This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/mU2pR0JFSmU9alLJ_hjdYd29OBI.roa File: mU2pR0JFSmU9alLJ_hjdYd29OBI.roa (raw, json) Hash identifier: 2OQL4c+p/jlqcQZhv2ZpsFYOOJiW6IEv0QMrcYh7zVE= Subject key identifier: 99:4D:A9:47:42:45:4A:65:3D:6A:52:C9:FE:18:DD:61:DD:BD:38:12 Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0 Certificate serial: 019B7758F045D41A6654187E7B22F71B6773 Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/mU2pR0JFSmU9alLJ_hjdYd29OBI.roa Signing time: Thu 01 Jan 2026 02:17:55 +0000 ROA not before: Thu 01 Jan 2026 02:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212592 IP address blocks: 2a0f:5707:aa90::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:f0:45:d4:1a:66:54:18:7e:7b:22:f7:1b:67:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0 Validity Not Before: Jan 1 02:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=994da94742454a653d6a52c9fe18dd61ddbd3812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f1:4b:f8:11:d3:23:ec:59:26:3e:53:4c:2c: 6b:15:52:74:3b:d8:17:7d:88:f9:12:d3:cb:ab:2c: e9:a8:2c:0d:49:a7:03:38:ed:fa:ce:8b:ba:a9:74: 5a:e8:86:89:d9:dc:b5:0e:3e:d3:b5:04:a3:44:4d: c7:c7:13:73:f3:99:26:48:ba:1a:6d:de:a5:eb:ad: 59:c9:c7:d8:11:74:af:a0:88:f8:ca:b6:d8:08:59: 88:a4:3a:e9:b8:a2:27:1f:10:2e:b4:a9:2b:87:5f: 01:81:f0:85:cd:3f:94:40:da:9b:f4:bc:ea:44:60: 5c:c9:4a:69:2c:60:26:68:64:be:de:34:9b:99:a1: 46:7c:fe:79:b7:31:bd:c5:84:ac:d3:ee:35:be:1d: 07:aa:ec:57:a0:04:79:36:f6:b7:6c:e9:f0:ce:52: 7c:26:21:54:63:24:0f:bf:6a:b9:ea:8b:56:9c:43: 5a:3d:0e:f1:2d:dc:7b:6a:0d:b7:7f:09:5d:a3:d4: 41:18:fa:0b:b6:26:b6:fc:e2:0c:9a:4d:a9:8b:aa: 1b:2a:20:d6:c7:8b:3d:97:6c:a0:6a:d2:25:42:02: e3:0b:a9:2b:07:9f:41:89:2c:88:b1:8e:82:f0:3c: 95:80:08:8b:1f:80:69:d6:d0:21:d3:da:7f:71:52: 56:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:4D:A9:47:42:45:4A:65:3D:6A:52:C9:FE:18:DD:61:DD:BD:38:12 X509v3 Authority Key Identifier: keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/mU2pR0JFSmU9alLJ_hjdYd29OBI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:5707:aa90::/44 Signature Algorithm: sha256WithRSAEncryption 2b:d6:73:0e:06:85:8b:2c:42:9f:3e:cb:e2:eb:bb:fa:ab:b1: e3:6b:3d:c4:9f:bc:8d:28:f1:98:69:89:de:ee:55:6c:3b:2a: b3:c4:9b:6c:fc:b5:9c:49:84:3d:0b:d1:6d:6a:e2:f3:3c:e5: 2e:a6:0f:96:55:b2:c7:75:b5:64:d8:95:5e:41:26:a0:6d:0d: d1:73:76:3b:e0:d8:dd:eb:68:40:2c:66:23:89:11:56:45:61: 93:e5:8f:15:67:42:71:8e:74:02:f9:bb:29:3d:c9:d7:a9:69: aa:58:6e:a9:50:69:3f:bf:9f:1c:fd:de:fa:cf:2f:62:35:0c: 90:38:7f:7c:e4:e2:29:25:0d:63:08:0b:cb:eb:d0:f2:ce:d7: ca:cd:16:9c:cb:42:2b:1c:c0:ff:de:56:47:46:65:0b:69:c0: 5c:38:53:d8:26:6d:e6:5c:b9:4b:f8:87:f2:e6:87:7d:55:a9: 3e:d6:6b:83:67:7a:6f:68:48:60:3f:0e:bc:1f:60:26:39:de: 32:a4:77:95:a5:5e:43:40:15:52:f3:1f:05:33:f2:c5:39:3c: 76:c6:3c:d3:02:27:97:f6:cc:80:b1:8c:48:22:c8:a1:25:fc: 22:d9:75:f3:3f:4a:16:84:cb:ef:7e:bf:93:65:1a:22:9a:c7: 5d:c9:8a:6d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WPBF1BpmVBh+eyL3G2dzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNjQ0YzExNTY4NTE4MDNmMzdhZGVlYzA4NzZjY2Y5ODlk NWFlZjAwHhcNMjYwMTAxMDIxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTRkYTk0NzQyNDU0YTY1M2Q2YTUyYzlmZTE4ZGQ2MWRkYmQzODEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fFL+BHTI+xZJj5TTCxrFVJ0O9gX fYj5EtPLqyzpqCwNSacDOO36zou6qXRa6IaJ2dy1Dj7TtQSjRE3HxxNz85kmSLoa bd6l661ZycfYEXSvoIj4yrbYCFmIpDrpuKInHxAutKkrh18BgfCFzT+UQNqb9Lzq RGBcyUppLGAmaGS+3jSbmaFGfP55tzG9xYSs0+41vh0HquxXoAR5Nva3bOnwzlJ8 JiFUYyQPv2q56otWnENaPQ7xLdx7ag23fwldo9RBGPoLtia2/OIMmk2pi6obKiDW x4s9l2ygatIlQgLjC6krB59BiSyIsY6C8DyVgAiLH4Bp1tAh09p/cVJWBwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJlNqUdCRUplPWpSyf4Y3WHdvTgSMB8GA1UdIwQY MBaAFEpkTBFWhRgD83re7Ah2zPmJ1a7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3Mzkt Y2MxYzliNWY2NjQwLzEvbVUycFIwSkZTbVU5YWxMSl9oamRZZDI5T0JJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3MzktY2MxYzliNWY2NjQw LzEvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg9XB6qQ MA0GCSqGSIb3DQEBCwUAA4IBAQAr1nMOBoWLLEKfPsvi67v6q7Hjaz3En7yNKPGY aYne7lVsOyqzxJts/LWcSYQ9C9FtauLzPOUupg+WVbLHdbVk2JVeQSagbQ3Rc3Y7 4Njd62hALGYjiRFWRWGT5Y8VZ0JxjnQC+bspPcnXqWmqWG6pUGk/v58c/d76zy9i NQyQOH985OIpJQ1jCAvL69DyztfKzRacy0IrHMD/3lZHRmULacBcOFPYJm3mXLlL +Ify5od9Vak+1muDZ3pvaEhgPw68H2AmOd4ypHeVpV5DQBVS8x8FM/LFOTx2xjzT AieX9syAsYxIIsihJfwi2XXzP0oWhMvvfr+TZRoimsddyYpt -----END CERTIFICATE-----Generated at Mon Jan 26 12:32:30 2026 by rpki-client