This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/_UK1iGjN_rIkB929nkNwI2e9rR4.roa File: _UK1iGjN_rIkB929nkNwI2e9rR4.roa (raw, json) Hash identifier: +twMCvBqics5YMkW68YjSTJbNK/rnDJKmWbGrhoaUFw= Subject key identifier: FD:42:B5:88:68:CD:FE:B2:24:07:DD:BD:9E:43:70:23:67:BD:AD:1E Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6F6D7CE700854113551D9EAD682A0 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/_UK1iGjN_rIkB929nkNwI2e9rR4.roa Signing time: Fri 02 Jan 2026 12:20:29 +0000 ROA not before: Fri 02 Jan 2026 12:20:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209091 IP address blocks: 2a0c:9a40:81fc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:f6:d7:ce:70:08:54:11:35:51:d9:ea:d6:82:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd42b58868cdfeb22407ddbd9e43702367bdad1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fb:a9:be:7a:d9:1e:2d:2e:57:d5:b7:bc:1b: 3d:68:a1:6b:fc:21:ba:e5:ae:eb:b3:02:96:aa:81: 75:35:f0:76:f4:57:5c:fb:29:64:98:11:1e:d4:88: d7:dd:c2:aa:bc:2d:5d:88:10:4f:c8:08:4d:a0:df: 31:f0:6a:b9:83:5b:64:3d:f9:6d:bd:3d:3a:0a:41: 6e:f9:7f:56:7b:c6:dd:c6:0a:15:d4:01:18:b9:5b: 11:39:cf:0f:3f:1e:54:2e:c8:f3:01:4f:04:30:76: 57:ae:0c:aa:9f:31:c8:33:42:55:43:9f:90:07:8d: e5:d0:8e:17:ec:49:72:68:f2:81:9a:ed:a1:29:00: b5:85:2a:82:fd:72:49:58:bb:7b:38:29:97:96:6b: 1f:3f:39:4e:b4:9e:ae:9c:16:c1:40:78:8d:54:ee: b2:89:39:3a:13:cd:1e:d1:23:d7:54:91:5d:32:fa: c2:01:89:cc:82:4e:a1:ca:87:72:2d:7a:05:76:05: 01:a7:61:91:3e:35:50:62:af:cd:80:f4:f0:0d:ce: 9a:4f:c8:b1:49:d6:07:c2:b3:25:16:a3:53:0e:d9: df:43:09:b3:92:08:ae:7b:f2:5d:f5:10:4b:d3:e8: 13:04:58:ac:b7:85:69:b7:18:b7:47:c7:6e:66:e5: e6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:42:B5:88:68:CD:FE:B2:24:07:DD:BD:9E:43:70:23:67:BD:AD:1E X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/_UK1iGjN_rIkB929nkNwI2e9rR4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:81fc::/48 Signature Algorithm: sha256WithRSAEncryption 82:b5:46:b2:d6:3a:59:8f:04:1d:b1:1f:66:ca:02:ad:9e:b4: a1:02:00:fb:eb:9a:21:8f:c5:96:34:02:c2:9c:e0:ee:74:28: a3:d5:f2:c2:00:70:6a:5a:00:a5:28:e3:47:1d:df:ab:74:df: ae:cc:90:35:8d:10:1e:a2:c8:a0:43:a5:e8:dd:cd:c0:c0:c5: e6:dc:41:be:9c:32:93:c7:48:d9:25:9a:55:47:01:df:bb:b5: 1d:38:d6:0e:8c:82:23:48:33:86:c6:9d:33:53:47:eb:40:8d: 85:62:ec:65:73:2c:fb:81:a3:d0:dd:64:83:2e:9b:68:41:a6: 03:81:27:39:cc:c8:5a:8d:a3:d5:86:d8:ff:4b:72:1d:7b:38: 89:79:cd:1d:da:80:5e:ea:58:51:f7:0b:d0:57:61:08:62:a6: c4:92:e2:c4:6c:79:ca:bc:bd:87:84:a8:19:29:fb:f7:23:73: 84:1c:48:66:d5:40:94:43:40:8e:88:f5:bc:9f:84:a2:dd:34: 3f:24:46:b8:d9:22:e2:8a:11:86:91:39:a9:1b:b4:a9:4e:7d: d6:f3:f2:f2:42:3d:c5:b9:1e:56:11:a3:0f:7c:be:0c:ea:de: 71:9f:a1:13:3d:36:dc:23:a6:cc:a6:69:e9:df:28:8e:c5:66: 10:01:56:f3 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pvbXznAIVBE1Udnq1oKgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDQyYjU4ODY4Y2RmZWIyMjQwN2RkYmQ5ZTQzNzAyMzY3YmRhZDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfupvnrZHi0uV9W3vBs9aKFr/CG6 5a7rswKWqoF1NfB29Fdc+ylkmBEe1IjX3cKqvC1diBBPyAhNoN8x8Gq5g1tkPflt vT06CkFu+X9We8bdxgoV1AEYuVsROc8PPx5ULsjzAU8EMHZXrgyqnzHIM0JVQ5+Q B43l0I4X7ElyaPKBmu2hKQC1hSqC/XJJWLt7OCmXlmsfPzlOtJ6unBbBQHiNVO6y iTk6E80e0SPXVJFdMvrCAYnMgk6hyodyLXoFdgUBp2GRPjVQYq/NgPTwDc6aT8ix SdYHwrMlFqNTDtnfQwmzkgiue/Jd9RBL0+gTBFist4Vptxi3R8duZuXmPQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFP1CtYhozf6yJAfdvZ5DcCNnva0eMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvX1VLMWlHak5fcklrQjkyOW5rTndJMmU5clI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIH8 MA0GCSqGSIb3DQEBCwUAA4IBAQCCtUay1jpZjwQdsR9mygKtnrShAgD765ohj8WW NALCnODudCij1fLCAHBqWgClKONHHd+rdN+uzJA1jRAeosigQ6Xo3c3AwMXm3EG+ nDKTx0jZJZpVRwHfu7UdONYOjIIjSDOGxp0zU0frQI2FYuxlcyz7gaPQ3WSDLpto QaYDgSc5zMhajaPVhtj/S3IdeziJec0d2oBe6lhR9wvQV2EIYqbEkuLEbHnKvL2H hKgZKfv3I3OEHEhm1UCUQ0COiPW8n4Si3TQ/JEa42SLiihGGkTmpG7SpTn3W8/Ly Qj3FuR5WEaMPfL4M6t5xn6ETPTbcI6bMpmnp3yiOxWYQAVbz -----END CERTIFICATE-----Generated at Tue Jan 20 09:06:52 2026 by rpki-client