This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/uYs1_qRfA9pq7Z2vFE4RQI1T0E0.roa File: uYs1_qRfA9pq7Z2vFE4RQI1T0E0.roa (raw, json) Hash identifier: OtJPkiZgtSx9miUUx4JCA1wh9p2A+UjZhuN7rom3XtE= Subject key identifier: B9:8B:35:FE:A4:5F:03:DA:6A:ED:9D:AF:14:4E:11:40:8D:53:D0:4D Certificate issuer: /CN=256065b6166aef96fcff3a2ea56fdffd390f3166 Certificate serial: 019B7F80A26F2639310F95B0C099CADE23C0 Authority key identifier: 25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/uYs1_qRfA9pq7Z2vFE4RQI1T0E0.roa Signing time: Fri 02 Jan 2026 16:18:15 +0000 ROA not before: Fri 02 Jan 2026 16:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215638 IP address blocks: 2a14:f700::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.crl rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:a2:6f:26:39:31:0f:95:b0:c0:99:ca:de:23:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=256065b6166aef96fcff3a2ea56fdffd390f3166 Validity Not Before: Jan 2 16:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b98b35fea45f03da6aed9daf144e11408d53d04d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7b:11:0e:7f:7b:48:78:64:f2:cc:f0:e5:3a: c8:15:d4:0d:c1:89:d8:58:7b:ea:d9:04:03:f2:aa: 9d:69:bf:2f:64:0f:30:0a:af:92:bf:f6:08:26:5a: af:57:7e:a1:aa:99:b6:bf:83:01:b3:62:7d:e5:48: e5:56:f6:fa:83:e4:f6:76:9c:30:0d:a6:f7:01:be: 23:09:58:4d:68:14:6a:92:61:6e:10:e2:bb:94:a4: 59:e3:5f:b1:8a:d5:da:1e:53:30:c6:13:16:fa:0b: eb:78:c6:aa:8c:28:8e:cb:ba:67:e7:f2:12:6c:5e: 95:c2:44:08:86:13:22:b0:c8:3b:d8:7a:e9:d8:a0: c7:b2:0f:3e:40:5d:4a:7a:a1:af:98:f6:09:7b:30: c3:2c:d1:08:98:85:2b:ba:8b:61:52:71:c1:c2:5b: c2:d2:1e:4b:05:d8:d8:17:bd:0e:01:38:00:b0:b0: 6f:c5:d7:83:7c:21:c9:d3:ea:41:42:3b:7b:24:fa: 58:84:f9:02:30:e1:b9:a4:a1:87:98:41:30:31:43: 04:55:47:5e:22:3e:0b:1e:04:a7:07:a1:a9:99:35: 30:47:46:da:0f:53:ba:92:ac:49:a6:ba:76:4f:e9: 01:98:fe:86:e5:f0:dd:29:d3:c6:d1:ae:fb:de:c7: 23:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:8B:35:FE:A4:5F:03:DA:6A:ED:9D:AF:14:4E:11:40:8D:53:D0:4D X509v3 Authority Key Identifier: keyid:25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/uYs1_qRfA9pq7Z2vFE4RQI1T0E0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:f700::/29 Signature Algorithm: sha256WithRSAEncryption 42:87:7f:34:49:7c:c6:9f:e5:76:34:8c:74:97:a8:fa:b1:a3: 5b:93:09:03:82:59:77:b4:c5:d5:59:e8:ea:3c:14:f2:d6:de: 88:b9:89:23:bf:44:b0:1d:ad:42:7c:82:0d:84:42:16:86:ab: 35:c4:34:e4:2b:8f:b3:83:b9:ed:4d:e3:2f:1e:66:da:d0:cd: 9a:c7:50:0e:95:d5:dd:95:a9:16:89:70:24:4a:67:13:0b:c6: 26:f6:22:58:88:46:f1:07:ee:01:5d:49:02:fd:48:7f:0e:5f: a6:61:77:66:1d:28:39:a2:0c:01:eb:72:d9:52:45:b1:10:19: 3e:39:43:98:2f:fc:eb:82:29:11:f4:1a:39:d5:c9:a9:98:d9: 38:19:e3:5f:8a:8d:96:f3:1b:14:51:eb:2c:fc:fc:4a:96:42: 92:a4:fc:c9:28:bb:fd:49:2a:67:4e:81:7b:9b:f1:c6:bb:1e: 4a:45:3e:6a:c0:56:9d:73:9e:92:13:aa:8f:7b:4e:43:29:90: 15:e0:79:0d:60:ac:2d:56:a8:54:b3:b3:52:61:c2:98:53:03: 9b:1e:b4:49:b8:6b:7b:32:f0:f9:49:db:34:ce:08:43:0f:c0: 88:f6:e1:45:5f:8a:de:28:a5:1b:4c:19:f5:e7:5f:77:ab:37: 22:b5:25:91 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/gKJvJjkxD5WwwJnK3iPAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NjA2NWI2MTY2YWVmOTZmY2ZmM2EyZWE1NmZkZmZkMzkw ZjMxNjYwHhcNMjYwMTAyMTYxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOThiMzVmZWE0NWYwM2RhNmFlZDlkYWYxNDRlMTE0MDhkNTNkMDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HsRDn97SHhk8szw5TrIFdQNwYnY WHvq2QQD8qqdab8vZA8wCq+Sv/YIJlqvV36hqpm2v4MBs2J95UjlVvb6g+T2dpww Dab3Ab4jCVhNaBRqkmFuEOK7lKRZ41+xitXaHlMwxhMW+gvreMaqjCiOy7pn5/IS bF6VwkQIhhMisMg72Hrp2KDHsg8+QF1KeqGvmPYJezDDLNEImIUruothUnHBwlvC 0h5LBdjYF70OATgAsLBvxdeDfCHJ0+pBQjt7JPpYhPkCMOG5pKGHmEEwMUMEVUde Ij4LHgSnB6GpmTUwR0baD1O6kqxJprp2T+kBmP6G5fDdKdPG0a773scjGQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFLmLNf6kXwPaau2drxROEUCNU9BNMB8GA1UdIwQY MBaAFCVgZbYWau+W/P86LqVv3/05DzFmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSldCbHRoWnE3NWI4X3pvdXBXX2ZfVGtQTVdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi84Y2RjNDgtMjgyMi00NTk5LWJiNjkt OGM0NTZhZjZiNmJiLzEvdVlzMV9xUmZBOXBxN1oydkZFNFJRSTFUMEUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi84Y2RjNDgtMjgyMi00NTk5LWJiNjktOGM0NTZhZjZiNmJi LzEvSldCbHRoWnE3NWI4X3pvdXBXX2ZfVGtQTVdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhT3ADAN BgkqhkiG9w0BAQsFAAOCAQEAQod/NEl8xp/ldjSMdJeo+rGjW5MJA4JZd7TF1Vno 6jwU8tbeiLmJI79EsB2tQnyCDYRCFoarNcQ05CuPs4O57U3jLx5m2tDNmsdQDpXV 3ZWpFolwJEpnEwvGJvYiWIhG8QfuAV1JAv1Ifw5fpmF3Zh0oOaIMAety2VJFsRAZ PjlDmC/864IpEfQaOdXJqZjZOBnjX4qNlvMbFFHrLPz8SpZCkqT8ySi7/UkqZ06B e5vxxrseSkU+asBWnXOekhOqj3tOQymQFeB5DWCsLVaoVLOzUmHCmFMDmx60Sbhr ezLw+UnbNM4IQw/AiPbhRV+K3iilG0wZ9edfd6s3IrUlkQ== -----END CERTIFICATE-----Generated at Mon Jan 19 16:54:44 2026 by rpki-client