This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/mUw8s_Ta0oPAu-f3EY2Xz2KSzhM.roa File: mUw8s_Ta0oPAu-f3EY2Xz2KSzhM.roa (raw, json) Hash identifier: olPzmZXZB2q36HiCAJderFvnggz3y4UOea+bWgYKvN8= Subject key identifier: 99:4C:3C:B3:F4:DA:D2:83:C0:BB:E7:F7:11:8D:97:CF:62:92:CE:13 Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Certificate serial: 019B7EA74DE015B52964EADA6939A439E201 Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/mUw8s_Ta0oPAu-f3EY2Xz2KSzhM.roa Signing time: Fri 02 Jan 2026 12:20:52 +0000 ROA not before: Fri 02 Jan 2026 12:20:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58057 IP address blocks: 2a06:e881:7700::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:4d:e0:15:b5:29:64:ea:da:69:39:a4:39:e2:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Validity Not Before: Jan 2 12:20:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=994c3cb3f4dad283c0bbe7f7118d97cf6292ce13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5a:8b:76:39:2c:a7:d2:d5:30:c7:18:9d:91: fd:90:ac:25:5c:d6:7a:ff:81:8b:f8:68:f1:19:8e: 21:f8:b9:6f:8e:51:89:ea:ea:73:57:9b:4b:7c:d6: 33:10:b3:cb:9f:17:84:3d:d2:fb:76:49:34:e8:2d: b7:78:96:98:25:0f:79:42:9b:b4:47:94:8d:d5:d6: 6f:72:9b:be:e2:36:a0:8f:f5:72:5f:52:d7:c0:c7: 43:87:51:b0:29:e1:ba:56:54:50:1e:96:78:25:45: c1:f2:6b:bc:d0:1b:4b:ae:60:d4:f3:b3:0d:8b:15: 7f:b9:43:a7:cc:ec:03:8b:2b:14:6d:04:f0:04:e8: c9:0a:4b:1e:08:45:e2:c9:39:92:e3:c2:10:50:a9: f8:01:c9:9f:16:3b:95:f9:1d:57:9c:eb:f9:d2:13: 5b:1c:48:2e:e5:9c:ac:5f:45:1d:c6:8b:aa:dd:26: 42:ac:3d:26:c1:2b:e7:bb:d5:b3:1f:d2:24:4f:63: 7a:92:5b:7a:17:30:e9:dc:5f:d4:4b:1c:b8:a1:7b: cb:59:79:4b:0d:4d:37:91:35:ae:0a:7e:ad:da:35: 77:ba:ce:f0:64:fa:40:f2:67:eb:69:4b:14:f7:e0: 1d:e1:43:70:4a:82:6b:55:de:e9:21:2d:6a:db:d9: 3d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:4C:3C:B3:F4:DA:D2:83:C0:BB:E7:F7:11:8D:97:CF:62:92:CE:13 X509v3 Authority Key Identifier: keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/mUw8s_Ta0oPAu-f3EY2Xz2KSzhM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:e881:7700::/40 Signature Algorithm: sha256WithRSAEncryption a1:03:ec:c3:1f:f2:fa:0a:ce:cf:5d:e3:1c:fe:2a:97:9e:b3: a6:8b:1b:30:30:4f:6c:b8:c7:75:b9:1c:c9:b5:75:1f:31:45: de:8f:f6:eb:f2:c9:9a:60:2a:cb:39:03:58:cd:9d:ab:98:91: 67:07:9d:77:74:24:9d:62:ad:f7:22:c5:26:e9:c6:b8:f4:7b: c8:6e:33:4c:87:48:6d:eb:43:3c:95:23:1f:7d:f8:c5:7d:82: c9:c3:fc:6b:81:4e:0c:c5:93:4d:32:04:f1:d2:8c:35:27:cc: 21:6f:f7:a2:69:98:e0:a4:2f:86:4e:41:ce:68:26:22:7d:96: a2:f1:c1:7f:cd:2f:e5:eb:b0:09:a3:b2:a1:68:cf:50:c1:ae: 41:8f:78:f7:7a:09:7f:a9:3a:dd:8e:86:c4:04:08:b5:41:47: ba:a0:d2:fe:ac:f6:87:0a:70:4e:80:3a:e3:a1:73:62:73:c5: eb:02:13:b5:0c:d5:59:a4:30:eb:79:8c:00:4f:78:ba:c2:a0: 9b:3d:80:90:79:21:d4:fe:50:b9:8e:42:4d:68:bf:48:35:5d: a7:10:12:50:74:bb:b3:17:6f:e5:54:5d:4f:4c:b3:9f:ef:11: 33:05:4e:b8:8f:84:96:2a:2e:fc:d0:51:54:44:7d:87:a0:67: 41:ae:54:2a -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+p03gFbUpZOraaTmkOeIBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl ZDc5NTQwHhcNMjYwMTAyMTIyMDUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTRjM2NiM2Y0ZGFkMjgzYzBiYmU3ZjcxMThkOTdjZjYyOTJjZTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FqLdjksp9LVMMcYnZH9kKwlXNZ6 /4GL+GjxGY4h+LlvjlGJ6upzV5tLfNYzELPLnxeEPdL7dkk06C23eJaYJQ95Qpu0 R5SN1dZvcpu+4jagj/VyX1LXwMdDh1GwKeG6VlRQHpZ4JUXB8mu80BtLrmDU87MN ixV/uUOnzOwDiysUbQTwBOjJCkseCEXiyTmS48IQUKn4AcmfFjuV+R1XnOv50hNb HEgu5ZysX0Udxouq3SZCrD0mwSvnu9WzH9IkT2N6klt6FzDp3F/USxy4oXvLWXlL DU03kTWuCn6t2jV3us7wZPpA8mfraUsU9+Ad4UNwSoJrVd7pIS1q29k92QIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFJlMPLP02tKDwLvn9xGNl89iks4TMB8GA1UdIwQY MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt M2Q5MWVkZTViMmIxLzEvbVV3OHNfVGEwb1BBdS1mM0VZMlh6MktTemhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgbogXcw DQYJKoZIhvcNAQELBQADggEBAKED7MMf8voKzs9d4xz+Kpees6aLGzAwT2y4x3W5 HMm1dR8xRd6P9uvyyZpgKss5A1jNnauYkWcHnXd0JJ1irfcixSbpxrj0e8huM0yH SG3rQzyVIx99+MV9gsnD/GuBTgzFk00yBPHSjDUnzCFv96JpmOCkL4ZOQc5oJiJ9 lqLxwX/NL+XrsAmjsqFoz1DBrkGPePd6CX+pOt2OhsQECLVBR7qg0v6s9ocKcE6A OuOhc2JzxesCE7UM1VmkMOt5jABPeLrCoJs9gJB5IdT+ULmOQk1ov0g1XacQElB0 u7MXb+VUXU9Ms5/vETMFTriPhJYqLvzQUVREfYegZ0GuVCo= -----END CERTIFICATE-----Generated at Tue Jan 20 21:16:49 2026 by rpki-client