This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/u2wBR0xf6YyeJsfOyAPx4DJdMKs.roa File: u2wBR0xf6YyeJsfOyAPx4DJdMKs.roa (raw, json) Hash identifier: PXUhwobRT95adB3R+iOvn1O0RQFiOQp3u4Y47n2iFS0= Subject key identifier: BB:6C:01:47:4C:5F:E9:8C:9E:26:C7:CE:C8:03:F1:E0:32:5D:30:AB Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Certificate serial: 019B7EA7668605C617645D728E76BDE0D1D9 Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/u2wBR0xf6YyeJsfOyAPx4DJdMKs.roa Signing time: Fri 02 Jan 2026 12:20:58 +0000 ROA not before: Fri 02 Jan 2026 12:20:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214646 IP address blocks: 2a0a:79c0:400::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:66:86:05:c6:17:64:5d:72:8e:76:bd:e0:d1:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Validity Not Before: Jan 2 12:20:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb6c01474c5fe98c9e26c7cec803f1e0325d30ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:da:01:37:0a:51:fc:48:a3:15:60:de:be:03: b9:e6:a0:b4:49:3b:37:64:d1:02:70:bd:cf:e9:11: 2e:8d:2e:26:ec:84:64:c2:0d:39:4c:2b:30:6a:86: 87:2e:f0:86:01:b0:f0:c1:15:29:2c:9f:b8:e1:77: db:87:7b:b9:20:02:31:18:65:d3:82:21:1d:ca:11: 95:96:ba:f7:0d:c4:89:ea:72:56:10:38:e6:d7:74: 31:bd:4b:50:de:08:34:b0:d1:09:41:13:47:7d:04: 87:f8:63:94:15:7c:12:7e:2f:3b:01:91:89:34:fd: 46:a3:b2:e9:58:ae:1f:22:0e:ec:e6:03:84:57:51: d4:54:c7:29:69:df:63:43:45:0d:7c:38:b0:70:25: c4:a2:71:f0:7b:94:e8:39:db:14:37:6b:6b:7c:bc: 9f:bb:54:0a:6a:c0:41:85:4c:31:dd:1c:2a:eb:03: a6:a0:8e:cd:37:90:d1:b0:e6:bc:93:fb:28:b4:d9: eb:53:ab:44:db:2f:bb:56:93:da:60:b1:49:4c:e1: 27:a5:35:3f:71:50:d5:f6:d9:5b:2b:ac:38:fe:97: eb:6c:c9:b9:7f:57:69:6c:ff:95:05:9c:59:80:99: 12:47:59:ba:17:7d:b0:7e:4b:52:c5:98:fb:e5:82: d4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:6C:01:47:4C:5F:E9:8C:9E:26:C7:CE:C8:03:F1:E0:32:5D:30:AB X509v3 Authority Key Identifier: keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/u2wBR0xf6YyeJsfOyAPx4DJdMKs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:79c0:400::/44 Signature Algorithm: sha256WithRSAEncryption 30:34:8d:4a:9a:d1:ae:53:98:3b:10:12:ca:5f:65:5b:ab:04: 1e:68:4b:66:ad:42:05:9c:f4:0f:c0:93:e7:8c:d5:94:08:8b: 66:3f:f1:ec:69:7e:94:09:ff:6c:83:92:aa:04:ad:5a:c4:54: ca:22:36:b7:60:be:94:ff:7a:18:35:45:4e:a3:24:e1:30:dc: c0:e8:31:f4:c1:7f:f8:6d:1f:a8:c3:8b:a7:b9:a0:5a:02:35: 98:b8:c1:57:98:77:c3:3c:56:96:37:0e:f0:b2:25:3c:3a:d1: 6e:5b:ec:81:06:c6:fe:47:96:04:4e:61:53:e3:b6:b9:78:b5: 87:3d:b5:d8:d6:d8:91:ae:26:15:11:ee:14:9d:d6:cb:6d:30: 92:df:4b:41:54:20:67:e2:08:17:6e:51:3b:18:36:dc:49:e8: d2:d4:f9:03:cd:d1:c4:96:65:1d:cf:50:5b:87:b9:90:51:22: 5a:1a:52:28:db:f5:6d:9f:80:26:91:13:38:b0:db:66:7d:c7: 07:cb:43:2f:69:8d:90:25:23:c9:c3:59:d3:98:93:6c:a0:0f: f7:13:d9:0f:0a:2c:58:5a:a8:46:b2:92:19:88:1f:3a:e7:13: 3f:b6:92:50:12:bf:a4:05:4f:9b:a1:5e:a8:12:bc:73:8e:c8: 50:91:f5:ec -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+p2aGBcYXZF1yjna94NHZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl ZDc5NTQwHhcNMjYwMTAyMTIyMDU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjZjMDE0NzRjNWZlOThjOWUyNmM3Y2VjODAzZjFlMDMyNWQzMGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNoBNwpR/EijFWDevgO55qC0STs3 ZNECcL3P6REujS4m7IRkwg05TCswaoaHLvCGAbDwwRUpLJ+44Xfbh3u5IAIxGGXT giEdyhGVlrr3DcSJ6nJWEDjm13QxvUtQ3gg0sNEJQRNHfQSH+GOUFXwSfi87AZGJ NP1Go7LpWK4fIg7s5gOEV1HUVMcpad9jQ0UNfDiwcCXEonHwe5ToOdsUN2trfLyf u1QKasBBhUwx3Rwq6wOmoI7NN5DRsOa8k/sotNnrU6tE2y+7VpPaYLFJTOEnpTU/ cVDV9tlbK6w4/pfrbMm5f1dpbP+VBZxZgJkSR1m6F32wfktSxZj75YLUvQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLtsAUdMX+mMnibHzsgD8eAyXTCrMB8GA1UdIwQY MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt M2Q5MWVkZTViMmIxLzEvdTJ3QlIweGY2WXllSnNmT3lBUHg0REpkTUtzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgp5wAQA MA0GCSqGSIb3DQEBCwUAA4IBAQAwNI1KmtGuU5g7EBLKX2VbqwQeaEtmrUIFnPQP wJPnjNWUCItmP/HsaX6UCf9sg5KqBK1axFTKIja3YL6U/3oYNUVOoyThMNzA6DH0 wX/4bR+ow4unuaBaAjWYuMFXmHfDPFaWNw7wsiU8OtFuW+yBBsb+R5YETmFT47a5 eLWHPbXY1tiRriYVEe4UndbLbTCS30tBVCBn4ggXblE7GDbcSejS1PkDzdHElmUd z1Bbh7mQUSJaGlIo2/Vtn4AmkRM4sNtmfccHy0MvaY2QJSPJw1nTmJNsoA/3E9kP CixYWqhGspIZiB865xM/tpJQEr+kBU+boV6oErxzjshQkfXs -----END CERTIFICATE-----Generated at Tue Jan 20 21:17:28 2026 by rpki-client