This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/b9cInp7Or1qBr9PuhesAeLquPqQ.roa File: b9cInp7Or1qBr9PuhesAeLquPqQ.roa (raw, json) Hash identifier: 4GENDH+hUgF++1KALJEHVMXlXhH/iPfvsuAOj33raco= Subject key identifier: 6F:D7:08:9E:9E:CE:AF:5A:81:AF:D3:EE:85:EB:00:78:BA:AE:3E:A4 Certificate issuer: /CN=bbd351b274fc23a42728303638a0d62b606401b4 Certificate serial: 019B797F000AE2B6E4F425A653DFA6DA845C Authority key identifier: BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/b9cInp7Or1qBr9PuhesAeLquPqQ.roa Signing time: Thu 01 Jan 2026 12:18:44 +0000 ROA not before: Thu 01 Jan 2026 12:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12817 IP address blocks: 2001:1578:200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:00:0a:e2:b6:e4:f4:25:a6:53:df:a6:da:84:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbd351b274fc23a42728303638a0d62b606401b4 Validity Not Before: Jan 1 12:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6fd7089e9eceaf5a81afd3ee85eb0078baae3ea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1b:9f:0f:83:ef:89:a6:12:c0:7f:51:6f:b2: 97:55:2a:26:bb:35:7a:83:48:34:9d:23:aa:e9:42: ba:41:18:09:6d:99:54:93:58:e1:81:27:72:7b:49: 3b:b1:74:ef:71:a4:e0:94:4e:40:73:c5:af:95:95: c5:02:3a:db:2d:ba:76:4f:91:f4:f8:4d:71:25:9a: 23:50:d8:4d:04:74:99:ec:b8:68:89:c4:38:a6:28: 13:d4:53:88:d7:ab:db:e7:5b:bb:d6:88:e4:04:1d: e8:bf:d1:68:05:5b:8f:72:10:2f:f6:a1:35:65:d9: 88:cc:2d:d8:86:10:e2:7b:2a:2a:ef:d4:45:78:22: 61:ae:a2:e1:6d:35:c0:d0:46:71:c0:68:22:f6:36: d4:c8:1e:2b:c4:2c:a2:be:d6:41:1c:a0:26:c8:e1: 41:46:9c:3b:cc:d4:40:5a:e5:0f:61:87:74:92:dc: 6b:ed:94:f2:ac:57:01:77:ae:8f:d3:a8:69:f8:45: 9b:25:3b:37:1c:fb:2f:66:21:ef:30:67:6d:6b:0e: 4b:e6:9b:32:80:48:5f:55:c5:6d:11:d8:50:be:c4: ac:eb:84:30:1a:98:fe:47:0a:1b:69:c9:b1:e0:07: 58:15:c8:4e:69:bd:cb:ce:19:69:e3:c2:16:3b:20: 70:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:D7:08:9E:9E:CE:AF:5A:81:AF:D3:EE:85:EB:00:78:BA:AE:3E:A4 X509v3 Authority Key Identifier: keyid:BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/b9cInp7Or1qBr9PuhesAeLquPqQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:1578:200::/40 Signature Algorithm: sha256WithRSAEncryption 95:9e:1d:98:6b:47:bd:46:be:58:ef:6c:90:04:a0:2c:de:d1: 23:0f:de:6f:57:a9:b9:a8:b2:2e:60:1b:17:23:7a:85:ac:30: 64:94:93:d2:61:ed:bb:ce:7e:3d:ab:17:41:bc:d2:50:a9:06: 3f:22:c8:f7:d6:55:f3:7c:3e:b4:d3:b2:a9:9a:07:74:5e:4c: 4b:4c:44:1d:c2:38:05:fd:fe:91:50:19:5f:98:b5:b3:2c:3e: bd:34:57:f0:9f:b8:a1:9c:47:13:5e:39:dd:9a:f4:bc:c2:85: 94:3c:1d:04:1a:da:25:4f:80:e1:0b:a6:05:8f:f3:13:b0:1a: 3f:d8:7e:61:91:c1:13:6b:3b:85:ef:07:10:b3:d1:5a:66:04: b4:1b:92:aa:92:9f:3b:fb:6f:15:eb:03:8a:fd:ac:48:07:85: 70:80:06:59:bf:c0:d4:98:a2:bd:4b:d2:c4:26:54:45:9e:ab: e8:51:00:11:19:cf:2a:d1:be:32:ae:35:88:4f:6f:16:79:32: 4e:7b:86:5d:fa:f3:be:7d:86:76:ed:e8:42:bb:9e:00:e6:81: 4e:99:bb:94:e9:df:f8:ec:95:7d:b1:26:f1:28:5c:58:ef:27: e4:9d:86:81:3d:94:91:13:c5:10:a2:5f:57:d9:90:77:05:76: cc:ab:76:bb -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt5fwAK4rbk9CWmU9+m2oRcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZDM1MWIyNzRmYzIzYTQyNzI4MzAzNjM4YTBkNjJiNjA2 NDAxYjQwHhcNMjYwMTAxMTIxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZmQ3MDg5ZTllY2VhZjVhODFhZmQzZWU4NWViMDA3OGJhYWUzZWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhufD4PviaYSwH9Rb7KXVSomuzV6 g0g0nSOq6UK6QRgJbZlUk1jhgSdye0k7sXTvcaTglE5Ac8WvlZXFAjrbLbp2T5H0 +E1xJZojUNhNBHSZ7LhoicQ4pigT1FOI16vb51u71ojkBB3ov9FoBVuPchAv9qE1 ZdmIzC3YhhDieyoq79RFeCJhrqLhbTXA0EZxwGgi9jbUyB4rxCyivtZBHKAmyOFB Rpw7zNRAWuUPYYd0ktxr7ZTyrFcBd66P06hp+EWbJTs3HPsvZiHvMGdtaw5L5psy gEhfVcVtEdhQvsSs64QwGpj+Rwobacmx4AdYFchOab3Lzhlp48IWOyBwhQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFG/XCJ6ezq9aga/T7oXrAHi6rj6kMB8GA1UdIwQY MBaAFLvTUbJ0/COkJygwNjig1itgZAG0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTlOUnNuVDhJNlFuS0RBMk9LRFdLMkJrQWJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jMWY5MGEtMmJhZC00MWI0LWIxYTYt NDZiMzAyOGEwM2IwLzEvYjljSW5wN09yMXFCcjlQdWhlc0FlTHF1UHFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9jMWY5MGEtMmJhZC00MWI0LWIxYTYtNDZiMzAyOGEwM2Iw LzEvdTlOUnNuVDhJNlFuS0RBMk9LRFdLMkJrQWJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAIAEVeAIw DQYJKoZIhvcNAQELBQADggEBAJWeHZhrR71GvljvbJAEoCze0SMP3m9Xqbmosi5g GxcjeoWsMGSUk9Jh7bvOfj2rF0G80lCpBj8iyPfWVfN8PrTTsqmaB3ReTEtMRB3C OAX9/pFQGV+YtbMsPr00V/CfuKGcRxNeOd2a9LzChZQ8HQQa2iVPgOELpgWP8xOw Gj/YfmGRwRNrO4XvBxCz0VpmBLQbkqqSnzv7bxXrA4r9rEgHhXCABlm/wNSYor1L 0sQmVEWeq+hRABEZzyrRvjKuNYhPbxZ5Mk57hl368759hnbt6EK7ngDmgU6Zu5Tp 3/jslX2xJvEoXFjvJ+SdhoE9lJETxRCiX1fZkHcFdsyrdrs= -----END CERTIFICATE-----Generated at Mon Jan 26 21:17:39 2026 by rpki-client