This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/U5_pk0zdp2bWXZp0oHmDr6zNXPs.roa File: U5_pk0zdp2bWXZp0oHmDr6zNXPs.roa (raw, json) Hash identifier: pyM0nRKXfxnEDkdobwVsRR6RAjNdli6I9vRspgWqHLo= Subject key identifier: 53:9F:E9:93:4C:DD:A7:66:D6:5D:9A:74:A0:79:83:AF:AC:CD:5C:FB Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019BBC540216AB5BDAE7128F2B59F873F559 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/U5_pk0zdp2bWXZp0oHmDr6zNXPs.roa Signing time: Wed 14 Jan 2026 11:46:20 +0000 ROA not before: Wed 14 Jan 2026 11:46:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199925 IP address blocks: 2a0d:b740::/29 maxlen: 29 2a12:d5c0::/29 maxlen: 29 2a13:9b00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bc:54:02:16:ab:5b:da:e7:12:8f:2b:59:f8:73:f5:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 14 11:46:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=539fe9934cdda766d65d9a74a07983afaccd5cfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:41:da:d4:de:33:34:40:6c:9c:da:dc:ce:9a: ee:ec:f4:8b:7d:5d:76:2b:e7:2f:e6:3d:eb:4e:f6: 39:80:4a:d4:44:5d:51:68:a4:78:11:ef:f6:e1:ef: 21:b4:e1:2a:b1:cc:c1:d2:18:81:41:cc:e2:a9:9a: c9:f9:89:c4:4f:8e:02:a0:5f:6f:0e:4d:d0:13:01: 38:4d:dd:c0:0f:58:14:c5:d4:ab:d1:0c:95:bd:53: dd:ff:11:76:b2:93:4c:ab:66:dd:ed:60:59:30:52: 6c:ad:b3:5f:9f:c3:d4:f1:ff:7c:9c:e1:48:4c:bd: ca:92:0c:da:11:7a:5b:03:27:97:5f:f7:8f:32:33: 15:67:ca:dc:24:42:5e:fb:6e:1c:0b:34:e4:31:d0: 54:df:8d:d1:5f:21:17:06:97:0d:ed:f0:6c:36:23: eb:36:82:b2:c3:50:d2:d6:82:94:a4:79:64:e7:b6: 3d:5a:63:be:be:fd:97:a0:f9:de:07:49:ca:df:a5: 9b:3d:3a:3a:60:90:02:c8:dc:6a:96:42:43:a8:7a: 08:6f:b9:48:8c:00:aa:17:71:cb:78:2a:ad:b9:99: 2f:10:97:00:9f:c8:f9:3a:85:32:85:e5:c2:51:d4: c1:88:02:7a:6f:05:72:87:80:91:cc:8e:5e:43:d3: 4a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:9F:E9:93:4C:DD:A7:66:D6:5D:9A:74:A0:79:83:AF:AC:CD:5C:FB X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/U5_pk0zdp2bWXZp0oHmDr6zNXPs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:b740::/29 2a12:d5c0::/29 2a13:9b00::/29 Signature Algorithm: sha256WithRSAEncryption 08:b7:79:eb:6d:19:0e:ca:f5:65:c8:76:54:e1:d4:f7:a8:be: b1:ee:6d:df:16:f7:44:3d:17:38:1f:1f:99:ff:11:ee:b2:17: 3e:11:fa:89:42:17:78:ec:e4:df:ba:d8:e3:97:a1:02:20:4a: e6:63:59:c6:4b:6d:33:8e:8d:e0:a1:d5:a5:08:69:21:0d:e2: 1a:7d:b8:31:e1:ea:18:21:9c:33:72:3f:e4:22:5a:38:17:bd: 64:a1:db:84:02:3e:64:ee:d9:4a:1d:58:c5:be:c5:3d:ce:d4: 4a:f5:ee:5d:62:f2:bb:cc:51:9a:0c:f2:39:1f:cd:2d:13:8a: 21:de:a7:b1:af:f1:a4:5c:fc:8e:30:7e:ba:c1:81:cb:86:ed: bd:66:d5:95:6f:bf:ec:0d:e5:f3:d9:98:fb:0f:bb:4f:36:fa: 9e:9f:05:78:27:63:d5:4a:b8:2f:69:d3:d7:38:ad:32:1a:76: 18:a7:b4:91:37:9c:cf:d6:5b:d8:01:8e:22:0b:53:ef:bc:84: c3:a0:e3:a7:27:eb:ce:ce:02:ba:d1:32:68:0d:9c:17:79:cd: 89:15:13:96:ee:0e:19:d8:71:f6:0c:7e:34:c0:e7:1a:a9:ab: 0a:1c:ac:16:3a:15:d3:1a:f1:f9:d0:59:10:19:d9:0b:20:21: dd:25:1e:8b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZu8VAIWq1va5xKPK1n4c/VZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTE0MTE0NjIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzlmZTk5MzRjZGRhNzY2ZDY1ZDlhNzRhMDc5ODNhZmFjY2Q1Y2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkHa1N4zNEBsnNrczpru7PSLfV12 K+cv5j3rTvY5gErURF1RaKR4Ee/24e8htOEqsczB0hiBQcziqZrJ+YnET44CoF9v Dk3QEwE4Td3AD1gUxdSr0QyVvVPd/xF2spNMq2bd7WBZMFJsrbNfn8PU8f98nOFI TL3KkgzaEXpbAyeXX/ePMjMVZ8rcJEJe+24cCzTkMdBU343RXyEXBpcN7fBsNiPr NoKyw1DS1oKUpHlk57Y9WmO+vv2XoPneB0nK36WbPTo6YJACyNxqlkJDqHoIb7lI jACqF3HLeCqtuZkvEJcAn8j5OoUyheXCUdTBiAJ6bwVyh4CRzI5eQ9NKfQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFOf6ZNM3adm1l2adKB5g6+szVz7MB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvVTVfcGswemRwMmJXWFpwMG9IbURyNnpOWFBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUDKg23QAMF AyoS1cADBQMqE5sAMA0GCSqGSIb3DQEBCwUAA4IBAQAIt3nrbRkOyvVlyHZU4dT3 qL6x7m3fFvdEPRc4Hx+Z/xHushc+EfqJQhd47OTfutjjl6ECIErmY1nGS20zjo3g odWlCGkhDeIafbgx4eoYIZwzcj/kIlo4F71koduEAj5k7tlKHVjFvsU9ztRK9e5d YvK7zFGaDPI5H80tE4oh3qexr/GkXPyOMH66wYHLhu29ZtWVb7/sDeXz2Zj7D7tP NvqenwV4J2PVSrgvadPXOK0yGnYYp7SRN5zP1lvYAY4iC1PvvITDoOOnJ+vOzgK6 0TJoDZwXec2JFROW7g4Z2HH2DH40wOcaqasKHKwWOhXTGvH50FkQGdkLICHdJR6L -----END CERTIFICATE-----Generated at Tue Jan 20 09:07:46 2026 by rpki-client