This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/uAumN_d_Q_yun5QzcR-UbXWPBU8.roa File: uAumN_d_Q_yun5QzcR-UbXWPBU8.roa (raw, json) Hash identifier: YEbqonGNno7TcnGdoHF66lGtgeHYIPwdSCSN8qlpAMw= Subject key identifier: B8:0B:A6:37:F7:7F:43:FC:AE:9F:94:33:71:1F:94:6D:75:8F:05:4F Certificate issuer: /CN=049d4f66598668079353721c21935a00319f6759 Certificate serial: 019B7C121D4A0B11D75593088460DADD690E Authority key identifier: 04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/uAumN_d_Q_yun5QzcR-UbXWPBU8.roa Signing time: Fri 02 Jan 2026 00:18:40 +0000 ROA not before: Fri 02 Jan 2026 00:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3320 IP address blocks: 2a11:7400:d1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 06:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:1d:4a:0b:11:d7:55:93:08:84:60:da:dd:69:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=049d4f66598668079353721c21935a00319f6759 Validity Not Before: Jan 2 00:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b80ba637f77f43fcae9f9433711f946d758f054f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:bd:d3:09:86:3b:68:2e:13:95:a3:4c:8d:5c: ac:48:35:cc:a6:56:34:a0:b5:0a:74:dc:ed:7e:35: a4:3e:4d:b4:8e:07:ab:bb:fc:03:7d:e0:00:07:03: f1:3d:14:10:9f:24:a9:c0:6a:b6:a2:8e:76:b2:6f: f3:08:99:9c:64:3d:f8:84:15:d5:c2:a0:0d:c0:39: 34:e0:b4:4c:44:49:14:40:ee:8f:f2:59:a9:6c:60: b2:d9:a6:17:8a:8f:b7:28:26:be:60:e6:4d:9c:84: a8:2c:7e:fd:a0:f6:74:0a:d9:e0:60:c1:1d:4d:42: e7:81:d8:9e:ee:84:8f:f5:78:c9:d8:b6:c3:be:e9: 26:17:87:c1:d9:92:89:f6:5c:a3:2c:cb:5e:ee:0f: 8c:58:93:bd:8a:2a:f2:51:a4:ba:9e:80:ba:56:32: 8e:11:07:4a:9e:03:71:e8:36:85:db:66:b2:ee:68: 1c:0f:7d:1c:7a:e7:a1:be:34:b1:5f:29:78:3c:22: 91:af:67:b9:3b:15:f4:e6:78:cd:69:31:db:55:88: 0b:2a:ba:31:9e:3c:24:20:69:c2:21:fb:ca:ef:a1: 81:eb:f2:d3:dc:e4:b1:14:84:85:c9:38:d1:4d:1c: f6:61:d7:51:b1:24:9d:ba:26:75:87:95:ae:03:84: f9:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:0B:A6:37:F7:7F:43:FC:AE:9F:94:33:71:1F:94:6D:75:8F:05:4F X509v3 Authority Key Identifier: keyid:04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/uAumN_d_Q_yun5QzcR-UbXWPBU8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:7400:d1::/48 Signature Algorithm: sha256WithRSAEncryption 33:85:9e:81:c1:0b:44:57:f6:28:3b:ee:53:37:c4:cd:b1:8f: b6:a4:53:94:42:de:11:3b:73:77:47:ff:3b:15:ce:99:95:d1: 86:8d:b1:9b:a5:30:2c:99:60:8d:a6:68:ce:18:d1:cf:01:e7: db:41:b3:68:e2:f8:25:1e:af:f7:1d:73:71:7b:c9:1f:5e:e5: 12:d8:8f:1d:2e:7b:97:8e:50:8b:50:c7:8f:27:9b:26:8f:f3: 74:e5:ad:f7:e9:95:95:e7:72:3d:ae:88:6e:b6:5e:0d:3e:50: 6b:ae:de:7a:f0:2f:ab:67:c1:38:d3:37:b4:60:27:8f:00:ad: bc:9a:80:c2:9a:31:81:9a:a8:6f:82:4a:48:19:76:c7:56:97: 96:7c:77:94:55:50:48:39:d8:63:81:30:8b:21:9a:ec:fe:5e: a0:11:73:a3:bc:ef:87:1c:a3:8c:0d:dc:4c:ea:03:7c:97:ae: e8:37:d2:9f:ba:23:15:87:ef:d5:3e:39:c8:f7:92:47:06:67: a2:b0:d1:51:aa:cf:d1:8b:77:08:ce:43:c6:79:72:b9:3b:43: 1a:0b:25:c3:6b:24:52:aa:e6:87:a2:69:fb:14:1f:cb:b9:89: ad:9a:ec:31:8d:58:c2:9d:bf:06:e8:e8:95:4a:85:93:12:5b: 5b:f4:12:a0 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8Eh1KCxHXVZMIhGDa3WkOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0OWQ0ZjY2NTk4NjY4MDc5MzUzNzIxYzIxOTM1YTAwMzE5 ZjY3NTkwHhcNMjYwMTAyMDAxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODBiYTYzN2Y3N2Y0M2ZjYWU5Zjk0MzM3MTFmOTQ2ZDc1OGYwNTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlb3TCYY7aC4TlaNMjVysSDXMplY0 oLUKdNztfjWkPk20jgeru/wDfeAABwPxPRQQnySpwGq2oo52sm/zCJmcZD34hBXV wqANwDk04LRMREkUQO6P8lmpbGCy2aYXio+3KCa+YOZNnISoLH79oPZ0CtngYMEd TULngdie7oSP9XjJ2LbDvukmF4fB2ZKJ9lyjLMte7g+MWJO9iiryUaS6noC6VjKO EQdKngNx6DaF22ay7mgcD30ceuehvjSxXyl4PCKRr2e5OxX05njNaTHbVYgLKrox njwkIGnCIfvK76GB6/LT3OSxFISFyTjRTRz2YddRsSSduiZ1h5WuA4T56wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLgLpjf3f0P8rp+UM3EflG11jwVPMB8GA1UdIwQY MBaAFASdT2ZZhmgHk1NyHCGTWgAxn2dZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkoxUFpsbUdhQWVUVTNJY0laTmFBREdmWjFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9mMjNmYjYtMzIyOS00ZThiLTkzNmEt OTI3OTU0N2VjYTU1LzEvdUF1bU5fZF9RX3l1bjVRemNSLVViWFdQQlU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9mMjNmYjYtMzIyOS00ZThiLTkzNmEtOTI3OTU0N2VjYTU1 LzEvQkoxUFpsbUdhQWVUVTNJY0laTmFBREdmWjFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhF0AADR MA0GCSqGSIb3DQEBCwUAA4IBAQAzhZ6BwQtEV/YoO+5TN8TNsY+2pFOUQt4RO3N3 R/87Fc6ZldGGjbGbpTAsmWCNpmjOGNHPAefbQbNo4vglHq/3HXNxe8kfXuUS2I8d LnuXjlCLUMePJ5smj/N05a336ZWV53I9rohutl4NPlBrrt568C+rZ8E40ze0YCeP AK28moDCmjGBmqhvgkpIGXbHVpeWfHeUVVBIOdhjgTCLIZrs/l6gEXOjvO+HHKOM DdxM6gN8l67oN9KfuiMVh+/VPjnI95JHBmeisNFRqs/Ri3cIzkPGeXK5O0MaCyXD ayRSquaHomn7FB/LuYmtmuwxjVjCnb8G6OiVSoWTEltb9BKg -----END CERTIFICATE-----Generated at Mon Jan 19 11:51:15 2026 by rpki-client