This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/u_iWvzN4ZsIj-85aLk82H6-rRe4.roa File: u_iWvzN4ZsIj-85aLk82H6-rRe4.roa (raw, json) Hash identifier: LwmASP5C8j7zpf+fcC+xGqEebuer0tW8AmUmigdVvI8= Subject key identifier: BB:F8:96:BF:33:78:66:C2:23:FB:CE:5A:2E:4F:36:1F:AF:AB:45:EE Certificate issuer: /CN=ca35f54a3b0e2e48dd5efb3624c1fe0e85fe261d Certificate serial: 019B7B36AAAD5F58CC9135C75B97C0CF2A23 Authority key identifier: CA:35:F5:4A:3B:0E:2E:48:DD:5E:FB:36:24:C1:FE:0E:85:FE:26:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/u_iWvzN4ZsIj-85aLk82H6-rRe4.roa Signing time: Thu 01 Jan 2026 20:18:58 +0000 ROA not before: Thu 01 Jan 2026 20:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213767 IP address blocks: 2001:67c:fc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:aa:ad:5f:58:cc:91:35:c7:5b:97:c0:cf:2a:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca35f54a3b0e2e48dd5efb3624c1fe0e85fe261d Validity Not Before: Jan 1 20:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bbf896bf337866c223fbce5a2e4f361fafab45ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e5:c2:8c:e3:ab:1b:11:6b:f5:a2:8b:53:cd: 87:bd:9f:36:72:24:d7:dc:37:fc:98:71:92:ac:03: 82:cc:bb:e3:32:0a:5b:c0:ea:f6:fc:b7:95:6d:bd: eb:37:db:87:7f:ff:ac:89:05:f6:04:ab:a1:11:f9: 80:1c:00:55:55:69:35:8f:2a:55:05:30:56:b4:53: 4e:fb:ae:1f:17:4c:88:6c:c8:32:ec:ab:b7:38:63: 93:b3:55:93:d0:f8:1a:d2:34:10:e6:d6:89:00:56: 78:ad:31:16:47:80:90:76:ef:60:78:b6:15:46:21: 65:72:6f:5c:97:a9:3b:27:7a:7a:d6:bc:51:49:ae: 39:a5:76:41:74:74:d2:61:54:f9:e9:4c:9c:f1:8b: ab:ea:b8:36:6f:58:cf:f5:e8:63:26:db:70:67:d6: a7:94:e3:6a:ca:98:a4:e6:77:59:51:a5:d1:23:38: c5:37:34:b8:4b:e4:19:52:b9:9b:15:71:fe:92:1e: cc:5b:30:db:af:16:b1:62:83:32:9e:7f:19:12:29: 49:00:fc:50:a1:5a:21:61:d3:5e:16:00:7c:ad:bc: 75:b1:36:64:56:9e:ce:28:cb:8f:aa:f9:c5:2e:19: 29:b4:9a:7d:ab:96:ce:15:de:82:93:ba:24:ca:98: 3a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:F8:96:BF:33:78:66:C2:23:FB:CE:5A:2E:4F:36:1F:AF:AB:45:EE X509v3 Authority Key Identifier: keyid:CA:35:F5:4A:3B:0E:2E:48:DD:5E:FB:36:24:C1:FE:0E:85:FE:26:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/u_iWvzN4ZsIj-85aLk82H6-rRe4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:fc0::/48 Signature Algorithm: sha256WithRSAEncryption 5a:53:a2:b1:a6:66:07:07:45:38:5d:78:c2:21:50:8f:e1:36: 34:19:4c:c3:ec:f6:47:aa:0a:2c:91:58:f8:1e:3d:18:3f:87: e4:f0:76:be:8f:f1:5b:16:5d:ce:3d:10:74:75:1e:5b:88:b1: 54:2d:0d:ca:2e:25:5a:f0:ad:ef:7a:f7:c9:2b:7f:41:5c:c5: 7b:8f:71:94:2e:63:9f:32:e6:95:8b:9e:a7:df:03:06:9d:24: 86:72:8a:6b:06:04:dd:65:8d:39:5a:25:90:1a:c5:e1:bd:40: d3:36:73:c1:0a:25:06:5f:94:c6:de:ed:46:ae:d5:4e:d9:a7: 93:33:98:f6:fb:cd:de:99:a2:5b:43:b6:b8:fa:a5:95:22:4b: f3:ed:3a:3d:8f:39:9d:f3:39:0a:8c:e3:8f:68:e7:05:eb:fb: 1f:e1:d7:81:10:2a:69:86:fd:f0:f2:fa:d8:40:55:a3:5d:15: 10:4c:cb:60:4c:14:bb:d5:b8:6a:3c:f3:1c:2e:b0:69:a3:50: bd:14:6c:2b:8f:b8:d5:6a:c8:cc:14:7a:64:c0:0e:a7:25:59: 72:6c:72:04:7c:76:48:0b:0f:f1:9e:ab:18:42:18:c6:eb:90: a4:15:8c:ca:21:ad:08:b6:ed:e8:d6:80:24:3b:ce:3f:f8:63: e2:94:9c:09 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7NqqtX1jMkTXHW5fAzyojMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMzVmNTRhM2IwZTJlNDhkZDVlZmIzNjI0YzFmZTBlODVm ZTI2MWQwHhcNMjYwMTAxMjAxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYmY4OTZiZjMzNzg2NmMyMjNmYmNlNWEyZTRmMzYxZmFmYWI0NWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuXCjOOrGxFr9aKLU82HvZ82ciTX 3Df8mHGSrAOCzLvjMgpbwOr2/LeVbb3rN9uHf/+siQX2BKuhEfmAHABVVWk1jypV BTBWtFNO+64fF0yIbMgy7Ku3OGOTs1WT0Pga0jQQ5taJAFZ4rTEWR4CQdu9geLYV RiFlcm9cl6k7J3p61rxRSa45pXZBdHTSYVT56Uyc8Yur6rg2b1jP9ehjJttwZ9an lONqypik5ndZUaXRIzjFNzS4S+QZUrmbFXH+kh7MWzDbrxaxYoMynn8ZEilJAPxQ oVohYdNeFgB8rbx1sTZkVp7OKMuPqvnFLhkptJp9q5bOFd6Ck7okypg6yQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLv4lr8zeGbCI/vOWi5PNh+vq0XuMB8GA1UdIwQY MBaAFMo19Uo7Di5I3V77NiTB/g6F/iYdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWpYMVNqc09Ma2pkWHZzMkpNSC1Eb1gtSmgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC85YTA0OTctY2QwZC00OGRjLTg2YWUt NTFjOTliYzhlOGQwLzEvdV9pV3Z6TjRac0lqLTg1YUxrODJINi1yUmU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC85YTA0OTctY2QwZC00OGRjLTg2YWUtNTFjOTliYzhlOGQw LzEveWpYMVNqc09Ma2pkWHZzMkpNSC1Eb1gtSmgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA/A MA0GCSqGSIb3DQEBCwUAA4IBAQBaU6KxpmYHB0U4XXjCIVCP4TY0GUzD7PZHqgos kVj4Hj0YP4fk8Ha+j/FbFl3OPRB0dR5biLFULQ3KLiVa8K3vevfJK39BXMV7j3GU LmOfMuaVi56n3wMGnSSGcoprBgTdZY05WiWQGsXhvUDTNnPBCiUGX5TG3u1GrtVO 2aeTM5j2+83emaJbQ7a4+qWVIkvz7To9jzmd8zkKjOOPaOcF6/sf4deBECpphv3w 8vrYQFWjXRUQTMtgTBS71bhqPPMcLrBpo1C9FGwrj7jVasjMFHpkwA6nJVlybHIE fHZICw/xnqsYQhjG65CkFYzKIa0Itu3o1oAkO84/+GPilJwJ -----END CERTIFICATE-----Generated at Sat Jan 10 04:35:44 2026 by rpki-client