This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/uaEkmuhb7WRqiclbUmM34EjbO5o.roa File: uaEkmuhb7WRqiclbUmM34EjbO5o.roa (raw, json) Hash identifier: h2MPog8U0B3WrxFfdEojnmYSGAZiWQIlg+muWLvtr1s= Subject key identifier: B9:A1:24:9A:E8:5B:ED:64:6A:89:C9:5B:52:63:37:E0:48:DB:3B:9A Certificate issuer: /CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576 Certificate serial: 019B79110482DEFF46420A797E53070DC687 Authority key identifier: 09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/uaEkmuhb7WRqiclbUmM34EjbO5o.roa Signing time: Thu 01 Jan 2026 10:18:36 +0000 ROA not before: Thu 01 Jan 2026 10:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13009 IP address blocks: 216.245.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:04:82:de:ff:46:42:0a:79:7e:53:07:0d:c6:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576 Validity Not Before: Jan 1 10:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9a1249ae85bed646a89c95b526337e048db3b9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e6:20:3d:79:96:ff:56:3d:6a:cd:f2:13:f4: e6:91:77:9b:ee:e8:8c:6e:c7:ff:b2:8f:78:e3:64: 79:ba:de:28:07:eb:ca:69:17:aa:6b:89:3b:92:00: 84:82:38:4c:bf:6d:fd:f3:0b:07:07:73:a3:08:d7: e2:cf:3c:03:2b:8a:22:02:8c:d8:bd:35:6f:51:cf: 97:ad:a2:cb:ed:8d:c2:11:27:02:a7:4e:84:e1:17: e8:b0:24:97:e2:4b:d4:cd:7c:b9:a9:05:59:51:6f: 6b:9c:61:cb:d3:89:46:3a:3c:de:8d:48:85:30:c6: fa:39:8a:26:9e:39:71:40:68:be:11:d3:9a:37:4a: f2:2d:fe:62:d7:c4:8f:b0:96:08:dd:b1:94:7a:fe: 35:e2:ef:92:61:09:7f:f9:a5:11:fa:e7:b9:38:f1: 26:6a:82:38:dd:82:7a:ec:9d:c3:9b:40:4f:b4:9e: 5c:7c:a3:16:7c:b9:d0:61:48:56:cc:fb:c5:d5:0b: 23:c6:0c:7d:b4:88:3a:e5:f4:51:eb:19:27:84:c8: 2a:b4:60:ca:5e:cc:10:88:21:09:dd:1b:14:41:49: 90:9d:ac:33:b1:b6:ac:02:9e:f3:4c:ab:8b:16:d0: cd:cf:3e:21:fb:a6:f1:b7:f4:ec:96:b5:5f:14:37: 89:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A1:24:9A:E8:5B:ED:64:6A:89:C9:5B:52:63:37:E0:48:DB:3B:9A X509v3 Authority Key Identifier: keyid:09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/uaEkmuhb7WRqiclbUmM34EjbO5o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.245.80.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:27:05:44:0f:70:e6:3e:06:04:01:f5:62:74:67:04:53:cc: d1:8f:49:9a:11:72:ed:6c:6d:9e:58:af:de:58:ad:99:e0:08: 39:d1:3c:2c:bd:a4:1f:87:d3:fa:eb:bb:8f:8d:5d:46:91:a7: d6:15:46:ac:02:a7:9d:75:9e:53:34:fa:90:20:b5:98:96:29: 2d:83:0a:3b:d0:09:cc:96:b0:c5:8f:bb:78:7d:9a:d4:f7:1e: 6b:a8:67:f3:d5:31:d7:ec:22:eb:9a:8c:b4:50:f2:3c:92:14: f1:12:3c:62:2b:e8:e1:1a:77:36:58:45:9d:ff:16:ad:08:08: f6:c6:80:69:1e:34:3a:93:cc:d1:f7:c8:5a:9e:a3:f6:a2:d3: e6:c7:d4:7b:b6:0a:2a:97:64:0f:59:5e:3a:9e:f2:62:7d:7d: 3c:f2:3d:84:fe:9e:1e:b6:17:fe:c2:04:22:63:16:55:f1:03: 47:0b:79:8d:63:90:40:05:3d:ef:ff:62:db:b7:27:46:3a:71: 5a:1d:71:b9:ca:98:44:c4:54:eb:67:51:08:49:83:4a:ae:42: fe:d4:6e:39:14:21:1b:6d:58:63:ad:8f:f7:22:47:31:da:4e: 1d:9e:46:86:75:4f:ff:1f:66:11:00:37:ab:8e:ce:17:2c:a2: 03:f9:58:3d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EQSC3v9GQgp5flMHDcaHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZWU3ZWUwZjc1YjcxNjRhYzc1OTYxOTdjN2YxMjFkNmZj YTE1NzYwHhcNMjYwMTAxMTAxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWExMjQ5YWU4NWJlZDY0NmE4OWM5NWI1MjYzMzdlMDQ4ZGIzYjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eYgPXmW/1Y9as3yE/TmkXeb7uiM bsf/so9442R5ut4oB+vKaReqa4k7kgCEgjhMv2398wsHB3OjCNfizzwDK4oiAozY vTVvUc+XraLL7Y3CEScCp06E4RfosCSX4kvUzXy5qQVZUW9rnGHL04lGOjzejUiF MMb6OYomnjlxQGi+EdOaN0ryLf5i18SPsJYI3bGUev414u+SYQl/+aUR+ue5OPEm aoI43YJ67J3Dm0BPtJ5cfKMWfLnQYUhWzPvF1Qsjxgx9tIg65fRR6xknhMgqtGDK XswQiCEJ3RsUQUmQnawzsbasAp7zTKuLFtDNzz4h+6bxt/TslrVfFDeJfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLmhJJroW+1kaonJW1JjN+BI2zuaMB8GA1UdIwQY MBaAFAnufuD3W3FkrHWWGXx/Eh1vyhV2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2U1LTRQZGJjV1NzZFpZWmZIOFNIV19LRlhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9kYmU1MGEtMmNhMS00MzYyLWI1ZTct NjY4M2M4ZmM5ZTViLzEvdWFFa211aGI3V1JxaWNsYlVtTTM0RWpiTzVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9kYmU1MGEtMmNhMS00MzYyLWI1ZTctNjY4M2M4ZmM5ZTVi LzEvQ2U1LTRQZGJjV1NzZFpZWmZIOFNIV19LRlhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PVQMA0G CSqGSIb3DQEBCwUAA4IBAQAuJwVED3DmPgYEAfVidGcEU8zRj0maEXLtbG2eWK/e WK2Z4Ag50TwsvaQfh9P667uPjV1GkafWFUasAqeddZ5TNPqQILWYliktgwo70AnM lrDFj7t4fZrU9x5rqGfz1THX7CLrmoy0UPI8khTxEjxiK+jhGnc2WEWd/xatCAj2 xoBpHjQ6k8zR98hanqP2otPmx9R7tgoql2QPWV46nvJifX088j2E/p4ethf+wgQi YxZV8QNHC3mNY5BABT3v/2LbtydGOnFaHXG5yphExFTrZ1EISYNKrkL+1G45FCEb bVhjrY/3Ikcx2k4dnkaGdU//H2YRADerjs4XLKID+Vg9 -----END CERTIFICATE-----Generated at Sun Jan 25 15:07:43 2026 by rpki-client