4:5a:5d:c8:3b:d1:61:6e:83:e5:c4:71:fc:a6:ee:72:c4: da:da:bb:7f:9c:11:9b:56:50:a8:1b:d2:d4:69:ce:53:33:75: 8f:08:11:e3:05:fe:45:a3:c9:03:26:fd:70:9b:69:81:43:b9: de:3e:e6:8c:bb:76:69:ae:b8:86:18:84:81:ce:89:c6:70:fc: 46:0d:97:24:10:50:f9:a2:68:91:8e:d6:4e:20:b7:c0:71:3d: 1f:27:58:56:15:a6:2c:fc:11:a4:51:b9:ee:e2:8c:f8:13:fa: 0c:e7:c3:2c:36:2a:4e:d5:4d:46:c4:eb:90:1f:fd:2b:93:61: 5d:ed:5f:9d:66:56:cc:dd:5d:5a:22:6a:05:9a:a4:5b:c1:3a: 1a:ef:fe:a2:28:ac:4a:e2:50:21:88:8c:27:d5:2d:68:24:a7: fc:13:0f:ba:e5:92:d0:09:8f:1b:ae:78:c2:47:b6:62:8e:ca: 13:1b:cb:a7:01:0f:0c:69:22:7b:06:06:de:7b:ef:dc:c0:dc: a5:77:02:2a:c1:5c:b6:1f:26:b8:fb:2d:c3:47:84:0f:9a:80: 3c:98:0e:78 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4NOSJI1XB52Ap+b9M+W1uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3YjUwYzdlODFkOGNmMjY0ZDEyMDliNmFkNWEzY2NiODJj MTZmZGQwHhcNMjYwMTAxMDYxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YmQ4ZWM3ZWY2MTNlNmVhYmI3MGJhNjE0ODg1OWU5MTIwNGNkZGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8GfrRAKSGG0QOxzY30vlUu/OkFab RjBfLmS8ZMNFgBsrCnB+xWrKSaLyDilriSWT2Wbd29ZpF2dMDqwnTz7eOVqp6QwM LJSsUti6WoxtyJnnLqcdnTcrLKcx72yJCXWkC7u+amyo/b//B0VgkiEuTYWqPYlj trci9RP7i+d1apj9e5dVzrsmK0CVHoC5WmH6YinpL0HNZf9DJ4juhWG1H0f+6ZE1 Y9TpZeoAPbOdgF4jFFns0kBRRNP9i+c2t0aSdZSOMeOavxS5NxJ/9V3rwWVADhFh 2CW7ymyCiqlT+GnkGK0lzP2x8ZXshK8yu+BKHcde5L/aAv+XOjpXnwVipQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFGvY7H72E+bqu3C6YUiFnpEgTN3xMB8GA1UdIwQY MBaAFPe1DH6B2M8mTRIJtq1aPMuCwW/dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTdVTWZvSFl6eVpORWdtMnJWbzh5NExCYjkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi83MzJhODctNGRiMC00ZWYxLWJhZmIt YWM0MDE2MTIwY2I5LzEvYTlqc2Z2WVQ1dXE3Y0xwaFNJV2VrU0JNM2ZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi83MzJhODctNGRiMC00ZWYxLWJhZmItYWM0MDE2MTIwY2I5 LzEvOTdVTWZvSFl6eVpORWdtMnJWbzh5NExCYjkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgrIgDAN BgkqhkiG9w0BAQsFAAOCAQEAEP1HAr/+pscFCyIEyyCtSshSDLUNvuBG9nMsXKmp POkBqKXEKtRaXcg70WFug+XEcfym7nLE2tq7f5wRm1ZQqBvS1GnOUzN1jwgR4wX+ RaPJAyb9cJtpgUO53j7mjLt2aa64hhiEgc6JxnD8Rg2XJBBQ+aJokY7WTiC3wHE9 HydYVhWmLPwRpFG57uKM+BP6DOfDLDYqTtVNRsTrkB/9K5NhXe1fnWZWzN1dWiJq BZqkW8E6Gu/+oiisSuJQIYiMJ9UtaCSn/BMPuuWS0AmPG654wke2Yo7KExvLpwEP DGkiewYG3nvv3MDcpXcCKsFcth8muPstw0eED5qAPJgOeA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:15:16 2026 by rpki-client