This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/9dGHInAQI-j4vyLy3UUNRAYsuCY.roa File: 9dGHInAQI-j4vyLy3UUNRAYsuCY.roa (raw, json) Hash identifier: Q9ame2KwxdqQfHrlASmNDuZYejwWS5cB+ic/WNNh4SE= Subject key identifier: F5:D1:87:22:70:10:23:E8:F8:BF:22:F2:DD:45:0D:44:06:2C:B8:26 Certificate issuer: /CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800 Certificate serial: 019B7F14F897452E88E0B4E064640527C74B Authority key identifier: 9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/9dGHInAQI-j4vyLy3UUNRAYsuCY.roa Signing time: Fri 02 Jan 2026 14:20:39 +0000 ROA not before: Fri 02 Jan 2026 14:20:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 134835 IP address blocks: 2a09:a702:1c::/48 maxlen: 48 2a09:a702:1d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:f8:97:45:2e:88:e0:b4:e0:64:64:05:27:c7:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800 Validity Not Before: Jan 2 14:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5d18722701023e8f8bf22f2dd450d44062cb826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:fd:80:30:01:15:41:6b:31:4e:65:5a:5f:bb: e1:7c:c9:d7:0c:04:47:d9:39:7d:65:e4:70:50:8f: d4:c3:3f:8b:fe:11:38:21:44:58:e0:50:98:a5:5f: bf:84:57:41:2b:a0:28:04:73:a1:8b:9b:2d:17:f7: f1:49:85:c7:6b:38:a6:72:78:c6:dd:98:f4:78:f4: c6:5a:50:ca:97:8c:40:db:b7:c6:46:71:e2:db:ac: b9:90:2b:0b:93:d1:e9:2a:ac:1a:68:ea:4b:54:ef: 4c:f9:51:64:c7:39:41:55:1b:23:27:9a:1c:c0:3e: 88:d4:3a:4b:cc:96:44:6f:ce:be:39:18:80:e1:3d: 86:ed:92:26:c9:45:88:0a:4e:70:a5:64:cf:d1:a9: f6:95:99:11:6b:02:93:59:9e:9e:26:6c:d1:81:c5: 9e:4e:36:56:87:50:95:4e:37:05:7c:53:78:b2:f3: d5:9e:a7:e8:27:db:cc:df:5d:8a:0b:ca:26:b7:12: 6a:65:4a:09:01:3d:57:ac:2f:6d:f2:c6:e7:4e:2a: ce:bb:a5:0c:50:6b:e4:e0:ae:33:19:de:f7:be:fe: 25:79:9f:91:8a:f5:f9:79:5b:7d:f0:2f:c1:c5:a8: 7d:05:83:df:20:61:76:78:47:68:20:36:ab:d1:fb: b1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:D1:87:22:70:10:23:E8:F8:BF:22:F2:DD:45:0D:44:06:2C:B8:26 X509v3 Authority Key Identifier: keyid:9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/9dGHInAQI-j4vyLy3UUNRAYsuCY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:a702:1c::/47 Signature Algorithm: sha256WithRSAEncryption 24:70:0a:71:d8:bf:84:0e:60:90:55:c4:6a:7d:99:b4:2b:65: 49:e1:0e:29:86:ca:f4:20:0d:68:ec:8a:b6:21:c1:25:e5:c6: 23:c8:d3:ef:15:24:ea:8f:0a:d8:97:90:a9:78:9b:a4:b1:8b: da:2c:12:d2:0a:00:71:8c:44:05:3e:d8:96:f7:46:c6:2c:fd: 74:a0:63:d8:96:5e:35:51:29:dd:c8:27:a2:2f:eb:da:0c:0d: 0c:32:b3:c4:95:2d:08:c3:53:5e:aa:b2:67:7b:e0:60:c0:c1: 7d:7b:9e:f7:ed:d1:a2:15:b3:34:7a:5e:11:ae:e3:ff:da:13: 68:2d:ed:b9:75:c5:86:ee:ac:cf:f8:2b:f9:36:0e:3e:ea:af: 87:1f:d1:c7:a3:0c:1f:ee:ec:33:67:dc:78:ec:b0:29:a5:7d: 19:06:70:f3:52:fe:e4:f8:e0:3a:dc:a1:e7:08:7f:46:32:47: 2d:c1:18:ed:e8:ae:93:d7:a8:7b:d3:ac:9d:2f:63:6c:96:be: bf:48:6f:b4:37:9f:5d:16:f4:97:1c:41:7a:fe:da:f2:9f:05: e9:3d:5e:3f:a8:cc:5f:e2:0b:d2:3b:d4:90:b7:4e:88:8c:d0: d9:0b:3a:88:ce:9c:90:30:f9:ed:ab:c9:de:cf:7d:cc:80:3d: 5d:a3:0c:7a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/FPiXRS6I4LTgZGQFJ8dLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMjRiMjdkOWYzZGY2ZTE0ZWJjNzllMTQ2ZThiZTMyNzU0 YmY4MDAwHhcNMjYwMTAyMTQyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNWQxODcyMjcwMTAyM2U4ZjhiZjIyZjJkZDQ1MGQ0NDA2MmNiODI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2P2AMAEVQWsxTmVaX7vhfMnXDARH 2Tl9ZeRwUI/Uwz+L/hE4IURY4FCYpV+/hFdBK6AoBHOhi5stF/fxSYXHazimcnjG 3Zj0ePTGWlDKl4xA27fGRnHi26y5kCsLk9HpKqwaaOpLVO9M+VFkxzlBVRsjJ5oc wD6I1DpLzJZEb86+ORiA4T2G7ZImyUWICk5wpWTP0an2lZkRawKTWZ6eJmzRgcWe TjZWh1CVTjcFfFN4svPVnqfoJ9vM312KC8omtxJqZUoJAT1XrC9t8sbnTirOu6UM UGvk4K4zGd73vv4leZ+RivX5eVt98C/Bxah9BYPfIGF2eEdoIDar0fux8QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPXRhyJwECPo+L8i8t1FDUQGLLgmMB8GA1UdIwQY MBaAFJoksn2fPfbhTrx54UbovjJ1S/gAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWlTeWZaODk5dUZPdkhuaFJ1aS1NblZMLUFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wMjUxZjItYTFiYi00NGZiLWI5MDgt NDhkNWZmNGJhMjU1LzEvOWRHSEluQVFJLWo0dnlMeTNVVU5SQVlzdUNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8wMjUxZjItYTFiYi00NGZiLWI5MDgtNDhkNWZmNGJhMjU1 LzEvbWlTeWZaODk5dUZPdkhuaFJ1aS1NblZMLUFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKgmnAgAc MA0GCSqGSIb3DQEBCwUAA4IBAQAkcApx2L+EDmCQVcRqfZm0K2VJ4Q4phsr0IA1o 7Iq2IcEl5cYjyNPvFSTqjwrYl5CpeJuksYvaLBLSCgBxjEQFPtiW90bGLP10oGPY ll41USndyCeiL+vaDA0MMrPElS0Iw1NeqrJne+BgwMF9e5737dGiFbM0el4RruP/ 2hNoLe25dcWG7qzP+Cv5Ng4+6q+HH9HHowwf7uwzZ9x47LAppX0ZBnDzUv7k+OA6 3KHnCH9GMkctwRjt6K6T16h706ydL2Nslr6/SG+0N59dFvSXHEF6/trynwXpPV4/ qMxf4gvSO9SQt06IjNDZCzqIzpyQMPntq8nez33MgD1dowx6 -----END CERTIFICATE-----Generated at Sun Jan 25 11:58:29 2026 by rpki-client