This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/9c4kttevmySnfkQUW_qfNzaHphg.roa File: 9c4kttevmySnfkQUW_qfNzaHphg.roa (raw, json) Hash identifier: /cAqDalO1CeZ8c8IzYLpRoSc0JDQhBthLLFNZ86hRlw= Subject key identifier: F5:CE:24:B6:D7:AF:9B:24:A7:7E:44:14:5B:FA:9F:37:36:87:A6:18 Certificate issuer: /CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44 Certificate serial: 019B797F1ACC036C17669A997CCF29F1F909 Authority key identifier: 29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/9c4kttevmySnfkQUW_qfNzaHphg.roa Signing time: Thu 01 Jan 2026 12:18:51 +0000 ROA not before: Thu 01 Jan 2026 12:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216349 IP address blocks: 2a14:c885:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:1a:cc:03:6c:17:66:9a:99:7c:cf:29:f1:f9:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44 Validity Not Before: Jan 1 12:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5ce24b6d7af9b24a77e44145bfa9f373687a618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9c:8c:15:4d:51:34:a7:60:b3:47:89:a3:9f: 74:87:9c:f3:9a:c3:9f:fa:23:cb:d5:68:1b:f9:cc: 2e:c3:cb:da:bd:be:6d:12:7b:04:de:f5:e0:c4:f5: 9b:43:4c:10:38:68:69:ea:18:62:7e:48:c8:62:f4: 5f:55:a3:27:87:b3:b3:12:d8:1d:fe:0b:c7:ba:c5: 15:11:6d:69:5e:37:a9:06:00:29:10:88:f2:36:9e: c9:70:c1:fa:48:de:e0:d7:01:a1:d5:cd:fe:31:35: 0d:19:c4:de:92:10:f9:0b:b6:a2:e1:24:ef:24:cd: 18:fb:f5:95:46:77:c6:7d:11:aa:3a:75:3b:b8:3c: 62:f0:88:b6:5a:15:63:9a:bf:4e:3a:75:99:c7:27: 3d:b6:30:79:2a:1d:62:6b:bb:c5:88:15:2b:a0:e9: 52:65:37:02:38:b2:8b:eb:14:d8:fd:88:6d:61:7f: ee:4c:47:58:fe:b7:84:a6:54:eb:b0:b3:13:a6:25: b0:51:89:83:bc:41:d8:b3:d7:63:7f:3f:bb:67:8f: 52:fa:0a:26:a8:15:34:3c:03:4e:05:15:a2:06:6c: 29:36:d9:a4:59:53:80:7a:87:38:af:7e:9f:4a:1f: 6c:79:e7:f0:b9:cc:a7:6e:32:01:30:82:c0:86:57: 32:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:CE:24:B6:D7:AF:9B:24:A7:7E:44:14:5B:FA:9F:37:36:87:A6:18 X509v3 Authority Key Identifier: keyid:29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/9c4kttevmySnfkQUW_qfNzaHphg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:c885:8000::/33 Signature Algorithm: sha256WithRSAEncryption 25:3e:d2:cd:62:5f:5c:58:1b:8e:31:44:e2:83:3e:06:81:74: 5a:48:ff:5b:51:9f:46:7f:aa:f4:d6:cf:80:63:e3:c2:4b:42: d0:02:84:63:8b:bf:9c:fd:fb:c5:ab:ce:17:96:2e:52:e2:85: 2e:da:0f:f6:0d:11:35:ec:34:f7:60:c1:06:53:f3:85:71:ab: ba:f1:19:24:2d:dd:cd:3e:e7:37:d4:ec:fd:11:30:04:e9:0d: 1a:8d:9e:1b:40:f2:e3:24:4b:f0:af:08:0c:f4:5d:ec:94:e8: 80:6a:b7:b6:7c:ac:59:bd:df:2b:03:26:57:28:9f:da:9b:e4: 4a:bd:4e:3a:17:c4:b5:3b:5d:2b:08:07:4a:37:fe:11:72:cf: 8e:d1:0a:bf:82:16:96:52:92:2b:4a:8f:81:1e:b5:b9:97:bc: d1:92:0d:fa:bc:a0:81:1d:0a:bc:58:db:60:11:9b:4c:71:e5: 5e:65:d4:a0:84:6e:6b:4a:fd:cc:52:4e:57:f9:b1:12:6e:0d: ea:02:31:69:05:c9:24:14:cd:08:7d:9a:09:22:27:8a:dd:ae: d5:29:af:ce:d2:6b:eb:0b:ac:01:3d:97:49:21:62:38:3f:9c: c7:26:e0:e0:91:51:0b:33:15:29:ee:02:4c:f0:38:70:d0:ea: 5a:38:c0:1c -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt5fxrMA2wXZpqZfM8p8fkJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZmE3ZGQ2M2YyZTJkODdiNWY3ODUwMDkzYzc0M2JiZmJl MTRlNDQwHhcNMjYwMTAxMTIxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNWNlMjRiNmQ3YWY5YjI0YTc3ZTQ0MTQ1YmZhOWYzNzM2ODdhNjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJyMFU1RNKdgs0eJo590h5zzmsOf +iPL1Wgb+cwuw8vavb5tEnsE3vXgxPWbQ0wQOGhp6hhifkjIYvRfVaMnh7OzEtgd /gvHusUVEW1pXjepBgApEIjyNp7JcMH6SN7g1wGh1c3+MTUNGcTekhD5C7ai4STv JM0Y+/WVRnfGfRGqOnU7uDxi8Ii2WhVjmr9OOnWZxyc9tjB5Kh1ia7vFiBUroOlS ZTcCOLKL6xTY/YhtYX/uTEdY/reEplTrsLMTpiWwUYmDvEHYs9djfz+7Z49S+gom qBU0PANOBRWiBmwpNtmkWVOAeoc4r36fSh9seefwucynbjIBMILAhlcyVQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFPXOJLbXr5skp35EFFv6nzc2h6YYMB8GA1UdIwQY MBaAFCn6fdY/Li2HtfeFAJPHQ7v74U5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUt NzlmN2I2ZWE3YzE0LzEvOWM0a3R0ZXZteVNuZmtRVVdfcWZOemFIcGhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUtNzlmN2I2ZWE3YzE0 LzEvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYHKhTIhYAw DQYJKoZIhvcNAQELBQADggEBACU+0s1iX1xYG44xROKDPgaBdFpI/1tRn0Z/qvTW z4Bj48JLQtAChGOLv5z9+8WrzheWLlLihS7aD/YNETXsNPdgwQZT84Vxq7rxGSQt 3c0+5zfU7P0RMATpDRqNnhtA8uMkS/CvCAz0XeyU6IBqt7Z8rFm93ysDJlcon9qb 5Eq9TjoXxLU7XSsIB0o3/hFyz47RCr+CFpZSkitKj4EetbmXvNGSDfq8oIEdCrxY 22ARm0xx5V5l1KCEbmtK/cxSTlf5sRJuDeoCMWkFySQUzQh9mgkiJ4rdrtUpr87S a+sLrAE9l0khYjg/nMcm4OCRUQszFSnuAkzwOHDQ6lo4wBw= -----END CERTIFICATE-----Generated at Sun Jan 25 19:17:49 2026 by rpki-client