This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/_0u7vnHZdg310nUrSqnTSu55Or4.roa File: _0u7vnHZdg310nUrSqnTSu55Or4.roa (raw, json) Hash identifier: xOaMS4kje5xsRAQ6hRbBK0m2M3+HpCRiKnXrVnEapA8= Subject key identifier: FF:4B:BB:BE:71:D9:76:0D:F5:D2:75:2B:4A:A9:D3:4A:EE:79:3A:BE Certificate issuer: /CN=319eddb366919ed75f4660cfb0e0b6e5fc401613 Certificate serial: 019B7A5A775D0E90557168EF14A475F897F7 Authority key identifier: 31:9E:DD:B3:66:91:9E:D7:5F:46:60:CF:B0:E0:B6:E5:FC:40:16:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/_0u7vnHZdg310nUrSqnTSu55Or4.roa Signing time: Thu 01 Jan 2026 16:18:27 +0000 ROA not before: Thu 01 Jan 2026 16:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205771 IP address blocks: 2a13:740::/32 maxlen: 32 2a13:741::/32 maxlen: 32 2a13:742::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:77:5d:0e:90:55:71:68:ef:14:a4:75:f8:97:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=319eddb366919ed75f4660cfb0e0b6e5fc401613 Validity Not Before: Jan 1 16:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff4bbbbe71d9760df5d2752b4aa9d34aee793abe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:02:8a:7d:04:5c:18:55:29:78:31:9c:86:8e: 35:c1:14:fb:fb:cb:d9:56:8f:1c:ba:36:f9:83:14: 0f:8d:e8:85:d9:fa:5c:69:11:69:ed:bb:9e:33:d5: 15:f0:82:19:3c:08:43:2b:1e:75:64:df:83:de:a8: 24:54:12:b9:c3:95:66:4b:1f:41:3b:53:60:c1:b9: 7e:ee:a3:56:4b:5f:61:97:04:e2:64:93:ec:b1:f9: 3b:32:83:41:aa:e5:eb:63:f0:62:c8:6d:b8:1d:da: 5a:53:42:26:89:69:6e:15:58:6f:d5:a8:84:9a:7a: 63:43:5b:6e:0b:37:dd:b2:75:75:c7:4f:3c:08:86: 7d:5e:58:37:fd:72:59:87:65:76:75:b4:32:e4:53: 48:44:b9:6e:f5:be:3a:4d:13:89:1a:52:5e:ae:ad: d0:8b:c0:a8:df:00:e8:bc:be:f3:b0:27:f7:1f:df: f7:bb:01:b6:ab:49:1d:ca:cc:2e:ff:0e:1c:82:38: fc:a5:b1:c4:09:37:b5:78:d9:9a:e1:47:7d:80:fe: f6:b9:6c:5e:5d:e3:a7:d2:93:c5:ba:08:0f:08:6c: e3:4c:41:eb:c6:5c:89:5d:cb:f8:c1:e1:ab:18:c7: ee:67:80:08:f6:08:bb:bc:bc:05:2d:ce:bc:bc:49: f3:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:4B:BB:BE:71:D9:76:0D:F5:D2:75:2B:4A:A9:D3:4A:EE:79:3A:BE X509v3 Authority Key Identifier: keyid:31:9E:DD:B3:66:91:9E:D7:5F:46:60:CF:B0:E0:B6:E5:FC:40:16:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/_0u7vnHZdg310nUrSqnTSu55Or4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:740::-2a13:742:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 88:b3:8b:f4:05:bc:6d:db:8d:6d:e0:be:c7:74:fd:ef:fb:ff: 24:9d:65:4e:02:16:3c:ab:51:90:83:71:e2:ee:61:5b:09:23: f6:75:5c:4d:47:27:2a:ea:bd:87:5a:cb:ba:f0:75:5f:d8:1a: d1:24:a1:ea:7f:f4:0b:4f:8c:63:c9:b5:f7:0a:71:c0:d1:57: c8:10:1f:2c:17:22:66:05:16:a2:fa:fe:31:c3:5e:8b:13:28: 18:66:f9:75:0c:19:1f:ea:f6:22:d8:c3:2f:86:be:4a:cd:da: 57:14:b0:2b:55:8c:40:d8:0c:57:a0:59:8a:a1:61:e6:90:53: dd:b0:c6:a8:90:3e:5b:76:61:b6:f6:7a:7c:6f:8f:55:6d:57: 78:ea:c2:be:27:56:7b:35:b8:4d:74:ed:32:9a:a6:bd:8a:e4: c4:96:87:5b:89:de:5a:ea:3d:16:f6:59:1f:25:f9:70:ed:88: b2:cd:c2:9c:2e:ea:74:22:b0:50:c4:48:0d:f1:80:28:23:e5: ab:87:40:0e:69:46:f7:0f:d5:46:b2:25:36:9e:cc:d4:2f:d5: 34:ea:90:f1:c2:c2:b8:0d:67:b7:ec:27:75:0d:eb:c0:41:c5: e2:b9:f4:2a:b5:2e:74:07:fc:0c:26:3c:d2:93:48:87:ab:6f: a9:57:db:d1 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgISAZt6WnddDpBVcWjvFKR1+Jf3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxOWVkZGIzNjY5MTllZDc1ZjQ2NjBjZmIwZTBiNmU1ZmM0 MDE2MTMwHhcNMjYwMTAxMTYxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjRiYmJiZTcxZDk3NjBkZjVkMjc1MmI0YWE5ZDM0YWVlNzkzYWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wKKfQRcGFUpeDGcho41wRT7+8vZ Vo8cujb5gxQPjeiF2fpcaRFp7bueM9UV8IIZPAhDKx51ZN+D3qgkVBK5w5VmSx9B O1Ngwbl+7qNWS19hlwTiZJPssfk7MoNBquXrY/BiyG24HdpaU0ImiWluFVhv1aiE mnpjQ1tuCzfdsnV1x088CIZ9Xlg3/XJZh2V2dbQy5FNIRLlu9b46TROJGlJerq3Q i8Co3wDovL7zsCf3H9/3uwG2q0kdyswu/w4cgjj8pbHECTe1eNma4Ud9gP72uWxe XeOn0pPFuggPCGzjTEHrxlyJXcv4weGrGMfuZ4AI9gi7vLwFLc68vEnz+QIDAQAB o4ICEzCCAg8wHQYDVR0OBBYEFP9Lu75x2XYN9dJ1K0qp00rueTq+MB8GA1UdIwQY MBaAFDGe3bNmkZ7XX0Zgz7DgtuX8QBYTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVo3ZHMyYVJudGRmUm1EUHNPQzI1ZnhBRmhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS85YTM2Y2MtNmRjYS00YTJhLWJmNmYt ZDQ3YmQ3ZDAxOTJmLzEvXzB1N3ZuSFpkZzMxMG5VclNxblRTdTU1T3I0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS85YTM2Y2MtNmRjYS00YTJhLWJmNmYtZDQ3YmQ3ZDAxOTJm LzEvTVo3ZHMyYVJudGRmUm1EUHNPQzI1ZnhBRmhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQMA4DBQYqEwdA AwUAKhMHQjANBgkqhkiG9w0BAQsFAAOCAQEAiLOL9AW8bduNbeC+x3T97/v/JJ1l TgIWPKtRkINx4u5hWwkj9nVcTUcnKuq9h1rLuvB1X9ga0SSh6n/0C0+MY8m19wpx wNFXyBAfLBciZgUWovr+McNeixMoGGb5dQwZH+r2ItjDL4a+Ss3aVxSwK1WMQNgM V6BZiqFh5pBT3bDGqJA+W3ZhtvZ6fG+PVW1XeOrCvidWezW4TXTtMpqmvYrkxJaH W4neWuo9FvZZHyX5cO2Iss3CnC7qdCKwUMRIDfGAKCPlq4dADmlG9w/VRrIlNp7M 1C/VNOqQ8cLCuA1nt+wndQ3rwEHF4rn0KrUudAf8DCY80pNIh6tvqVfb0Q== -----END CERTIFICATE-----Generated at Tue Feb 10 07:11:10 2026 by rpki-client