This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/_Wx9ZdmaJOp3eTANlK2NIeFmYuk.roa File: _Wx9ZdmaJOp3eTANlK2NIeFmYuk.roa (raw, json) Hash identifier: bRwEhLFQbPYT/IaKYTgc19M1MjVlqvi4YYR+NLvZd8U= Subject key identifier: FD:6C:7D:65:D9:9A:24:EA:77:79:30:0D:94:AD:8D:21:E1:66:62:E9 Certificate issuer: /CN=3e9bd18a3531353566ed18140cad741905beafae Certificate serial: 019B797E523EA47311B302EE89D3CE6B31E8 Authority key identifier: 3E:9B:D1:8A:35:31:35:35:66:ED:18:14:0C:AD:74:19:05:BE:AF:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PpvRijUxNTVm7RgUDK10GQW-r64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/_Wx9ZdmaJOp3eTANlK2NIeFmYuk.roa Signing time: Thu 01 Jan 2026 12:18:00 +0000 ROA not before: Thu 01 Jan 2026 12:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42375 IP address blocks: 2a09:1180::/32 maxlen: 32 2a09:1181::/32 maxlen: 32 2a09:1182::/32 maxlen: 32 2a09:1183::/32 maxlen: 32 2a09:1184::/32 maxlen: 32 2a09:1185::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.mft rsync://rpki.ripe.net/repository/DEFAULT/PpvRijUxNTVm7RgUDK10GQW-r64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:52:3e:a4:73:11:b3:02:ee:89:d3:ce:6b:31:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e9bd18a3531353566ed18140cad741905beafae Validity Not Before: Jan 1 12:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd6c7d65d99a24ea7779300d94ad8d21e16662e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b8:9c:59:a0:c0:76:77:ea:0b:3f:4d:fd:fb: a5:07:3a:aa:72:05:8d:ad:77:74:f9:81:40:2f:1a: ed:05:95:b7:29:d4:e2:63:56:21:35:22:18:e1:c2: cd:22:82:55:a8:ec:98:1e:96:7b:a8:30:13:b3:99: 48:ac:61:22:20:59:92:f0:f2:5b:0b:6f:e0:73:c1: 66:be:75:c9:e1:38:33:19:1e:38:71:03:10:f5:3f: e3:44:e8:3c:cf:60:7c:78:da:48:7b:c2:6f:2b:8a: 1b:f9:b6:e8:1e:7b:8d:d5:46:8b:31:74:aa:a1:b4: 06:6e:87:20:13:93:e3:61:5c:b0:49:c3:23:be:49: 03:4f:a6:87:e7:6b:e1:5d:fd:5d:80:7f:b2:28:24: bf:1b:70:5b:7d:f8:a8:fe:c1:9c:30:b9:80:c0:6c: db:b7:38:5f:27:90:2a:e7:3d:88:e8:80:c4:4a:12: ba:31:4d:07:df:25:86:d6:60:c2:26:1f:76:7f:81: 4d:3d:27:c0:94:72:2d:fc:25:ef:f4:35:b4:12:f6: f1:66:c8:8b:a6:9e:3e:f0:a8:51:b6:ae:f5:85:1a: 39:1c:cc:97:66:db:b1:bd:95:7d:71:18:17:6a:df: 5a:a8:a3:4d:54:3c:fb:47:04:d0:7a:fe:ad:4c:12: 1a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:6C:7D:65:D9:9A:24:EA:77:79:30:0D:94:AD:8D:21:E1:66:62:E9 X509v3 Authority Key Identifier: keyid:3E:9B:D1:8A:35:31:35:35:66:ED:18:14:0C:AD:74:19:05:BE:AF:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PpvRijUxNTVm7RgUDK10GQW-r64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/_Wx9ZdmaJOp3eTANlK2NIeFmYuk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:1180::-2a09:1185:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 82:90:e4:d2:8a:71:fa:fa:58:0a:af:51:9a:1b:a2:a0:a8:c8: d0:41:7f:26:19:50:7f:b6:f8:04:90:b9:48:81:1a:0f:66:23: 93:25:72:e4:c4:ca:5c:42:2f:6f:83:b6:8f:df:ff:9f:52:d1: 0c:3f:fc:fe:d1:02:ba:b1:84:b5:13:97:a8:f1:85:eb:61:25: 2a:55:b9:56:d9:8b:e9:05:0e:67:55:ff:44:fb:ac:4b:cf:3c: 78:88:63:8b:da:83:93:a5:ed:22:03:a6:9b:da:b1:93:5b:21: 51:5c:c4:71:d6:77:5f:04:d3:38:87:99:16:a1:06:ef:65:36: 6e:5b:a1:5f:12:d1:4f:c5:7f:8b:3b:31:4b:95:25:bd:30:f0: 35:4c:53:b1:8e:e1:32:4e:b4:84:8a:9f:94:9e:40:4d:57:ad: f0:1b:e7:4a:cd:1d:c2:a8:00:fd:0a:a1:68:c6:3d:45:79:9f: d7:1b:e5:ed:c1:db:fc:88:39:49:dd:68:89:f1:a5:a7:27:1e: 83:78:55:30:59:a8:75:fd:f5:64:13:e8:73:98:23:14:7b:8b: bb:58:54:3a:71:90:d9:38:bd:e7:f8:58:7c:10:9d:4e:ac:69: fd:11:05:5d:74:75:cd:b7:38:20:5e:be:c6:bd:ad:4d:bf:0a: 1b:57:2e:6a -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgISAZt5flI+pHMRswLuidPOazHoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlOWJkMThhMzUzMTM1MzU2NmVkMTgxNDBjYWQ3NDE5MDVi ZWFmYWUwHhcNMjYwMTAxMTIxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDZjN2Q2NWQ5OWEyNGVhNzc3OTMwMGQ5NGFkOGQyMWUxNjY2MmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7icWaDAdnfqCz9N/fulBzqqcgWN rXd0+YFALxrtBZW3KdTiY1YhNSIY4cLNIoJVqOyYHpZ7qDATs5lIrGEiIFmS8PJb C2/gc8FmvnXJ4TgzGR44cQMQ9T/jROg8z2B8eNpIe8JvK4ob+bboHnuN1UaLMXSq obQGbocgE5PjYVywScMjvkkDT6aH52vhXf1dgH+yKCS/G3Bbffio/sGcMLmAwGzb tzhfJ5Aq5z2I6IDEShK6MU0H3yWG1mDCJh92f4FNPSfAlHIt/CXv9DW0EvbxZsiL pp4+8KhRtq71hRo5HMyXZtuxvZV9cRgXat9aqKNNVDz7RwTQev6tTBIafQIDAQAB o4ICEzCCAg8wHQYDVR0OBBYEFP1sfWXZmiTqd3kwDZStjSHhZmLpMB8GA1UdIwQY MBaAFD6b0Yo1MTU1Zu0YFAytdBkFvq+uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHB2UmlqVXhOVFZtN1JnVURLMTBHUVctcjY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS84NmRiYjQtNmFlNC00NzZlLWE2MDEt ZWEyNzdiNDkyZjFlLzEvX1d4OVpkbWFKT3AzZVRBTmxLMk5JZUZtWXVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS84NmRiYjQtNmFlNC00NzZlLWE2MDEtZWEyNzdiNDkyZjFl LzEvUHB2UmlqVXhOVFZtN1JnVURLMTBHUVctcjY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQMA4DBQcqCRGA AwUBKgkRhDANBgkqhkiG9w0BAQsFAAOCAQEAgpDk0opx+vpYCq9RmhuioKjI0EF/ JhlQf7b4BJC5SIEaD2YjkyVy5MTKXEIvb4O2j9//n1LRDD/8/tECurGEtROXqPGF 62ElKlW5VtmL6QUOZ1X/RPusS888eIhji9qDk6XtIgOmm9qxk1shUVzEcdZ3XwTT OIeZFqEG72U2bluhXxLRT8V/izsxS5UlvTDwNUxTsY7hMk60hIqflJ5ATVet8Bvn Ss0dwqgA/QqhaMY9RXmf1xvl7cHb/Ig5Sd1oifGlpyceg3hVMFmodf31ZBPoc5gj FHuLu1hUOnGQ2Ti95/hYfBCdTqxp/REFXXR1zbc4IF6+xr2tTb8KG1cuag== -----END CERTIFICATE-----Generated at Mon Jan 26 02:22:41 2026 by rpki-client