This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/U6Odz6ZqNvYBSmzeiFjROKVXvQU.roa File: U6Odz6ZqNvYBSmzeiFjROKVXvQU.roa (raw, json) Hash identifier: 2u81hWuHgNo1Ev29WTliQa79JK7TAklxzD8oZv5EwGw= Subject key identifier: 53:A3:9D:CF:A6:6A:36:F6:01:4A:6C:DE:88:58:D1:38:A5:57:BD:05 Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B7C801D8A10E503AECA66DBE2F179EC16 Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/U6Odz6ZqNvYBSmzeiFjROKVXvQU.roa Signing time: Fri 02 Jan 2026 02:18:49 +0000 ROA not before: Fri 02 Jan 2026 02:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 150289 IP address blocks: 2a0f:7802:d100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:1d:8a:10:e5:03:ae:ca:66:db:e2:f1:79:ec:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Jan 2 02:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53a39dcfa66a36f6014a6cde8858d138a557bd05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c3:8e:17:01:7e:05:0e:7e:3c:1c:98:ac:94: 00:04:ec:62:f2:4e:21:81:c5:78:24:a1:2a:11:89: 57:d9:cc:95:1b:fc:c0:01:e3:0e:ca:14:79:eb:99: eb:ff:9c:17:0e:16:5a:61:e2:cb:a5:d6:eb:27:37: 6f:37:9c:05:72:35:4a:32:84:5e:47:95:a9:fb:81: 07:d1:74:8b:0e:a3:08:28:52:6c:e7:60:8f:d3:7d: 05:68:cf:d2:ed:f4:2b:cf:09:36:1a:c7:16:08:b1: 90:66:6d:1e:4a:e2:8a:57:a1:df:f9:98:cf:97:ca: b5:58:35:55:76:1a:6d:06:af:86:09:17:61:c6:40: 07:01:70:9a:81:94:c8:0d:5e:a1:d1:2d:17:1a:fa: 78:f3:2d:02:a1:5f:91:55:16:c2:4a:1b:6e:fa:78: c2:e2:52:2d:a3:3e:99:4a:20:d1:2d:62:b8:f2:3f: 5f:50:da:92:60:28:62:64:4b:dd:82:9a:fe:96:fb: 17:ea:11:55:96:d7:1e:b9:dd:eb:92:c1:e4:7f:90: a6:20:76:d1:2d:24:13:e4:55:9f:4b:15:0d:06:25: b5:47:ee:2f:33:a6:5f:1c:7c:31:e3:ee:82:ee:b1: 91:f0:fb:22:84:c4:4e:9e:6d:d3:54:ae:58:54:17: 41:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A3:9D:CF:A6:6A:36:F6:01:4A:6C:DE:88:58:D1:38:A5:57:BD:05 X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/U6Odz6ZqNvYBSmzeiFjROKVXvQU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7802:d100::/40 Signature Algorithm: sha256WithRSAEncryption 4c:10:a5:83:2e:f2:56:7b:89:5c:bd:e7:91:31:92:5d:01:df: 59:d8:38:9e:54:f6:dd:2e:1a:44:83:33:37:8c:f5:0c:6b:1f: 0b:c9:7d:7e:b6:4f:df:de:fd:db:f5:4a:5a:d5:c8:e6:d2:9e: 51:8d:d1:d8:5d:a3:6f:2d:72:be:99:94:ae:4e:f3:1e:8e:44: fc:7e:ce:f7:f1:83:7c:56:bd:0c:7a:2e:29:2d:91:d0:75:5a: e1:a3:b5:c9:78:d1:76:a3:50:f1:88:f0:7c:ca:d3:64:3d:b2: 3b:cd:dc:5d:f8:18:9f:c5:01:13:a7:82:bd:1c:c8:38:32:8c: 0d:c1:76:71:96:20:98:be:ce:8d:f4:c8:9f:8d:92:dc:93:48: 1e:6a:f0:db:6f:6c:57:cb:a1:b0:fd:c8:7d:c6:da:4b:97:c6: 64:fc:75:f0:33:6d:35:71:e9:a7:e3:f2:48:b5:97:f9:4c:b3: 43:c0:dc:11:94:c8:c3:c0:b8:d3:4e:71:c1:c6:10:0a:5f:e0: 39:f1:e4:c3:3f:60:6e:88:fc:8c:ac:37:4c:ca:8a:94:39:6f: 14:7d:d2:b8:2e:e4:12:e3:e7:91:1f:cd:ec:f0:a2:6f:8d:71: 2d:e9:99:7c:e7:8b:1e:17:ef:43:21:2d:8f:9c:03:ab:6d:f7: 30:ad:2d:65 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt8gB2KEOUDrspm2+LxeewWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjYwMTAyMDIxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2EzOWRjZmE2NmEzNmY2MDE0YTZjZGU4ODU4ZDEzOGE1NTdiZDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusOOFwF+BQ5+PByYrJQABOxi8k4h gcV4JKEqEYlX2cyVG/zAAeMOyhR565nr/5wXDhZaYeLLpdbrJzdvN5wFcjVKMoRe R5Wp+4EH0XSLDqMIKFJs52CP030FaM/S7fQrzwk2GscWCLGQZm0eSuKKV6Hf+ZjP l8q1WDVVdhptBq+GCRdhxkAHAXCagZTIDV6h0S0XGvp48y0CoV+RVRbCShtu+njC 4lItoz6ZSiDRLWK48j9fUNqSYChiZEvdgpr+lvsX6hFVltceud3rksHkf5CmIHbR LSQT5FWfSxUNBiW1R+4vM6ZfHHwx4+6C7rGR8PsihMROnm3TVK5YVBdBlQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFFOjnc+majb2AUps3ohY0TilV70FMB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvVTZPZHo2WnFOdllCU216ZWlGalJPS1ZYdlFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg94AtEw DQYJKoZIhvcNAQELBQADggEBAEwQpYMu8lZ7iVy955Exkl0B31nYOJ5U9t0uGkSD MzeM9QxrHwvJfX62T9/e/dv1SlrVyObSnlGN0dhdo28tcr6ZlK5O8x6ORPx+zvfx g3xWvQx6LiktkdB1WuGjtcl40XajUPGI8HzK02Q9sjvN3F34GJ/FAROngr0cyDgy jA3BdnGWIJi+zo30yJ+NktyTSB5q8NtvbFfLobD9yH3G2kuXxmT8dfAzbTVx6afj 8ki1l/lMs0PA3BGUyMPAuNNOccHGEApf4Dnx5MM/YG6I/IysN0zKipQ5bxR90rgu 5BLj55Efzezwom+NcS3pmXznix4X70MhLY+cA6tt9zCtLWU= -----END CERTIFICATE-----Generated at Wed Jan 21 17:00:30 2026 by rpki-client