This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/uCQIdQRThP22a-vG2hgUMuJi64o.roa File: uCQIdQRThP22a-vG2hgUMuJi64o.roa (raw, json) Hash identifier: J4OTf97Q7mJGTx3r4bDe4F/00WPH3RPpof+YFgGU2K8= Subject key identifier: B8:24:08:75:04:53:84:FD:B6:6B:EB:C6:DA:18:14:32:E2:62:EB:8A Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Certificate serial: 019B78A37D443AB67B33419631E7AE5BB2F9 Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/uCQIdQRThP22a-vG2hgUMuJi64o.roa Signing time: Thu 01 Jan 2026 08:18:58 +0000 ROA not before: Thu 01 Jan 2026 08:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213887 IP address blocks: 2a0b:4141::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:7d:44:3a:b6:7b:33:41:96:31:e7:ae:5b:b2:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Validity Not Before: Jan 1 08:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8240875045384fdb66bebc6da181432e262eb8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d6:58:37:6d:38:e2:19:61:e9:f7:46:fc:68: fc:07:74:b6:3f:6e:fc:15:04:e8:f4:80:d9:c2:ef: b1:47:2c:73:95:6a:c4:ed:a6:52:6b:cf:63:fd:0b: 5e:1b:1f:c7:0d:26:66:03:76:73:f7:61:93:8a:d4: e7:22:24:2e:7f:0b:ac:50:a2:1f:d8:42:01:ba:40: 32:8a:ec:48:e9:26:df:d0:fd:10:be:e4:66:92:e6: 30:00:5a:b9:42:0b:53:16:df:f8:46:1f:af:50:44: 08:ce:3c:d2:ff:5d:f9:f5:77:9d:f4:aa:98:c0:3a: 4a:5a:9e:7f:fd:be:18:62:bc:da:4a:f4:53:ae:01: d6:51:19:fe:41:5a:49:21:8b:c8:ea:37:fe:b4:09: ee:ce:d6:27:98:08:1d:ef:6d:c4:44:f9:a0:b3:82: 26:df:2a:5f:e5:6d:65:d2:45:8e:0c:dc:41:bf:3d: 5d:e3:5e:b4:71:1a:04:48:e5:c6:ff:c3:e7:79:cf: fb:7b:c0:63:13:14:b2:b2:93:77:3a:2f:f7:17:1d: cc:ba:7e:cb:bc:45:83:05:76:23:98:ef:cb:88:21: 87:06:c6:f8:65:d9:92:e0:54:fe:1f:71:7f:dd:3c: a1:87:6a:e6:ba:d4:16:47:f1:bc:9b:50:5c:65:b8: d0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:24:08:75:04:53:84:FD:B6:6B:EB:C6:DA:18:14:32:E2:62:EB:8A X509v3 Authority Key Identifier: keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/uCQIdQRThP22a-vG2hgUMuJi64o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4141::/32 Signature Algorithm: sha256WithRSAEncryption 3e:60:a3:95:65:ec:7d:81:10:74:30:b6:2a:e6:7e:e2:b0:6f: ee:9f:50:ed:d4:8a:aa:c2:d6:ef:4c:0e:89:4a:ac:df:93:9d: 7f:12:d1:ab:ec:19:fa:08:41:8c:e7:6c:33:da:1b:1a:af:54: 05:07:a5:50:9f:6d:1d:d6:83:ce:1a:0e:83:a2:26:91:d9:b9: 62:4d:f8:16:e5:73:82:b1:40:3c:82:0f:2d:80:98:8b:7a:9a: 0d:31:7d:1f:84:65:0f:50:4f:53:c4:68:84:fa:6e:bb:b5:a6: 70:15:dd:28:e4:fb:a3:9a:bb:fa:5e:9b:30:b0:22:ac:71:24: 18:02:01:f9:08:ad:69:aa:02:30:f8:58:b5:23:1e:08:44:42: 64:87:37:34:3f:d3:40:17:fd:b0:c2:a0:8f:13:b8:4a:99:d6: eb:19:ee:28:4d:a1:dd:30:45:2d:61:83:b1:d4:7b:fb:b0:f6: c4:e5:dd:79:f9:c4:8c:21:d7:1d:14:4d:fd:a5:5e:00:5c:25: 7c:6c:66:4f:b4:15:bb:b3:55:13:0b:cd:82:64:05:f1:a3:a7: 1f:d5:b0:c4:be:cb:8c:70:c1:07:ed:1e:99:5d:65:53:bd:11: 22:8b:d1:e4:73:ad:7a:7d:43:83:2c:c9:15:50:ee:1b:70:0b: 96:73:09:17 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4o31EOrZ7M0GWMeeuW7L5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMGZmOGFhZjc0NTMxMTQxNDcwMjhkNTRhZTFjNjkzYThh MTQ3YmMwHhcNMjYwMTAxMDgxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODI0MDg3NTA0NTM4NGZkYjY2YmViYzZkYTE4MTQzMmUyNjJlYjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdZYN2044hlh6fdG/Gj8B3S2P278 FQTo9IDZwu+xRyxzlWrE7aZSa89j/QteGx/HDSZmA3Zz92GTitTnIiQufwusUKIf 2EIBukAyiuxI6Sbf0P0QvuRmkuYwAFq5QgtTFt/4Rh+vUEQIzjzS/1359Xed9KqY wDpKWp5//b4YYrzaSvRTrgHWURn+QVpJIYvI6jf+tAnuztYnmAgd723ERPmgs4Im 3ypf5W1l0kWODNxBvz1d4160cRoESOXG/8Pnec/7e8BjExSyspN3Oi/3Fx3Mun7L vEWDBXYjmO/LiCGHBsb4ZdmS4FT+H3F/3Tyhh2rmutQWR/G8m1BcZbjQUQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFLgkCHUEU4T9tmvrxtoYFDLiYuuKMB8GA1UdIwQY MBaAFF4P+Kr3RTEUFHAo1UrhxpOooUe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEt ZDg3MjEzNzU2NDRhLzEvdUNRSWRRUlRoUDIyYS12RzJoZ1VNdUppNjRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEtZDg3MjEzNzU2NDRh LzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgtBQTAN BgkqhkiG9w0BAQsFAAOCAQEAPmCjlWXsfYEQdDC2KuZ+4rBv7p9Q7dSKqsLW70wO iUqs35OdfxLRq+wZ+ghBjOdsM9obGq9UBQelUJ9tHdaDzhoOg6Imkdm5Yk34FuVz grFAPIIPLYCYi3qaDTF9H4RlD1BPU8RohPpuu7WmcBXdKOT7o5q7+l6bMLAirHEk GAIB+QitaaoCMPhYtSMeCERCZIc3ND/TQBf9sMKgjxO4SpnW6xnuKE2h3TBFLWGD sdR7+7D2xOXdefnEjCHXHRRN/aVeAFwlfGxmT7QVu7NVEwvNgmQF8aOnH9WwxL7L jHDBB+0emV1lU70RIovR5HOten1DgyzJFVDuG3ALlnMJFw== -----END CERTIFICATE-----Generated at Mon Jan 26 00:17:12 2026 by rpki-client