This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/CUm_1v2R955WSHielB42rYU-hDE.roa File: CUm_1v2R955WSHielB42rYU-hDE.roa (raw, json) Hash identifier: 2kYqJQ+RQ4a//Mbqbn8twoPGw/YZ8dkOXd6k1MRYSqo= Subject key identifier: 09:49:BF:D6:FD:91:F7:9E:56:48:78:9E:94:1E:36:AD:85:3E:84:31 Certificate issuer: /CN=6f7fa37185a22944a607d9a94f9885997d851b1e Certificate serial: 019B79ECC27690FE07597DCBAE8419B7B0C9 Authority key identifier: 6F:7F:A3:71:85:A2:29:44:A6:07:D9:A9:4F:98:85:99:7D:85:1B:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3-jcYWiKUSmB9mpT5iFmX2FGx4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/CUm_1v2R955WSHielB42rYU-hDE.roa Signing time: Thu 01 Jan 2026 14:18:37 +0000 ROA not before: Thu 01 Jan 2026 14:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198660 IP address blocks: 2001:67c:25b4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.crl rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.mft rsync://rpki.ripe.net/repository/DEFAULT/b3-jcYWiKUSmB9mpT5iFmX2FGx4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:c2:76:90:fe:07:59:7d:cb:ae:84:19:b7:b0:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f7fa37185a22944a607d9a94f9885997d851b1e Validity Not Before: Jan 1 14:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0949bfd6fd91f79e5648789e941e36ad853e8431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:da:dc:cd:10:23:78:25:6e:98:b0:99:12:c8: f5:a2:a0:a4:8b:1a:15:2b:85:e9:e2:77:9d:d8:ee: 2a:b3:79:57:11:ed:32:3c:47:48:62:7c:71:e8:b8: fd:0b:7b:1f:ee:47:18:c3:69:f3:c4:6c:d6:25:90: 77:c8:36:7e:9a:a6:25:b4:d4:6e:dc:fe:50:ca:ab: fc:1c:9f:8a:c2:f9:96:7f:83:ad:c3:73:da:9f:29: ba:c2:25:25:ac:ef:95:6a:34:41:ed:2f:e5:ed:75: a3:49:71:a7:69:95:35:61:77:e6:ae:32:0d:3b:a2: 4f:a5:d4:b0:c8:4d:64:66:75:47:4a:96:de:17:83: a0:ac:49:ea:e9:aa:f2:81:2a:f8:67:9f:7f:20:4c: 41:71:2c:32:59:14:85:21:a8:5e:64:9e:8c:c8:df: a9:7b:ee:45:b9:bf:a9:12:94:62:ce:03:bb:3d:15: 19:ff:0a:74:ba:c7:20:3b:01:17:10:3c:70:a1:d6: 31:54:2a:8a:c3:71:d1:89:f3:9c:38:f7:3f:c9:fa: 37:ac:9e:c5:b5:18:ba:83:31:72:b1:94:e4:85:4b: 5a:f6:d7:ed:26:a6:2f:d8:ce:82:56:2b:21:08:3b: aa:26:42:34:d3:38:94:27:68:a1:63:18:d7:2b:86: 72:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:49:BF:D6:FD:91:F7:9E:56:48:78:9E:94:1E:36:AD:85:3E:84:31 X509v3 Authority Key Identifier: keyid:6F:7F:A3:71:85:A2:29:44:A6:07:D9:A9:4F:98:85:99:7D:85:1B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3-jcYWiKUSmB9mpT5iFmX2FGx4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/CUm_1v2R955WSHielB42rYU-hDE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:25b4::/48 Signature Algorithm: sha256WithRSAEncryption 95:72:86:b5:6b:f7:92:16:1b:4f:fa:9f:52:49:b5:d9:58:8b: 6b:b8:1a:6d:69:9d:16:82:01:16:cb:91:07:85:d9:38:1b:a2: 0f:24:d0:7c:7a:42:57:97:38:1f:c0:d7:5b:9f:47:aa:53:af: ed:fe:6c:54:d6:27:ed:37:7c:e9:99:dc:32:f5:4c:5c:b0:68: 56:bc:fa:31:a0:99:35:cc:30:37:35:08:96:2e:13:3f:ef:21: a3:6d:b5:1b:dc:ff:83:2e:3a:d9:2c:84:76:2c:f9:f5:5a:7a: f7:dd:95:54:c0:cd:f1:6d:e9:6e:30:d0:63:41:2a:07:49:c4: 4d:41:0b:20:78:7f:79:ea:dd:55:79:80:81:2b:f1:bb:a4:f0: be:1c:3f:7b:f8:7e:c6:45:3f:77:b5:d6:2a:33:0d:67:61:bd: 55:ba:77:bb:6f:50:e3:0c:f4:3a:c7:46:fd:e0:9b:6c:b9:99: 96:76:62:45:bf:91:2a:70:c7:c9:7d:d1:5a:42:02:83:1b:a9: 5f:11:b6:18:fb:30:09:07:87:c8:03:53:3b:f9:74:aa:32:3e: 2c:9e:d1:d2:ff:3e:46:56:87:c0:ad:55:b4:27:5a:29:eb:cd: 11:b9:4f:1b:6e:b5:71:e2:87:ac:b7:b0:5c:58:cf:16:c2:d7: 31:c9:c4:d0 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57MJ2kP4HWX3LroQZt7DJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmN2ZhMzcxODVhMjI5NDRhNjA3ZDlhOTRmOTg4NTk5N2Q4 NTFiMWUwHhcNMjYwMTAxMTQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTQ5YmZkNmZkOTFmNzllNTY0ODc4OWU5NDFlMzZhZDg1M2U4NDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtrczRAjeCVumLCZEsj1oqCkixoV K4Xp4ned2O4qs3lXEe0yPEdIYnxx6Lj9C3sf7kcYw2nzxGzWJZB3yDZ+mqYltNRu 3P5Qyqv8HJ+KwvmWf4Otw3Panym6wiUlrO+VajRB7S/l7XWjSXGnaZU1YXfmrjIN O6JPpdSwyE1kZnVHSpbeF4OgrEnq6arygSr4Z59/IExBcSwyWRSFIaheZJ6MyN+p e+5Fub+pEpRizgO7PRUZ/wp0uscgOwEXEDxwodYxVCqKw3HRifOcOPc/yfo3rJ7F tRi6gzFysZTkhUta9tftJqYv2M6CVishCDuqJkI00ziUJ2ihYxjXK4Zy7wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAlJv9b9kfeeVkh4npQeNq2FPoQxMB8GA1UdIwQY MBaAFG9/o3GFoilEpgfZqU+YhZl9hRseMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjMtamNZV2lLVVNtQjltcFQ1aUZtWDJGR3g0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9lOTA5ZjgtNzBjNC00NjVkLWJjNmMt YTM0YTRjOGIwYzhhLzEvQ1VtXzF2MlI5NTVXU0hpZWxCNDJyWVUtaERFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9lOTA5ZjgtNzBjNC00NjVkLWJjNmMtYTM0YTRjOGIwYzhh LzEvYjMtamNZV2lLVVNtQjltcFQ1aUZtWDJGR3g0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCW0 MA0GCSqGSIb3DQEBCwUAA4IBAQCVcoa1a/eSFhtP+p9SSbXZWItruBptaZ0WggEW y5EHhdk4G6IPJNB8ekJXlzgfwNdbn0eqU6/t/mxU1iftN3zpmdwy9UxcsGhWvPox oJk1zDA3NQiWLhM/7yGjbbUb3P+DLjrZLIR2LPn1Wnr33ZVUwM3xbeluMNBjQSoH ScRNQQsgeH956t1VeYCBK/G7pPC+HD97+H7GRT93tdYqMw1nYb1Vune7b1DjDPQ6 x0b94JtsuZmWdmJFv5EqcMfJfdFaQgKDG6lfEbYY+zAJB4fIA1M7+XSqMj4sntHS /z5GVofArVW0J1op680RuU8bbrVx4oest7BcWM8WwtcxycTQ -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:11 2026 by rpki-client