This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/NSSQlOrPOrgrrd9-ZTzGtkfwtVs.roa File: NSSQlOrPOrgrrd9-ZTzGtkfwtVs.roa (raw, json) Hash identifier: 9kFMPyaLF5qIMaxcczVWwI0eVao3DCK511Yweh9osUI= Subject key identifier: 35:24:90:94:EA:CF:3A:B8:2B:AD:DF:7E:65:3C:C6:B6:47:F0:B5:5B Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0 Certificate serial: 019B7758ED0055874965A8D79D7B22C98099 Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/NSSQlOrPOrgrrd9-ZTzGtkfwtVs.roa Signing time: Thu 01 Jan 2026 02:17:55 +0000 ROA not before: Thu 01 Jan 2026 02:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210881 IP address blocks: 2a0f:5707:abd0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:ed:00:55:87:49:65:a8:d7:9d:7b:22:c9:80:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0 Validity Not Before: Jan 1 02:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35249094eacf3ab82baddf7e653cc6b647f0b55b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:62:b3:5e:aa:6d:3f:74:f1:2e:2c:30:09:52: 5a:86:cf:55:b8:06:a4:86:4d:6d:71:2a:fc:32:3c: 21:f9:89:4b:e7:68:4a:9b:0e:37:c3:21:33:96:f3: 55:60:14:a3:0e:66:90:33:1c:39:91:29:7b:9a:01: f7:4b:1e:d4:e2:95:de:a7:d2:e4:c0:30:b5:41:ce: e8:03:08:98:cb:fb:1e:49:26:58:8c:20:97:dd:40: 06:79:25:07:8a:03:43:0f:dd:2f:b9:f5:ec:90:0d: 59:d6:e3:af:80:19:74:f8:20:cb:c6:9d:d5:d1:d3: 94:2a:fa:6f:72:25:dc:de:04:1e:d7:05:6e:2f:b0: c7:72:9e:f7:5d:52:a5:06:fe:69:79:d0:ef:66:95: 96:f5:3b:98:4c:24:64:cb:3a:c7:73:24:2c:29:60: 12:48:a5:47:61:fe:f2:8b:19:f2:11:09:a8:80:2d: 3c:ef:96:90:16:c1:ac:b7:51:73:4e:38:7d:94:7a: 17:8a:24:8d:26:4f:6f:f3:6d:02:a0:23:c6:b3:1b: a6:62:63:64:53:4c:ca:88:76:ea:42:8f:14:c1:31: 7a:04:73:d2:64:64:23:40:72:ab:61:8a:16:0d:41: c2:04:18:f2:2d:6c:7d:bf:34:fc:c3:4c:2a:73:ef: 48:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:24:90:94:EA:CF:3A:B8:2B:AD:DF:7E:65:3C:C6:B6:47:F0:B5:5B X509v3 Authority Key Identifier: keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/NSSQlOrPOrgrrd9-ZTzGtkfwtVs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:5707:abd0::/44 Signature Algorithm: sha256WithRSAEncryption be:20:38:49:39:f1:38:cf:a3:fc:6b:74:cf:e4:62:61:44:52: 3c:a3:5a:26:44:ce:cf:9d:08:c8:54:0d:ac:0f:e1:94:61:32: c1:cb:96:4b:54:32:7c:8f:04:f9:79:95:b7:87:c9:b5:1e:05: aa:a0:1b:ef:b2:fc:e1:d2:c3:b9:b6:aa:90:9c:4a:de:9a:5b: 3f:67:89:a3:67:d3:67:6a:c8:22:18:3a:18:0f:ab:ae:cb:cd: ac:f0:7b:8d:21:46:ff:7b:44:39:0a:17:ff:52:09:0b:ae:7a: 18:6d:96:59:3f:c0:02:75:d7:09:ac:7e:76:2a:e6:18:9d:f6: 08:57:3a:1e:86:77:bb:3b:fa:bb:76:c5:55:a0:d5:27:67:8e: f5:42:c0:00:e0:32:fd:80:54:2e:08:cd:f6:69:e7:0f:51:4a: 55:0b:23:ae:6f:2c:06:79:48:ff:f7:30:c4:d3:bc:a3:c2:69: 69:cb:00:ac:77:a6:59:92:a4:71:2d:a5:7d:cf:82:c1:6c:82: 96:d9:38:0c:6e:d2:51:ed:63:93:a1:13:9a:83:a4:c0:ac:cb: 39:21:16:44:58:3e:2b:42:ac:d3:47:7f:1e:ec:f6:ef:24:88: 8d:30:8c:8e:75:a5:ae:0f:80:28:17:f6:ff:36:e1:6e:91:7c: 3e:9b:68:52 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WO0AVYdJZajXnXsiyYCZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNjQ0YzExNTY4NTE4MDNmMzdhZGVlYzA4NzZjY2Y5ODlk NWFlZjAwHhcNMjYwMTAxMDIxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTI0OTA5NGVhY2YzYWI4MmJhZGRmN2U2NTNjYzZiNjQ3ZjBiNTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGKzXqptP3TxLiwwCVJahs9VuAak hk1tcSr8Mjwh+YlL52hKmw43wyEzlvNVYBSjDmaQMxw5kSl7mgH3Sx7U4pXep9Lk wDC1Qc7oAwiYy/seSSZYjCCX3UAGeSUHigNDD90vufXskA1Z1uOvgBl0+CDLxp3V 0dOUKvpvciXc3gQe1wVuL7DHcp73XVKlBv5pedDvZpWW9TuYTCRkyzrHcyQsKWAS SKVHYf7yixnyEQmogC0875aQFsGst1FzTjh9lHoXiiSNJk9v820CoCPGsxumYmNk U0zKiHbqQo8UwTF6BHPSZGQjQHKrYYoWDUHCBBjyLWx9vzT8w0wqc+9IGQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDUkkJTqzzq4K63ffmU8xrZH8LVbMB8GA1UdIwQY MBaAFEpkTBFWhRgD83re7Ah2zPmJ1a7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3Mzkt Y2MxYzliNWY2NjQwLzEvTlNTUWxPclBPcmdycmQ5LVpUekd0a2Z3dFZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3MzktY2MxYzliNWY2NjQw LzEvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg9XB6vQ MA0GCSqGSIb3DQEBCwUAA4IBAQC+IDhJOfE4z6P8a3TP5GJhRFI8o1omRM7PnQjI VA2sD+GUYTLBy5ZLVDJ8jwT5eZW3h8m1HgWqoBvvsvzh0sO5tqqQnEremls/Z4mj Z9NnasgiGDoYD6uuy82s8HuNIUb/e0Q5Chf/UgkLrnoYbZZZP8ACddcJrH52KuYY nfYIVzoehne7O/q7dsVVoNUnZ471QsAA4DL9gFQuCM32aecPUUpVCyOubywGeUj/ 9zDE07yjwmlpywCsd6ZZkqRxLaV9z4LBbIKW2TgMbtJR7WOToROag6TArMs5IRZE WD4rQqzTR38e7PbvJIiNMIyOdaWuD4AoF/b/NuFukXw+m2hS -----END CERTIFICATE-----Generated at Sun Jan 25 15:47:37 2026 by rpki-client