This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/9xtV_Pla1WgMl3ubvegTPHITTAQ.roa File: 9xtV_Pla1WgMl3ubvegTPHITTAQ.roa (raw, json) Hash identifier: AXS+nn2vCSazRZVNivUy+3jk/liVHM3b04sQJUOyc0U= Subject key identifier: F7:1B:55:FC:F9:5A:D5:68:0C:97:7B:9B:BD:E8:13:3C:72:13:4C:04 Certificate issuer: /CN=a63dcb90a14742a52be5ca09cbed8dfc1cd3d1ef Certificate serial: 019B7BA39F027453C178C22B54FC7B6FDB93 Authority key identifier: A6:3D:CB:90:A1:47:42:A5:2B:E5:CA:09:CB:ED:8D:FC:1C:D3:D1:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pj3LkKFHQqUr5coJy-2N_BzT0e8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/9xtV_Pla1WgMl3ubvegTPHITTAQ.roa Signing time: Thu 01 Jan 2026 22:17:59 +0000 ROA not before: Thu 01 Jan 2026 22:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204307 IP address blocks: 2001:678:638::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft rsync://rpki.ripe.net/repository/DEFAULT/pj3LkKFHQqUr5coJy-2N_BzT0e8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 16:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:9f:02:74:53:c1:78:c2:2b:54:fc:7b:6f:db:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a63dcb90a14742a52be5ca09cbed8dfc1cd3d1ef Validity Not Before: Jan 1 22:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f71b55fcf95ad5680c977b9bbde8133c72134c04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b1:ea:18:79:97:94:4d:91:2e:4e:77:5d:6c: 9f:7d:0b:fe:b7:d1:d6:e4:bc:cc:ea:9b:ed:60:0d: 31:35:06:68:05:f9:2a:ed:1d:0a:d1:17:29:38:00: 5e:6b:a1:18:9e:5a:a0:1d:81:ed:bd:7b:3c:b7:24: 99:a9:12:35:0f:de:b8:70:98:d4:a5:fc:22:0b:0f: b5:09:9b:12:c7:6f:ea:fc:fb:05:28:e6:f0:d3:e2: 70:53:23:bc:0c:be:5b:20:f9:28:9e:c9:8b:43:6d: 5c:d7:f1:a0:6c:fd:f0:fa:34:43:d6:30:e4:f6:50: 47:eb:89:81:9d:4a:47:01:6e:4f:2a:0a:88:1b:c9: 46:39:0a:dd:bd:28:f4:0f:a5:0b:f2:a1:9b:8f:a8: e1:1f:3d:f7:0f:dc:db:72:b1:e8:45:9f:1d:e2:81: 69:55:89:70:1b:05:a5:47:1e:d5:c9:a0:b6:74:17: 0d:01:78:ea:c2:ba:ee:42:5f:5f:e0:66:43:ef:d7: 6c:34:3d:a1:46:49:e6:e3:ea:ab:2e:1b:44:e4:ba: 10:e9:58:56:49:da:13:65:36:7c:db:48:65:ba:4f: fe:1a:1e:48:30:e5:8c:af:e6:34:a7:ca:3d:3a:b6: a1:34:c7:6e:fc:c6:48:33:54:87:87:ad:95:fd:f0: 8b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:1B:55:FC:F9:5A:D5:68:0C:97:7B:9B:BD:E8:13:3C:72:13:4C:04 X509v3 Authority Key Identifier: keyid:A6:3D:CB:90:A1:47:42:A5:2B:E5:CA:09:CB:ED:8D:FC:1C:D3:D1:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pj3LkKFHQqUr5coJy-2N_BzT0e8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/9xtV_Pla1WgMl3ubvegTPHITTAQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:638::/48 Signature Algorithm: sha256WithRSAEncryption 15:62:5c:9a:00:b8:6f:48:ec:31:4f:fa:89:e3:9a:8b:4a:eb: be:f1:8b:92:3e:0b:85:45:87:db:80:d6:0b:c7:08:29:e5:42: b1:67:9b:02:e9:b8:74:36:f6:9d:6f:95:82:a8:e8:ab:17:4e: 33:cf:25:f8:ce:c1:7a:7e:0a:d7:e1:6f:7a:c9:40:72:c4:ac: 43:3d:7d:57:f0:e0:52:9d:30:5b:18:48:85:93:bf:5f:f1:89: 86:c6:e4:45:8a:18:80:f7:03:f9:0f:9e:d5:27:54:7f:13:5c: 7d:c5:29:57:89:2e:08:82:97:b7:b5:8c:da:1a:b2:c2:a9:3f: a9:15:b3:cb:aa:b8:f8:d9:75:13:02:8f:e2:f6:a1:34:c3:b5: cd:9b:49:7c:fd:98:b5:74:25:2d:73:e2:96:9e:2b:64:f2:39: e1:fd:c0:d8:2b:03:9b:d1:09:55:1c:e9:1e:6a:42:9a:f3:f1: 6c:2b:ea:23:d0:28:32:80:ae:53:e3:f3:16:14:27:cc:25:7a: 39:ab:80:de:6a:20:27:13:4a:42:fa:c4:32:bd:85:f3:a3:15: 8a:1f:ae:8c:9b:52:c1:a3:19:bf:15:ad:d0:9f:5f:34:f5:3f: 44:a1:32:81:be:bd:cd:5e:97:c6:43:74:be:92:9c:88:9e:4d: 0e:05:33:3b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7o58CdFPBeMIrVPx7b9uTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2M2RjYjkwYTE0NzQyYTUyYmU1Y2EwOWNiZWQ4ZGZjMWNk M2QxZWYwHhcNMjYwMTAxMjIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzFiNTVmY2Y5NWFkNTY4MGM5NzdiOWJiZGU4MTMzYzcyMTM0YzA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbHqGHmXlE2RLk53XWyffQv+t9HW 5LzM6pvtYA0xNQZoBfkq7R0K0RcpOABea6EYnlqgHYHtvXs8tySZqRI1D964cJjU pfwiCw+1CZsSx2/q/PsFKObw0+JwUyO8DL5bIPkonsmLQ21c1/GgbP3w+jRD1jDk 9lBH64mBnUpHAW5PKgqIG8lGOQrdvSj0D6UL8qGbj6jhHz33D9zbcrHoRZ8d4oFp VYlwGwWlRx7VyaC2dBcNAXjqwrruQl9f4GZD79dsND2hRknm4+qrLhtE5LoQ6VhW SdoTZTZ820hluk/+Gh5IMOWMr+Y0p8o9OrahNMdu/MZIM1SHh62V/fCLBwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPcbVfz5WtVoDJd7m73oEzxyE0wEMB8GA1UdIwQY MBaAFKY9y5ChR0KlK+XKCcvtjfwc09HvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGozTGtLRkhRcVVyNWNvSnktMk5fQnpUMGU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8yYzhiNzAtNjZiYy00MTYzLThmODAt MjBmN2Q0NGVkMTI2LzEvOXh0Vl9QbGExV2dNbDN1YnZlZ1RQSElUVEFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy8yYzhiNzAtNjZiYy00MTYzLThmODAtMjBmN2Q0NGVkMTI2 LzEvcGozTGtLRkhRcVVyNWNvSnktMk5fQnpUMGU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAY4 MA0GCSqGSIb3DQEBCwUAA4IBAQAVYlyaALhvSOwxT/qJ45qLSuu+8YuSPguFRYfb gNYLxwgp5UKxZ5sC6bh0Nvadb5WCqOirF04zzyX4zsF6fgrX4W96yUByxKxDPX1X 8OBSnTBbGEiFk79f8YmGxuRFihiA9wP5D57VJ1R/E1x9xSlXiS4Igpe3tYzaGrLC qT+pFbPLqrj42XUTAo/i9qE0w7XNm0l8/Zi1dCUtc+KWnitk8jnh/cDYKwOb0QlV HOkeakKa8/FsK+oj0CgygK5T4/MWFCfMJXo5q4DeaiAnE0pC+sQyvYXzoxWKH66M m1LBoxm/Fa3Qn1809T9EoTKBvr3NXpfGQ3S+kpyInk0OBTM7 -----END CERTIFICATE-----Generated at Tue Jan 6 01:47:00 2026 by rpki-client