This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/9XLB2pGNOPbljEVUBZRkKE3gDsg.roa File: 9XLB2pGNOPbljEVUBZRkKE3gDsg.roa (raw, json) Hash identifier: yFaKRkjlVIE/J3Dt9Swl2M9fjwmRRjL86LSGNcqFa2o= Subject key identifier: F5:72:C1:DA:91:8D:38:F6:E5:8C:45:54:05:94:64:28:4D:E0:0E:C8 Certificate issuer: /CN=8452b03e1b01709638940d9592983cde77ecab77 Certificate serial: 019B78A21B456B460CCFD8CA8D91613D3090 Authority key identifier: 84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/9XLB2pGNOPbljEVUBZRkKE3gDsg.roa Signing time: Thu 01 Jan 2026 08:17:28 +0000 ROA not before: Thu 01 Jan 2026 08:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42350 IP address blocks: 2a02:2000:3c8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:1b:45:6b:46:0c:cf:d8:ca:8d:91:61:3d:30:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8452b03e1b01709638940d9592983cde77ecab77 Validity Not Before: Jan 1 08:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f572c1da918d38f6e58c4554059464284de00ec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3f:83:49:48:61:89:50:69:f9:5e:2b:3a:b8: d8:91:4f:2d:e8:0d:88:1a:d6:f2:d4:a0:c0:27:8c: 48:b4:d7:12:3a:fb:42:29:30:f9:aa:c9:ab:51:e9: 73:ae:9d:63:79:77:97:d2:06:09:e7:c0:c5:f4:8f: 30:9f:84:01:aa:1c:6b:0b:fd:06:77:af:f3:d4:4e: c1:3c:05:95:af:96:ce:9e:24:87:10:bc:ba:98:0f: 69:06:e4:e1:fa:59:f4:c4:1a:1f:05:86:17:67:72: 21:8b:e3:e9:f5:63:fd:20:9b:cb:80:10:39:77:0d: 6c:54:4c:30:a6:ba:73:6f:02:58:fe:46:f7:0f:99: 81:2d:47:b1:d9:2e:87:26:84:87:20:a8:e9:21:53: 24:38:4c:2d:ff:20:56:f8:7d:23:84:a0:a5:90:88: d8:de:2c:b5:13:ce:24:77:fa:d3:57:85:ba:e2:76: d3:94:84:a5:6f:59:e1:51:4e:aa:48:51:ed:35:b7: 39:a2:0b:83:dc:93:8e:b0:b9:2e:14:b9:7e:b8:de: 80:d3:3f:78:db:da:7f:fa:25:70:b7:6a:23:00:60: ca:65:87:83:31:61:47:38:ee:cc:34:56:b1:3e:cb: ec:4f:22:42:b0:e3:bb:ef:07:f1:cc:62:c2:0b:f9: 8f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:72:C1:DA:91:8D:38:F6:E5:8C:45:54:05:94:64:28:4D:E0:0E:C8 X509v3 Authority Key Identifier: keyid:84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/9XLB2pGNOPbljEVUBZRkKE3gDsg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:2000:3c8::/48 Signature Algorithm: sha256WithRSAEncryption ae:42:83:a1:73:12:db:d3:3e:2b:90:2f:db:63:23:6d:7b:4d: 4a:fc:cd:21:52:2f:08:0a:7c:81:31:85:20:9d:b5:9b:44:43: 83:52:8b:a9:43:82:3d:7b:b2:a9:77:80:4a:9d:d4:73:3f:06: b2:ad:bf:f4:78:c8:8b:24:a9:46:d5:de:df:19:3d:95:7b:5b: 9a:b1:a5:51:ee:54:0b:f9:9f:7e:a3:e1:3a:1b:5d:d1:a7:65: f8:1b:99:1c:7d:8e:2f:7f:41:5c:07:28:69:d9:b7:79:c7:53: 76:4f:5e:8a:97:72:1b:0f:3a:62:4d:7d:3a:42:a9:bc:c1:68: 90:05:4d:7f:25:75:19:70:27:e2:a2:b4:70:bc:98:fa:01:99: 88:6c:b5:5f:c9:1e:a6:9d:60:9b:f2:87:a1:12:ae:49:85:64: 00:24:60:9d:da:59:2a:92:aa:77:c8:a8:3d:90:91:37:9e:da: a2:f8:b6:05:83:b7:d7:f2:78:44:4b:76:8a:b2:44:a8:76:b8: bb:9f:b0:90:14:d2:d4:0b:04:87:bd:22:7e:e1:e9:97:ba:a9: f7:3f:45:72:db:2d:ae:66:88:1b:00:81:1b:4c:cd:65:03:fb: 7a:ff:8f:06:4f:0a:93:45:12:e7:08:34:e6:8f:2c:3b:31:47: 1b:b5:29:c2 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4ohtFa0YMz9jKjZFhPTCQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NTJiMDNlMWIwMTcwOTYzODk0MGQ5NTkyOTgzY2RlNzdl Y2FiNzcwHhcNMjYwMTAxMDgxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTcyYzFkYTkxOGQzOGY2ZTU4YzQ1NTQwNTk0NjQyODRkZTAwZWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzj+DSUhhiVBp+V4rOrjYkU8t6A2I Gtby1KDAJ4xItNcSOvtCKTD5qsmrUelzrp1jeXeX0gYJ58DF9I8wn4QBqhxrC/0G d6/z1E7BPAWVr5bOniSHELy6mA9pBuTh+ln0xBofBYYXZ3Ihi+Pp9WP9IJvLgBA5 dw1sVEwwprpzbwJY/kb3D5mBLUex2S6HJoSHIKjpIVMkOEwt/yBW+H0jhKClkIjY 3iy1E84kd/rTV4W64nbTlISlb1nhUU6qSFHtNbc5oguD3JOOsLkuFLl+uN6A0z94 29p/+iVwt2ojAGDKZYeDMWFHOO7MNFaxPsvsTyJCsOO77wfxzGLCC/mPnwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPVywdqRjTj25YxFVAWUZChN4A7IMB8GA1UdIwQY MBaAFIRSsD4bAXCWOJQNlZKYPN537Kt3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8wMTFmNmUtZTkyOC00ZjJiLWFhMjQt MjAwZmMyNzRjYjAxLzEvOVhMQjJwR05PUGJsakVWVUJaUmtLRTNnRHNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8wMTFmNmUtZTkyOC00ZjJiLWFhMjQtMjAwZmMyNzRjYjAx LzEvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgIgAAPI MA0GCSqGSIb3DQEBCwUAA4IBAQCuQoOhcxLb0z4rkC/bYyNte01K/M0hUi8ICnyB MYUgnbWbREODUoupQ4I9e7Kpd4BKndRzPwayrb/0eMiLJKlG1d7fGT2Ve1uasaVR 7lQL+Z9+o+E6G13Rp2X4G5kcfY4vf0FcByhp2bd5x1N2T16Kl3IbDzpiTX06Qqm8 wWiQBU1/JXUZcCfiorRwvJj6AZmIbLVfyR6mnWCb8oehEq5JhWQAJGCd2lkqkqp3 yKg9kJE3ntqi+LYFg7fX8nhES3aKskSodri7n7CQFNLUCwSHvSJ+4emXuqn3P0Vy 2y2uZogbAIEbTM1lA/t6/48GTwqTRRLnCDTmjyw7MUcbtSnC -----END CERTIFICATE-----Generated at Mon Jan 26 05:48:52 2026 by rpki-client