This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/0U5l-1fVh1OtD6ZVTl0G5aBgqlY.roa File: 0U5l-1fVh1OtD6ZVTl0G5aBgqlY.roa (raw, json) Hash identifier: ojbwGjCZFPvM1Nl51Um4pVIo9JHWC+3TTZor3CIbR/s= Subject key identifier: D1:4E:65:FB:57:D5:87:53:AD:0F:A6:55:4E:5D:06:E5:A0:60:AA:56 Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EA7C7E2D29DB7A802624C76C0ACE7 Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/0U5l-1fVh1OtD6ZVTl0G5aBgqlY.roa Signing time: Thu 01 Jan 2026 12:18:22 +0000 ROA not before: Thu 01 Jan 2026 12:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199684 IP address blocks: 2a0e:aa07:e070::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:a7:c7:e2:d2:9d:b7:a8:02:62:4c:76:c0:ac:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d14e65fb57d58753ad0fa6554e5d06e5a060aa56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:74:4d:51:a6:3c:d9:55:71:a5:d3:b6:eb:a1: 92:8a:b7:29:19:5e:a3:44:3b:8d:f2:d5:e2:2a:a0: 1b:bf:fd:f6:4b:30:bb:98:5c:ca:48:bc:3c:f6:27: 71:76:24:32:af:7c:83:97:1b:6e:77:99:b2:94:34: 81:25:1a:6e:50:9d:77:41:db:97:81:54:d8:a8:f6: ad:b0:41:68:9d:67:b0:06:92:b4:d0:3b:ab:66:5d: f7:19:9b:80:d8:af:2c:7e:91:98:8f:7a:26:2d:e8: 07:34:51:68:e6:59:12:64:70:20:bc:e7:0a:f4:68: 8a:0d:b9:35:6e:a4:57:7e:0d:51:88:45:85:76:c1: 34:f4:9b:c7:a8:d5:c8:20:67:b8:d0:0e:ae:d6:9c: f8:2a:65:95:40:ca:d5:b6:fa:b0:09:0c:44:35:59: 43:17:64:3d:1c:b4:d5:ce:1a:46:68:d1:f9:17:30: c5:94:4f:5f:c0:38:c9:6a:d6:e0:86:64:ff:10:e5: e5:f4:d1:d2:c2:fa:ce:7c:82:44:58:aa:8b:8d:53: b4:27:5d:b8:7d:a4:48:0c:0a:79:2d:8b:d9:c8:81: c9:19:a9:8c:91:ea:bf:f6:ae:c8:88:46:5d:8b:3b: ec:d5:76:c8:9a:6f:ad:ed:cc:32:44:82:df:0a:d4: 38:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:4E:65:FB:57:D5:87:53:AD:0F:A6:55:4E:5D:06:E5:A0:60:AA:56 X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/0U5l-1fVh1OtD6ZVTl0G5aBgqlY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa07:e070::/44 Signature Algorithm: sha256WithRSAEncryption 21:01:e5:03:fc:f3:8f:7f:d1:b4:62:10:5a:11:b5:0b:8d:7e: 25:16:26:e9:cb:0c:d2:af:1b:88:91:5d:be:15:14:81:8f:d5: bf:2f:90:8d:f3:08:eb:b3:55:e7:c5:a1:a5:60:58:d2:1e:45: c9:6b:69:18:ad:f7:fa:02:a4:e3:61:7d:7a:cf:32:55:74:24: 11:c8:1c:a4:3c:74:02:98:53:51:48:e9:52:45:d7:fc:be:3e: 03:7b:c2:e5:2b:a6:97:4c:fa:d1:5b:36:bd:be:1f:62:2a:0b: 8a:3e:e0:b0:43:18:55:d0:67:74:eb:b7:61:89:ea:01:3e:ca: 42:4a:e8:40:aa:1a:47:3a:81:f6:f0:ad:06:00:5b:f2:c9:7a: b5:4b:8c:ff:27:d0:bc:33:19:ca:94:26:8b:68:96:ed:a7:b5: d0:c7:22:f8:c5:13:1c:8f:3b:ab:b0:62:72:3e:a3:17:86:de: df:a2:0c:c6:f9:1f:45:12:01:b0:3d:6b:af:1a:5c:88:92:7c: af:ff:8f:59:35:a0:de:ee:ff:c2:5a:57:d6:41:33:ed:b7:b9: 4f:6c:ec:29:9c:44:8e:4c:1b:90:6e:1d:4a:9b:51:8f:c3:f4: 22:a9:f0:8f:0d:83:e5:ba:bc:ed:1c:c0:c9:8c:95:aa:ec:97: 8b:a8:42:c4 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fqfH4tKdt6gCYkx2wKznMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTRlNjVmYjU3ZDU4NzUzYWQwZmE2NTU0ZTVkMDZlNWEwNjBhYTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXRNUaY82VVxpdO266GSircpGV6j RDuN8tXiKqAbv/32SzC7mFzKSLw89idxdiQyr3yDlxtud5mylDSBJRpuUJ13QduX gVTYqPatsEFonWewBpK00DurZl33GZuA2K8sfpGYj3omLegHNFFo5lkSZHAgvOcK 9GiKDbk1bqRXfg1RiEWFdsE09JvHqNXIIGe40A6u1pz4KmWVQMrVtvqwCQxENVlD F2Q9HLTVzhpGaNH5FzDFlE9fwDjJatbghmT/EOXl9NHSwvrOfIJEWKqLjVO0J124 faRIDAp5LYvZyIHJGamMkeq/9q7IiEZdizvs1XbImm+t7cwyRILfCtQ47wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNFOZftX1YdTrQ+mVU5dBuWgYKpWMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvMFU1bC0xZlZoMU90RDZaVlRsMEc1YUJncWxZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6qB+Bw MA0GCSqGSIb3DQEBCwUAA4IBAQAhAeUD/POPf9G0YhBaEbULjX4lFibpywzSrxuI kV2+FRSBj9W/L5CN8wjrs1XnxaGlYFjSHkXJa2kYrff6AqTjYX16zzJVdCQRyByk PHQCmFNRSOlSRdf8vj4De8LlK6aXTPrRWza9vh9iKguKPuCwQxhV0Gd067dhieoB PspCSuhAqhpHOoH28K0GAFvyyXq1S4z/J9C8MxnKlCaLaJbtp7XQxyL4xRMcjzur sGJyPqMXht7fogzG+R9FEgGwPWuvGlyIknyv/49ZNaDe7v/CWlfWQTPtt7lPbOwp nESOTBuQbh1Km1GPw/QiqfCPDYPlurztHMDJjJWq7JeLqELE -----END CERTIFICATE-----Generated at Tue Jan 6 21:31:59 2026 by rpki-client