This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/5uypClYSpXDtpFxkn7HAtUUQ-bA.roa File: 5uypClYSpXDtpFxkn7HAtUUQ-bA.roa (raw, json) Hash identifier: Wn/eRzuw08xsMZGwe9NLy+K5LZyI+vFtMCpYOnVHgHc= Subject key identifier: E6:EC:A9:0A:56:12:A5:70:ED:A4:5C:64:9F:B1:C0:B5:45:10:F9:B0 Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B7C80238A57D94F5FB299A1E217E43B21 Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/5uypClYSpXDtpFxkn7HAtUUQ-bA.roa Signing time: Fri 02 Jan 2026 02:18:50 +0000 ROA not before: Fri 02 Jan 2026 02:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199613 IP address blocks: 2a0f:7802:1000::/36 maxlen: 48 2a0f:7803:ff70::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:23:8a:57:d9:4f:5f:b2:99:a1:e2:17:e4:3b:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Jan 2 02:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6eca90a5612a570eda45c649fb1c0b54510f9b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:27:10:79:0f:c6:09:82:55:2a:0b:bb:cc:49: f8:15:92:8c:af:12:6b:72:a8:df:73:0d:98:5e:d1: 30:94:73:0a:1d:51:f8:2e:99:78:c6:96:36:9e:75: fc:86:9a:f9:a4:1a:30:0e:9f:57:87:cf:e0:33:2e: 0c:ce:7c:b8:4c:47:df:95:c3:7b:ac:be:99:7f:f6: 8c:55:2c:05:59:25:65:1c:e9:76:a9:c8:eb:ec:e6: 7c:9b:7b:a7:d3:64:c7:41:f9:3d:d5:0d:b2:44:6a: ec:10:6a:4c:55:24:8a:30:7f:8d:2f:24:b1:f2:de: 7f:be:fc:58:9d:26:5e:a8:a6:e7:8b:47:92:5a:08: 55:3a:a5:46:55:ad:30:41:ab:3f:81:59:0c:31:d6: 8b:8b:ef:83:7e:5f:d0:2c:1c:90:52:6f:5b:f6:7e: 78:4d:a0:b9:05:91:08:c9:f9:e8:17:c7:29:a0:04: 57:07:d0:69:36:82:df:ab:9d:e9:e3:05:1d:f4:a5: d7:76:56:9d:f9:37:51:35:e9:11:5b:d1:53:16:06: 94:ac:8d:21:60:9b:fa:79:1f:3a:8c:78:c9:55:76: 49:72:da:0d:0a:93:00:af:6a:99:16:63:17:7d:ce: ae:64:eb:0c:3b:2b:e6:d9:e2:f9:b2:34:43:bb:bb: a0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:EC:A9:0A:56:12:A5:70:ED:A4:5C:64:9F:B1:C0:B5:45:10:F9:B0 X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/5uypClYSpXDtpFxkn7HAtUUQ-bA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7802:1000::/36 2a0f:7803:ff70::/44 Signature Algorithm: sha256WithRSAEncryption 29:18:5e:02:23:dc:c9:3d:ee:de:7a:9c:76:d9:c9:8b:ed:b0: d5:a0:b4:bc:99:ff:29:5b:7c:7f:05:91:a8:26:1c:28:6b:0d: a5:f9:58:eb:d8:b3:3d:12:57:37:83:94:b4:30:9e:f9:66:6c: c0:1d:71:e9:c9:83:79:b6:f5:29:aa:b1:7f:50:0f:ee:47:e9: 0b:c8:4e:08:13:22:a9:50:bd:c1:bb:16:f3:1a:72:54:85:2a: bf:cd:45:e9:58:bf:69:60:79:54:2d:b0:a0:f8:8a:89:05:8c: 3c:d2:c3:fb:26:99:92:8d:b5:bf:8a:51:a5:aa:3d:61:cc:6f: ef:0a:9e:31:aa:69:b7:e4:df:73:d9:ca:4f:ef:3a:d6:ee:e9: a0:64:71:9b:4d:33:ba:8d:3d:db:b3:ea:41:d1:cf:69:56:9f: cf:ee:66:b7:83:37:d4:d6:7e:ea:41:82:d7:6e:9a:94:3c:a9: 4c:d3:7c:00:cf:64:9c:fd:c1:d6:9d:76:f3:9c:f7:f6:2c:85: 99:5f:53:4a:27:7f:70:75:cb:35:25:b9:35:44:ad:b2:93:63: de:19:db:c6:0b:9f:95:60:b3:4b:01:0e:ed:da:ce:69:14:0a: bd:73:3b:cd:4d:3e:13:53:9a:32:c2:57:39:d7:d9:7b:74:15: 8d:8e:44:32 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgISAZt8gCOKV9lPX7KZoeIX5DshMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjYwMTAyMDIxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNmVjYTkwYTU2MTJhNTcwZWRhNDVjNjQ5ZmIxYzBiNTQ1MTBmOWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsycQeQ/GCYJVKgu7zEn4FZKMrxJr cqjfcw2YXtEwlHMKHVH4Lpl4xpY2nnX8hpr5pBowDp9Xh8/gMy4Mzny4TEfflcN7 rL6Zf/aMVSwFWSVlHOl2qcjr7OZ8m3un02THQfk91Q2yRGrsEGpMVSSKMH+NLySx 8t5/vvxYnSZeqKbni0eSWghVOqVGVa0wQas/gVkMMdaLi++Dfl/QLByQUm9b9n54 TaC5BZEIyfnoF8cpoARXB9BpNoLfq53p4wUd9KXXdlad+TdRNekRW9FTFgaUrI0h YJv6eR86jHjJVXZJctoNCpMAr2qZFmMXfc6uZOsMOyvm2eL5sjRDu7ugNwIDAQAB o4ICFDCCAhAwHQYDVR0OBBYEFObsqQpWEqVw7aRcZJ+xwLVFEPmwMB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvNXV5cENsWVNwWER0cEZ4a243SEF0VVVRLWJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwYEKg94AhAD BwQqD3gD/3AwDQYJKoZIhvcNAQELBQADggEBACkYXgIj3Mk97t56nHbZyYvtsNWg tLyZ/ylbfH8FkagmHChrDaX5WOvYsz0SVzeDlLQwnvlmbMAdcenJg3m29SmqsX9Q D+5H6QvITggTIqlQvcG7FvMaclSFKr/NRelYv2lgeVQtsKD4iokFjDzSw/smmZKN tb+KUaWqPWHMb+8KnjGqabfk33PZyk/vOtbu6aBkcZtNM7qNPduz6kHRz2lWn8/u ZreDN9TWfupBgtdumpQ8qUzTfADPZJz9wdaddvOc9/YshZlfU0onf3B1yzUluTVE rbKTY94Z28YLn5Vgs0sBDu3azmkUCr1zO81NPhNTmjLCVznX2Xt0FY2ORDI= -----END CERTIFICATE-----Generated at Wed Jan 21 16:58:21 2026 by rpki-client