This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/c9WYdkuX9vqM1-rZ5wrXob8ras4.roa File: c9WYdkuX9vqM1-rZ5wrXob8ras4.roa (raw, json) Hash identifier: ejB+bZrxr1eJ74m85KOaG7NFYs4ZFTEAPocrQGNRHSE= Subject key identifier: 73:D5:98:76:4B:97:F6:FA:8C:D7:EA:D9:E7:0A:D7:A1:BF:2B:6A:CE Certificate issuer: /CN=3e9bd18a3531353566ed18140cad741905beafae Certificate serial: 019BEB1F3AE333C9727614034DC53D20B3E3 Authority key identifier: 3E:9B:D1:8A:35:31:35:35:66:ED:18:14:0C:AD:74:19:05:BE:AF:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PpvRijUxNTVm7RgUDK10GQW-r64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/c9WYdkuX9vqM1-rZ5wrXob8ras4.roa Signing time: Fri 23 Jan 2026 13:50:51 +0000 ROA not before: Fri 23 Jan 2026 13:50:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202000 IP address blocks: 2a0a:8f80:4190::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.mft rsync://rpki.ripe.net/repository/DEFAULT/PpvRijUxNTVm7RgUDK10GQW-r64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:eb:1f:3a:e3:33:c9:72:76:14:03:4d:c5:3d:20:b3:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e9bd18a3531353566ed18140cad741905beafae Validity Not Before: Jan 23 13:50:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=73d598764b97f6fa8cd7ead9e70ad7a1bf2b6ace Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fc:68:79:8b:c5:92:f1:05:76:65:67:17:7c: a0:9e:9d:d3:c3:d5:7e:00:c1:d7:94:68:22:98:d7: ba:82:d4:03:27:40:c7:50:32:c6:ff:0d:72:2b:0d: 0c:56:49:f3:b5:3a:a3:67:86:60:d0:53:13:41:d4: 02:66:f7:23:9d:ea:f0:3a:4c:52:c0:79:88:fc:4f: 3c:46:46:22:80:81:7e:db:bc:1f:9e:18:ad:1d:aa: 38:8d:10:2c:c5:f6:31:f4:fc:34:77:af:91:29:28: a6:ff:c9:d7:c7:29:9c:56:fd:97:d4:b9:f8:2c:cf: 2b:d5:77:de:e8:06:e2:4d:85:f8:f7:b3:05:53:f1: 63:f2:8d:79:8c:13:d3:d3:37:b4:7d:13:7d:78:df: a1:5c:f5:4f:c2:6c:5d:d4:bb:b7:dd:d2:3a:39:d5: f5:ef:e2:c3:6a:8e:b1:47:a7:94:20:cb:a3:9c:3b: c5:29:5d:b8:f4:01:57:83:fc:cb:86:c6:ef:52:cd: 9c:02:c1:8b:5c:f6:45:33:9b:ca:f6:e9:73:87:08: 93:43:0f:ab:81:ad:33:7b:66:b7:18:ba:f0:78:44: b3:f2:34:60:6f:59:f6:34:60:4b:8c:93:e4:7f:51: d2:95:8d:b0:58:bb:53:ee:c7:12:6a:5a:42:a2:66: 49:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:D5:98:76:4B:97:F6:FA:8C:D7:EA:D9:E7:0A:D7:A1:BF:2B:6A:CE X509v3 Authority Key Identifier: keyid:3E:9B:D1:8A:35:31:35:35:66:ED:18:14:0C:AD:74:19:05:BE:AF:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PpvRijUxNTVm7RgUDK10GQW-r64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/c9WYdkuX9vqM1-rZ5wrXob8ras4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:8f80:4190::/48 Signature Algorithm: sha256WithRSAEncryption 12:c9:6f:8d:50:9e:3b:5a:9c:4b:b0:a7:fd:4c:30:e7:a3:25: 04:24:97:f0:39:4b:53:a2:b7:25:59:ea:8a:10:6d:c8:b1:68: 1c:50:01:8e:1c:9f:83:29:18:54:66:6f:0e:31:c3:77:fc:b7: ec:5d:4c:75:c8:ca:65:32:d4:3b:d5:14:77:2f:bd:5e:af:db: c1:2e:ed:48:68:b3:f2:78:f8:0f:9c:e0:c9:ec:39:3f:d1:1d: 0a:18:98:0c:5a:ab:ab:1d:c7:0f:ea:b0:24:7e:e6:73:af:41: 3c:3b:9e:a3:a1:7f:da:e1:ce:fe:30:99:ba:12:bb:90:46:14: 6d:63:5f:27:cc:1d:33:7f:58:3b:20:17:52:ca:14:f0:fb:5b: 4e:76:89:ac:b2:b5:39:88:a9:cd:49:ec:32:9d:78:42:a0:d5: 10:18:8c:78:a7:44:eb:01:87:0e:8d:a5:a8:be:3d:0a:50:39: 08:ab:f0:19:5e:d7:27:c5:4e:43:cf:68:0c:db:28:8b:2b:9d: ca:31:ea:c3:b6:db:ad:75:9c:27:8d:90:7a:7c:98:54:d2:53: e4:c2:95:4e:65:11:f7:80:e0:df:75:fe:00:d7:a3:48:51:ff: d6:0c:53:26:98:c9:b9:79:97:1c:b3:98:b4:90:5c:15:c4:ad: 33:ab:dd:48 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZvrHzrjM8lydhQDTcU9ILPjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlOWJkMThhMzUzMTM1MzU2NmVkMTgxNDBjYWQ3NDE5MDVi ZWFmYWUwHhcNMjYwMTIzMTM1MDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3M2Q1OTg3NjRiOTdmNmZhOGNkN2VhZDllNzBhZDdhMWJmMmI2YWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/xoeYvFkvEFdmVnF3ygnp3Tw9V+ AMHXlGgimNe6gtQDJ0DHUDLG/w1yKw0MVknztTqjZ4Zg0FMTQdQCZvcjnerwOkxS wHmI/E88RkYigIF+27wfnhitHao4jRAsxfYx9Pw0d6+RKSim/8nXxymcVv2X1Ln4 LM8r1Xfe6AbiTYX497MFU/Fj8o15jBPT0ze0fRN9eN+hXPVPwmxd1Lu33dI6OdX1 7+LDao6xR6eUIMujnDvFKV249AFXg/zLhsbvUs2cAsGLXPZFM5vK9ulzhwiTQw+r ga0ze2a3GLrweESz8jRgb1n2NGBLjJPkf1HSlY2wWLtT7scSalpComZJAwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHPVmHZLl/b6jNfq2ecK16G/K2rOMB8GA1UdIwQY MBaAFD6b0Yo1MTU1Zu0YFAytdBkFvq+uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHB2UmlqVXhOVFZtN1JnVURLMTBHUVctcjY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS84NmRiYjQtNmFlNC00NzZlLWE2MDEt ZWEyNzdiNDkyZjFlLzEvYzlXWWRrdVg5dnFNMS1yWjV3clhvYjhyYXM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS84NmRiYjQtNmFlNC00NzZlLWE2MDEtZWEyNzdiNDkyZjFl LzEvUHB2UmlqVXhOVFZtN1JnVURLMTBHUVctcjY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgqPgEGQ MA0GCSqGSIb3DQEBCwUAA4IBAQASyW+NUJ47WpxLsKf9TDDnoyUEJJfwOUtTorcl WeqKEG3IsWgcUAGOHJ+DKRhUZm8OMcN3/LfsXUx1yMplMtQ71RR3L71er9vBLu1I aLPyePgPnODJ7Dk/0R0KGJgMWqurHccP6rAkfuZzr0E8O56joX/a4c7+MJm6EruQ RhRtY18nzB0zf1g7IBdSyhTw+1tOdomssrU5iKnNSewynXhCoNUQGIx4p0TrAYcO jaWovj0KUDkIq/AZXtcnxU5Dz2gM2yiLK53KMerDttutdZwnjZB6fJhU0lPkwpVO ZRH3gODfdf4A16NIUf/WDFMmmMm5eZccs5i0kFwVxK0zq91I -----END CERTIFICATE-----Generated at Sun Jan 25 13:07:02 2026 by rpki-client