This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/RuFU5d7ARVr5r4PY4vOdxriie6Y.roa File: RuFU5d7ARVr5r4PY4vOdxriie6Y.roa (raw, json) Hash identifier: yyiFBcac7vrMWH3pU/fo+ECKDfP8bGIkfxHEMC+At54= Subject key identifier: 46:E1:54:E5:DE:C0:45:5A:F9:AF:83:D8:E2:F3:9D:C6:B8:A2:7B:A6 Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384 Certificate serial: 019B7D5C7FE79FDC734C845B9741BF6636BE Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/RuFU5d7ARVr5r4PY4vOdxriie6Y.roa Signing time: Fri 02 Jan 2026 06:19:32 +0000 ROA not before: Fri 02 Jan 2026 06:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202402 IP address blocks: 2a13:b487:4400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:7f:e7:9f:dc:73:4c:84:5b:97:41:bf:66:36:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384 Validity Not Before: Jan 2 06:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=46e154e5dec0455af9af83d8e2f39dc6b8a27ba6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:45:a5:41:78:05:32:a5:94:1f:db:4a:83:92: 5a:67:84:f9:6c:1a:fb:22:f3:0f:fd:84:a8:73:65: 2b:1b:ed:01:0f:ec:37:fa:3f:69:c4:9a:09:ff:38: 92:b1:8f:6b:f2:f9:b8:c9:cc:d8:be:68:e0:29:a1: 67:26:33:04:ae:44:7a:de:b2:43:08:87:e5:37:dc: a3:34:fd:25:88:03:5e:2c:b3:21:00:02:e3:f2:6a: a8:e5:c4:92:71:cf:68:9f:06:74:95:1a:d3:24:e7: ec:7e:33:97:65:19:ae:47:e4:f4:a1:52:fc:b3:96: bb:5a:cb:79:a2:c4:82:1e:eb:e6:68:da:6b:17:6f: c4:75:f6:df:33:89:00:3a:7e:08:15:d5:16:d2:05: 92:19:78:74:7c:bf:0a:20:fc:01:e1:8d:9a:bc:72: b9:02:4e:dc:ad:b5:35:dc:45:98:43:00:b2:c4:9e: 7e:50:32:fd:d3:82:8f:53:73:0a:37:83:7b:a0:1a: 20:6b:57:31:fa:30:71:2b:e5:c8:36:de:92:d3:d6: 8c:9e:c6:bf:e4:22:c1:83:25:1c:bb:70:78:da:fc: be:2b:fb:12:80:57:66:29:35:91:f3:7a:f3:63:10: ab:55:4a:2a:f8:8f:c7:2a:c5:8d:a7:2f:58:09:6c: e6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E1:54:E5:DE:C0:45:5A:F9:AF:83:D8:E2:F3:9D:C6:B8:A2:7B:A6 X509v3 Authority Key Identifier: keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/RuFU5d7ARVr5r4PY4vOdxriie6Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:b487:4400::/40 Signature Algorithm: sha256WithRSAEncryption 7e:8d:c0:12:a2:d6:6f:d9:6c:b8:a8:d3:88:08:45:66:5e:57: 78:7d:2c:66:57:cc:93:28:17:e9:87:85:c8:b2:0d:25:6f:b7: 1d:76:dc:e9:22:41:c8:e4:94:d1:fa:6e:a2:9b:e9:fe:f4:c4: 1e:af:2c:cf:5f:5f:5a:4a:df:1c:d7:1a:ba:3e:71:0d:45:b1: 78:df:8b:ec:3f:92:b6:e0:54:26:e4:54:46:86:1d:07:26:a1: f0:ae:1f:48:e1:81:a7:93:63:2c:c4:bc:68:5d:a1:ce:35:e7: 04:83:d1:a7:c6:3a:b8:b1:1f:7b:6d:be:be:51:ed:9a:e5:ca: ca:24:d1:af:7b:89:6e:a7:44:0b:bf:a8:d4:a7:3c:5b:a0:34: c0:a3:4b:05:86:f6:47:23:9f:ff:04:07:99:12:46:ab:a0:57: 4d:26:e8:25:05:ba:4c:2d:11:ce:20:aa:af:38:bf:9f:79:9e: 87:f7:97:d6:b5:06:af:e5:19:1c:4f:1d:24:79:0e:ae:6f:a7: 7d:22:df:63:c1:d3:90:7d:c9:31:1c:a4:0e:43:64:40:79:c0: f5:bf:d0:a3:db:b1:8f:f6:6f:c9:2d:7c:d5:77:a7:2d:c5:65: 9f:90:49:99:77:43:00:9e:4a:61:d5:be:69:05:7d:d3:8d:58: fd:97:18:47 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt9XH/nn9xzTIRbl0G/Zja+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYTk3N2Y4NTRjNjNkYzlmOTdhMThiZTdiMTMwMDIxMjFh NWQzODQwHhcNMjYwMTAyMDYxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NmUxNTRlNWRlYzA0NTVhZjlhZjgzZDhlMmYzOWRjNmI4YTI3YmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0WlQXgFMqWUH9tKg5JaZ4T5bBr7 IvMP/YSoc2UrG+0BD+w3+j9pxJoJ/ziSsY9r8vm4yczYvmjgKaFnJjMErkR63rJD CIflN9yjNP0liANeLLMhAALj8mqo5cSScc9onwZ0lRrTJOfsfjOXZRmuR+T0oVL8 s5a7Wst5osSCHuvmaNprF2/EdfbfM4kAOn4IFdUW0gWSGXh0fL8KIPwB4Y2avHK5 Ak7crbU13EWYQwCyxJ5+UDL904KPU3MKN4N7oBoga1cx+jBxK+XINt6S09aMnsa/ 5CLBgyUcu3B42vy+K/sSgFdmKTWR83rzYxCrVUoq+I/HKsWNpy9YCWzmNwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFEbhVOXewEVa+a+D2OLznca4onumMB8GA1UdIwQY MBaAFGypd/hUxj3J+XoYvnsTACEhpdOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQt ZDZhNTk1MGNhZGYyLzEvUnVGVTVkN0FSVnI1cjRQWTR2T2R4cmlpZTZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQtZDZhNTk1MGNhZGYy LzEvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhO0h0Qw DQYJKoZIhvcNAQELBQADggEBAH6NwBKi1m/ZbLio04gIRWZeV3h9LGZXzJMoF+mH hciyDSVvtx123OkiQcjklNH6bqKb6f70xB6vLM9fX1pK3xzXGro+cQ1FsXjfi+w/ krbgVCbkVEaGHQcmofCuH0jhgaeTYyzEvGhdoc415wSD0afGOrixH3ttvr5R7Zrl ysok0a97iW6nRAu/qNSnPFugNMCjSwWG9kcjn/8EB5kSRqugV00m6CUFukwtEc4g qq84v595nof3l9a1Bq/lGRxPHSR5Dq5vp30i32PB05B9yTEcpA5DZEB5wPW/0KPb sY/2b8ktfNV3py3FZZ+QSZl3QwCeSmHVvmkFfdONWP2XGEc= -----END CERTIFICATE-----Generated at Thu Jan 22 06:17:29 2026 by rpki-client