This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/uWdyVKFrhKn03chUHfeK0y0qk7Q.roa File: uWdyVKFrhKn03chUHfeK0y0qk7Q.roa (raw, json) Hash identifier: dt9A+qc2boc7/F2tKhjup1ZYyV2tp8NxgEsRgPLzDSc= Subject key identifier: B9:67:72:54:A1:6B:84:A9:F4:DD:C8:54:1D:F7:8A:D3:2D:2A:93:B4 Certificate issuer: /CN=da6099e7ff3a171bce3b6fe99ebb4d24cb85e461 Certificate serial: 019B7E373BCBE8090AC4F514D44B5AC66038 Authority key identifier: DA:60:99:E7:FF:3A:17:1B:CE:3B:6F:E9:9E:BB:4D:24:CB:85:E4:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/uWdyVKFrhKn03chUHfeK0y0qk7Q.roa Signing time: Fri 02 Jan 2026 10:18:27 +0000 ROA not before: Fri 02 Jan 2026 10:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8787 IP address blocks: 212.9.128.0/19 maxlen: 19 2a03:1f60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:3b:cb:e8:09:0a:c4:f5:14:d4:4b:5a:c6:60:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da6099e7ff3a171bce3b6fe99ebb4d24cb85e461 Validity Not Before: Jan 2 10:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9677254a16b84a9f4ddc8541df78ad32d2a93b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:32:37:b1:dd:25:35:bd:69:16:eb:6d:e7:54: 13:87:fb:d4:57:4a:ec:ee:8f:c8:65:47:d0:49:15: b2:b2:02:71:9c:75:80:f7:8e:d5:85:4c:56:49:b2: 01:11:bf:99:7b:a0:47:22:48:6e:74:b5:51:2f:85: 48:c2:d4:f1:61:4f:6a:92:2a:b1:08:c8:ff:d5:00: a5:7d:ad:28:43:e4:2f:58:87:2b:85:3c:92:78:d6: f6:67:c2:4b:6e:8f:2a:77:1c:a9:bc:88:6f:1d:d6: 5f:2e:15:a9:9e:71:17:72:2f:f6:11:7e:01:a1:cc: ad:d4:2b:52:ad:f0:c1:7b:3d:28:90:be:e5:e7:30: 2a:4a:02:1a:d1:15:d8:8a:e9:48:c9:c4:54:45:62: e5:88:42:88:e8:3f:9d:3f:c3:0c:e0:b5:01:99:4c: 27:ec:c9:e3:b7:d6:68:16:c3:35:c1:26:a0:1b:40: 2b:0e:94:5b:bf:e4:65:a5:8b:4e:b9:64:c3:22:d8: a3:9d:74:d5:72:22:44:68:b4:50:cf:90:b1:cf:59: a8:43:ca:8f:cc:35:1a:1e:6c:57:6d:d2:18:d3:15: 9f:60:48:69:57:b7:ae:81:64:68:92:da:58:4c:e3: a8:fd:0d:fb:af:cc:3a:cb:8e:04:04:c3:42:ac:ac: f4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:67:72:54:A1:6B:84:A9:F4:DD:C8:54:1D:F7:8A:D3:2D:2A:93:B4 X509v3 Authority Key Identifier: keyid:DA:60:99:E7:FF:3A:17:1B:CE:3B:6F:E9:9E:BB:4D:24:CB:85:E4:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/uWdyVKFrhKn03chUHfeK0y0qk7Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.9.128.0/19 IPv6: 2a03:1f60::/32 Signature Algorithm: sha256WithRSAEncryption a2:a4:3d:b1:e5:98:ea:6f:63:72:03:3b:32:a2:e3:76:85:d7: 95:d9:25:b8:b9:99:c1:cd:05:17:28:3f:cd:9e:1e:61:f2:98: a0:b2:fb:04:d9:18:dd:47:ba:c2:69:d6:2b:41:f8:48:aa:28: bc:94:87:a8:df:43:66:61:7d:2b:79:67:1d:34:09:05:9a:97: 79:6c:a5:17:c3:58:f2:b9:71:0c:82:3c:28:b1:37:1a:2c:47: e9:a3:19:81:18:c2:13:e3:8a:0f:06:5b:6d:ed:bf:52:12:6a: 8f:0c:1d:c3:87:1b:d3:16:86:a5:4e:f0:f9:d0:18:dd:41:4a: f7:74:75:d4:77:ce:b8:db:6e:9f:38:8a:dd:4e:5f:7c:b3:e7: 0c:8a:59:0d:a3:d9:be:6c:ea:b1:91:7b:d3:0f:1a:65:c9:c5: c7:08:d1:f3:2b:b7:a0:87:16:26:29:a2:fb:de:c0:7a:14:be: f2:a2:2c:8b:c3:3f:ec:88:ee:45:c6:7b:95:af:68:f8:fa:3a: c9:f0:20:bf:4b:f5:08:1d:60:37:2b:88:77:51:fa:ac:52:aa: 48:20:1f:25:c1:cb:c5:b6:66:0d:9b:43:34:d6:07:9b:39:15: 4b:da:3e:2f:6c:47:68:68:9b:da:7b:07:f8:5d:da:0d:6c:90: a7:89:0d:d7 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+NzvL6AkKxPUU1EtaxmA4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhNjA5OWU3ZmYzYTE3MWJjZTNiNmZlOTllYmI0ZDI0Y2I4 NWU0NjEwHhcNMjYwMTAyMTAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTY3NzI1NGExNmI4NGE5ZjRkZGM4NTQxZGY3OGFkMzJkMmE5M2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzI3sd0lNb1pFutt51QTh/vUV0rs 7o/IZUfQSRWysgJxnHWA947VhUxWSbIBEb+Ze6BHIkhudLVRL4VIwtTxYU9qkiqx CMj/1QClfa0oQ+QvWIcrhTySeNb2Z8JLbo8qdxypvIhvHdZfLhWpnnEXci/2EX4B ocyt1CtSrfDBez0okL7l5zAqSgIa0RXYiulIycRURWLliEKI6D+dP8MM4LUBmUwn 7Mnjt9ZoFsM1wSagG0ArDpRbv+RlpYtOuWTDItijnXTVciJEaLRQz5Cxz1moQ8qP zDUaHmxXbdIY0xWfYEhpV7eugWRoktpYTOOo/Q37r8w6y44EBMNCrKz08QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLlnclSha4Sp9N3IVB33itMtKpO0MB8GA1UdIwQY MBaAFNpgmef/Ohcbzjtv6Z67TSTLheRhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm1DWjVfODZGeHZPTzJfcG5ydE5KTXVGNUdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy82YzM3NDEtY2Y4Yy00ZDVkLWJiOGUt NDU5ODY4OWQ1NTFlLzEvdVdkeVZLRnJoS24wM2NoVUhmZUsweTBxazdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy82YzM3NDEtY2Y4Yy00ZDVkLWJiOGUtNDU5ODY4OWQ1NTFl LzEvMm1DWjVfODZGeHZPTzJfcG5ydE5KTXVGNUdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQF1AmAMA0E AgACMAcDBQAqAx9gMA0GCSqGSIb3DQEBCwUAA4IBAQCipD2x5Zjqb2NyAzsyouN2 hdeV2SW4uZnBzQUXKD/Nnh5h8pigsvsE2RjdR7rCadYrQfhIqii8lIeo30NmYX0r eWcdNAkFmpd5bKUXw1jyuXEMgjwosTcaLEfpoxmBGMIT44oPBltt7b9SEmqPDB3D hxvTFoalTvD50BjdQUr3dHXUd864226fOIrdTl98s+cMilkNo9m+bOqxkXvTDxpl ycXHCNHzK7eghxYmKaL73sB6FL7yoiyLwz/siO5FxnuVr2j4+jrJ8CC/S/UIHWA3 K4h3UfqsUqpIIB8lwcvFtmYNm0M01gebORVL2j4vbEdoaJvaewf4XdoNbJCniQ3X -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:00 2026 by rpki-client