This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Un_KUA4UW3mBwqWIrQ2hRgrwqJ8.roa File: Un_KUA4UW3mBwqWIrQ2hRgrwqJ8.roa (raw, json) Hash identifier: H+8IU6Ec/C7W0gUzGWdPCX/2d2iav4ezOCEab5gRvr0= Subject key identifier: 52:7F:CA:50:0E:14:5B:79:81:C2:A5:88:AD:0D:A1:46:0A:F0:A8:9F Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Certificate serial: 019B7EA555B9F0811D1B802C49D0D3A575F2 Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Un_KUA4UW3mBwqWIrQ2hRgrwqJ8.roa Signing time: Fri 02 Jan 2026 12:18:42 +0000 ROA not before: Fri 02 Jan 2026 12:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198448 IP address blocks: 2a10:4646:350::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 15:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:55:b9:f0:81:1d:1b:80:2c:49:d0:d3:a5:75:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Validity Not Before: Jan 2 12:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=527fca500e145b7981c2a588ad0da1460af0a89f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:fc:c6:5d:56:40:d3:d8:19:e9:92:2b:c8:eb: 3a:ff:73:65:e5:3a:8a:e0:dd:90:b4:ff:1f:23:5d: e5:8d:68:65:0e:12:7b:a0:6a:eb:f3:e0:8b:9c:ff: a6:d0:fc:71:85:3a:0d:7f:31:1d:e9:a2:4b:36:cc: 44:e4:a0:54:c4:a9:8b:55:d0:6e:c2:f7:33:67:11: 5b:15:dd:05:89:b2:1f:b8:50:c3:8c:80:d7:70:3b: 72:aa:16:09:8b:3d:00:40:38:ef:c1:0a:2d:39:ea: 27:55:eb:ea:89:01:4c:f5:4e:05:af:71:a8:1e:a3: 94:7e:8d:6a:94:5d:f7:c1:fc:6b:d5:c0:0e:44:8d: ea:6b:fd:9f:bf:b1:14:f4:be:20:98:0e:29:b2:6e: 97:80:06:bd:e6:9f:3b:1a:28:37:3d:e4:2a:aa:6b: 7f:e3:0d:71:1c:28:5b:4c:29:bb:79:32:c0:a0:94: c3:62:5a:34:f8:4c:f3:12:1b:f3:48:40:93:8d:06: ad:e1:34:1f:fc:16:8a:cf:4a:52:be:a1:c8:8e:d9: 8d:5e:fb:40:a9:d8:54:7f:00:d4:91:db:13:aa:f7: 9d:95:56:8e:e9:5a:00:28:e9:d9:7a:f5:8e:27:15: 9b:ec:c0:cb:f2:86:ff:56:cc:e2:32:5b:34:51:bf: b9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:7F:CA:50:0E:14:5B:79:81:C2:A5:88:AD:0D:A1:46:0A:F0:A8:9F X509v3 Authority Key Identifier: keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Un_KUA4UW3mBwqWIrQ2hRgrwqJ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:4646:350::/44 Signature Algorithm: sha256WithRSAEncryption 83:8c:4d:1b:79:a1:b6:62:8d:3b:d6:a2:44:b7:64:6c:32:4a: c3:cb:fe:d4:79:53:2f:f4:4a:eb:1c:7e:d6:0d:13:4c:7b:de: 7d:4b:b1:83:a4:17:75:3d:9b:19:19:54:cd:20:dc:a4:55:f5: 24:33:47:3a:25:7c:14:b3:6f:f3:60:a4:37:f0:c6:c0:15:05: c3:b0:08:60:be:55:a2:d9:f3:ff:27:5a:fc:f0:71:34:a8:da: 24:b6:6b:e4:ed:81:8d:f9:63:18:a7:40:7b:ac:40:4a:27:38: a2:26:c0:0f:c5:fd:6a:90:90:33:dd:8c:ae:f5:5c:c0:24:03: ba:3c:92:d9:c1:a0:b9:3b:81:d7:91:9b:fd:a5:72:c0:e8:16: e0:b9:52:2b:f5:2b:4e:c3:7c:39:61:ff:b2:cc:1b:c5:61:fb: cc:38:07:b8:b7:a8:f9:7b:1f:d3:e0:79:68:af:99:b5:c9:13: 3c:07:c5:21:f5:1b:c2:b1:04:0c:01:04:1c:b8:59:87:3f:bc: 30:f9:3a:23:b2:ac:59:46:ad:25:7c:0c:5e:30:3d:60:e6:a9: e6:b4:90:88:99:b3:f4:65:d3:f8:e1:73:50:1c:f5:f6:cc:44: 9d:04:ec:64:3a:a8:98:5e:00:d6:28:4d:7c:9f:92:53:dd:6e: a3:11:88:f5 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pVW58IEdG4AsSdDTpXXyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNmQyODE3NDkxZGQyY2QwNjc4MDY4ZTM1YTllZmM2ODY2 N2RmMDIwHhcNMjYwMTAyMTIxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjdmY2E1MDBlMTQ1Yjc5ODFjMmE1ODhhZDBkYTE0NjBhZjBhODlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvzGXVZA09gZ6ZIryOs6/3Nl5TqK 4N2QtP8fI13ljWhlDhJ7oGrr8+CLnP+m0PxxhToNfzEd6aJLNsxE5KBUxKmLVdBu wvczZxFbFd0FibIfuFDDjIDXcDtyqhYJiz0AQDjvwQotOeonVevqiQFM9U4Fr3Go HqOUfo1qlF33wfxr1cAORI3qa/2fv7EU9L4gmA4psm6XgAa95p87Gig3PeQqqmt/ 4w1xHChbTCm7eTLAoJTDYlo0+EzzEhvzSECTjQat4TQf/BaKz0pSvqHIjtmNXvtA qdhUfwDUkdsTqvedlVaO6VoAKOnZevWOJxWb7MDL8ob/VsziMls0Ub+5hQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFJ/ylAOFFt5gcKliK0NoUYK8KifMB8GA1UdIwQY MBaAFEptKBdJHdLNBngGjjWp78aGZ98CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt YWU5MjgzZTc5NjRlLzEvVW5fS1VBNFVXM21Cd3FXSXJRMmhSZ3J3cUo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl LzEvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhBGRgNQ MA0GCSqGSIb3DQEBCwUAA4IBAQCDjE0beaG2Yo071qJEt2RsMkrDy/7UeVMv9Err HH7WDRNMe959S7GDpBd1PZsZGVTNINykVfUkM0c6JXwUs2/zYKQ38MbAFQXDsAhg vlWi2fP/J1r88HE0qNoktmvk7YGN+WMYp0B7rEBKJziiJsAPxf1qkJAz3Yyu9VzA JAO6PJLZwaC5O4HXkZv9pXLA6BbguVIr9StOw3w5Yf+yzBvFYfvMOAe4t6j5ex/T 4Hlor5m1yRM8B8Uh9RvCsQQMAQQcuFmHP7ww+TojsqxZRq0lfAxeMD1g5qnmtJCI mbP0ZdP44XNQHPX2zESdBOxkOqiYXgDWKE18n5JT3W6jEYj1 -----END CERTIFICATE-----Generated at Fri Jan 30 22:55:36 2026 by rpki-client