This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/Ut0-uMPrTscTaYNN4M5f0UoNfFM.roa File: Ut0-uMPrTscTaYNN4M5f0UoNfFM.roa (raw, json) Hash identifier: Q8bHgGbUawg5ahVwAK4zt6L7o0niif+XBKxRalI2OOM= Subject key identifier: 52:DD:3E:B8:C3:EB:4E:C7:13:69:83:4D:E0:CE:5F:D1:4A:0D:7C:53 Certificate issuer: /CN=0859786f226cb6d490bfb54294e611a7d51a8f1e Certificate serial: 019B7D5C57F821B285A4A8C09554F5BCEA43 Authority key identifier: 08:59:78:6F:22:6C:B6:D4:90:BF:B5:42:94:E6:11:A7:D5:1A:8F:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/Ut0-uMPrTscTaYNN4M5f0UoNfFM.roa Signing time: Fri 02 Jan 2026 06:19:22 +0000 ROA not before: Fri 02 Jan 2026 06:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47975 IP address blocks: 2a03:2300::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:57:f8:21:b2:85:a4:a8:c0:95:54:f5:bc:ea:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0859786f226cb6d490bfb54294e611a7d51a8f1e Validity Not Before: Jan 2 06:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52dd3eb8c3eb4ec71369834de0ce5fd14a0d7c53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4f:e9:3f:dc:8f:3a:61:c0:98:c6:7f:02:66: 03:43:2d:6a:9f:35:ab:bf:11:e2:52:35:5a:e0:12: 2e:69:30:0f:c9:8f:af:c5:f5:05:78:c3:82:df:35: 33:f8:04:04:52:bd:df:e9:6a:df:83:b6:37:b7:ca: 36:4c:bb:df:39:14:f3:d3:f6:dd:63:17:c3:b5:c7: f6:4e:9f:66:a5:04:07:f7:ec:d4:e9:45:b7:e5:5d: a9:d9:88:1f:20:01:35:c6:8d:d5:16:d9:c3:0c:29: 6e:fc:80:f1:e8:64:1f:11:17:c5:04:99:50:c5:bf: a9:59:d7:2b:fb:a6:09:25:22:af:5a:16:60:70:c3: 24:a5:29:08:08:14:e8:03:3f:89:e3:99:ad:ad:73: 6e:5b:ae:12:2c:85:b8:bc:5a:d2:39:81:9b:df:25: 13:de:58:c5:0a:42:c5:89:09:2e:12:bc:25:62:12: 4c:9e:46:85:b3:1a:32:00:d0:9a:7e:ef:86:d7:5f: 72:dc:bc:ec:ae:42:13:0d:3a:e4:fd:2b:ae:63:87: 49:d5:fc:9d:69:f8:cf:ff:1a:b7:64:48:b1:16:07: 73:e2:42:0b:c0:46:bd:ec:4d:9f:8c:d1:67:58:21: 7b:0d:c9:4b:e0:47:74:9f:c8:45:e4:57:cd:89:9c: d3:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:DD:3E:B8:C3:EB:4E:C7:13:69:83:4D:E0:CE:5F:D1:4A:0D:7C:53 X509v3 Authority Key Identifier: keyid:08:59:78:6F:22:6C:B6:D4:90:BF:B5:42:94:E6:11:A7:D5:1A:8F:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/Ut0-uMPrTscTaYNN4M5f0UoNfFM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:2300::/29 Signature Algorithm: sha256WithRSAEncryption 85:83:9b:e5:f6:a3:c2:e7:e1:7e:87:81:dd:6a:ad:bd:76:e5: 27:2b:ac:6b:73:87:9b:2b:33:27:39:9c:7d:9f:ff:05:0f:09: 8f:90:cd:a6:7e:eb:21:ab:12:e8:91:68:4d:21:69:a9:95:f7: b2:ed:85:5e:79:b5:c6:2b:68:a7:d8:48:97:f6:cf:2d:04:6e: 37:cb:6e:5c:cc:24:a9:2e:34:9d:c0:04:8a:4b:82:04:44:6a: e8:9b:b4:5f:7e:03:f5:d2:ba:0c:87:ba:5e:f4:c3:f4:ad:31: 9c:4b:20:23:c4:7a:46:bd:41:bf:bf:1a:11:7f:6a:45:f6:04: ba:c8:1b:ce:e0:5b:15:d8:50:0c:b9:64:35:bf:43:17:7c:7a: 3e:ad:94:62:3f:18:50:46:0b:16:e3:7b:e7:d5:f5:8d:d4:0a: f0:19:3b:d2:2b:96:1c:54:04:5f:37:8a:d3:4c:d9:de:4f:7d: 1f:71:dc:2e:ad:d6:c6:0a:46:fd:81:39:c9:db:31:96:8f:9c: 1b:86:2e:b1:42:04:0a:2b:b2:ef:17:9b:a9:ce:38:d9:36:da: ea:4c:4b:a6:20:19:db:3e:a6:a5:35:69:31:52:ae:34:64:2e: a9:de:d0:fa:67:bb:da:29:5a:5e:4a:ed:b5:1b:51:2a:41:40: 10:a3:45:5d -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9XFf4IbKFpKjAlVT1vOpDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4NTk3ODZmMjI2Y2I2ZDQ5MGJmYjU0Mjk0ZTYxMWE3ZDUx YThmMWUwHhcNMjYwMTAyMDYxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmRkM2ViOGMzZWI0ZWM3MTM2OTgzNGRlMGNlNWZkMTRhMGQ3YzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuk/pP9yPOmHAmMZ/AmYDQy1qnzWr vxHiUjVa4BIuaTAPyY+vxfUFeMOC3zUz+AQEUr3f6Wrfg7Y3t8o2TLvfORTz0/bd YxfDtcf2Tp9mpQQH9+zU6UW35V2p2YgfIAE1xo3VFtnDDClu/IDx6GQfERfFBJlQ xb+pWdcr+6YJJSKvWhZgcMMkpSkICBToAz+J45mtrXNuW64SLIW4vFrSOYGb3yUT 3ljFCkLFiQkuErwlYhJMnkaFsxoyANCafu+G119y3LzsrkITDTrk/SuuY4dJ1fyd afjP/xq3ZEixFgdz4kILwEa97E2fjNFnWCF7DclL4Ed0n8hF5FfNiZzTbQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFFLdPrjD607HE2mDTeDOX9FKDXxTMB8GA1UdIwQY MBaAFAhZeG8ibLbUkL+1QpTmEafVGo8eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0ZsNGJ5SnN0dFNRdjdWQ2xPWVJwOVVhang0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC82ODRlZTMtZmJlZC00MjI2LTkxYWQt NTJmZTQ0MzQzNTBlLzEvVXQwLXVNUHJUc2NUYVlOTjRNNWYwVW9OZkZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC82ODRlZTMtZmJlZC00MjI2LTkxYWQtNTJmZTQ0MzQzNTBl LzEvQ0ZsNGJ5SnN0dFNRdjdWQ2xPWVJwOVVhang0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgMjADAN BgkqhkiG9w0BAQsFAAOCAQEAhYOb5fajwufhfoeB3WqtvXblJyusa3OHmyszJzmc fZ//BQ8Jj5DNpn7rIasS6JFoTSFpqZX3su2FXnm1xitop9hIl/bPLQRuN8tuXMwk qS40ncAEikuCBERq6Ju0X34D9dK6DIe6XvTD9K0xnEsgI8R6Rr1Bv78aEX9qRfYE usgbzuBbFdhQDLlkNb9DF3x6Pq2UYj8YUEYLFuN759X1jdQK8Bk70iuWHFQEXzeK 00zZ3k99H3HcLq3WxgpG/YE5ydsxlo+cG4YusUIECiuy7xebqc442Tba6kxLpiAZ 2z6mpTVpMVKuNGQuqd7Q+me72ilaXkrttRtRKkFAEKNFXQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:38 2026 by rpki-client