This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/1-uNAZHX6ze0dF7CyKnflQ3BVW2c.roa File: 1-uNAZHX6ze0dF7CyKnflQ3BVW2c.roa (raw, json) Hash identifier: DghtjqwzV9SP1cuZUpSR5xMtmbQ0rFZw8ehQ3/eY7W0= Subject key identifier: FA:E3:40:64:75:FA:CD:ED:1D:17:B0:B2:2A:77:E5:43:70:55:5B:67 Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e Certificate serial: 019B7C1318823B662513741474680328AE5B Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/1-uNAZHX6ze0dF7CyKnflQ3BVW2c.roa Signing time: Fri 02 Jan 2026 00:19:44 +0000 ROA not before: Fri 02 Jan 2026 00:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 134196 IP address blocks: 2a0c:f480::/29 maxlen: 29 2a0d:2480::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:18:82:3b:66:25:13:74:14:74:68:03:28:ae:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c089423af1be03027196d1f81df22992978cda6e Validity Not Before: Jan 2 00:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fae3406475facded1d17b0b22a77e54370555b67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:cc:51:8f:65:96:11:0a:32:05:8a:d4:4b:15: 8b:a0:f2:55:2e:a3:5e:33:c7:8a:f6:52:f1:c1:a2: 29:bb:49:f7:fd:5f:49:24:a7:2d:04:60:22:ec:aa: 6d:f9:2e:9d:f8:83:40:5f:f9:d1:54:8f:2d:2e:f2: a2:db:a8:d9:dd:c8:fd:97:c6:66:a9:9c:35:f5:ca: b1:79:11:0e:dd:96:22:bc:10:bf:e8:24:8e:05:c4: f4:23:04:ee:57:bd:a2:3a:07:80:1e:b2:d6:5b:cf: d3:33:8a:84:0a:3b:63:d8:41:d5:b0:e4:1d:0f:92: 70:20:78:a1:f8:f5:e2:2a:1a:8d:82:29:b6:b1:0f: 85:a6:79:b9:db:f7:1c:fc:eb:cd:f7:33:44:14:21: ba:fa:3e:53:3f:45:ca:08:91:51:fc:7d:80:20:f6: cc:30:ce:28:9a:5b:c4:48:5e:ad:70:14:3d:dc:8a: 19:9c:d2:75:40:1a:8b:97:a9:d5:a7:35:c2:09:5e: 00:11:6b:f2:66:3a:42:cd:9c:14:46:b2:92:bf:c3: 49:b9:17:75:35:3e:ca:1b:b6:6c:67:5a:15:cb:d8: 36:db:98:87:ea:40:0a:2e:0a:f7:43:8d:61:be:d1: 32:a1:25:0f:cb:aa:2d:cf:80:2d:ae:31:f1:02:85: 5c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:E3:40:64:75:FA:CD:ED:1D:17:B0:B2:2A:77:E5:43:70:55:5B:67 X509v3 Authority Key Identifier: keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/1-uNAZHX6ze0dF7CyKnflQ3BVW2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:f480::/29 2a0d:2480::/29 Signature Algorithm: sha256WithRSAEncryption 07:a9:a1:dd:92:50:73:cf:41:0e:38:e6:2d:79:c3:16:71:7a: 8d:5a:be:12:c5:9b:d8:43:20:49:d3:a3:21:0e:17:84:93:7b: 24:90:57:55:b9:56:06:85:30:30:1b:39:6c:7d:09:65:6b:58: 9e:6a:fc:4c:14:f7:63:86:52:f6:23:ad:ef:8a:f3:63:34:be: 92:2f:7f:50:d4:4c:f7:da:85:24:ef:40:6a:bf:22:a3:97:58: b1:f0:82:08:fd:88:37:58:1c:e6:f5:ba:ab:5f:52:a9:09:34: 27:6e:c1:f2:ca:e9:98:46:f0:e1:db:b6:59:f0:1e:f0:50:c6: 81:8c:9d:a8:33:66:fe:01:36:ab:ba:f7:9d:46:8d:89:a6:00: 7e:2f:e7:1b:20:bd:7d:f7:96:29:06:18:50:72:c5:22:0c:64: 69:ed:67:bb:b8:1c:ef:fa:56:09:1b:de:cc:2d:f5:4a:72:44: 2c:ea:a7:97:7b:2f:60:30:91:a4:54:f2:91:4b:e0:73:d8:f2: 47:df:b5:44:dc:cb:de:62:e7:ee:c1:0f:48:11:39:12:d4:9e: 5a:18:f3:8d:db:75:1a:78:ea:c6:01:1f:d9:1f:14:95:ac:29: ae:c4:22:93:f6:7e:6f:cf:75:8a:36:94:63:7e:f5:40:db:6d: ef:ba:26:34 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgISAZt8ExiCO2YlE3QUdGgDKK5bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwODk0MjNhZjFiZTAzMDI3MTk2ZDFmODFkZjIyOTkyOTc4 Y2RhNmUwHhcNMjYwMTAyMDAxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWUzNDA2NDc1ZmFjZGVkMWQxN2IwYjIyYTc3ZTU0MzcwNTU1YjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sxRj2WWEQoyBYrUSxWLoPJVLqNe M8eK9lLxwaIpu0n3/V9JJKctBGAi7Kpt+S6d+INAX/nRVI8tLvKi26jZ3cj9l8Zm qZw19cqxeREO3ZYivBC/6CSOBcT0IwTuV72iOgeAHrLWW8/TM4qECjtj2EHVsOQd D5JwIHih+PXiKhqNgim2sQ+Fpnm52/cc/OvN9zNEFCG6+j5TP0XKCJFR/H2AIPbM MM4omlvESF6tcBQ93IoZnNJ1QBqLl6nVpzXCCV4AEWvyZjpCzZwURrKSv8NJuRd1 NT7KG7ZsZ1oVy9g225iH6kAKLgr3Q41hvtEyoSUPy6otz4AtrjHxAoVcsQIDAQAB o4ICEjCCAg4wHQYDVR0OBBYEFPrjQGR1+s3tHRewsip35UNwVVtnMB8GA1UdIwQY MBaAFMCJQjrxvgMCcZbR+B3yKZKXjNpuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgt NjUzMzJiNDdmNWViLzEvMS11TkFaSFg2emUwZEY3Q3lLbmZsUTNCVlcyYy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMjcvZGMyOTEyLWM3YjAtNGRmNC05YWE4LTY1MzMyYjQ3ZjVl Yi8xL3dJbENPdkctQXdKeGx0SDRIZklwa3BlTTJtNC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQYMBYwFAQCAAIwDgMFAyoM9IAD BQMqDSSAMA0GCSqGSIb3DQEBCwUAA4IBAQAHqaHdklBzz0EOOOYtecMWcXqNWr4S xZvYQyBJ06MhDheEk3skkFdVuVYGhTAwGzlsfQlla1ieavxMFPdjhlL2I63vivNj NL6SL39Q1Ez32oUk70BqvyKjl1ix8III/Yg3WBzm9bqrX1KpCTQnbsHyyumYRvDh 27ZZ8B7wUMaBjJ2oM2b+ATaruvedRo2JpgB+L+cbIL1995YpBhhQcsUiDGRp7We7 uBzv+lYJG97MLfVKckQs6qeXey9gMJGkVPKRS+Bz2PJH37VE3MveYufuwQ9IETkS 1J5aGPON23UaeOrGAR/ZHxSVrCmuxCKT9n5vz3WKNpRjfvVA223vuiY0 -----END CERTIFICATE-----Generated at Sun Jan 25 19:17:36 2026 by rpki-client