This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/RUng57NMoW7ac1B2TzLtvUsBHXs.roa File: RUng57NMoW7ac1B2TzLtvUsBHXs.roa (raw, json) Hash identifier: bXdd060UNM819brDZVY/MNr90jZYyXFvlUoD/+9CalA= Subject key identifier: 45:49:E0:E7:B3:4C:A1:6E:DA:73:50:76:4F:32:ED:BD:4B:01:1D:7B Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Certificate serial: 019B7EA55CB2B41FDE3C359D9E14E0D7B277 Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/RUng57NMoW7ac1B2TzLtvUsBHXs.roa Signing time: Fri 02 Jan 2026 12:18:44 +0000 ROA not before: Fri 02 Jan 2026 12:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210816 IP address blocks: 2a10:4646:c0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 15:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:5c:b2:b4:1f:de:3c:35:9d:9e:14:e0:d7:b2:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Validity Not Before: Jan 2 12:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4549e0e7b34ca16eda7350764f32edbd4b011d7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:46:4c:ed:20:af:ab:7f:f3:05:ee:ea:9d:d8: 02:d1:9a:64:e1:d7:21:63:0c:d0:cf:b7:68:09:db: c9:14:7e:62:cb:38:16:99:b0:80:51:eb:c2:4b:e8: ea:c8:19:92:6b:e4:d0:74:2e:24:ba:a6:a4:3c:f3: 78:0a:b9:e8:e5:0f:87:21:7a:0c:ac:91:04:1d:a6: 67:7a:4f:a7:4b:8c:c3:4e:7a:c4:2a:41:45:69:4a: 28:61:a3:1a:76:7c:53:eb:88:f2:97:63:ff:68:bd: 26:27:f4:19:c9:d3:c3:bc:9f:a1:8b:e4:af:2c:40: 7c:f0:c2:45:59:80:26:c4:4e:a6:8a:87:d5:4a:77: 2d:94:f2:74:e5:fc:a1:d2:96:1b:fe:c4:df:aa:b0: 0e:6e:ea:0d:32:64:41:58:ab:9c:cc:80:93:8e:63: cf:6a:1c:2f:64:e8:88:76:a4:a4:06:47:be:84:9e: e0:7b:1a:42:be:d6:8e:17:0f:7a:98:f6:cc:6e:49: ca:69:d8:62:aa:24:b5:13:23:e6:20:79:84:07:de: 35:47:4e:dc:a0:13:94:3b:5a:d6:e7:8c:4f:76:bf: 53:fe:b6:8e:51:3c:f2:f5:c9:b8:9f:12:6c:7a:8c: c8:11:37:a2:76:54:80:79:31:72:92:7c:6f:7d:89: bb:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:49:E0:E7:B3:4C:A1:6E:DA:73:50:76:4F:32:ED:BD:4B:01:1D:7B X509v3 Authority Key Identifier: keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/RUng57NMoW7ac1B2TzLtvUsBHXs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:4646:c0::/44 Signature Algorithm: sha256WithRSAEncryption 2f:b0:78:61:13:01:20:1c:49:59:ee:3f:05:21:39:a2:72:53: 2d:a8:cc:01:d2:88:91:17:74:2c:88:d5:8b:63:37:7d:f2:29: 4f:07:08:93:f3:a1:c0:b7:e5:81:8d:63:be:4d:22:a8:1e:6a: ab:a1:13:7a:6b:95:0d:04:ea:22:e5:4e:ec:5b:8e:e2:89:d7: 42:0e:c4:ed:27:63:a7:87:fe:b1:67:4d:c5:8d:70:98:a6:ca: 0a:5c:6d:3a:42:69:d9:10:a9:d8:27:1c:c4:cc:36:48:f9:0c: 5c:78:c7:7f:bf:65:33:28:a8:c9:92:2c:fc:9c:2e:9b:5c:f0: 95:96:f6:5a:86:8b:39:15:25:48:5b:ca:8a:a0:01:16:3d:ee: a8:31:24:76:63:6d:79:e5:39:c5:a0:62:b0:2c:50:67:a4:39: ad:df:3d:3e:68:4b:39:6b:91:3c:f2:57:a8:39:1a:60:2b:d9: df:63:67:d0:93:f2:15:fc:1c:97:3b:05:52:5c:f7:55:a9:d6: 2c:07:e2:b3:a7:9a:ee:29:83:e5:13:0c:73:41:39:76:68:99: 86:f1:2f:10:44:6a:fd:dc:d6:85:01:02:2f:f6:fd:94:27:d3: 7d:f5:f1:f6:30:b5:bf:27:f4:d7:48:57:b8:11:54:85:b1:70: 9f:07:4d:c1 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pVyytB/ePDWdnhTg17J3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNmQyODE3NDkxZGQyY2QwNjc4MDY4ZTM1YTllZmM2ODY2 N2RmMDIwHhcNMjYwMTAyMTIxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTQ5ZTBlN2IzNGNhMTZlZGE3MzUwNzY0ZjMyZWRiZDRiMDExZDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskZM7SCvq3/zBe7qndgC0Zpk4dch YwzQz7doCdvJFH5iyzgWmbCAUevCS+jqyBmSa+TQdC4kuqakPPN4Crno5Q+HIXoM rJEEHaZnek+nS4zDTnrEKkFFaUooYaMadnxT64jyl2P/aL0mJ/QZydPDvJ+hi+Sv LEB88MJFWYAmxE6miofVSnctlPJ05fyh0pYb/sTfqrAObuoNMmRBWKuczICTjmPP ahwvZOiIdqSkBke+hJ7gexpCvtaOFw96mPbMbknKadhiqiS1EyPmIHmEB941R07c oBOUO1rW54xPdr9T/raOUTzy9cm4nxJseozIETeidlSAeTFyknxvfYm7DQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEVJ4OezTKFu2nNQdk8y7b1LAR17MB8GA1UdIwQY MBaAFEptKBdJHdLNBngGjjWp78aGZ98CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt YWU5MjgzZTc5NjRlLzEvUlVuZzU3Tk1vVzdhYzFCMlR6THR2VXNCSFhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl LzEvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhBGRgDA MA0GCSqGSIb3DQEBCwUAA4IBAQAvsHhhEwEgHElZ7j8FITmiclMtqMwB0oiRF3Qs iNWLYzd98ilPBwiT86HAt+WBjWO+TSKoHmqroRN6a5UNBOoi5U7sW47iiddCDsTt J2Onh/6xZ03FjXCYpsoKXG06QmnZEKnYJxzEzDZI+QxceMd/v2UzKKjJkiz8nC6b XPCVlvZahos5FSVIW8qKoAEWPe6oMSR2Y2155TnFoGKwLFBnpDmt3z0+aEs5a5E8 8leoORpgK9nfY2fQk/IV/ByXOwVSXPdVqdYsB+Kzp5ruKYPlEwxzQTl2aJmG8S8Q RGr93NaFAQIv9v2UJ9N99fH2MLW/J/TXSFe4EVSFsXCfB03B -----END CERTIFICATE-----Generated at Fri Jan 30 22:55:36 2026 by rpki-client