This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/u0aDlmSdDj71EM-iDNS3bskqYP8.roa File: u0aDlmSdDj71EM-iDNS3bskqYP8.roa (raw, json) Hash identifier: 7duuGh5xzVloGi3w0t9gMbtpB8qNHncN9NT4g5kJltI= Subject key identifier: BB:46:83:96:64:9D:0E:3E:F5:10:CF:A2:0C:D4:B7:6E:C9:2A:60:FF Certificate issuer: /CN=a633725cd5dd91cf190ab3a99526e898357856ef Certificate serial: 019B7F82FEF0E8974BD86246F5F38F36C59F Authority key identifier: A6:33:72:5C:D5:DD:91:CF:19:0A:B3:A9:95:26:E8:98:35:78:56:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/u0aDlmSdDj71EM-iDNS3bskqYP8.roa Signing time: Fri 02 Jan 2026 16:20:49 +0000 ROA not before: Fri 02 Jan 2026 16:20:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 141.6.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:fe:f0:e8:97:4b:d8:62:46:f5:f3:8f:36:c5:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a633725cd5dd91cf190ab3a99526e898357856ef Validity Not Before: Jan 2 16:20:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb468396649d0e3ef510cfa20cd4b76ec92a60ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:50:e5:11:b8:17:67:ed:9f:34:2e:c9:90:ed: e5:f7:96:e4:e5:25:42:c9:2c:72:82:b3:0f:11:fa: c3:a7:eb:be:ec:9f:31:fa:e1:ac:66:a5:d3:d9:ba: 00:60:6d:5a:c0:3e:68:0b:83:10:97:ad:da:98:69: a0:00:51:f2:ac:0b:1d:7f:d2:8d:1c:e1:9a:2a:29: eb:13:21:00:21:25:6c:44:6c:ee:9b:d4:61:b4:69: ca:c8:aa:38:b8:ee:0d:81:87:50:67:82:2b:a0:6c: 51:8c:67:fc:95:b3:ca:26:b3:04:80:b5:93:72:14: f6:d6:ac:5d:78:d6:e4:96:64:b7:20:36:e7:15:32: 02:e1:ec:af:1c:59:14:71:fa:19:87:6b:d2:ca:9f: 9a:e3:08:9b:cb:a2:ee:5b:5e:d7:55:62:3a:a2:c1: f0:56:46:32:17:50:fe:33:95:b2:37:d1:b9:6c:bb: 41:c4:31:02:ef:c8:ed:79:4c:0e:fb:52:01:1b:99: 6c:48:b4:3b:9f:4c:dc:6e:07:80:00:a1:a4:4c:9e: bc:86:4c:19:5e:d4:26:ad:be:85:f5:14:d5:21:25: 56:a7:3b:81:9f:98:a2:8d:11:94:ee:3e:62:63:34: 7d:6a:e7:11:08:ca:80:d6:19:93:f9:30:f1:77:39: 7d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:46:83:96:64:9D:0E:3E:F5:10:CF:A2:0C:D4:B7:6E:C9:2A:60:FF X509v3 Authority Key Identifier: keyid:A6:33:72:5C:D5:DD:91:CF:19:0A:B3:A9:95:26:E8:98:35:78:56:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/u0aDlmSdDj71EM-iDNS3bskqYP8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.6.0.0/16 Signature Algorithm: sha256WithRSAEncryption 8a:36:8b:d9:9f:a8:47:79:7b:a6:75:13:2c:03:da:6f:5c:f4: 42:17:b4:64:aa:14:1b:76:b9:3d:a8:86:7d:06:3e:a1:0e:99: b5:f0:de:ba:36:22:f9:f5:21:79:7e:83:7d:21:bf:b0:1f:bf: 4b:ee:39:d2:1a:0b:6e:f0:cc:83:e4:19:dd:29:e9:73:98:45: de:7a:ab:46:89:ac:78:08:65:cc:88:a0:ed:0a:e3:28:a9:7e: f5:71:f5:40:da:94:a0:d4:28:b2:4a:d4:c0:28:b2:61:17:bb: 6c:19:ba:3a:af:a8:ba:e0:92:c1:f9:66:36:d5:03:71:06:5c: 9e:31:f2:66:e6:9f:25:9a:5a:76:28:14:1e:a9:d7:1c:ab:02: ba:78:0d:e9:f4:ad:6d:7c:8c:c6:d1:6e:26:6c:34:fe:0d:6d: 99:a2:fd:6e:28:35:01:a1:33:38:de:9c:c7:8d:db:c7:57:d3: 47:ca:70:24:12:dc:e8:b9:aa:17:24:b7:44:9b:47:d0:2a:3c: 6c:99:2a:c8:8c:f6:cd:8a:af:85:3b:99:57:b6:91:45:29:8d: 03:73:57:4c:a3:3e:b6:90:e2:46:ff:64:38:75:f1:29:ff:7b: ef:54:fe:4e:08:ef:82:03:14:68:c6:2b:6e:dc:2f:b2:bf:91: 33:e9:d0:8d -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt/gv7w6JdL2GJG9fOPNsWfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MzM3MjVjZDVkZDkxY2YxOTBhYjNhOTk1MjZlODk4MzU3 ODU2ZWYwHhcNMjYwMTAyMTYyMDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjQ2ODM5NjY0OWQwZTNlZjUxMGNmYTIwY2Q0Yjc2ZWM5MmE2MGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFDlEbgXZ+2fNC7JkO3l95bk5SVC ySxygrMPEfrDp+u+7J8x+uGsZqXT2boAYG1awD5oC4MQl63amGmgAFHyrAsdf9KN HOGaKinrEyEAISVsRGzum9RhtGnKyKo4uO4NgYdQZ4IroGxRjGf8lbPKJrMEgLWT chT21qxdeNbklmS3IDbnFTIC4eyvHFkUcfoZh2vSyp+a4wiby6LuW17XVWI6osHw VkYyF1D+M5WyN9G5bLtBxDEC78jteUwO+1IBG5lsSLQ7n0zcbgeAAKGkTJ68hkwZ XtQmrb6F9RTVISVWpzuBn5iijRGU7j5iYzR9aucRCMqA1hmT+TDxdzl9yQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFLtGg5ZknQ4+9RDPogzUt27JKmD/MB8GA1UdIwQY MBaAFKYzclzV3ZHPGQqzqZUm6Jg1eFbvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGpOeVhOWGRrYzhaQ3JPcGxTYm9tRFY0VnU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC81Yjg1NmEtYTkwZC00NzkxLTljMTAt YzBiODEzYjRlYzdlLzEvdTBhRGxtU2REajcxRU0taUROUzNic2txWVA4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC81Yjg1NmEtYTkwZC00NzkxLTljMTAtYzBiODEzYjRlYzdl LzEvcGpOeVhOWGRrYzhaQ3JPcGxTYm9tRFY0VnU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjQYwDQYJ KoZIhvcNAQELBQADggEBAIo2i9mfqEd5e6Z1EywD2m9c9EIXtGSqFBt2uT2ohn0G PqEOmbXw3ro2Ivn1IXl+g30hv7Afv0vuOdIaC27wzIPkGd0p6XOYRd56q0aJrHgI ZcyIoO0K4yipfvVx9UDalKDUKLJK1MAosmEXu2wZujqvqLrgksH5ZjbVA3EGXJ4x 8mbmnyWaWnYoFB6p1xyrArp4Den0rW18jMbRbiZsNP4NbZmi/W4oNQGhMzjenMeN 28dX00fKcCQS3Oi5qhckt0SbR9AqPGyZKsiM9s2Kr4U7mVe2kUUpjQNzV0yjPraQ 4kb/ZDh18Sn/e+9U/k4I74IDFGjGK27cL7K/kTPp0I0= -----END CERTIFICATE-----Generated at Tue Jan 20 01:20:51 2026 by rpki-client