This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/uNZumzZxREIEhiZ1e6ytJlQ3oOs.roa File: uNZumzZxREIEhiZ1e6ytJlQ3oOs.roa (raw, json) Hash identifier: RsHJ5U9eOIuGOA1dGk00xAYGTPYQHBbKZ1jbE2JgsM4= Subject key identifier: B8:D6:6E:9B:36:71:44:42:04:86:26:75:7B:AC:AD:26:54:37:A0:EB Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Certificate serial: 019B78A377E0CED53B3F822F5A55C51DD919 Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/uNZumzZxREIEhiZ1e6ytJlQ3oOs.roa Signing time: Thu 01 Jan 2026 08:18:57 +0000 ROA not before: Thu 01 Jan 2026 08:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13335 IP address blocks: 2a0b:4144::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 05:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:77:e0:ce:d5:3b:3f:82:2f:5a:55:c5:1d:d9:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Validity Not Before: Jan 1 08:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8d66e9b36714442048626757bacad265437a0eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7f:f8:15:ad:3d:06:f3:b0:67:4d:e2:57:19: 93:82:6d:67:47:cf:87:f4:ca:52:9c:f6:5a:11:64: 74:67:ab:95:94:21:29:80:68:6a:c0:12:c0:98:cd: 87:a8:a3:9f:b8:51:f5:d2:c9:7a:01:e9:53:2e:ca: 0c:2f:8b:7a:df:7b:fb:5a:2d:54:a8:b6:e5:6b:d3: 7f:ff:5b:18:fc:41:23:3f:00:3a:8c:4e:c4:1b:c5: 2c:cc:2f:6f:34:d3:11:51:e2:9c:32:80:04:0b:94: db:28:25:ad:03:51:80:c9:db:4a:f7:48:dd:85:65: 2f:34:c6:58:72:61:af:99:6a:d7:36:c1:0f:3f:50: c7:88:77:69:f9:aa:7d:57:91:c0:04:97:a5:e3:3a: e0:ed:42:5a:65:d4:5c:bd:9b:42:18:72:71:41:ef: 42:e2:9f:69:0e:ec:fc:04:fc:07:4f:15:5d:e8:25: 8e:bf:b4:12:dd:a3:e8:77:19:24:6b:8c:6e:68:2f: 08:d1:0c:7f:61:90:81:7a:61:0e:79:a3:5a:4d:9b: d9:00:61:90:4d:c9:bd:e2:66:d2:71:9f:b6:04:59: 7b:67:bf:2a:8b:62:e1:15:a5:50:39:c3:57:6e:9b: d5:1a:8a:bf:df:24:f0:51:14:d9:65:f1:0c:94:ea: de:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D6:6E:9B:36:71:44:42:04:86:26:75:7B:AC:AD:26:54:37:A0:EB X509v3 Authority Key Identifier: keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/uNZumzZxREIEhiZ1e6ytJlQ3oOs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4144::/48 Signature Algorithm: sha256WithRSAEncryption 64:77:c3:c7:70:05:35:ae:4c:3c:ab:d0:0b:46:ed:36:67:c7: f8:71:75:58:56:b0:ea:2b:4d:41:71:90:0e:8c:b7:83:ea:6b: a3:ee:e9:85:81:c7:90:b2:c2:6c:d0:2f:ac:cd:ae:0d:14:6f: 8f:b4:f3:0e:cd:67:b5:b6:36:f4:95:9f:e4:53:33:3a:ed:21: 30:ad:32:13:14:2f:65:24:9a:3d:92:49:fc:ee:f5:6b:3a:c0: 53:60:4a:0a:95:c1:5a:a4:01:db:ac:c2:65:5b:c6:cd:69:66: 22:39:8c:a0:23:aa:a1:74:9e:fd:a1:bf:98:42:d3:5d:98:d0: d9:99:ae:eb:8b:80:99:a5:e2:dc:89:ef:d5:00:9b:e5:ed:42: 09:59:5b:79:55:8e:b0:46:e5:b1:d1:e9:0d:d3:38:99:f9:a0: a8:e9:bc:be:ea:d4:75:82:8b:84:a2:d0:bc:25:f1:3a:6d:24: 9e:f6:8a:fb:b4:a3:e2:7e:ff:58:65:f9:10:8a:7d:9f:44:c6: 73:b8:42:4f:2f:3d:7e:66:2b:68:7a:7c:ab:c0:9b:1c:fc:3e: b8:96:ec:8f:b7:95:f9:46:15:55:d0:de:1b:04:d7:5e:b2:59: 69:fe:2b:09:6d:41:7a:48:d4:0f:9e:87:eb:f5:94:0c:9d:63: 28:16:3a:d8 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4o3fgztU7P4IvWlXFHdkZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMGZmOGFhZjc0NTMxMTQxNDcwMjhkNTRhZTFjNjkzYThh MTQ3YmMwHhcNMjYwMTAxMDgxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOGQ2NmU5YjM2NzE0NDQyMDQ4NjI2NzU3YmFjYWQyNjU0MzdhMGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3/4Fa09BvOwZ03iVxmTgm1nR8+H 9MpSnPZaEWR0Z6uVlCEpgGhqwBLAmM2HqKOfuFH10sl6AelTLsoML4t633v7Wi1U qLbla9N//1sY/EEjPwA6jE7EG8UszC9vNNMRUeKcMoAEC5TbKCWtA1GAydtK90jd hWUvNMZYcmGvmWrXNsEPP1DHiHdp+ap9V5HABJel4zrg7UJaZdRcvZtCGHJxQe9C 4p9pDuz8BPwHTxVd6CWOv7QS3aPodxkka4xuaC8I0Qx/YZCBemEOeaNaTZvZAGGQ Tcm94mbScZ+2BFl7Z78qi2LhFaVQOcNXbpvVGoq/3yTwURTZZfEMlOreCwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLjWbps2cURCBIYmdXusrSZUN6DrMB8GA1UdIwQY MBaAFF4P+Kr3RTEUFHAo1UrhxpOooUe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEt ZDg3MjEzNzU2NDRhLzEvdU5adW16WnhSRUlFaGlaMWU2eXRKbFEzb09zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEtZDg3MjEzNzU2NDRh LzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgtBRAAA MA0GCSqGSIb3DQEBCwUAA4IBAQBkd8PHcAU1rkw8q9ALRu02Z8f4cXVYVrDqK01B cZAOjLeD6muj7umFgceQssJs0C+sza4NFG+PtPMOzWe1tjb0lZ/kUzM67SEwrTIT FC9lJJo9kkn87vVrOsBTYEoKlcFapAHbrMJlW8bNaWYiOYygI6qhdJ79ob+YQtNd mNDZma7ri4CZpeLcie/VAJvl7UIJWVt5VY6wRuWx0ekN0ziZ+aCo6by+6tR1gouE otC8JfE6bSSe9or7tKPifv9YZfkQin2fRMZzuEJPLz1+ZitoenyrwJsc/D64luyP t5X5RhVV0N4bBNdesllp/isJbUF6SNQPnofr9ZQMnWMoFjrY -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:20 2026 by rpki-client