This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/u9YBJLq1t7JkE_DkFNdRSbpZK_c.roa File: u9YBJLq1t7JkE_DkFNdRSbpZK_c.roa (raw, json) Hash identifier: 5V5Kj6vkFdjgMDloiXkl7ryE2xGCQQ4Ob+s+u5uVqwM= Subject key identifier: BB:D6:01:24:BA:B5:B7:B2:64:13:F0:E4:14:D7:51:49:BA:59:2B:F7 Certificate issuer: /CN=cf275d0fe63998ea1b7d39e518fb329f76bed166 Certificate serial: 019BC0BEA8A211743C9CDD23740E68D4C051 Authority key identifier: CF:27:5D:0F:E6:39:98:EA:1B:7D:39:E5:18:FB:32:9F:76:BE:D1:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/u9YBJLq1t7JkE_DkFNdRSbpZK_c.roa Signing time: Thu 15 Jan 2026 08:21:18 +0000 ROA not before: Thu 15 Jan 2026 08:21:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206506 IP address blocks: 2001:678:360::/48 maxlen: 48 2a0c:8200::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c0:be:a8:a2:11:74:3c:9c:dd:23:74:0e:68:d4:c0:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf275d0fe63998ea1b7d39e518fb329f76bed166 Validity Not Before: Jan 15 08:21:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bbd60124bab5b7b26413f0e414d75149ba592bf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b8:01:34:04:86:c1:0c:e5:4a:3d:4a:01:57: 99:09:dd:23:86:ce:72:3e:5d:64:38:5d:41:f4:08: 67:90:e7:e4:bc:25:fa:dd:44:00:92:22:62:91:7d: 6b:ff:f4:31:75:24:2c:5c:d9:b8:07:c3:ee:0b:0b: 84:a1:3b:42:4f:b9:1a:f9:92:4c:fa:05:e8:9c:87: 4a:cc:ab:ce:88:52:6e:76:11:c6:32:3b:f1:1d:93: 19:a1:b5:dc:ef:55:bb:44:3b:66:f0:11:df:f7:4a: 50:d6:ee:69:6b:d6:38:e4:ba:c4:f3:72:55:01:95: bc:5f:00:31:96:a7:d4:0c:00:af:c8:db:1c:a8:13: 32:6a:f4:dc:ba:ec:a4:da:0f:75:73:ae:c9:f0:26: 86:54:a3:dd:9e:e6:96:f0:b7:34:5e:8e:5f:fb:a0: 1c:ba:25:e6:85:2d:99:7a:69:6a:39:d7:b9:9d:61: ae:a5:6b:0f:3c:9a:88:6f:df:31:c9:a2:f8:aa:40: 50:d8:74:50:6d:33:32:58:3a:4b:a3:07:37:6c:eb: 12:7a:30:e7:b7:b7:b7:c9:21:6b:34:ec:a1:36:09: 28:5d:3b:18:e0:87:87:1e:4b:61:24:bc:ab:35:89: 5c:05:aa:94:bf:d8:05:a5:f4:d1:60:bf:89:e5:cb: 7f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D6:01:24:BA:B5:B7:B2:64:13:F0:E4:14:D7:51:49:BA:59:2B:F7 X509v3 Authority Key Identifier: keyid:CF:27:5D:0F:E6:39:98:EA:1B:7D:39:E5:18:FB:32:9F:76:BE:D1:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/u9YBJLq1t7JkE_DkFNdRSbpZK_c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:360::/48 2a0c:8200::/29 Signature Algorithm: sha256WithRSAEncryption 7e:a3:1e:c3:0d:35:81:75:81:71:b3:bb:89:a0:70:50:8d:f6: a5:c5:a6:04:4d:89:ed:4c:59:8d:08:86:9e:fd:f1:5c:ec:ee: e7:99:d4:55:31:6c:43:cc:6d:f7:f6:8a:9e:5c:ed:0c:3e:91: 14:38:ce:da:8f:27:58:2c:23:92:ba:7f:33:42:20:09:4c:8c: a2:77:d1:e0:be:b5:d0:2b:ef:9b:79:40:c2:8e:44:b1:66:2f: e3:56:d3:8b:6b:82:ca:6f:e1:09:da:71:40:e9:08:59:6b:92: 3a:89:35:04:99:01:4a:44:8d:9d:66:b6:b9:e1:30:93:5b:ab: ee:d8:f6:a0:91:65:24:33:2d:dd:1e:60:e7:d7:6d:36:8e:9c: d2:23:4e:d3:aa:20:58:64:5d:3a:3d:ca:93:64:69:62:15:ac: 47:68:ea:d8:cf:74:d6:88:7c:0d:87:1f:ab:f1:af:10:df:ef: a1:85:24:04:48:46:4e:7d:01:b2:75:b9:2b:75:54:fd:07:b9: 41:71:d5:6a:92:a5:0f:c3:b8:42:a9:77:1c:90:db:50:55:01: f1:b4:fc:7a:08:b8:88:1c:b2:c6:d7:8f:fa:1e:42:47:d5:00: c3:96:ae:15:85:ed:86:d7:7b:5c:ee:3f:f4:d8:2e:a2:ea:b0: d8:6c:75:5d -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgISAZvAvqiiEXQ8nN0jdA5o1MBRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMjc1ZDBmZTYzOTk4ZWExYjdkMzllNTE4ZmIzMjlmNzZi ZWQxNjYwHhcNMjYwMTE1MDgyMTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYmQ2MDEyNGJhYjViN2IyNjQxM2YwZTQxNGQ3NTE0OWJhNTkyYmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLgBNASGwQzlSj1KAVeZCd0jhs5y Pl1kOF1B9AhnkOfkvCX63UQAkiJikX1r//QxdSQsXNm4B8PuCwuEoTtCT7ka+ZJM +gXonIdKzKvOiFJudhHGMjvxHZMZobXc71W7RDtm8BHf90pQ1u5pa9Y45LrE83JV AZW8XwAxlqfUDACvyNscqBMyavTcuuyk2g91c67J8CaGVKPdnuaW8Lc0Xo5f+6Ac uiXmhS2ZemlqOde5nWGupWsPPJqIb98xyaL4qkBQ2HRQbTMyWDpLowc3bOsSejDn t7e3ySFrNOyhNgkoXTsY4IeHHkthJLyrNYlcBaqUv9gFpfTRYL+J5ct/OwIDAQAB o4ICEzCCAg8wHQYDVR0OBBYEFLvWASS6tbeyZBPw5BTXUUm6WSv3MB8GA1UdIwQY MBaAFM8nXQ/mOZjqG3055Rj7Mp92vtFmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenlkZEQtWTVtT29iZlRubEdQc3luM2EtMFdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9hNzg1MWMtYmI3OC00ZjI5LWExZDkt N2I5OTE4MjRiZDgzLzEvdTlZQkpMcTF0N0prRV9Ea0ZOZFJTYnBaS19jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9hNzg1MWMtYmI3OC00ZjI5LWExZDktN2I5OTE4MjRiZDgz LzEvenlkZEQtWTVtT29iZlRubEdQc3luM2EtMFdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwcAIAEGeANg AwUDKgyCADANBgkqhkiG9w0BAQsFAAOCAQEAfqMeww01gXWBcbO7iaBwUI32pcWm BE2J7UxZjQiGnv3xXOzu55nUVTFsQ8xt9/aKnlztDD6RFDjO2o8nWCwjkrp/M0Ig CUyMonfR4L610Cvvm3lAwo5EsWYv41bTi2uCym/hCdpxQOkIWWuSOok1BJkBSkSN nWa2ueEwk1ur7tj2oJFlJDMt3R5g59dtNo6c0iNO06ogWGRdOj3Kk2RpYhWsR2jq 2M901oh8DYcfq/GvEN/voYUkBEhGTn0BsnW5K3VU/Qe5QXHVapKlD8O4Qql3HJDb UFUB8bT8egi4iByyxteP+h5CR9UAw5auFYXthtd7XO4/9Nguouqw2Gx1XQ== -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:12 2026 by rpki-client