This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/_UEQnTGgZwnjEZTEAVvcJRMzh64.roa File: _UEQnTGgZwnjEZTEAVvcJRMzh64.roa (raw, json) Hash identifier: EdkJ9WHf7MBa8SDWDM43D855RuXgsvn10IPC/D3pnLg= Subject key identifier: FD:41:10:9D:31:A0:67:09:E3:11:94:C4:01:5B:DC:25:13:33:87:AE Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6F1F02E77625839D000A0077C9DDE Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/_UEQnTGgZwnjEZTEAVvcJRMzh64.roa Signing time: Fri 02 Jan 2026 12:20:28 +0000 ROA not before: Fri 02 Jan 2026 12:20:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208024 IP address blocks: 2a0c:9a40:8830::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:f1:f0:2e:77:62:58:39:d0:00:a0:07:7c:9d:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd41109d31a06709e31194c4015bdc25133387ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:40:45:19:30:0c:27:d5:95:07:6b:4b:20:0e: 60:9f:5b:87:82:8c:5c:c9:ea:d7:1f:37:c6:d7:1e: a6:94:b5:b0:0c:c3:86:a9:71:db:6f:0e:e6:89:b3: 90:4e:67:99:25:2a:9b:93:cb:28:a1:e7:15:f9:76: 82:9e:2d:0c:fa:d9:4b:d2:66:24:71:82:88:6e:d1: 40:40:89:b0:be:d5:52:23:ce:4c:f2:61:7b:7c:cd: af:b4:da:46:d3:5e:3d:14:92:c4:fb:48:63:fe:e3: 36:42:1b:14:ed:1c:cd:f8:8e:46:ed:be:4f:bf:61: 2d:1b:7b:3a:a8:b9:24:af:10:36:43:e8:b9:72:85: d1:6f:14:e8:51:5e:cc:ba:0b:9c:09:9d:0c:d5:5c: b1:be:f5:57:88:cd:c3:da:d6:3e:4b:38:6a:64:88: 69:fc:0e:9f:86:f9:8f:58:06:67:ec:70:e6:71:a1: e1:8f:96:9c:c6:55:1d:7f:44:75:e0:48:f7:f5:2a: 8c:d5:01:0e:1a:8a:10:37:18:96:d1:3a:1d:3f:c9: dc:f9:64:01:cb:3e:42:9f:49:06:c5:c6:ac:b9:86: dc:33:aa:46:7b:0a:3e:69:5f:65:44:ff:a1:9c:81: ec:7c:f2:2c:d1:05:c5:7e:d4:01:ba:22:0f:2a:bb: 1b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:41:10:9D:31:A0:67:09:E3:11:94:C4:01:5B:DC:25:13:33:87:AE X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/_UEQnTGgZwnjEZTEAVvcJRMzh64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8830::/48 Signature Algorithm: sha256WithRSAEncryption 2f:cd:05:2e:bd:f8:c1:28:0f:98:62:ba:fc:9a:08:05:49:bc: bb:fd:30:59:ce:4b:52:5c:f9:4a:46:95:5c:25:f5:86:fb:23: 83:99:0f:2f:ae:cd:ee:24:1a:64:db:2a:e2:51:99:67:13:f8: 10:69:7d:55:31:6e:5d:bd:cf:87:8d:10:0a:0a:34:9d:0b:b2: 46:f2:78:05:4d:3b:be:0e:26:81:2c:7b:08:32:05:1a:18:5e: b0:a7:60:b0:d3:d0:73:7e:fa:7f:49:71:1a:ce:b6:16:f7:c1: 53:36:d6:25:97:ca:f6:50:60:e9:92:89:20:ef:2e:2f:90:88: 07:05:1b:c1:b1:d9:5d:e7:b4:69:02:60:09:f9:45:c7:ea:b6: cd:df:14:57:57:d7:2a:ec:fa:fc:ff:73:79:7b:35:b6:23:36: 08:7f:ca:ad:b8:a7:7b:00:1f:c7:77:e0:11:85:4a:2b:77:93: 0f:71:a8:a8:92:34:38:b8:37:2b:cd:2f:8c:36:95:bb:61:c1: 3e:4e:8d:11:d5:01:f1:55:ae:f2:3f:ca:b4:af:87:4a:9e:3b: c7:ee:9e:0c:a0:65:b8:d8:91:56:d0:49:c4:02:03:cd:13:4c: 1c:c5:ae:e1:6e:02:1b:82:d8:3e:be:52:cb:94:5c:44:6f:dd: 88:6c:84:23 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pvHwLndiWDnQAKAHfJ3eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDQxMTA5ZDMxYTA2NzA5ZTMxMTk0YzQwMTViZGMyNTEzMzM4N2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEBFGTAMJ9WVB2tLIA5gn1uHgoxc yerXHzfG1x6mlLWwDMOGqXHbbw7mibOQTmeZJSqbk8sooecV+XaCni0M+tlL0mYk cYKIbtFAQImwvtVSI85M8mF7fM2vtNpG0149FJLE+0hj/uM2QhsU7RzN+I5G7b5P v2EtG3s6qLkkrxA2Q+i5coXRbxToUV7MugucCZ0M1VyxvvVXiM3D2tY+SzhqZIhp /A6fhvmPWAZn7HDmcaHhj5acxlUdf0R14Ej39SqM1QEOGooQNxiW0TodP8nc+WQB yz5Cn0kGxcasuYbcM6pGewo+aV9lRP+hnIHsfPIs0QXFftQBuiIPKrsbmwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFP1BEJ0xoGcJ4xGUxAFb3CUTM4euMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvX1VFUW5UR2dad25qRVpURUFWdmNKUk16aDY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIgw MA0GCSqGSIb3DQEBCwUAA4IBAQAvzQUuvfjBKA+YYrr8mggFSby7/TBZzktSXPlK RpVcJfWG+yODmQ8vrs3uJBpk2yriUZlnE/gQaX1VMW5dvc+HjRAKCjSdC7JG8ngF TTu+DiaBLHsIMgUaGF6wp2Cw09Bzfvp/SXEazrYW98FTNtYll8r2UGDpkokg7y4v kIgHBRvBsdld57RpAmAJ+UXH6rbN3xRXV9cq7Pr8/3N5ezW2IzYIf8qtuKd7AB/H d+ARhUord5MPcaiokjQ4uDcrzS+MNpW7YcE+To0R1QHxVa7yP8q0r4dKnjvH7p4M oGW42JFW0EnEAgPNE0wcxa7hbgIbgtg+vlLLlFxEb92IbIQj -----END CERTIFICATE-----Generated at Tue Jan 20 09:04:43 2026 by rpki-client