This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/g9Yn7ACDYVC8slU7jy3RutvpmLA.roa File: g9Yn7ACDYVC8slU7jy3RutvpmLA.roa (raw, json) Hash identifier: QstT1XItP19s81pUDHVgyYRJfqI7V21cNVai+M007RU= Subject key identifier: 83:D6:27:EC:00:83:61:50:BC:B2:55:3B:8F:2D:D1:BA:DB:E9:98:B0 Certificate issuer: /CN=712f9cb3c298b150beb79080376f74bdeac438ac Certificate serial: 019B77C750478CE72F0478B7BFC70135E152 Authority key identifier: 71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/g9Yn7ACDYVC8slU7jy3RutvpmLA.roa Signing time: Thu 01 Jan 2026 04:18:29 +0000 ROA not before: Thu 01 Jan 2026 04:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210118 IP address blocks: 2a00:6060:ff00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:50:47:8c:e7:2f:04:78:b7:bf:c7:01:35:e1:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=712f9cb3c298b150beb79080376f74bdeac438ac Validity Not Before: Jan 1 04:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=83d627ec00836150bcb2553b8f2dd1badbe998b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8c:d7:66:4f:57:99:52:c0:f6:a3:95:07:7d: e6:25:7a:ce:64:d1:56:2e:6f:9a:1f:c3:10:57:e3: e3:f2:63:ac:8c:97:cb:7a:13:d2:cb:1e:b7:98:4f: cd:64:35:5f:c9:bf:57:58:99:b8:76:fb:5b:9d:02: 1d:aa:84:0f:cf:27:e3:ed:7b:c5:75:0c:b3:e5:f1: 7d:48:eb:ac:2e:ac:5e:ef:55:c5:3d:8e:bb:42:b0: d8:b9:98:5a:c1:cf:56:7c:f8:c9:1b:ff:52:68:7a: 7d:90:90:72:1c:c4:d9:ac:c1:18:fc:3a:06:79:17: b7:34:aa:9b:b4:d1:db:bf:e0:20:c1:94:fa:d0:80: 00:dd:b8:66:d3:32:f9:12:84:d5:7e:ef:c6:20:98: eb:6f:22:b9:14:43:54:4a:cc:9a:7e:6d:d7:8e:45: c9:a5:19:71:25:b2:2e:e8:05:de:07:97:4c:9e:bc: b7:c2:11:c8:17:f6:31:79:bd:18:de:84:aa:ab:b4: b7:f5:6a:ef:69:f0:9d:d5:80:d1:3c:b7:66:6e:a0: 6e:69:26:3f:0d:5c:62:51:60:16:56:e9:04:97:92: c0:a1:f6:2b:4d:d2:28:89:0f:9c:4f:8f:39:d6:84: 21:db:7b:5a:44:78:77:b4:86:67:40:d6:7f:05:2e: 4d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:D6:27:EC:00:83:61:50:BC:B2:55:3B:8F:2D:D1:BA:DB:E9:98:B0 X509v3 Authority Key Identifier: keyid:71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/g9Yn7ACDYVC8slU7jy3RutvpmLA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:6060:ff00::/48 Signature Algorithm: sha256WithRSAEncryption 3e:97:01:99:60:6d:6d:5c:7e:5e:ba:89:95:b3:ff:28:df:b9: f4:aa:02:af:b7:28:75:07:d6:00:f9:ee:03:c6:a2:2e:1c:7f: a9:90:35:29:21:75:d8:00:98:8e:d1:52:a5:ed:44:f3:d3:c5: 1b:08:fe:88:42:a7:6e:94:90:e2:f9:7c:9f:b3:4b:50:21:de: b4:2b:73:3e:55:2c:14:d4:dd:56:c9:6b:5c:3b:b8:ce:2e:d6: 31:30:af:39:11:4e:2d:d8:38:6a:35:af:21:f9:4a:da:38:34: 2f:af:fa:e4:9a:d2:fe:f3:0b:d1:a0:f2:8b:77:d5:57:a3:c9: 78:fb:84:ea:ce:ef:ad:fc:0c:6e:4b:33:6b:78:6c:d6:b9:31: 71:bc:37:af:ac:f8:f3:4a:36:2f:7a:67:22:cc:63:09:e2:24: 1b:ae:d4:cf:0f:ba:d9:5a:6d:87:ac:14:04:fe:27:f8:49:e7: 53:93:5b:fc:33:25:ae:05:d1:72:b9:65:31:a4:c5:7d:df:da: 3c:79:c0:54:b0:c3:c7:bf:42:a2:0a:40:86:92:8d:e0:e0:64: 26:b5:6b:db:a3:20:7f:94:1b:10:70:90:47:f1:21:08:d8:3d: ae:cd:e2:8b:0e:e6:1b:53:e5:e1:3f:87:e7:bf:f8:04:8a:fa: 9f:ed:f0:ea -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3x1BHjOcvBHi3v8cBNeFSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMmY5Y2IzYzI5OGIxNTBiZWI3OTA4MDM3NmY3NGJkZWFj NDM4YWMwHhcNMjYwMTAxMDQxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4M2Q2MjdlYzAwODM2MTUwYmNiMjU1M2I4ZjJkZDFiYWRiZTk5OGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIzXZk9XmVLA9qOVB33mJXrOZNFW Lm+aH8MQV+Pj8mOsjJfLehPSyx63mE/NZDVfyb9XWJm4dvtbnQIdqoQPzyfj7XvF dQyz5fF9SOusLqxe71XFPY67QrDYuZhawc9WfPjJG/9SaHp9kJByHMTZrMEY/DoG eRe3NKqbtNHbv+AgwZT60IAA3bhm0zL5EoTVfu/GIJjrbyK5FENUSsyafm3XjkXJ pRlxJbIu6AXeB5dMnry3whHIF/Yxeb0Y3oSqq7S39WrvafCd1YDRPLdmbqBuaSY/ DVxiUWAWVukEl5LAofYrTdIoiQ+cT4851oQh23taRHh3tIZnQNZ/BS5N0QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIPWJ+wAg2FQvLJVO48t0brb6ZiwMB8GA1UdIwQY MBaAFHEvnLPCmLFQvreQgDdvdL3qxDisMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1MtY3M4S1lzVkMtdDVDQU4yOTB2ZXJFT0t3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9lMmUxMTktZmQ3OC00YjFhLWIxNmEt OTg3ZGE0MzkyMDU2LzEvZzlZbjdBQ0RZVkM4c2xVN2p5M1J1dHZwbUxBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9lMmUxMTktZmQ3OC00YjFhLWIxNmEtOTg3ZGE0MzkyMDU2 LzEvY1MtY3M4S1lzVkMtdDVDQU4yOTB2ZXJFT0t3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgBgYP8A MA0GCSqGSIb3DQEBCwUAA4IBAQA+lwGZYG1tXH5euomVs/8o37n0qgKvtyh1B9YA +e4DxqIuHH+pkDUpIXXYAJiO0VKl7UTz08UbCP6IQqdulJDi+Xyfs0tQId60K3M+ VSwU1N1WyWtcO7jOLtYxMK85EU4t2DhqNa8h+UraODQvr/rkmtL+8wvRoPKLd9VX o8l4+4Tqzu+t/AxuSzNreGzWuTFxvDevrPjzSjYvemcizGMJ4iQbrtTPD7rZWm2H rBQE/if4SedTk1v8MyWuBdFyuWUxpMV939o8ecBUsMPHv0KiCkCGko3g4GQmtWvb oyB/lBsQcJBH8SEI2D2uzeKLDuYbU+XhP4fnv/gEivqf7fDq -----END CERTIFICATE-----Generated at Mon Jan 26 10:53:01 2026 by rpki-client