This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/r9B02vmajGoqzJg47qEQQvo3CxE.roa File: r9B02vmajGoqzJg47qEQQvo3CxE.roa (raw, json) Hash identifier: SlXFzGDnnfIbDGN67Fp7Oc2RR984LeMf9GzRFDPOlaA= Subject key identifier: AF:D0:74:DA:F9:9A:8C:6A:2A:CC:98:38:EE:A1:10:42:FA:37:0B:11 Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Certificate serial: 019B77C76A4CBAF391913B7000A4259E2F1B Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/r9B02vmajGoqzJg47qEQQvo3CxE.roa Signing time: Thu 01 Jan 2026 04:18:36 +0000 ROA not before: Thu 01 Jan 2026 04:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206728 IP address blocks: 2a11:9880::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:6a:4c:ba:f3:91:91:3b:70:00:a4:25:9e:2f:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Validity Not Before: Jan 1 04:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=afd074daf99a8c6a2acc9838eea11042fa370b11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c2:c0:3c:f1:79:53:b3:a1:43:f2:cb:1e:88: 5f:8a:ef:ac:00:42:9f:9d:96:7b:ee:ef:2b:32:ec: 38:a2:16:1e:f8:2f:af:5e:74:ed:66:e2:ce:8b:a7: 2d:26:a3:4f:ca:77:5a:36:6c:09:a5:70:bd:62:0c: 3d:98:a7:a6:3b:bd:f7:c9:99:63:b8:d8:87:37:22: c5:c4:0e:f6:6b:60:f9:9e:b6:2f:9b:65:11:00:10: 00:17:fa:4a:9f:ff:32:08:f9:97:b7:df:21:d3:f4: c4:62:a4:25:2a:37:d3:36:ec:e7:cb:26:b0:92:87: 91:4b:2f:32:5b:e3:ef:ea:26:5a:79:d1:fa:47:db: 0e:c1:e9:25:e6:53:57:b6:17:25:58:af:98:25:3c: f4:99:09:82:62:11:47:36:92:44:6a:45:78:c4:5e: a9:33:a4:3c:db:53:e3:e2:7b:79:02:90:69:68:bf: 99:8c:30:ed:2b:4b:5d:62:95:28:18:29:f2:8b:2d: 54:e1:a7:7d:a0:8a:40:e8:06:2b:88:a5:5b:6a:a3: bc:0c:9c:00:d3:d1:f0:02:ed:fd:c4:df:1d:17:a0: 79:3d:09:74:ac:9c:72:93:30:18:42:fc:4d:60:ed: 30:16:d0:1f:85:71:74:ea:f1:5b:6d:46:f8:80:15: 7e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D0:74:DA:F9:9A:8C:6A:2A:CC:98:38:EE:A1:10:42:FA:37:0B:11 X509v3 Authority Key Identifier: keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/r9B02vmajGoqzJg47qEQQvo3CxE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:9880::/32 Signature Algorithm: sha256WithRSAEncryption 9b:9d:c2:e5:07:75:01:84:29:a6:39:ed:f8:ae:cb:9d:98:73: a2:74:13:c7:ca:f8:45:31:11:ce:7b:c3:80:b9:11:b5:11:6b: 06:7c:de:38:7e:96:6c:f4:9f:d9:d9:82:a9:27:43:40:89:69: 86:de:e7:11:00:5a:9e:ad:d9:1e:24:a9:01:d7:4e:75:31:c6: f6:dd:e9:f0:1f:c7:66:69:47:6f:5c:a5:54:f4:d7:d4:87:20: 56:a3:72:30:34:f8:73:73:10:eb:1e:5f:7b:3e:e2:20:b0:d1: 59:52:bd:45:43:ca:26:47:15:62:7f:00:8e:f4:24:e9:18:d0: c3:be:d0:52:f3:07:8d:76:8b:88:27:50:ed:59:16:dd:09:f8: 2f:a7:4a:69:09:ab:ff:0b:b3:ff:00:01:25:c5:70:4f:b6:48: 88:ea:c1:30:e4:19:09:b8:63:56:a0:f2:b8:c6:c2:d9:77:cf: cb:92:ef:b0:e7:88:ea:44:1b:e7:57:f7:f5:50:46:77:fa:3d: 1b:0f:0f:e8:ef:7e:b7:b8:09:99:5d:9d:f9:64:a8:2f:2f:5c: bf:0d:a1:3a:4f:e8:76:b7:76:5b:0d:92:46:6e:6d:fc:37:88: 03:63:e5:4c:a0:97:dd:cd:51:c9:33:86:dc:10:7d:03:1a:c3: 62:9b:58:b7 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt3x2pMuvORkTtwAKQlni8bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiOTQ0N2ZlOWE0YWNjN2Q2ZmY3MmQ2Yzc5OGQ0M2Q2NmNk NTBjM2YwHhcNMjYwMTAxMDQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmQwNzRkYWY5OWE4YzZhMmFjYzk4MzhlZWExMTA0MmZhMzcwYjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsLAPPF5U7OhQ/LLHohfiu+sAEKf nZZ77u8rMuw4ohYe+C+vXnTtZuLOi6ctJqNPyndaNmwJpXC9Ygw9mKemO733yZlj uNiHNyLFxA72a2D5nrYvm2URABAAF/pKn/8yCPmXt98h0/TEYqQlKjfTNuznyyaw koeRSy8yW+Pv6iZaedH6R9sOwekl5lNXthclWK+YJTz0mQmCYhFHNpJEakV4xF6p M6Q821Pj4nt5ApBpaL+ZjDDtK0tdYpUoGCnyiy1U4ad9oIpA6AYriKVbaqO8DJwA 09HwAu39xN8dF6B5PQl0rJxykzAYQvxNYO0wFtAfhXF06vFbbUb4gBV+kQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFK/QdNr5moxqKsyYOO6hEEL6NwsRMB8GA1UdIwQY MBaAFHuUR/6aSsx9b/ctbHmNQ9Zs1Qw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUt OWZjZWI0NWQ2ZmRiLzEvcjlCMDJ2bWFqR29xekpnNDdxRVFRdm8zQ3hFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUtOWZjZWI0NWQ2ZmRi LzEvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhGYgDAN BgkqhkiG9w0BAQsFAAOCAQEAm53C5Qd1AYQppjnt+K7LnZhzonQTx8r4RTERznvD gLkRtRFrBnzeOH6WbPSf2dmCqSdDQIlpht7nEQBanq3ZHiSpAddOdTHG9t3p8B/H ZmlHb1ylVPTX1IcgVqNyMDT4c3MQ6x5fez7iILDRWVK9RUPKJkcVYn8AjvQk6RjQ w77QUvMHjXaLiCdQ7VkW3Qn4L6dKaQmr/wuz/wABJcVwT7ZIiOrBMOQZCbhjVqDy uMbC2XfPy5LvsOeI6kQb51f39VBGd/o9Gw8P6O9+t7gJmV2d+WSoLy9cvw2hOk/o drd2Ww2SRm5t/DeIA2PlTKCX3c1RyTOG3BB9AxrDYptYtw== -----END CERTIFICATE-----Generated at Sun Jan 25 16:37:18 2026 by rpki-client