This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/U0eXHxUXFfodUlmBaA303-Jbx88.roa File: U0eXHxUXFfodUlmBaA303-Jbx88.roa (raw, json) Hash identifier: sXuSuTQk9EzpqDU8pDWO9si7Cx55AMH5lwZNRJ/VlXk= Subject key identifier: 53:47:97:1F:15:17:15:FA:1D:52:59:81:68:0D:F4:DF:E2:5B:C7:CF Certificate issuer: /CN=daa523d5b893c925ec3a82601f9274582cefc6f0 Certificate serial: 019B76EB930220163EDE7FFF7A0F023A3C9F Authority key identifier: DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/U0eXHxUXFfodUlmBaA303-Jbx88.roa Signing time: Thu 01 Jan 2026 00:18:28 +0000 ROA not before: Thu 01 Jan 2026 00:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216105 IP address blocks: 2001:67c:d4c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:93:02:20:16:3e:de:7f:ff:7a:0f:02:3a:3c:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa523d5b893c925ec3a82601f9274582cefc6f0 Validity Not Before: Jan 1 00:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5347971f151715fa1d525981680df4dfe25bc7cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6e:83:81:07:32:bf:95:17:69:50:22:fe:54: bc:1b:d7:bb:3a:1e:86:5c:52:b0:eb:91:d8:a6:36: 17:a3:68:04:f6:04:f4:13:1f:ce:99:90:f8:e1:d1: 39:f9:08:4e:8d:4d:f2:b8:55:7b:da:34:4f:89:ed: fc:b6:bf:6e:d5:79:9e:88:ad:4d:12:27:f2:ec:80: 6f:41:1f:60:1c:e0:a2:bb:ee:8d:70:7e:c3:04:4c: 65:71:a1:6e:22:ff:72:3c:99:da:ba:ec:5e:9e:fb: 97:35:3a:c3:1a:ad:21:56:9c:a4:bc:05:57:48:4e: 72:b7:99:95:49:50:88:4e:34:8d:04:f3:29:2e:05: d3:a8:7a:99:7f:88:9a:ac:e3:4a:6f:78:4e:3f:f4: 91:e0:02:c7:3f:8d:99:f9:5f:72:1f:75:44:ed:56: 28:55:33:51:e7:3d:7c:b3:e7:0f:85:ac:0c:62:4d: 42:e7:38:ac:a2:26:67:3a:ec:c9:13:d5:3d:ee:c2: e7:74:90:b0:23:37:b0:74:f7:a7:74:fc:21:3e:56: c2:3b:d8:9c:5f:50:49:8a:bc:46:ef:cc:41:00:1b: 0d:59:44:ca:bf:95:9c:8b:23:ac:f8:5e:e6:f3:e5: 2d:90:96:aa:1a:cf:df:9b:b0:74:6c:a8:77:d7:28: 75:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:47:97:1F:15:17:15:FA:1D:52:59:81:68:0D:F4:DF:E2:5B:C7:CF X509v3 Authority Key Identifier: keyid:DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/U0eXHxUXFfodUlmBaA303-Jbx88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:d4c::/48 Signature Algorithm: sha256WithRSAEncryption 89:b4:14:0a:17:3a:d4:44:2b:32:d5:f7:99:04:95:49:04:a6: 3f:ec:b6:d3:88:12:3e:96:55:e6:45:c9:cd:3e:06:64:7f:46: ce:a8:38:cc:9e:ea:ec:28:8d:a5:08:83:e4:ae:6e:ce:76:13: 0d:0f:73:df:b6:d3:d5:2d:41:59:f7:38:5c:0d:6a:15:a8:56: 06:c8:bb:f9:ef:9e:ba:c3:99:05:1d:08:5b:d0:58:f3:2f:86: ca:4f:f4:f5:d6:ea:39:62:5f:29:7b:55:12:f6:ff:44:01:67: 52:4b:f0:e6:a9:4c:ef:70:d9:bf:f8:c4:5a:ee:25:45:b8:b1: cb:b7:dc:80:8a:ad:c7:0a:d4:de:03:9d:c2:b6:a0:a6:bf:db: ef:62:e3:ee:0d:8f:f9:6d:9b:aa:8a:52:e2:1c:cc:f5:3c:08: a5:ba:a7:59:55:6c:64:d8:cb:6d:41:d0:73:d4:0f:78:7d:19: 11:9d:d8:3c:fe:73:e7:8b:24:7f:6f:9c:66:6e:07:c2:73:5d: 1d:05:a5:af:31:ae:fa:c9:7e:ab:e6:98:cc:69:43:31:3f:2d: e7:60:18:89:d2:6c:57:ee:f2:d9:cd:cf:43:3c:04:b8:20:b7: b7:b4:a7:8c:b6:95:69:a1:39:2d:0d:e8:f3:c6:3a:1a:01:79: 07:25:ef:5d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt265MCIBY+3n//eg8COjyfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYTUyM2Q1Yjg5M2M5MjVlYzNhODI2MDFmOTI3NDU4MmNl ZmM2ZjAwHhcNMjYwMTAxMDAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzQ3OTcxZjE1MTcxNWZhMWQ1MjU5ODE2ODBkZjRkZmUyNWJjN2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw26DgQcyv5UXaVAi/lS8G9e7Oh6G XFKw65HYpjYXo2gE9gT0Ex/OmZD44dE5+QhOjU3yuFV72jRPie38tr9u1XmeiK1N Eify7IBvQR9gHOCiu+6NcH7DBExlcaFuIv9yPJnauuxenvuXNTrDGq0hVpykvAVX SE5yt5mVSVCITjSNBPMpLgXTqHqZf4iarONKb3hOP/SR4ALHP42Z+V9yH3VE7VYo VTNR5z18s+cPhawMYk1C5zisoiZnOuzJE9U97sLndJCwIzewdPendPwhPlbCO9ic X1BJirxG78xBABsNWUTKv5WciyOs+F7m8+UtkJaqGs/fm7B0bKh31yh16wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFNHlx8VFxX6HVJZgWgN9N/iW8fPMB8GA1UdIwQY MBaAFNqlI9W4k8kl7DqCYB+SdFgs78bwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnFVajFiaVR5U1hzT29KZ0g1SjBXQ3p2eHZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi83ZTdlYjQtNmU1Ni00Y2FmLThlZGIt YTQ1MDI5NWE0OTBkLzEvVTBlWEh4VVhGZm9kVWxtQmFBMzAzLUpieDg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi83ZTdlYjQtNmU1Ni00Y2FmLThlZGItYTQ1MDI5NWE0OTBk LzEvMnFVajFiaVR5U1hzT29KZ0g1SjBXQ3p2eHZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA1M MA0GCSqGSIb3DQEBCwUAA4IBAQCJtBQKFzrURCsy1feZBJVJBKY/7LbTiBI+llXm RcnNPgZkf0bOqDjMnursKI2lCIPkrm7OdhMND3PfttPVLUFZ9zhcDWoVqFYGyLv5 7566w5kFHQhb0FjzL4bKT/T11uo5Yl8pe1US9v9EAWdSS/DmqUzvcNm/+MRa7iVF uLHLt9yAiq3HCtTeA53CtqCmv9vvYuPuDY/5bZuqilLiHMz1PAiluqdZVWxk2Mtt QdBz1A94fRkRndg8/nPniyR/b5xmbgfCc10dBaWvMa76yX6r5pjMaUMxPy3nYBiJ 0mxX7vLZzc9DPAS4ILe3tKeMtpVpoTktDejzxjoaAXkHJe9d -----END CERTIFICATE-----Generated at Mon Feb 2 08:07:44 2026 by rpki-client