This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/ujR84cbNVDBQ4zwwuXzYG1Pp4SE.roa File: ujR84cbNVDBQ4zwwuXzYG1Pp4SE.roa (raw, json) Hash identifier: rNdhl9u0hj7GM69HKZ8XMp0FAPouClzV0NUMlFC4Z9Y= Subject key identifier: BA:34:7C:E1:C6:CD:54:30:50:E3:3C:30:B9:7C:D8:1B:53:E9:E1:21 Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B7C802090CD753F70601AAB8CCED32868 Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/ujR84cbNVDBQ4zwwuXzYG1Pp4SE.roa Signing time: Fri 02 Jan 2026 02:18:50 +0000 ROA not before: Fri 02 Jan 2026 02:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198015 IP address blocks: 2a0f:7803:ff80::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:20:90:cd:75:3f:70:60:1a:ab:8c:ce:d3:28:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Jan 2 02:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba347ce1c6cd543050e33c30b97cd81b53e9e121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9a:d1:b2:cb:37:ee:a0:91:66:16:b5:e0:1b: 3a:e2:b0:c1:74:c6:0f:72:bd:a1:e9:22:d3:1b:88: e9:97:8e:88:5e:bc:d9:51:ef:a1:49:c7:13:c1:87: f3:7f:38:a0:6c:11:04:1f:2f:46:64:89:6f:88:8e: d8:74:ec:16:7e:31:5c:c0:eb:5e:e7:db:6e:75:b4: c0:ea:94:4e:a8:a9:03:25:c3:a6:8a:a9:38:f1:42: 0b:88:79:69:b9:aa:0f:c1:e9:e4:2d:8b:a3:cb:8e: 05:13:4a:34:15:cc:9c:a7:d1:4d:ad:59:7c:f5:4d: 4b:6b:24:67:79:4b:ca:e5:d3:b4:fb:2f:79:a5:ed: d5:97:fb:fc:54:1b:42:0d:96:36:68:95:0b:3c:c0: 77:68:ea:d7:cb:d6:52:6b:8d:ec:64:37:6e:bc:56: c8:bb:36:d2:55:a8:20:80:bb:30:2c:10:2b:d6:75: a8:d4:24:26:3e:d7:61:d4:8d:0e:07:3d:31:87:ef: 5d:56:a6:93:d4:73:4d:67:13:32:c7:1d:58:49:c3: 89:3e:0b:13:c9:27:7e:fc:88:b0:73:00:97:7b:14: 67:da:ed:95:bc:1f:db:5f:24:5e:7e:76:94:2e:e2: 04:c8:84:10:0c:f4:6a:5a:03:9f:9e:6f:fe:df:be: 57:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:34:7C:E1:C6:CD:54:30:50:E3:3C:30:B9:7C:D8:1B:53:E9:E1:21 X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/ujR84cbNVDBQ4zwwuXzYG1Pp4SE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7803:ff80::/44 Signature Algorithm: sha256WithRSAEncryption 94:e1:60:25:bf:12:68:c3:cc:2a:38:cd:71:f7:aa:9d:29:e0: ca:6d:9d:ac:5c:86:f9:9e:f7:a1:a4:9a:82:d6:ac:3f:b7:8f: 4b:40:e0:8b:1a:f9:a2:fa:ea:39:bc:8d:e6:bf:8e:d2:a3:d5: 80:d5:f6:6b:2b:6c:01:af:a8:00:71:44:92:90:f3:03:13:76: 65:15:6b:77:56:23:21:f4:af:3c:40:11:d9:d4:2d:02:15:91: b7:0d:01:c2:cc:a4:14:84:3b:ae:d2:11:ed:f9:3a:a3:36:82: 25:ea:3e:ab:9d:54:16:56:39:76:e6:00:fd:8e:34:cb:e3:13: cd:77:f4:81:fd:3a:eb:f4:4b:3a:00:16:0a:a3:f1:eb:85:4a: a2:2e:e8:b6:1d:cc:e9:98:ee:90:7e:1f:12:a6:6c:01:df:39: 43:a5:4e:58:0f:5f:e2:f8:3a:5b:03:c0:b2:5c:23:0b:1c:34: 93:d9:83:cb:18:39:81:3d:ac:ba:a8:7d:8d:e2:58:4f:cc:99: 2d:ab:21:80:d2:36:85:c8:ed:22:c7:b4:dc:ac:17:cf:2a:90: d2:b3:0c:30:20:57:a1:a9:f9:bd:c7:f2:d5:03:30:33:1d:04: d0:cc:1f:38:36:5a:1d:12:e9:bf:ae:b2:37:5d:dc:ce:3c:90: 1e:58:f0:87 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8gCCQzXU/cGAaq4zO0yhoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjYwMTAyMDIxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTM0N2NlMWM2Y2Q1NDMwNTBlMzNjMzBiOTdjZDgxYjUzZTllMTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJrRsss37qCRZha14Bs64rDBdMYP cr2h6SLTG4jpl46IXrzZUe+hSccTwYfzfzigbBEEHy9GZIlviI7YdOwWfjFcwOte 59tudbTA6pROqKkDJcOmiqk48UILiHlpuaoPwenkLYujy44FE0o0Fcycp9FNrVl8 9U1LayRneUvK5dO0+y95pe3Vl/v8VBtCDZY2aJULPMB3aOrXy9ZSa43sZDduvFbI uzbSVagggLswLBAr1nWo1CQmPtdh1I0OBz0xh+9dVqaT1HNNZxMyxx1YScOJPgsT ySd+/IiwcwCXexRn2u2VvB/bXyRefnaULuIEyIQQDPRqWgOfnm/+375XuQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLo0fOHGzVQwUOM8MLl82BtT6eEhMB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvdWpSODRjYk5WREJRNHp3d3VYellHMVBwNFNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg94A/+A MA0GCSqGSIb3DQEBCwUAA4IBAQCU4WAlvxJow8wqOM1x96qdKeDKbZ2sXIb5nveh pJqC1qw/t49LQOCLGvmi+uo5vI3mv47So9WA1fZrK2wBr6gAcUSSkPMDE3ZlFWt3 ViMh9K88QBHZ1C0CFZG3DQHCzKQUhDuu0hHt+TqjNoIl6j6rnVQWVjl25gD9jjTL 4xPNd/SB/Trr9Es6ABYKo/HrhUqiLui2HczpmO6Qfh8SpmwB3zlDpU5YD1/i+Dpb A8CyXCMLHDST2YPLGDmBPay6qH2N4lhPzJktqyGA0jaFyO0ix7TcrBfPKpDSswww IFehqfm9x/LVAzAzHQTQzB84NlodEum/rrI3XdzOPJAeWPCH -----END CERTIFICATE-----Generated at Wed Jan 21 17:00:30 2026 by rpki-client