This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/pU9oxTn7q9jgpn7U6LiKAEQRQls.roa File: pU9oxTn7q9jgpn7U6LiKAEQRQls.roa (raw, json) Hash identifier: /fn5tmXDUXGAJeJlLTx/JYTswnaTmUED1po+2Szdbo4= Subject key identifier: A5:4F:68:C5:39:FB:AB:D8:E0:A6:7E:D4:E8:B8:8A:00:44:11:42:5B Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Certificate serial: 019B797E35255381D632FC345BD9140AF05F Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/pU9oxTn7q9jgpn7U6LiKAEQRQls.roa Signing time: Thu 01 Jan 2026 12:17:52 +0000 ROA not before: Thu 01 Jan 2026 12:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136620 IP address blocks: 2a06:82c2:2::/48 maxlen: 48 2a06:82c2:d::/48 maxlen: 48 2a06:82c2:e::/48 maxlen: 48 2a06:82c2:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:35:25:53:81:d6:32:fc:34:5b:d9:14:0a:f0:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Validity Not Before: Jan 1 12:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a54f68c539fbabd8e0a67ed4e8b88a004411425b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f3:2a:9d:e2:b9:ef:5f:eb:87:e4:69:e0:33: 21:fe:31:ad:54:22:a7:d4:31:0d:a5:0e:21:c9:72: 07:b9:b9:04:da:cb:55:01:c5:56:b2:e2:e0:37:12: a5:2b:08:9b:26:f2:f3:a6:e2:fe:8b:69:fd:b3:e0: d2:8b:ef:c2:71:aa:4e:88:dd:f7:eb:d6:22:a9:9d: ee:52:02:38:1b:0d:c2:eb:d1:bb:13:2e:b9:9d:f5: cd:4f:7f:2c:52:88:b8:4e:d4:9c:a6:6a:da:a3:ec: 17:e3:bd:36:9d:6e:6f:79:3e:ba:7c:f9:8c:87:4c: 01:52:64:8c:e4:4d:00:84:b1:6f:b6:bf:70:91:d8: 07:b7:9a:9c:35:9c:e7:aa:c2:9a:eb:fd:d9:7f:d9: 11:21:94:73:cc:ba:c3:0b:a3:7e:c4:f5:7c:59:6d: 26:ea:20:c8:07:93:ba:db:c1:c0:4f:4b:35:13:38: 5e:38:a6:f9:bb:35:ef:5c:49:a6:95:7d:4b:a8:0e: ed:c7:42:5c:71:0c:67:15:ab:db:88:37:19:55:ef: b3:6b:d6:fa:79:e9:5f:e8:6c:47:01:b3:d3:92:8d: ed:77:4c:fd:fd:88:bf:97:43:15:43:d1:2f:10:79: cf:1c:f9:be:95:89:e9:8f:20:90:77:02:2b:15:ac: b1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:4F:68:C5:39:FB:AB:D8:E0:A6:7E:D4:E8:B8:8A:00:44:11:42:5B X509v3 Authority Key Identifier: keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/pU9oxTn7q9jgpn7U6LiKAEQRQls.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:82c2:2::/48 2a06:82c2:d::-2a06:82c2:f:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 9e:0b:b0:ac:f3:84:d2:2f:b6:85:72:e7:a0:74:b5:d2:56:25: 34:11:12:75:52:24:22:5d:28:1b:b5:8b:8a:ba:35:69:0c:99: 20:32:a7:50:44:73:88:0e:03:bc:37:07:7d:d4:66:b8:ec:42: 58:af:24:16:a0:bd:b5:98:a9:40:3d:66:3c:be:1d:dd:9a:ed: 95:5a:dd:70:66:25:ce:af:a1:4b:25:a3:66:98:3c:e1:b0:9d: 70:ad:81:7b:7b:1c:7d:d3:9f:bd:6a:a0:38:7b:6e:77:da:ca: 03:4e:c7:28:c1:0a:1b:a8:e6:61:9b:f4:24:63:9d:43:09:10: 6d:40:37:80:dd:bb:d7:9b:df:0f:0a:c4:dc:12:c1:f0:1c:eb: 50:e2:7e:81:1f:b6:a6:bc:9e:95:e2:bc:c1:f6:75:b6:9a:85: dd:44:84:3c:8e:e5:b6:e0:62:bd:95:f4:86:34:0f:03:16:13: dc:b1:26:a0:f4:d1:96:cf:ea:a2:41:6e:0d:f8:70:40:46:05: 24:f2:4a:21:5d:08:9b:0f:ab:31:9d:d0:ff:ac:35:b6:5a:91: 65:4b:8a:aa:36:4b:4f:b0:67:fc:4f:5c:9b:4a:fa:4d:44:04: 36:b1:75:f3:ad:79:01:89:08:d5:05:86:1b:7e:9c:ef:c5:d9: cd:ec:5f:ac -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt5fjUlU4HWMvw0W9kUCvBfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi YTU3NDUwHhcNMjYwMTAxMTIxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTRmNjhjNTM5ZmJhYmQ4ZTBhNjdlZDRlOGI4OGEwMDQ0MTE0MjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPMqneK571/rh+Rp4DMh/jGtVCKn 1DENpQ4hyXIHubkE2stVAcVWsuLgNxKlKwibJvLzpuL+i2n9s+DSi+/CcapOiN33 69YiqZ3uUgI4Gw3C69G7Ey65nfXNT38sUoi4TtScpmrao+wX4702nW5veT66fPmM h0wBUmSM5E0AhLFvtr9wkdgHt5qcNZznqsKa6/3Zf9kRIZRzzLrDC6N+xPV8WW0m 6iDIB5O628HAT0s1EzheOKb5uzXvXEmmlX1LqA7tx0JccQxnFavbiDcZVe+za9b6 eelf6GxHAbPTko3td0z9/Yi/l0MVQ9EvEHnPHPm+lYnpjyCQdwIrFayx4QIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFKVPaMU5+6vY4KZ+1Oi4igBEEUJbMB8GA1UdIwQY MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt ZmVhYzI2ZWFlY2MyLzEvcFU5b3hUbjdxOWpncG43VTZMaUtBRVFSUWxzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAjBAIAAjAdAwcAKgaCwgAC MBIDBwAqBoLCAA0DBwQqBoLCAAAwDQYJKoZIhvcNAQELBQADggEBAJ4LsKzzhNIv toVy56B0tdJWJTQREnVSJCJdKBu1i4q6NWkMmSAyp1BEc4gOA7w3B33UZrjsQliv JBagvbWYqUA9Zjy+Hd2a7ZVa3XBmJc6voUslo2aYPOGwnXCtgXt7HH3Tn71qoDh7 bnfaygNOxyjBChuo5mGb9CRjnUMJEG1AN4Ddu9eb3w8KxNwSwfAc61DifoEftqa8 npXivMH2dbaahd1EhDyO5bbgYr2V9IY0DwMWE9yxJqD00ZbP6qJBbg34cEBGBSTy SiFdCJsPqzGd0P+sNbZakWVLiqo2S0+wZ/xPXJtK+k1EBDaxdfOteQGJCNUFhht+ nO/F2c3sX6w= -----END CERTIFICATE-----Generated at Mon Jan 19 20:26:02 2026 by rpki-client