This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/h9cJ8djqQtBviihaq4ao526E_0o.roa File: h9cJ8djqQtBviihaq4ao526E_0o.roa (raw, json) Hash identifier: QQqAfzwPyXDoi3NQWDhEhtDBcPOcV5HPPvE/lan3w+c= Subject key identifier: 87:D7:09:F1:D8:EA:42:D0:6F:8A:28:5A:AB:86:A8:E7:6E:84:FF:4A Certificate issuer: /CN=4cad0397487799e2118ff4cbcf8f159747f35891 Certificate serial: 019B7AC8B33FFD07E69B608D2AA925390C9C Authority key identifier: 4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/h9cJ8djqQtBviihaq4ao526E_0o.roa Signing time: Thu 01 Jan 2026 18:18:52 +0000 ROA not before: Thu 01 Jan 2026 18:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200995 IP address blocks: 212.72.236.0/22 maxlen: 24 2001:7bb::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:b3:3f:fd:07:e6:9b:60:8d:2a:a9:25:39:0c:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cad0397487799e2118ff4cbcf8f159747f35891 Validity Not Before: Jan 1 18:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87d709f1d8ea42d06f8a285aab86a8e76e84ff4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b4:23:83:dd:d2:ad:97:3f:7e:47:47:ab:2e: 60:99:6b:ad:d9:dd:45:4c:af:47:5b:41:9a:70:05: 31:11:a4:02:6f:ca:16:dd:33:47:41:72:03:e4:28: 57:f9:0e:65:63:c5:d0:60:36:2a:27:17:4b:45:27: 9f:07:31:18:04:73:d6:8d:82:a9:30:39:82:75:7a: 85:3c:02:38:31:b6:4c:fa:2e:65:ab:42:d0:7d:e7: b0:25:98:03:4d:6e:de:ea:fe:e2:d7:f2:79:f0:06: fc:a3:db:16:0b:5d:7d:89:26:90:8b:33:8f:05:a1: 1f:a2:9c:fc:0e:97:cf:b9:db:d0:24:0e:21:ef:d3: 8f:bd:c8:9c:76:cf:1f:f0:e9:a5:f6:5c:d0:5f:79: 29:46:03:a3:ab:6d:49:c4:f1:21:36:1a:9e:b2:37: 9d:33:82:f4:60:52:e3:65:56:a4:32:66:d9:47:f3: 2f:4a:a5:89:82:3a:7e:be:c9:6d:51:3c:63:24:05: a6:6a:76:30:89:5d:78:fc:91:e9:03:0d:c8:58:5f: ac:1d:27:1d:38:d5:05:5f:44:31:cc:eb:2c:28:31: f4:87:3e:9d:8e:ac:38:6b:72:d8:f2:d7:df:a6:08: 64:8b:ea:f9:22:53:89:04:dc:a1:92:b8:e8:08:d1: 3c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D7:09:F1:D8:EA:42:D0:6F:8A:28:5A:AB:86:A8:E7:6E:84:FF:4A X509v3 Authority Key Identifier: keyid:4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/h9cJ8djqQtBviihaq4ao526E_0o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.72.236.0/22 IPv6: 2001:7bb::/32 Signature Algorithm: sha256WithRSAEncryption a2:07:30:71:af:4a:0a:9a:5b:4f:b4:6d:e0:33:2e:09:f2:80: 89:da:a6:77:b2:a2:f7:21:93:d5:1b:47:80:19:24:95:b6:eb: 1c:ba:fc:25:33:e2:95:07:3c:04:9b:72:9a:6d:9f:d9:cc:2c: 86:f6:eb:f6:50:29:42:e4:7b:dd:8b:28:e7:ce:12:2e:57:78: 08:a9:04:d4:cd:77:08:bd:d5:f5:8c:9a:9b:8f:18:cc:1d:7e: e6:7f:75:9d:a4:37:ba:91:2c:cf:71:2a:d9:e6:df:40:d0:f3: cf:2e:3b:4d:a5:1f:29:be:03:39:e8:e1:64:c8:87:00:41:f2: 08:33:8e:67:d7:4e:10:f2:8a:2d:72:d2:ae:ea:4a:cd:7b:1e: 41:f4:bb:df:0e:56:12:23:5a:fc:f6:7c:f2:d7:f8:3b:9a:f4: fa:18:f5:dc:74:00:0b:17:b2:8f:78:a4:59:49:cc:67:9d:09: f7:ca:56:9d:39:f1:1b:8d:fc:18:81:27:94:65:12:b1:35:96: 84:28:62:0d:dd:8b:c7:50:76:72:25:55:f1:3f:4a:d5:dd:e1: f8:09:7d:54:9e:bc:b4:b2:da:45:ce:9f:9b:b3:77:38:eb:73: 4d:9a:ff:7b:2a:31:3b:38:4a:13:ef:ca:30:f2:39:02:c7:28: 6f:43:47:a4 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6yLM//Qfmm2CNKqklOQycMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYWQwMzk3NDg3Nzk5ZTIxMThmZjRjYmNmOGYxNTk3NDdm MzU4OTEwHhcNMjYwMTAxMTgxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4N2Q3MDlmMWQ4ZWE0MmQwNmY4YTI4NWFhYjg2YThlNzZlODRmZjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbQjg93SrZc/fkdHqy5gmWut2d1F TK9HW0GacAUxEaQCb8oW3TNHQXID5ChX+Q5lY8XQYDYqJxdLRSefBzEYBHPWjYKp MDmCdXqFPAI4MbZM+i5lq0LQfeewJZgDTW7e6v7i1/J58Ab8o9sWC119iSaQizOP BaEfopz8DpfPudvQJA4h79OPvcicds8f8Oml9lzQX3kpRgOjq21JxPEhNhqesjed M4L0YFLjZVakMmbZR/MvSqWJgjp+vsltUTxjJAWmanYwiV14/JHpAw3IWF+sHScd ONUFX0QxzOssKDH0hz6djqw4a3LY8tffpghki+r5IlOJBNyhkrjoCNE8/QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFIfXCfHY6kLQb4ooWquGqOduhP9KMB8GA1UdIwQY MBaAFEytA5dId5niEY/0y8+PFZdH81iRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEswRGwwaDNtZUlSal9UTHo0OFZsMGZ6V0pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9lYTAxOTYtYWI3OS00MmNmLWFiMmIt ZmM0YjAzNzEwYWUwLzEvaDljSjhkanFRdEJ2aWloYXE0YW81MjZFXzBvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9lYTAxOTYtYWI3OS00MmNmLWFiMmItZmM0YjAzNzEwYWUw LzEvVEswRGwwaDNtZUlSal9UTHo0OFZsMGZ6V0pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQC1EjsMA0E AgACMAcDBQAgAQe7MA0GCSqGSIb3DQEBCwUAA4IBAQCiBzBxr0oKmltPtG3gMy4J 8oCJ2qZ3sqL3IZPVG0eAGSSVtuscuvwlM+KVBzwEm3KabZ/ZzCyG9uv2UClC5Hvd iyjnzhIuV3gIqQTUzXcIvdX1jJqbjxjMHX7mf3WdpDe6kSzPcSrZ5t9A0PPPLjtN pR8pvgM56OFkyIcAQfIIM45n104Q8ootctKu6krNex5B9LvfDlYSI1r89nzy1/g7 mvT6GPXcdAALF7KPeKRZScxnnQn3yladOfEbjfwYgSeUZRKxNZaEKGIN3YvHUHZy JVXxP0rV3eH4CX1Unry0stpFzp+bs3c463NNmv97KjE7OEoT78ow8jkCxyhvQ0ek -----END CERTIFICATE-----Generated at Sun Jan 25 21:20:51 2026 by rpki-client