This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/udZTpVbxMp7a8UDy4prxdlg4v5k.roa File: udZTpVbxMp7a8UDy4prxdlg4v5k.roa (raw, json) Hash identifier: r76G7hano2F8i30VJss8PyW+AQ9pX9ftMEZt9dcKbQI= Subject key identifier: B9:D6:53:A5:56:F1:32:9E:DA:F1:40:F2:E2:9A:F1:76:58:38:BF:99 Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B7910C3D9FF6C1E743DF963D6CFC4E9C1 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/udZTpVbxMp7a8UDy4prxdlg4v5k.roa Signing time: Thu 01 Jan 2026 10:18:20 +0000 ROA not before: Thu 01 Jan 2026 10:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215842 IP address blocks: 2a12:bec0:5d0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:c3:d9:ff:6c:1e:74:3d:f9:63:d6:cf:c4:e9:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9d653a556f1329edaf140f2e29af1765838bf99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:00:40:4b:5e:53:4c:81:a5:ac:b7:d9:77:ed: e9:ca:5f:07:e6:1b:8b:3e:b4:73:30:cd:d3:e2:88: 76:e6:90:30:e2:fd:3e:8a:d6:65:e8:32:c0:b0:4b: 15:9a:95:d0:c7:43:f1:f6:0d:16:44:76:c5:57:68: 9d:95:51:11:cc:2e:94:ff:75:30:ae:58:e2:16:84: ef:da:fa:7a:61:38:89:ad:25:f0:57:7c:79:1d:7d: 50:ec:48:35:f8:cc:4c:6a:4f:a3:85:31:80:6a:d9: 54:34:88:64:13:4a:38:12:45:aa:c2:8d:cb:02:87: 7b:72:3a:65:d8:c3:6a:3f:b1:71:4e:09:2e:8b:be: 45:6f:56:9b:65:07:fe:81:80:63:a7:ce:b8:c6:b5: d9:c6:60:57:27:7b:39:48:ba:bb:97:70:d9:77:41: 58:45:9f:48:2a:c4:7d:c2:c8:20:cf:24:0f:43:db: 7b:f0:34:5d:a3:aa:0f:fc:0f:75:75:08:ef:0c:a9: 12:09:11:38:61:ae:b9:5f:2d:6c:47:a4:5f:31:e5: d4:ba:5e:48:f0:ab:ea:cb:e4:84:89:a2:18:c9:d0: cf:c5:6a:70:c7:52:38:85:dc:3d:4a:5d:93:e7:23: 69:84:7c:2f:bd:58:9e:26:90:19:97:d1:4c:0c:c4: 8b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:D6:53:A5:56:F1:32:9E:DA:F1:40:F2:E2:9A:F1:76:58:38:BF:99 X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/udZTpVbxMp7a8UDy4prxdlg4v5k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec0:5d0::/44 Signature Algorithm: sha256WithRSAEncryption 40:03:52:7c:64:73:94:fc:0c:d8:cc:d3:04:c4:0f:b5:0e:2f: c3:bc:6f:d1:90:07:89:ae:d5:a3:bd:da:1c:46:53:c0:e0:0c: 7a:c4:61:0c:ee:ed:d7:a6:ac:6c:05:c4:35:a7:49:7e:54:24: b6:ab:8c:c5:ce:99:72:2a:3e:67:19:cc:ae:3e:3e:9c:5f:b8: 1f:88:2a:a9:9a:b2:00:d9:27:0d:59:ba:23:0c:c8:09:08:02: 37:d2:8c:a7:6b:6a:e3:e2:29:ec:dd:ae:c1:c8:45:95:90:00: 1e:48:b4:75:92:04:94:d5:6e:dc:57:9a:23:fa:36:d7:8a:c1: d3:90:4b:62:7c:05:93:6d:34:b3:f6:62:96:20:72:7b:d9:ce: 7d:02:4c:8f:df:a4:7d:7a:a9:c0:b0:2b:d1:c9:62:4f:e1:23: 63:36:b7:fd:6e:f8:d5:1c:9a:d5:bc:e2:88:94:eb:93:0a:46: 6b:23:c8:cc:ad:cb:b8:e0:de:a8:b9:3b:d4:fd:38:a2:47:cf: e6:9a:d2:f3:f2:12:48:04:3f:45:99:47:e3:66:0c:63:86:a5: 8f:4f:02:10:4f:86:0c:8f:51:c0:ec:a2:ff:8b:2b:cc:65:75: e9:c5:b0:39:f8:bc:fa:64:a0:56:b0:c4:f0:f6:fe:23:01:3a: 6e:49:88:9a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EMPZ/2wedD35Y9bPxOnBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWQ2NTNhNTU2ZjEzMjllZGFmMTQwZjJlMjlhZjE3NjU4MzhiZjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QBAS15TTIGlrLfZd+3pyl8H5huL PrRzMM3T4oh25pAw4v0+itZl6DLAsEsVmpXQx0Px9g0WRHbFV2idlVERzC6U/3Uw rljiFoTv2vp6YTiJrSXwV3x5HX1Q7Eg1+MxMak+jhTGAatlUNIhkE0o4EkWqwo3L Aod7cjpl2MNqP7FxTgkui75Fb1abZQf+gYBjp864xrXZxmBXJ3s5SLq7l3DZd0FY RZ9IKsR9wsggzyQPQ9t78DRdo6oP/A91dQjvDKkSCRE4Ya65Xy1sR6RfMeXUul5I 8Kvqy+SEiaIYydDPxWpwx1I4hdw9Sl2T5yNphHwvvVieJpAZl9FMDMSLZQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLnWU6VW8TKe2vFA8uKa8XZYOL+ZMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvdWRaVHBWYnhNcDdhOFVEeTRwcnhkbGc0djVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+wAXQ MA0GCSqGSIb3DQEBCwUAA4IBAQBAA1J8ZHOU/AzYzNMExA+1Di/DvG/RkAeJrtWj vdocRlPA4Ax6xGEM7u3XpqxsBcQ1p0l+VCS2q4zFzplyKj5nGcyuPj6cX7gfiCqp mrIA2ScNWbojDMgJCAI30oyna2rj4ins3a7ByEWVkAAeSLR1kgSU1W7cV5oj+jbX isHTkEtifAWTbTSz9mKWIHJ72c59AkyP36R9eqnAsCvRyWJP4SNjNrf9bvjVHJrV vOKIlOuTCkZrI8jMrcu44N6ouTvU/TiiR8/mmtLz8hJIBD9FmUfjZgxjhqWPTwIQ T4YMj1HA7KL/iyvMZXXpxbA5+Lz6ZKBWsMTw9v4jATpuSYia -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:51 2026 by rpki-client