This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/U4jYXa33eK2_Y2WdmHCAOH75bvM.roa File: U4jYXa33eK2_Y2WdmHCAOH75bvM.roa (raw, json) Hash identifier: ejTGELQ7zjtDoNb9o1n2deFNC4+qkFo4zCvOGfp57X4= Subject key identifier: 53:88:D8:5D:AD:F7:78:AD:BF:63:65:9D:98:70:80:38:7E:F9:6E:F3 Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03 Certificate serial: 019B7B36B037BC1B350D01AB67CC8F0AE634 Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/U4jYXa33eK2_Y2WdmHCAOH75bvM.roa Signing time: Thu 01 Jan 2026 20:19:00 +0000 ROA not before: Thu 01 Jan 2026 20:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52016 IP address blocks: 2001:6d0:4001::/48 maxlen: 48 2001:6d0:4002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:b0:37:bc:1b:35:0d:01:ab:67:cc:8f:0a:e6:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03 Validity Not Before: Jan 1 20:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5388d85dadf778adbf63659d987080387ef96ef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:24:a8:69:2d:a4:94:36:f5:d3:58:f9:c6:52: 26:1e:10:6b:f4:b5:eb:ae:f1:09:a3:ac:81:e1:0d: 24:1b:b5:54:9c:db:91:c0:25:00:bb:87:88:ef:ae: d8:d6:b0:79:18:4c:b9:f7:13:71:7e:77:3e:5c:9b: 9f:d5:53:1a:e9:67:55:5f:97:6c:b3:3d:4c:72:46: 1f:9d:28:29:81:4c:75:29:12:68:58:ea:c1:05:d9: 54:f5:cc:e7:28:9d:64:70:79:83:f3:1e:e3:fe:7b: b4:d1:7c:91:b0:c6:45:64:fe:e2:d8:c8:8f:71:f8: 29:d0:cb:82:a2:15:fb:be:90:3a:2b:d9:2c:02:d4: fb:69:51:20:5b:9e:83:58:0b:c2:1c:76:d2:cc:07: 84:ff:be:83:04:ba:f9:b2:bf:35:76:91:db:d4:9e: 8e:4e:f3:9a:bf:a0:6a:f1:28:d2:c7:16:db:f3:a7: a5:10:97:9a:03:ac:2c:03:43:97:94:73:a4:68:d4: aa:ed:a3:25:29:75:e1:93:0d:0c:b7:e8:9d:cc:11: ed:36:ef:cf:a0:31:28:8d:22:5d:a0:cf:87:07:fd: fc:9a:3a:0c:c3:30:22:39:45:5c:6a:e6:68:10:6e: 2d:0f:e6:2d:19:46:13:cc:68:fb:cc:47:e5:a3:72: 42:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:88:D8:5D:AD:F7:78:AD:BF:63:65:9D:98:70:80:38:7E:F9:6E:F3 X509v3 Authority Key Identifier: keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/U4jYXa33eK2_Y2WdmHCAOH75bvM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:6d0:4001::-2001:6d0:4002:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption ce:aa:d9:db:82:ea:3c:3d:f1:3e:47:e5:54:83:ee:19:3c:26: 71:cd:4e:e6:e7:98:fb:98:b8:91:48:12:92:5f:28:40:dd:13: 73:90:27:0c:b4:60:20:1f:c5:b8:74:50:a9:23:fe:07:ba:55: c6:77:f1:a0:54:cf:b2:b3:13:56:fb:06:a8:b4:90:da:04:ff: 48:19:83:f2:ef:d3:a6:59:41:00:c2:eb:e6:0c:83:26:95:24: ba:3a:84:55:67:f4:dd:96:f4:3d:7f:6a:42:ed:14:51:9f:d6: d2:64:34:8e:dd:66:3c:68:13:12:65:11:c7:7a:49:58:1f:89: 74:92:01:9f:48:2c:b9:8b:d8:5a:30:53:36:1f:cd:65:9d:ca: 7c:07:08:01:6c:5c:95:01:fc:af:90:c4:6c:0a:71:1b:54:ce: 7b:59:fe:f8:91:78:bf:b7:3a:07:18:1b:9e:60:af:1b:f3:f5: 4c:ed:50:ff:b9:7e:08:40:c8:46:44:16:f1:45:16:11:e0:a3: e3:1c:40:3f:26:e2:7b:9d:38:1b:10:be:35:05:27:55:f8:c0: 8d:29:3c:85:fe:9e:14:e2:6e:2f:ab:07:f5:4a:11:3a:6e:06: 2f:8b:c9:a8:7f:4e:eb:22:0d:c3:79:b8:19:62:7a:53:86:5d: 38:c1:3c:25 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt7NrA3vBs1DQGrZ8yPCuY0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMWM2NjViMDM4NjkyYjkzYmRmNWQxZDhmM2NlYTNlOTg2 OTdhMDMwHhcNMjYwMTAxMjAxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Mzg4ZDg1ZGFkZjc3OGFkYmY2MzY1OWQ5ODcwODAzODdlZjk2ZWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSSoaS2klDb101j5xlImHhBr9LXr rvEJo6yB4Q0kG7VUnNuRwCUAu4eI767Y1rB5GEy59xNxfnc+XJuf1VMa6WdVX5ds sz1MckYfnSgpgUx1KRJoWOrBBdlU9cznKJ1kcHmD8x7j/nu00XyRsMZFZP7i2MiP cfgp0MuCohX7vpA6K9ksAtT7aVEgW56DWAvCHHbSzAeE/76DBLr5sr81dpHb1J6O TvOav6Bq8SjSxxbb86elEJeaA6wsA0OXlHOkaNSq7aMlKXXhkw0Mt+idzBHtNu/P oDEojSJdoM+HB/38mjoMwzAiOUVcauZoEG4tD+YtGUYTzGj7zEflo3JCbQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFFOI2F2t93itv2NlnZhwgDh++W7zMB8GA1UdIwQY MBaAFO8cZlsDhpK5O99dHY886j6YaXoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAt Njg4ZDMzM2VkOWQ1LzEvVTRqWVhhMzNlSzJfWTJXZG1IQ0FPSDc1YnZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAtNjg4ZDMzM2VkOWQ1 LzEvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAgAQbQ QAEDBwAgAQbQQAIwDQYJKoZIhvcNAQELBQADggEBAM6q2duC6jw98T5H5VSD7hk8 JnHNTubnmPuYuJFIEpJfKEDdE3OQJwy0YCAfxbh0UKkj/ge6VcZ38aBUz7KzE1b7 Bqi0kNoE/0gZg/Lv06ZZQQDC6+YMgyaVJLo6hFVn9N2W9D1/akLtFFGf1tJkNI7d ZjxoExJlEcd6SVgfiXSSAZ9ILLmL2FowUzYfzWWdynwHCAFsXJUB/K+QxGwKcRtU zntZ/viReL+3OgcYG55grxvz9UztUP+5fghAyEZEFvFFFhHgo+McQD8m4nudOBsQ vjUFJ1X4wI0pPIX+nhTibi+rB/VKETpuBi+Lyah/TusiDcN5uBlielOGXTjBPCU= -----END CERTIFICATE-----Generated at Mon Jan 26 04:40:50 2026 by rpki-client