This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/1uwGr4Goum09TwOpMeREi1HlyB0.roa File: 1uwGr4Goum09TwOpMeREi1HlyB0.roa (raw, json) Hash identifier: W9Isg+jaTuKwI3lTM/cic92OoTPmT6xxBqBpElsdOz8= Subject key identifier: D6:EC:06:AF:81:A8:BA:6D:3D:4F:03:A9:31:E4:44:8B:51:E5:C8:1D Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B7910C430FD1D6FA1B940C1BC978A42E9 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/1uwGr4Goum09TwOpMeREi1HlyB0.roa Signing time: Thu 01 Jan 2026 10:18:20 +0000 ROA not before: Thu 01 Jan 2026 10:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215965 IP address blocks: 2a12:bec0:600::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:c4:30:fd:1d:6f:a1:b9:40:c1:bc:97:8a:42:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6ec06af81a8ba6d3d4f03a931e4448b51e5c81d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:42:a6:bd:25:5d:e5:5c:97:0f:07:bc:89:ef: 7a:1b:58:8f:f3:f7:07:df:7f:72:33:ca:70:83:65: 60:44:7b:2a:72:c6:40:bf:20:4e:12:36:31:3b:82: 3d:4a:b1:0e:7c:0b:11:db:b9:1e:bd:ad:df:8e:8e: 80:44:25:5c:0c:a6:bf:c3:61:34:38:6c:7f:18:3f: 23:39:dc:93:a0:61:cd:5d:2d:ea:b5:9e:6c:00:8a: 46:7a:eb:07:9a:e3:fb:b1:eb:2d:a5:e1:79:b3:2a: 10:c8:09:1b:2f:be:ab:29:fd:2d:c7:3d:15:e4:08: be:e3:af:c5:a4:fc:ae:97:1b:0d:71:42:4d:01:d1: f8:bd:30:6a:53:f6:2c:25:e8:43:11:fb:0b:b5:d1: 87:fa:c1:a9:fc:c7:eb:c2:34:27:e2:00:66:a8:cd: 96:5d:d5:01:6e:05:c4:27:5d:69:37:7e:b4:f8:06: 9c:1d:85:29:44:26:a7:fe:ec:c0:55:f6:54:8d:18: 5e:58:f5:61:38:b7:30:fb:45:94:17:d4:23:b6:cd: e7:df:86:62:79:a6:45:b8:06:39:b1:44:ce:3d:0e: f0:b4:ba:95:05:2c:99:d8:90:b7:a6:bd:03:58:20: cb:d7:69:cb:a6:8e:de:17:b4:dc:d1:2d:40:53:9a: fb:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:EC:06:AF:81:A8:BA:6D:3D:4F:03:A9:31:E4:44:8B:51:E5:C8:1D X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/1uwGr4Goum09TwOpMeREi1HlyB0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec0:600::/44 Signature Algorithm: sha256WithRSAEncryption 6e:9b:8c:d3:24:d5:5b:10:3c:f8:4b:4b:1e:d6:b7:f3:63:51: 71:8d:45:b3:d1:f2:36:27:91:c7:90:48:5d:b2:a6:2e:33:b3: 53:79:b4:fa:0d:a8:8d:31:d7:d8:17:b4:af:0b:bd:a8:df:22: af:e9:ae:38:6e:d9:84:04:3a:59:dd:c9:95:37:04:ca:d9:ff: 01:30:6e:77:02:cb:43:1d:b1:c6:5c:30:96:a4:83:2f:08:a7: c9:60:b3:8a:a1:9f:bd:79:df:05:f6:0c:0a:2f:25:ba:da:4d: 16:74:f1:61:ee:31:16:98:03:46:cb:54:b9:af:77:a5:f5:27: f9:0e:83:ef:28:b2:64:43:92:51:c3:3f:19:43:81:0c:c5:8c: a5:6c:81:bc:13:af:f2:29:f2:ff:0d:c6:05:bc:ea:8e:2c:6b: 48:55:6b:95:6b:9a:62:50:de:e9:3d:b6:a8:0a:b9:f3:24:c5: 04:a7:e9:ce:e3:4e:08:b1:30:c6:6e:0f:3d:1d:a5:bd:07:9a: 47:bc:cf:88:d5:19:78:13:c2:23:5a:cc:e4:a4:89:cb:8d:22: b4:a0:8a:9e:62:c6:a9:20:7d:32:1f:f8:a0:8e:0d:b1:1c:da: af:0b:7b:12:34:2e:e9:7c:e1:8a:2d:ab:18:4d:99:61:2c:d8: 91:11:0b:e1 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EMQw/R1voblAwbyXikLpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmVjMDZhZjgxYThiYTZkM2Q0ZjAzYTkzMWU0NDQ4YjUxZTVjODFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokKmvSVd5VyXDwe8ie96G1iP8/cH 339yM8pwg2VgRHsqcsZAvyBOEjYxO4I9SrEOfAsR27keva3fjo6ARCVcDKa/w2E0 OGx/GD8jOdyToGHNXS3qtZ5sAIpGeusHmuP7sestpeF5syoQyAkbL76rKf0txz0V 5Ai+46/FpPyulxsNcUJNAdH4vTBqU/YsJehDEfsLtdGH+sGp/MfrwjQn4gBmqM2W XdUBbgXEJ11pN360+AacHYUpRCan/uzAVfZUjRheWPVhOLcw+0WUF9Qjts3n34Zi eaZFuAY5sUTOPQ7wtLqVBSyZ2JC3pr0DWCDL12nLpo7eF7Tc0S1AU5r7LQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNbsBq+BqLptPU8DqTHkRItR5cgdMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvMXV3R3I0R291bTA5VHdPcE1lUkVpMUhseUIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+wAYA MA0GCSqGSIb3DQEBCwUAA4IBAQBum4zTJNVbEDz4S0se1rfzY1FxjUWz0fI2J5HH kEhdsqYuM7NTebT6DaiNMdfYF7SvC72o3yKv6a44btmEBDpZ3cmVNwTK2f8BMG53 AstDHbHGXDCWpIMvCKfJYLOKoZ+9ed8F9gwKLyW62k0WdPFh7jEWmANGy1S5r3el 9Sf5DoPvKLJkQ5JRwz8ZQ4EMxYylbIG8E6/yKfL/DcYFvOqOLGtIVWuVa5piUN7p PbaoCrnzJMUEp+nO404IsTDGbg89HaW9B5pHvM+I1Rl4E8IjWszkpInLjSK0oIqe YsapIH0yH/igjg2xHNqvC3sSNC7pfOGKLasYTZlhLNiREQvh -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:04 2026 by rpki-client