This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/S9FfJCycMQRA7bahC5rfE0YQTSg.roa File: S9FfJCycMQRA7bahC5rfE0YQTSg.roa (raw, json) Hash identifier: 8MejBWKBQixvCnUzb1LPtqAMZdROfL9yfHkcMqfZHKY= Subject key identifier: 4B:D1:5F:24:2C:9C:31:04:40:ED:B6:A1:0B:9A:DF:13:46:10:4D:28 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019B7C12FAFA327B9F95A8CDF5EF10CF8E58 Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/S9FfJCycMQRA7bahC5rfE0YQTSg.roa Signing time: Fri 02 Jan 2026 00:19:37 +0000 ROA not before: Fri 02 Jan 2026 00:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208563 IP address blocks: 2a0d:1a40:7800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 06:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:fa:fa:32:7b:9f:95:a8:cd:f5:ef:10:cf:8e:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Jan 2 00:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4bd15f242c9c310440edb6a10b9adf1346104d28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:03:fb:2b:44:1a:b6:2c:20:47:83:33:79:53: a1:df:06:53:dc:d1:03:6c:97:6f:c8:a5:9b:22:c7: 39:aa:6b:f8:70:18:c4:b6:1f:ca:e6:a5:63:07:46: cc:47:54:04:6e:0f:55:11:1d:ce:48:8d:48:2b:7b: c9:a3:45:db:5f:27:b9:3a:a3:d2:fe:c7:09:4b:38: cc:f1:fa:df:c9:1b:c2:80:1e:7d:d8:18:fc:f2:06: b0:1a:ef:ec:84:65:41:dc:07:b1:ca:52:b6:63:10: 36:dd:f8:74:51:18:82:72:1a:29:8f:f6:9e:09:b4: 58:c6:31:18:33:92:a3:ed:dd:9f:f0:10:9d:f3:05: 42:ae:f5:b0:c5:1c:9c:40:33:f8:40:8b:61:90:bc: ab:d7:e9:72:ad:47:26:32:6f:21:58:d3:6a:a5:6e: 39:df:6e:65:70:e3:45:c5:85:9d:86:c8:5a:23:48: 86:c4:d3:97:6e:17:9b:92:b7:65:b8:67:02:74:ae: bf:34:8b:ec:3b:26:92:bb:9b:d0:14:58:54:a8:37: f7:c0:5c:2c:95:43:c3:c2:f3:a4:a7:97:fe:23:79: 45:1d:3e:1f:c3:50:81:67:f3:9f:c6:36:c4:77:8f: 7c:bd:24:0c:11:61:6f:3e:33:18:26:5b:4e:98:1b: aa:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:D1:5F:24:2C:9C:31:04:40:ED:B6:A1:0B:9A:DF:13:46:10:4D:28 X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/S9FfJCycMQRA7bahC5rfE0YQTSg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:1a40:7800::/40 Signature Algorithm: sha256WithRSAEncryption 68:7f:98:ea:4e:f0:77:a6:21:70:a2:67:9e:5e:91:eb:8c:0a: 3f:25:a9:a9:1f:3d:cf:0f:89:88:09:5e:c1:d3:fd:4a:9e:f9: 51:51:e2:7a:ae:de:ad:2a:f3:78:23:e0:44:e8:db:1e:ba:9d: bf:48:42:91:f0:8d:72:80:5d:d2:af:d5:0c:47:d6:d4:70:c7: e2:04:42:b0:78:43:11:b9:59:71:42:fb:5d:06:bf:e1:17:f9: 12:5e:fa:b7:f8:36:4a:c1:c6:5c:16:c8:48:c5:8e:f2:fd:b7: a6:59:35:fd:58:d9:84:fe:5a:9e:e1:30:0e:f0:5d:85:c7:87: 52:e8:3a:18:96:38:55:a3:ad:96:ed:16:30:65:75:a9:e6:1e: 03:3a:37:0d:97:39:a3:2f:5c:b1:99:5a:a5:51:50:ea:89:38: 2b:06:36:f0:96:e6:50:49:ce:05:f0:7e:01:8e:89:42:ea:3f: c2:d3:1e:ff:54:e8:8b:e0:44:7d:84:91:aa:ae:2e:14:51:c5: c9:01:76:a8:01:f0:cf:31:df:f6:a9:0c:9e:f1:59:c2:fb:8f: 1a:6f:c7:12:30:53:af:62:ed:8f:78:82:0a:42:31:0d:22:90: 0c:0d:bd:f1:b4:f5:02:7b:a0:04:43:22:d1:a4:ef:c0:ec:fb: c4:c4:3d:40 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt8Evr6MnuflajN9e8Qz45YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjYwMTAyMDAxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YmQxNWYyNDJjOWMzMTA0NDBlZGI2YTEwYjlhZGYxMzQ2MTA0ZDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAP7K0QatiwgR4MzeVOh3wZT3NED bJdvyKWbIsc5qmv4cBjEth/K5qVjB0bMR1QEbg9VER3OSI1IK3vJo0XbXye5OqPS /scJSzjM8frfyRvCgB592Bj88gawGu/shGVB3AexylK2YxA23fh0URiCchopj/ae CbRYxjEYM5Kj7d2f8BCd8wVCrvWwxRycQDP4QIthkLyr1+lyrUcmMm8hWNNqpW45 325lcONFxYWdhshaI0iGxNOXbhebkrdluGcCdK6/NIvsOyaSu5vQFFhUqDf3wFws lUPDwvOkp5f+I3lFHT4fw1CBZ/OfxjbEd498vSQMEWFvPjMYJltOmBuq7wIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFEvRXyQsnDEEQO22oQua3xNGEE0oMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvUzlGZkpDeWNNUVJBN2JhaEM1cmZFMFlRVFNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg0aQHgw DQYJKoZIhvcNAQELBQADggEBAGh/mOpO8HemIXCiZ55ekeuMCj8lqakfPc8PiYgJ XsHT/Uqe+VFR4nqu3q0q83gj4ETo2x66nb9IQpHwjXKAXdKv1QxH1tRwx+IEQrB4 QxG5WXFC+10Gv+EX+RJe+rf4NkrBxlwWyEjFjvL9t6ZZNf1Y2YT+Wp7hMA7wXYXH h1LoOhiWOFWjrZbtFjBldanmHgM6Nw2XOaMvXLGZWqVRUOqJOCsGNvCW5lBJzgXw fgGOiULqP8LTHv9U6IvgRH2EkaquLhRRxckBdqgB8M8x3/apDJ7xWcL7jxpvxxIw U69i7Y94ggpCMQ0ikAwNvfG09QJ7oARDItGk78Ds+8TEPUA= -----END CERTIFICATE-----Generated at Wed Jan 7 15:56:09 2026 by rpki-client