This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/1UL1UH5VWf5iBmhkr39qiLEi1_o.roa File: 1UL1UH5VWf5iBmhkr39qiLEi1_o.roa (raw, json) Hash identifier: l+Vqjkt1It1VhVaJI98sYGSd0cnUyAaFSxp89cfoOZk= Subject key identifier: D5:42:F5:50:7E:55:59:FE:62:06:68:64:AF:7F:6A:88:B1:22:D7:FA Certificate issuer: /CN=7b87f6b9119fa9dcd3e12e7e6bfb706dff978825 Certificate serial: 019BDB39E59C2570F75D7641415B32DD6C3B Authority key identifier: 7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/1UL1UH5VWf5iBmhkr39qiLEi1_o.roa Signing time: Tue 20 Jan 2026 11:46:03 +0000 ROA not before: Tue 20 Jan 2026 11:46:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51088 IP address blocks: 2a0b:3100:200::/48 maxlen: 48 2a0b:3100:200::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:db:39:e5:9c:25:70:f7:5d:76:41:41:5b:32:dd:6c:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b87f6b9119fa9dcd3e12e7e6bfb706dff978825 Validity Not Before: Jan 20 11:46:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d542f5507e5559fe62066864af7f6a88b122d7fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8f:5d:3d:b2:02:7f:dc:d5:b4:f5:5b:64:ab: 11:10:d8:67:75:09:51:b9:cd:8a:5e:bb:bb:1d:df: 01:d1:3e:dc:fe:d7:25:f9:1b:f2:8b:15:4c:4e:68: 93:76:7c:70:2c:73:81:a7:f4:4f:b3:3f:72:ff:c3: 42:ab:43:63:4f:6a:05:ad:29:a7:67:f5:4b:e7:0d: 21:2c:a3:3a:0c:09:f6:b7:c0:52:27:d7:eb:3e:1f: 04:be:0c:01:40:4b:ad:53:48:78:1b:ab:24:33:61: c1:ca:2b:52:0c:ee:c6:ba:e3:1d:45:f8:76:04:83: 18:94:3d:bc:3b:c8:13:41:26:32:2b:bd:05:59:9e: 59:4a:af:0d:57:c0:88:3e:a8:b0:38:08:2b:d1:df: fb:f6:d8:46:ba:1d:44:7b:35:dc:fa:de:74:fc:2d: e8:8b:00:3d:e0:5b:32:69:9f:42:b8:03:59:92:9e: 79:ff:e6:67:3b:e8:82:26:72:3b:ba:ba:54:fe:4b: 32:2a:46:11:67:d0:8f:d1:89:de:70:2f:b2:3c:6b: 54:6f:57:2a:12:96:de:6f:8f:76:eb:94:95:e9:72: d4:5d:d1:13:af:b3:74:bb:73:8d:f1:e6:bd:39:74: 4e:ba:97:79:57:c1:0a:9a:01:b7:a2:e7:83:de:8e: 84:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:42:F5:50:7E:55:59:FE:62:06:68:64:AF:7F:6A:88:B1:22:D7:FA X509v3 Authority Key Identifier: keyid:7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/1UL1UH5VWf5iBmhkr39qiLEi1_o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:3100:200::/48 Signature Algorithm: sha256WithRSAEncryption 36:e5:fc:59:72:cc:0e:2a:3b:d3:43:98:8c:d8:be:68:ba:11: a7:42:82:2b:29:e4:3c:e3:72:1c:8d:99:e1:a0:56:90:9e:10: 82:b9:f0:f1:85:45:df:8e:a7:fd:80:3f:e2:e2:b5:d7:c1:85: c3:23:d6:c4:ba:00:f3:9e:10:22:57:4d:06:ae:14:37:89:9a: 6e:e0:d9:f5:6e:52:da:3b:2d:38:07:7e:bd:7e:36:7b:5c:d4: 69:64:d5:24:47:7d:c7:c6:0b:54:66:b8:88:0c:12:4a:a0:a8: 83:8e:c3:f1:a9:f5:19:ca:db:66:be:9d:88:a9:f2:9e:16:11: 7f:65:57:f9:b8:fb:47:09:40:f6:c1:85:86:6a:88:70:b9:73: c4:60:6a:a7:30:21:f4:bc:12:2b:58:6a:49:66:fa:7f:9f:2a: cd:67:31:72:fc:fa:9e:1d:51:c6:51:8b:4d:8b:d4:83:39:1d: 29:84:67:f3:e0:f3:3e:46:23:0c:1d:28:a8:85:36:f3:fe:52: 18:84:1e:e8:64:02:5d:29:dc:11:fc:a8:1e:2b:57:89:a3:84: ca:6e:35:7a:c6:29:f4:55:42:2d:90:5b:bb:00:97:0e:30:e7: ed:5a:b6:63:4d:ea:ca:bc:9b:c2:53:4a:85:5a:d4:ab:30:e1: 83:03:27:83 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZvbOeWcJXD3XXZBQVsy3Ww7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiODdmNmI5MTE5ZmE5ZGNkM2UxMmU3ZTZiZmI3MDZkZmY5 Nzg4MjUwHhcNMjYwMTIwMTE0NjAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTQyZjU1MDdlNTU1OWZlNjIwNjY4NjRhZjdmNmE4OGIxMjJkN2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs49dPbICf9zVtPVbZKsRENhndQlR uc2KXru7Hd8B0T7c/tcl+RvyixVMTmiTdnxwLHOBp/RPsz9y/8NCq0NjT2oFrSmn Z/VL5w0hLKM6DAn2t8BSJ9frPh8EvgwBQEutU0h4G6skM2HByitSDO7GuuMdRfh2 BIMYlD28O8gTQSYyK70FWZ5ZSq8NV8CIPqiwOAgr0d/79thGuh1EezXc+t50/C3o iwA94FsyaZ9CuANZkp55/+ZnO+iCJnI7urpU/ksyKkYRZ9CP0YnecC+yPGtUb1cq Epbeb49265SV6XLUXdETr7N0u3ON8ea9OXROupd5V8EKmgG3oueD3o6EuwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNVC9VB+VVn+YgZoZK9/aoixItf6MB8GA1UdIwQY MBaAFHuH9rkRn6nc0+Eufmv7cG3/l4glMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTRmMnVSR2ZxZHpUNFM1LWFfdHdiZi1YaUNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZjNhYjEtNTk1OS00NWE4LWJjMGYt ZDc4NTE0ZTllODEyLzEvMVVMMVVINVZXZjVpQm1oa3IzOXFpTEVpMV9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zZjNhYjEtNTk1OS00NWE4LWJjMGYtZDc4NTE0ZTllODEy LzEvZTRmMnVSR2ZxZHpUNFM1LWFfdHdiZi1YaUNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgsxAAIA MA0GCSqGSIb3DQEBCwUAA4IBAQA25fxZcswOKjvTQ5iM2L5ouhGnQoIrKeQ843Ic jZnhoFaQnhCCufDxhUXfjqf9gD/i4rXXwYXDI9bEugDznhAiV00GrhQ3iZpu4Nn1 blLaOy04B369fjZ7XNRpZNUkR33HxgtUZriIDBJKoKiDjsPxqfUZyttmvp2IqfKe FhF/ZVf5uPtHCUD2wYWGaohwuXPEYGqnMCH0vBIrWGpJZvp/nyrNZzFy/PqeHVHG UYtNi9SDOR0phGfz4PM+RiMMHSiohTbz/lIYhB7oZAJdKdwR/KgeK1eJo4TKbjV6 xin0VUItkFu7AJcOMOftWrZjTerKvJvCU0qFWtSrMOGDAyeD -----END CERTIFICATE-----Generated at Sun Jan 25 16:39:39 2026 by rpki-client