This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/UJ_FMxm6N6LR5r7WpHwx4Iee5UY.roa File: UJ_FMxm6N6LR5r7WpHwx4Iee5UY.roa (raw, json) Hash identifier: eUJah+9d/6XnhT9UqQs2SZlfNGn8O+lcvJGSD6EQ5GM= Subject key identifier: 50:9F:C5:33:19:BA:37:A2:D1:E6:BE:D6:A4:7C:31:E0:87:9E:E5:46 Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EC1B0EE8B1FC53D4B6B8F39116623 Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/UJ_FMxm6N6LR5r7WpHwx4Iee5UY.roa Signing time: Thu 01 Jan 2026 12:18:28 +0000 ROA not before: Thu 01 Jan 2026 12:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 394604 IP address blocks: 2a0e:aa07:f00c::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c1:b0:ee:8b:1f:c5:3d:4b:6b:8f:39:11:66:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=509fc53319ba37a2d1e6bed6a47c31e0879ee546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a1:4b:20:c4:b0:0d:94:73:f3:a1:3c:84:7a: 5c:69:1b:6f:42:17:34:9a:8c:30:c5:21:bb:86:f3: 99:83:e5:75:37:14:ef:2e:12:e9:1d:76:1f:b4:c5: 93:10:c1:92:fb:90:87:63:29:50:30:80:1c:c7:44: 60:a5:10:7c:ae:57:df:50:7c:4e:29:16:af:53:60: b1:73:eb:23:5d:68:2e:21:cd:70:12:4a:62:dd:0d: 53:67:a9:af:53:46:80:7f:fc:17:a5:66:93:33:0d: 0a:eb:f3:6e:b2:1c:34:a2:e0:f4:51:cb:da:6d:b7: 90:62:56:2d:dd:fb:46:e5:79:81:c0:6e:fe:d6:7e: 37:eb:55:e8:73:f8:40:52:3c:4c:8b:4f:e2:b2:21: 60:c3:58:2a:27:82:4d:a8:fd:3a:3d:95:e7:12:ba: d2:e8:b4:c9:c6:23:81:87:b4:4e:61:64:e2:4f:23: 55:ae:d4:21:84:90:d6:6f:b1:73:1c:31:82:65:fb: 61:82:8c:18:18:97:b8:1f:c7:a7:84:dc:99:26:74: 83:6e:00:e6:5d:8c:f2:e7:a4:64:ca:57:5f:fa:2c: 04:72:28:1b:1f:4b:98:70:02:7f:1d:43:1e:9e:26: cc:b7:08:b7:5e:34:8e:c5:d7:7b:24:d5:4e:e9:d3: f4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:9F:C5:33:19:BA:37:A2:D1:E6:BE:D6:A4:7C:31:E0:87:9E:E5:46 X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/UJ_FMxm6N6LR5r7WpHwx4Iee5UY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa07:f00c::/46 Signature Algorithm: sha256WithRSAEncryption 0f:10:b9:6d:93:c3:01:3f:c0:2b:9c:16:00:1d:9f:bd:38:4e: 5f:d3:c3:b9:d5:b8:20:d4:ca:50:05:9d:b9:aa:2e:34:f1:a6: ef:c2:0e:54:29:75:ee:6c:c8:ce:f7:b8:91:51:e8:66:1f:49: 29:98:e9:89:4c:6a:4c:22:4a:aa:bc:70:4f:b4:1b:3b:1b:0d: 5a:06:c8:0d:ce:ee:c7:7b:2e:74:b2:1f:63:8e:ee:4a:b8:6a: 8c:c7:a5:5b:de:bf:cb:dd:b2:20:ec:41:af:18:98:97:90:83: d5:16:59:7e:1a:8d:db:01:f0:fd:07:10:cf:c8:9f:b9:c2:ec: b3:05:98:a5:7d:33:e5:fd:03:c0:57:bc:bc:ba:68:29:a2:55: 50:6f:7a:e8:75:1f:9a:2c:a7:4d:c2:e3:9d:a9:bf:f3:93:90: 4f:c5:4d:41:42:d0:83:cf:c8:b2:3f:ba:63:59:dd:5f:31:52: 7c:77:fb:6a:48:36:f2:49:00:d1:30:58:4c:89:d6:30:e7:82: fa:08:a0:b9:f2:29:d4:6d:87:9b:76:9f:de:f4:47:15:88:6e: 17:1c:05:81:5e:41:5b:ac:aa:ca:18:e1:29:b0:56:a6:b6:e8: c6:21:ae:ea:22:8d:0d:62:93:0e:c8:85:9c:06:a1:f5:7f:4d: b8:93:a1:19 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fsGw7osfxT1La485EWYjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDlmYzUzMzE5YmEzN2EyZDFlNmJlZDZhNDdjMzFlMDg3OWVlNTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26FLIMSwDZRz86E8hHpcaRtvQhc0 mowwxSG7hvOZg+V1NxTvLhLpHXYftMWTEMGS+5CHYylQMIAcx0RgpRB8rlffUHxO KRavU2Cxc+sjXWguIc1wEkpi3Q1TZ6mvU0aAf/wXpWaTMw0K6/Nushw0ouD0Ucva bbeQYlYt3ftG5XmBwG7+1n4361Xoc/hAUjxMi0/isiFgw1gqJ4JNqP06PZXnErrS 6LTJxiOBh7ROYWTiTyNVrtQhhJDWb7FzHDGCZfthgowYGJe4H8enhNyZJnSDbgDm XYzy56Rkyldf+iwEcigbH0uYcAJ/HUMenibMtwi3XjSOxdd7JNVO6dP0MQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFCfxTMZujei0ea+1qR8MeCHnuVGMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvVUpfRk14bTZONkxSNXI3V3BId3g0SWVlNVVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCKg6qB/AM MA0GCSqGSIb3DQEBCwUAA4IBAQAPELltk8MBP8ArnBYAHZ+9OE5f08O51bgg1MpQ BZ25qi408abvwg5UKXXubMjO97iRUehmH0kpmOmJTGpMIkqqvHBPtBs7Gw1aBsgN zu7Hey50sh9jju5KuGqMx6Vb3r/L3bIg7EGvGJiXkIPVFll+Go3bAfD9BxDPyJ+5 wuyzBZilfTPl/QPAV7y8umgpolVQb3rodR+aLKdNwuOdqb/zk5BPxU1BQtCDz8iy P7pjWd1fMVJ8d/tqSDbySQDRMFhMidYw54L6CKC58inUbYebdp/e9EcViG4XHAWB XkFbrKrKGOEpsFamtujGIa7qIo0NYpMOyIWcBqH1f024k6EZ -----END CERTIFICATE-----Generated at Tue Jan 6 21:31:59 2026 by rpki-client