This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/9tnMBfiIpNVErByTpvjDqn5wKbY.roa File: 9tnMBfiIpNVErByTpvjDqn5wKbY.roa (raw, json) Hash identifier: kOpNjJnS/Tt8SHMz9QLvG0L/TVTmkM0mNYtN/5t0qzc= Subject key identifier: F6:D9:CC:05:F8:88:A4:D5:44:AC:1C:93:A6:F8:C3:AA:7E:70:29:B6 Certificate issuer: /CN=cb952f9c339cabd14234d00c84a252d7ec71a2a2 Certificate serial: 019B7F15676680A3722F6630EAC2AEA0CACC Authority key identifier: CB:95:2F:9C:33:9C:AB:D1:42:34:D0:0C:84:A2:52:D7:EC:71:A2:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/9tnMBfiIpNVErByTpvjDqn5wKbY.roa Signing time: Fri 02 Jan 2026 14:21:07 +0000 ROA not before: Fri 02 Jan 2026 14:21:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59749 IP address blocks: 2a01:73e0:e030::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:67:66:80:a3:72:2f:66:30:ea:c2:ae:a0:ca:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb952f9c339cabd14234d00c84a252d7ec71a2a2 Validity Not Before: Jan 2 14:21:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6d9cc05f888a4d544ac1c93a6f8c3aa7e7029b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:85:fc:27:03:88:8b:70:76:71:26:4b:32:be: cb:08:b0:6e:5e:e6:6e:db:c6:a9:6e:4b:c6:c5:e0: a9:16:c8:e7:de:29:1c:63:53:dc:93:6f:d0:5a:a5: a4:69:4d:8c:aa:fa:50:8f:55:7f:3c:3d:4d:3c:cd: b9:26:5c:f2:a8:db:56:95:5c:d2:0c:05:d9:06:53: b5:c3:9c:08:76:8c:02:b6:02:2f:47:87:59:8c:6e: 40:a7:52:1b:81:e4:8b:ff:56:f0:0c:dd:fd:88:a7: a4:c9:3b:cd:f0:50:4f:e4:a3:b6:44:c6:7a:02:4e: 74:f6:fc:4e:35:fd:ef:2a:2b:a9:a4:6a:92:e5:de: a1:ee:c8:8a:d2:e7:84:7a:7b:93:bb:a6:b9:79:51: 48:34:4f:61:62:89:f3:04:9b:5d:34:8e:d7:f2:44: 52:60:af:13:05:62:5a:d3:a6:16:98:74:70:91:13: b5:f9:0a:e6:59:dd:be:50:3d:ea:94:16:99:42:46: 5f:fc:19:ba:cc:7b:e2:58:b6:fa:eb:54:52:2f:79: ed:c6:4b:f9:db:f3:be:a4:2d:dd:73:0e:5f:d8:39: 8d:4c:b9:0d:0a:0c:10:f7:87:af:d9:8b:22:c0:ca: 0e:96:0f:13:0b:86:72:97:97:e3:33:5d:bc:e9:98: 8c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D9:CC:05:F8:88:A4:D5:44:AC:1C:93:A6:F8:C3:AA:7E:70:29:B6 X509v3 Authority Key Identifier: keyid:CB:95:2F:9C:33:9C:AB:D1:42:34:D0:0C:84:A2:52:D7:EC:71:A2:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/9tnMBfiIpNVErByTpvjDqn5wKbY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:73e0:e030::/48 Signature Algorithm: sha256WithRSAEncryption 35:ab:74:95:a8:24:b0:d3:53:03:34:cb:fb:fe:cd:f1:6d:ab: a2:01:e0:e3:d9:e0:63:fd:84:a1:69:81:3d:17:aa:91:11:d1: 2f:c5:40:63:0b:de:84:10:91:cb:10:50:f0:4e:d5:af:f0:c6: c9:e9:1d:e4:7b:46:90:17:6c:10:20:00:83:bf:64:d3:65:0b: 25:50:68:fd:ee:51:0a:e2:0e:3b:3d:30:ce:7e:53:e7:ce:5b: 8c:f6:4f:12:39:b9:be:fb:c5:fa:8f:9a:a7:70:f7:17:e5:ff: d1:5b:8c:49:77:b1:8b:dd:54:0a:db:41:7e:f1:f9:a3:2c:c4: eb:d6:5c:70:34:24:8b:c2:f2:a2:e9:75:1c:3f:1f:82:0c:2c: d4:7f:4e:10:ec:f0:44:63:85:3c:9e:26:1f:65:bb:fa:a2:f8: 11:32:3c:1f:12:6c:d3:9a:77:64:53:65:2e:a5:32:d6:39:04: b9:8e:27:97:cc:10:ec:e3:b3:1c:18:4a:6d:a0:af:79:a2:56: 48:a2:90:f3:72:aa:47:ef:81:a3:26:3a:90:f3:2f:b3:a1:b9: 70:a1:51:ee:fa:63:06:35:f7:12:29:52:14:be:19:fe:2c:81: e2:65:85:6a:eb:2c:a9:2d:a5:4c:70:3d:78:c2:a8:5a:06:b9: 3a:04:f9:30 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/FWdmgKNyL2Yw6sKuoMrMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiOTUyZjljMzM5Y2FiZDE0MjM0ZDAwYzg0YTI1MmQ3ZWM3 MWEyYTIwHhcNMjYwMTAyMTQyMTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmQ5Y2MwNWY4ODhhNGQ1NDRhYzFjOTNhNmY4YzNhYTdlNzAyOWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYX8JwOIi3B2cSZLMr7LCLBuXuZu 28apbkvGxeCpFsjn3ikcY1Pck2/QWqWkaU2MqvpQj1V/PD1NPM25JlzyqNtWlVzS DAXZBlO1w5wIdowCtgIvR4dZjG5Ap1IbgeSL/1bwDN39iKekyTvN8FBP5KO2RMZ6 Ak509vxONf3vKiuppGqS5d6h7siK0ueEenuTu6a5eVFINE9hYonzBJtdNI7X8kRS YK8TBWJa06YWmHRwkRO1+QrmWd2+UD3qlBaZQkZf/Bm6zHviWLb661RSL3ntxkv5 2/O+pC3dcw5f2DmNTLkNCgwQ94ev2YsiwMoOlg8TC4Zyl5fjM1286ZiMlwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPbZzAX4iKTVRKwck6b4w6p+cCm2MB8GA1UdIwQY MBaAFMuVL5wznKvRQjTQDISiUtfscaKiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTVVdm5ET2NxOUZDTk5BTWhLSlMxLXh4b3FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS85MDk4ZmQtN2RjMy00ZTEyLWI4OTMt ZmQyMmRmM2I1N2Y2LzEvOXRuTUJmaUlwTlZFckJ5VHB2akRxbjV3S2JZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS85MDk4ZmQtN2RjMy00ZTEyLWI4OTMtZmQyMmRmM2I1N2Y2 LzEveTVVdm5ET2NxOUZDTk5BTWhLSlMxLXh4b3FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgFz4OAw MA0GCSqGSIb3DQEBCwUAA4IBAQA1q3SVqCSw01MDNMv7/s3xbauiAeDj2eBj/YSh aYE9F6qREdEvxUBjC96EEJHLEFDwTtWv8MbJ6R3ke0aQF2wQIACDv2TTZQslUGj9 7lEK4g47PTDOflPnzluM9k8SObm++8X6j5qncPcX5f/RW4xJd7GL3VQK20F+8fmj LMTr1lxwNCSLwvKi6XUcPx+CDCzUf04Q7PBEY4U8niYfZbv6ovgRMjwfEmzTmndk U2UupTLWOQS5jieXzBDs47McGEptoK95olZIopDzcqpH74GjJjqQ8y+zoblwoVHu +mMGNfcSKVIUvhn+LIHiZYVq6yypLaVMcD14wqhaBrk6BPkw -----END CERTIFICATE-----Generated at Mon Jan 26 07:58:00 2026 by rpki-client