This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/09-zaUiMG_MEvZyLAayw8c8dD2o.roa File: 09-zaUiMG_MEvZyLAayw8c8dD2o.roa (raw, json) Hash identifier: mlo4Fy/vYQlZD5DG/4fKQPLNyIxwdQPuWa8p3np4+JY= Subject key identifier: D3:DF:B3:69:48:8C:1B:F3:04:BD:9C:8B:01:AC:B0:F1:CF:1D:0F:6A Certificate issuer: /CN=02adb0a14e55af77211ffd7c8fcd17b2a30649a0 Certificate serial: 019B7DC9C7CF31065232904EDED3451577CE Authority key identifier: 02:AD:B0:A1:4E:55:AF:77:21:1F:FD:7C:8F:CD:17:B2:A3:06:49:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aq2woU5Vr3chH_18j80XsqMGSaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/09-zaUiMG_MEvZyLAayw8c8dD2o.roa Signing time: Fri 02 Jan 2026 08:18:54 +0000 ROA not before: Fri 02 Jan 2026 08:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15932 IP address blocks: 2a02:2b48::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.mft rsync://rpki.ripe.net/repository/DEFAULT/Aq2woU5Vr3chH_18j80XsqMGSaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:c7:cf:31:06:52:32:90:4e:de:d3:45:15:77:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02adb0a14e55af77211ffd7c8fcd17b2a30649a0 Validity Not Before: Jan 2 08:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3dfb369488c1bf304bd9c8b01acb0f1cf1d0f6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f1:fb:1c:91:c1:33:34:f4:15:d0:20:64:c4: dc:1d:e2:f2:69:5b:2b:62:be:f3:3b:a9:8f:66:fb: 53:43:ea:7d:a3:1c:25:55:c2:00:91:c5:f1:04:5d: ae:07:df:8c:eb:64:75:02:bd:ed:78:ca:bb:e5:4b: 7e:c6:e4:a9:c7:8a:e5:10:b1:7e:a0:0b:29:92:ef: f8:4b:cb:2c:5b:00:0a:53:ca:d4:3c:27:4f:cd:96: c5:48:03:9f:58:8e:cd:e5:c4:80:cb:41:aa:80:71: 65:0c:b8:9f:d5:12:6c:78:06:1e:c7:d8:78:2a:d1: de:74:e3:ca:84:de:9a:4f:f3:7a:4c:1a:77:94:39: 2d:8b:be:66:eb:df:19:e3:76:7e:b2:78:ec:d8:ed: 7e:72:cf:17:68:c7:67:2c:05:8f:49:87:23:32:90: bd:b0:f5:b5:41:34:fe:85:dd:08:94:ec:d1:11:ea: 31:c9:44:0d:ba:9d:db:c2:a5:8d:d4:e0:4e:88:30: be:c0:7b:01:21:40:ad:00:c7:60:82:d3:f0:af:4e: fd:14:51:8b:67:88:d9:04:ec:c9:ce:df:79:cb:a9: f4:fa:3b:7b:7e:3e:7b:61:c5:a4:d7:2d:17:21:00: ad:76:d7:b2:59:62:1d:f9:61:ba:8e:6c:8b:1b:b7: 8a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:DF:B3:69:48:8C:1B:F3:04:BD:9C:8B:01:AC:B0:F1:CF:1D:0F:6A X509v3 Authority Key Identifier: keyid:02:AD:B0:A1:4E:55:AF:77:21:1F:FD:7C:8F:CD:17:B2:A3:06:49:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aq2woU5Vr3chH_18j80XsqMGSaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/09-zaUiMG_MEvZyLAayw8c8dD2o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:2b48::/29 Signature Algorithm: sha256WithRSAEncryption 38:e1:3e:50:75:23:70:ad:37:f1:a1:06:86:22:39:41:d1:f6: 2c:2b:92:3e:5d:ae:65:ac:f6:67:ac:36:34:a2:53:89:89:1d: de:49:86:aa:1b:97:f0:ae:5d:d8:5f:11:69:23:e4:7c:a4:b3: d0:88:56:75:ca:de:46:2f:c6:a0:88:6e:dd:53:ea:1f:3b:d2: 75:ca:0d:9a:47:0c:9b:6d:c3:ae:a0:30:b4:a7:d5:dc:80:f8: e5:38:86:8e:6d:c0:f4:8a:b6:0a:eb:a7:a9:49:98:db:eb:f5: 75:30:fd:85:ba:0a:f2:18:81:d7:4c:2f:0f:e2:66:17:6c:e6: 53:46:98:30:9e:87:9d:a2:a7:23:21:35:26:24:ac:62:dc:43: 03:50:5f:97:01:ec:9c:95:62:57:4c:98:9a:c5:84:73:e1:34: 1c:06:fb:aa:30:b2:4c:c8:4f:15:57:9f:16:b4:8d:a6:23:99: ba:1c:d4:0d:a6:37:8d:1f:fc:9b:c7:12:08:70:f4:1b:88:cb: 15:0c:a2:20:f0:cc:3f:62:e6:52:5b:3c:b5:8e:bd:0c:ae:2e: 0c:25:b6:f4:52:56:99:e1:5d:f1:10:bb:53:1f:ab:2a:e4:2c: 37:be:25:81:1a:b9:2d:30:52:85:2a:38:95:83:cd:eb:c4:97: 52:96:1c:ea -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9ycfPMQZSMpBO3tNFFXfOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYWRiMGExNGU1NWFmNzcyMTFmZmQ3YzhmY2QxN2IyYTMw NjQ5YTAwHhcNMjYwMTAyMDgxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2RmYjM2OTQ4OGMxYmYzMDRiZDljOGIwMWFjYjBmMWNmMWQwZjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/H7HJHBMzT0FdAgZMTcHeLyaVsr Yr7zO6mPZvtTQ+p9oxwlVcIAkcXxBF2uB9+M62R1Ar3teMq75Ut+xuSpx4rlELF+ oAspku/4S8ssWwAKU8rUPCdPzZbFSAOfWI7N5cSAy0GqgHFlDLif1RJseAYex9h4 KtHedOPKhN6aT/N6TBp3lDkti75m698Z43Z+snjs2O1+cs8XaMdnLAWPSYcjMpC9 sPW1QTT+hd0IlOzREeoxyUQNup3bwqWN1OBOiDC+wHsBIUCtAMdggtPwr079FFGL Z4jZBOzJzt95y6n0+jt7fj57YcWk1y0XIQCtdteyWWId+WG6jmyLG7eKCQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFNPfs2lIjBvzBL2ciwGssPHPHQ9qMB8GA1UdIwQY MBaAFAKtsKFOVa93IR/9fI/NF7KjBkmgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXEyd29VNVZyM2NoSF8xOGo4MFhzcU1HU2FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jMTAzODMtY2Y2ZS00NmM0LWI4ZTYt Y2E0MWM3MmNhZjk2LzEvMDktemFVaU1HX01Fdlp5TEFheXc4YzhkRDJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9jMTAzODMtY2Y2ZS00NmM0LWI4ZTYtY2E0MWM3MmNhZjk2 LzEvQXEyd29VNVZyM2NoSF8xOGo4MFhzcU1HU2FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgIrSDAN BgkqhkiG9w0BAQsFAAOCAQEAOOE+UHUjcK038aEGhiI5QdH2LCuSPl2uZaz2Z6w2 NKJTiYkd3kmGqhuX8K5d2F8RaSPkfKSz0IhWdcreRi/GoIhu3VPqHzvSdcoNmkcM m23DrqAwtKfV3ID45TiGjm3A9Iq2CuunqUmY2+v1dTD9hboK8hiB10wvD+JmF2zm U0aYMJ6HnaKnIyE1JiSsYtxDA1BflwHsnJViV0yYmsWEc+E0HAb7qjCyTMhPFVef FrSNpiOZuhzUDaY3jR/8m8cSCHD0G4jLFQyiIPDMP2LmUls8tY69DK4uDCW29FJW meFd8RC7Ux+rKuQsN74lgRq5LTBShSo4lYPN68SXUpYc6g== -----END CERTIFICATE-----Generated at Sun Jan 25 17:35:08 2026 by rpki-client