This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/nUrWqoPlEcK0XKJOG-oMfsZtnp8.roa File: nUrWqoPlEcK0XKJOG-oMfsZtnp8.roa (raw, json) Hash identifier: ybZD4RQkjzxlQtQy6MswWNgOU2zvBWHPKmFz1vKMzKg= Subject key identifier: 9D:4A:D6:AA:83:E5:11:C2:B4:5C:A2:4E:1B:EA:0C:7E:C6:6D:9E:9F Certificate issuer: /CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee Certificate serial: 019B797F2E9273813A9CCF44249FB65796DB Authority key identifier: 2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/nUrWqoPlEcK0XKJOG-oMfsZtnp8.roa Signing time: Thu 01 Jan 2026 12:18:56 +0000 ROA not before: Thu 01 Jan 2026 12:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25057 IP address blocks: 2a02:e5e::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:2e:92:73:81:3a:9c:cf:44:24:9f:b6:57:96:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee Validity Not Before: Jan 1 12:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d4ad6aa83e511c2b45ca24e1bea0c7ec66d9e9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:df:91:18:cf:97:f4:fe:85:41:9c:8b:25:29: ed:b4:14:b4:1a:8d:ff:88:f2:69:d2:1e:ee:66:19: b7:55:4a:1e:6d:41:63:6c:7b:12:9b:21:a7:a2:e3: 30:79:e9:60:d4:2b:93:2b:aa:fc:99:44:3d:83:c8: 50:ff:0d:13:e5:cb:60:ba:6a:d5:38:ba:7b:1d:72: bf:d8:9c:b5:86:1f:7b:6f:0f:d5:3f:c9:44:14:97: e2:d7:ec:42:6f:16:82:49:d9:9d:47:32:46:8d:d7: aa:36:0f:f1:50:98:14:79:73:fd:2e:c2:31:89:44: e1:ef:ba:7e:5b:99:98:0c:03:34:03:0b:f8:7e:c6: c2:a6:86:c9:47:51:7c:27:bf:c7:08:da:7d:9a:c6: e9:c4:74:2b:5e:84:db:e5:80:c0:db:e6:e3:0d:9d: 3f:fd:31:ab:e8:b4:e9:8b:03:88:0b:1d:c0:0a:dd: 6e:6b:03:14:29:2c:b4:97:c6:64:08:0d:df:78:d3: 7f:ef:b3:af:bc:46:6c:f7:8d:17:ff:46:ff:f6:8f: 8e:99:de:2e:e0:61:a6:68:0f:60:01:7c:99:85:9c: b6:f3:c5:3a:ab:ac:11:e6:a3:15:72:e3:c7:32:bd: 7e:fc:a8:9c:63:79:8f:2d:f9:5e:01:2e:cb:a9:98: 6e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:4A:D6:AA:83:E5:11:C2:B4:5C:A2:4E:1B:EA:0C:7E:C6:6D:9E:9F X509v3 Authority Key Identifier: keyid:2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/nUrWqoPlEcK0XKJOG-oMfsZtnp8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:e5e::/32 Signature Algorithm: sha256WithRSAEncryption 6a:d6:1c:66:1e:25:d5:d8:f0:f7:38:bd:96:07:5f:8d:46:5a: 9d:d6:93:ab:49:2a:8a:48:44:d4:d9:45:71:36:18:56:8d:c9: 08:23:d4:29:9c:53:10:08:ad:a3:bd:96:89:df:33:5d:97:00: 21:df:f5:3f:68:4e:0a:cf:5e:08:bf:ba:61:5c:8e:12:62:00: cf:c4:b0:b4:26:1f:ae:83:16:24:fa:5f:ca:1c:b2:a8:7d:fc: 2d:f2:ff:49:e1:6a:61:b6:9d:24:16:ef:81:af:41:f0:95:3f: 84:82:96:a9:e7:68:66:cb:0d:87:48:14:30:e7:04:ca:60:25: 52:91:81:f4:48:f7:66:76:4e:04:88:a6:a1:4f:7d:20:04:4f: 83:9f:07:44:49:ad:84:a0:30:a9:1c:28:db:32:05:fa:a5:ca: 5f:93:12:a9:f9:18:56:ff:c4:c2:c7:c2:6f:3b:2a:9c:63:34: 2f:e6:2f:65:fd:65:66:23:73:e8:c6:db:aa:b0:c6:ae:2b:af: 9e:a0:20:06:7c:b4:1e:50:38:8b:c8:92:7c:c1:dc:e9:93:f1: 7b:c3:6b:bb:8d:94:68:5a:6b:dc:65:f7:c8:02:58:04:f3:16: e5:57:ea:b0:6c:a9:cc:3d:94:91:7e:13:85:eb:4e:88:39:f4: 32:4e:7f:db -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt5fy6Sc4E6nM9EJJ+2V5bbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkOWUzMWM5MDI5ZWU0NGJkNjgxYjUxNTMzMDMzNWM2YTFj ZmRlZWUwHhcNMjYwMTAxMTIxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDRhZDZhYTgzZTUxMWMyYjQ1Y2EyNGUxYmVhMGM3ZWM2NmQ5ZTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnN+RGM+X9P6FQZyLJSnttBS0Go3/ iPJp0h7uZhm3VUoebUFjbHsSmyGnouMweelg1CuTK6r8mUQ9g8hQ/w0T5ctgumrV OLp7HXK/2Jy1hh97bw/VP8lEFJfi1+xCbxaCSdmdRzJGjdeqNg/xUJgUeXP9LsIx iUTh77p+W5mYDAM0Awv4fsbCpobJR1F8J7/HCNp9msbpxHQrXoTb5YDA2+bjDZ0/ /TGr6LTpiwOICx3ACt1uawMUKSy0l8ZkCA3feNN/77OvvEZs940X/0b/9o+Omd4u 4GGmaA9gAXyZhZy288U6q6wR5qMVcuPHMr1+/KicY3mPLfleAS7LqZhuZQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFJ1K1qqD5RHCtFyiThvqDH7GbZ6fMB8GA1UdIwQY MBaAFC2eMckCnuRL1oG1FTMDNcahz97uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFo0eHlRS2U1RXZXZ2JVVk13TTF4cUhQM3U0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8xNWQ4OTYtMmY2OS00Njk3LWE2ZmMt MDhkYTY2NTJhODY3LzEvblVyV3FvUGxFY0swWEtKT0ctb01mc1p0bnA4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi8xNWQ4OTYtMmY2OS00Njk3LWE2ZmMtMDhkYTY2NTJhODY3 LzEvTFo0eHlRS2U1RXZXZ2JVVk13TTF4cUhQM3U0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgIOXjAN BgkqhkiG9w0BAQsFAAOCAQEAatYcZh4l1djw9zi9lgdfjUZandaTq0kqikhE1NlF cTYYVo3JCCPUKZxTEAito72Wid8zXZcAId/1P2hOCs9eCL+6YVyOEmIAz8SwtCYf roMWJPpfyhyyqH38LfL/SeFqYbadJBbvga9B8JU/hIKWqedoZssNh0gUMOcEymAl UpGB9Ej3ZnZOBIimoU99IARPg58HREmthKAwqRwo2zIF+qXKX5MSqfkYVv/EwsfC bzsqnGM0L+YvZf1lZiNz6MbbqrDGriuvnqAgBny0HlA4i8iSfMHc6ZPxe8Nru42U aFpr3GX3yAJYBPMW5VfqsGypzD2UkX4ThetOiDn0Mk5/2w== -----END CERTIFICATE-----Generated at Mon Jan 26 01:15:54 2026 by rpki-client