This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/uRC0Xg3UMF7unFmQWqPt9YU7-Iw.roa File: uRC0Xg3UMF7unFmQWqPt9YU7-Iw.roa (raw, json) Hash identifier: 9be7uDEk8LLEGfjE7o7km8H4uZ3Y3P4vwsDV5gthSBM= Subject key identifier: B9:10:B4:5E:0D:D4:30:5E:EE:9C:59:90:5A:A3:ED:F5:85:3B:F8:8C Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B7C803362BAFBCF896D822C506C749151 Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/uRC0Xg3UMF7unFmQWqPt9YU7-Iw.roa Signing time: Fri 02 Jan 2026 02:18:55 +0000 ROA not before: Fri 02 Jan 2026 02:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215415 IP address blocks: 2a0f:7802:e200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:33:62:ba:fb:cf:89:6d:82:2c:50:6c:74:91:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Jan 2 02:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b910b45e0dd4305eee9c59905aa3edf5853bf88c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:94:01:3a:e2:fe:48:fc:c3:d6:da:98:bb:f2: ea:45:1f:50:4e:63:14:b6:b2:e3:98:c4:19:8f:fd: ef:22:b9:b4:03:35:0f:79:fd:f1:2c:5b:4c:b7:d8: 56:f0:65:aa:54:f0:50:f9:bb:93:2f:12:e9:22:43: 8b:38:9c:10:19:28:27:d7:09:62:e1:29:4b:69:ae: 90:91:15:0e:41:d4:c9:9b:76:f3:b6:50:6e:fd:34: 8e:fb:eb:e3:22:28:d2:b5:61:82:a2:d2:1b:a3:b0: ca:63:56:f4:a2:cc:95:78:08:00:6d:e4:93:df:1d: 79:20:07:fa:03:08:ac:77:29:69:63:f2:e6:50:79: be:c8:79:d3:e7:7f:e6:37:78:70:05:eb:76:9d:97: 38:70:04:fd:c3:f8:aa:b2:5e:05:03:bf:f7:b1:5f: 75:51:48:08:a1:12:75:bc:15:6d:ed:70:51:f1:88: 41:d9:b4:8d:0b:1a:83:7e:68:7b:b5:c0:19:d1:de: 84:1e:68:73:c5:ed:84:4f:e5:01:b9:15:79:04:2c: 86:4b:58:50:9a:bf:01:5f:59:f6:fc:52:94:fa:7e: aa:34:2f:2a:f0:0b:a4:60:44:68:e4:6a:ed:2c:fe: dc:d1:73:25:41:af:6e:d2:3f:bd:f3:39:e7:a5:77: ea:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:10:B4:5E:0D:D4:30:5E:EE:9C:59:90:5A:A3:ED:F5:85:3B:F8:8C X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/uRC0Xg3UMF7unFmQWqPt9YU7-Iw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7802:e200::/40 Signature Algorithm: sha256WithRSAEncryption 30:d5:79:64:3a:60:bd:91:c1:13:39:93:eb:f2:cd:25:fd:36: 01:06:e3:42:d3:da:a7:55:11:04:1f:df:d6:58:41:33:1d:58: f1:b2:77:1b:ef:14:61:1a:75:3a:f3:a0:2c:07:16:c3:ca:07: ea:70:1e:f5:7a:08:8b:df:2e:d5:0f:29:5b:93:dd:9e:00:3c: cd:f1:e1:b8:93:a5:f3:09:e9:73:11:06:ad:19:65:3f:f9:0c: ae:47:31:93:e2:6e:4e:d4:79:de:5a:a3:c4:a6:f9:9f:03:e7: 61:77:f1:c5:19:64:b6:24:64:be:2e:86:4f:a6:be:55:3b:2c: 6f:12:c4:f9:75:df:d6:20:ab:50:d4:8f:60:61:54:7e:67:92: b9:89:24:6a:3d:c7:ef:34:b6:01:13:cf:48:83:a0:ab:ae:9f: 1c:41:61:75:cd:fd:1d:c8:1a:c8:5c:61:f4:d6:bf:95:a1:72: d1:9b:20:ac:88:7d:6d:4a:de:c1:b4:c4:80:a0:90:51:f2:8d: 72:9b:f3:cf:85:52:ff:4d:1f:04:19:44:83:2c:b8:dd:cb:14: e2:86:b3:71:c2:8b:30:62:03:40:6a:cb:a0:7f:16:a2:62:4b: ef:a0:38:74:64:96:7c:6b:8c:4d:b1:97:40:7c:f9:4d:03:77: 38:0b:68:95 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt8gDNiuvvPiW2CLFBsdJFRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjYwMTAyMDIxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTEwYjQ1ZTBkZDQzMDVlZWU5YzU5OTA1YWEzZWRmNTg1M2JmODhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JQBOuL+SPzD1tqYu/LqRR9QTmMU trLjmMQZj/3vIrm0AzUPef3xLFtMt9hW8GWqVPBQ+buTLxLpIkOLOJwQGSgn1wli 4SlLaa6QkRUOQdTJm3bztlBu/TSO++vjIijStWGCotIbo7DKY1b0osyVeAgAbeST 3x15IAf6AwisdylpY/LmUHm+yHnT53/mN3hwBet2nZc4cAT9w/iqsl4FA7/3sV91 UUgIoRJ1vBVt7XBR8YhB2bSNCxqDfmh7tcAZ0d6EHmhzxe2ET+UBuRV5BCyGS1hQ mr8BX1n2/FKU+n6qNC8q8AukYERo5GrtLP7c0XMlQa9u0j+98znnpXfqPQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFLkQtF4N1DBe7pxZkFqj7fWFO/iMMB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvdVJDMFhnM1VNRjd1bkZtUVdxUHQ5WVU3LUl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg94AuIw DQYJKoZIhvcNAQELBQADggEBADDVeWQ6YL2RwRM5k+vyzSX9NgEG40LT2qdVEQQf 39ZYQTMdWPGydxvvFGEadTrzoCwHFsPKB+pwHvV6CIvfLtUPKVuT3Z4APM3x4biT pfMJ6XMRBq0ZZT/5DK5HMZPibk7Ued5ao8Sm+Z8D52F38cUZZLYkZL4uhk+mvlU7 LG8SxPl139Ygq1DUj2BhVH5nkrmJJGo9x+80tgETz0iDoKuunxxBYXXN/R3IGshc YfTWv5WhctGbIKyIfW1K3sG0xICgkFHyjXKb88+FUv9NHwQZRIMsuN3LFOKGs3HC izBiA0Bqy6B/FqJiS++gOHRklnxrjE2xl0B8+U0DdzgLaJU= -----END CERTIFICATE-----Generated at Wed Jan 21 16:59:55 2026 by rpki-client