This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/CdUwsl6inB8iZmDrUmQa4NQW2Js.roa File: CdUwsl6inB8iZmDrUmQa4NQW2Js.roa (raw, json) Hash identifier: +ZuAHTTZQWRgUci4V00JYqxA0Ub16Meb+do3gSL9MBI= Subject key identifier: 09:D5:30:B2:5E:A2:9C:1F:22:66:60:EB:52:64:1A:E0:D4:16:D8:9B Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Certificate serial: 019B7EA765C116A770AF570EF80C1BCD90A3 Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/CdUwsl6inB8iZmDrUmQa4NQW2Js.roa Signing time: Fri 02 Jan 2026 12:20:58 +0000 ROA not before: Fri 02 Jan 2026 12:20:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214514 IP address blocks: 2a0a:79c0:600::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:65:c1:16:a7:70:af:57:0e:f8:0c:1b:cd:90:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Validity Not Before: Jan 2 12:20:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09d530b25ea29c1f226660eb52641ae0d416d89b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7e:d0:82:57:50:15:58:a4:92:c6:62:95:a3: cf:bb:99:54:b2:8b:bd:c0:7f:ae:04:aa:ae:51:6c: 76:dd:19:c9:17:9e:1d:da:87:4d:b0:a3:b7:79:4f: 4d:08:ac:31:c9:0e:fd:0b:1f:f4:b8:29:6f:bb:f9: 8a:b2:b5:9d:33:86:97:93:f7:4c:44:5b:29:b2:93: 70:b2:ca:76:93:e7:72:32:90:a0:fe:43:40:0c:b6: 75:9f:c5:4c:bc:40:c9:5c:8a:6e:c5:27:52:45:da: f6:56:5c:b4:73:55:89:bd:2a:98:bf:64:a0:76:a6: b4:b6:73:15:e4:85:7a:e4:51:8f:05:de:e6:57:16: 17:b2:77:2e:37:15:4f:11:cc:4e:0d:16:dc:73:0a: 73:f6:d8:29:5d:a5:eb:20:5d:75:40:44:62:c4:44: fb:22:54:ea:e0:ae:ad:1e:c2:0f:f1:6c:b4:d5:6d: af:19:84:99:32:23:fd:25:c8:9e:ea:31:8a:eb:89: b0:00:4f:a2:cc:43:e5:1b:d2:09:4f:51:ea:28:0d: 26:42:08:7a:fd:1f:c1:50:90:a5:7f:cf:0b:b9:ba: ff:a0:1f:8f:05:e2:05:ed:d5:f0:75:2e:43:5e:2d: 58:96:68:89:b7:67:10:de:a8:e0:e0:13:20:45:be: 55:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:D5:30:B2:5E:A2:9C:1F:22:66:60:EB:52:64:1A:E0:D4:16:D8:9B X509v3 Authority Key Identifier: keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/CdUwsl6inB8iZmDrUmQa4NQW2Js.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:79c0:600::/44 Signature Algorithm: sha256WithRSAEncryption 6f:39:98:7b:83:9b:73:ba:e0:6a:47:b9:a7:6b:e4:94:42:d9: 3b:1b:44:53:4a:a8:d0:1e:cd:d4:c2:0b:28:d7:7d:93:79:61: 6e:f4:9d:c3:f9:77:c0:b9:7f:b2:b5:c4:4c:0a:5f:60:4b:d1: 4f:0e:a6:03:48:5a:0e:24:9f:e0:13:c5:70:5f:63:49:95:d8: a7:dc:34:09:90:27:06:76:da:a3:37:7e:61:56:71:32:cf:41: a7:b4:1a:95:f6:f8:17:ab:c3:7f:e7:45:32:46:cc:a5:f2:45: 0a:85:7a:fc:56:65:97:93:79:a4:30:ba:83:bd:a1:98:97:3e: 7a:80:02:79:99:8b:0a:34:31:f6:0e:99:34:cd:e3:59:6d:e9: 6a:4b:fb:a2:38:bb:72:91:e3:fe:a7:e5:3c:8c:dc:b5:60:03: 80:1b:cc:68:c1:f3:64:b1:4b:bf:ae:87:4e:17:9d:9a:06:48: d8:8e:58:23:53:37:76:7e:99:15:50:35:2d:cf:1b:b0:f5:0c: d3:c0:08:11:84:89:9b:d7:97:cb:09:c8:c8:fb:df:00:a5:e6: de:04:6b:b0:2a:90:d5:55:ad:f2:e5:e8:0b:ea:24:d2:61:f4: 82:55:f3:e7:4b:c4:b0:76:6d:db:70:a7:6d:ed:34:a0:ff:79: 83:d6:51:71 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+p2XBFqdwr1cO+AwbzZCjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl ZDc5NTQwHhcNMjYwMTAyMTIyMDU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOWQ1MzBiMjVlYTI5YzFmMjI2NjYwZWI1MjY0MWFlMGQ0MTZkODliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlX7QgldQFVikksZilaPPu5lUsou9 wH+uBKquUWx23RnJF54d2odNsKO3eU9NCKwxyQ79Cx/0uClvu/mKsrWdM4aXk/dM RFspspNwssp2k+dyMpCg/kNADLZ1n8VMvEDJXIpuxSdSRdr2Vly0c1WJvSqYv2Sg dqa0tnMV5IV65FGPBd7mVxYXsncuNxVPEcxODRbccwpz9tgpXaXrIF11QERixET7 IlTq4K6tHsIP8Wy01W2vGYSZMiP9Jcie6jGK64mwAE+izEPlG9IJT1HqKA0mQgh6 /R/BUJClf88Lubr/oB+PBeIF7dXwdS5DXi1YlmiJt2cQ3qjg4BMgRb5VtwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAnVMLJeopwfImZg61JkGuDUFtibMB8GA1UdIwQY MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt M2Q5MWVkZTViMmIxLzEvQ2RVd3NsNmluQjhpWm1EclVtUWE0TlFXMkpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgp5wAYA MA0GCSqGSIb3DQEBCwUAA4IBAQBvOZh7g5tzuuBqR7mna+SUQtk7G0RTSqjQHs3U wgso132TeWFu9J3D+XfAuX+ytcRMCl9gS9FPDqYDSFoOJJ/gE8VwX2NJldin3DQJ kCcGdtqjN35hVnEyz0GntBqV9vgXq8N/50UyRsyl8kUKhXr8VmWXk3mkMLqDvaGY lz56gAJ5mYsKNDH2Dpk0zeNZbelqS/uiOLtykeP+p+U8jNy1YAOAG8xowfNksUu/ rodOF52aBkjYjlgjUzd2fpkVUDUtzxuw9QzTwAgRhImb15fLCcjI+98ApebeBGuw KpDVVa3y5egL6iTSYfSCVfPnS8Swdm3bcKdt7TSg/3mD1lFx -----END CERTIFICATE-----Generated at Tue Jan 20 22:47:37 2026 by rpki-client