This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/nuW6ML3TvJmSV9h0k4vMEIRWC5Q.roa File: nuW6ML3TvJmSV9h0k4vMEIRWC5Q.roa (raw, json) Hash identifier: msy2THWwVTMt/rAs3vNKJ6SLSzkdR429A7ghT9Iz+6Y= Subject key identifier: 9E:E5:BA:30:BD:D3:BC:99:92:57:D8:74:93:8B:CC:10:84:56:0B:94 Certificate issuer: /CN=044aacab9a49e143de68979ad156b42dabddde8c Certificate serial: 019B797EB16470C5E052E3942992C2C8D2FD Authority key identifier: 04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/nuW6ML3TvJmSV9h0k4vMEIRWC5Q.roa Signing time: Thu 01 Jan 2026 12:18:24 +0000 ROA not before: Thu 01 Jan 2026 12:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2200 IP address blocks: 2a07:2e40::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:b1:64:70:c5:e0:52:e3:94:29:92:c2:c8:d2:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=044aacab9a49e143de68979ad156b42dabddde8c Validity Not Before: Jan 1 12:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ee5ba30bdd3bc999257d874938bcc1084560b94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:15:3f:48:bc:80:43:e5:b9:77:1d:c8:05:51: cb:81:10:94:e4:4f:f2:7d:9e:44:e3:d1:a2:2c:4e: 25:30:5c:99:83:98:f6:08:9d:5b:47:d4:80:c0:31: d7:a6:94:75:20:fb:aa:78:aa:ef:6f:87:7f:45:a0: a3:d2:58:aa:ab:8b:81:48:88:8f:6d:97:87:4b:d4: 20:21:08:f5:5f:b3:52:de:ce:f1:be:86:4f:f8:ca: 5d:80:99:4f:ed:f9:4c:be:5b:fc:50:0e:c8:69:dd: cd:1b:0a:22:f6:a3:a4:65:7c:03:a2:88:53:43:88: 41:fc:37:e9:f4:48:a5:fd:76:87:ac:33:54:a9:a2: 30:0e:cf:1b:fa:73:60:c4:05:11:50:d5:03:df:75: e3:74:88:6c:83:9b:d0:76:9f:83:aa:3c:75:a0:74: 93:c1:6c:0a:29:cb:bd:33:ac:c8:2e:b2:a0:3b:3a: 8e:d3:99:16:77:e4:c1:78:70:32:b1:be:e5:d8:56: bc:ce:d3:33:2f:8f:a0:c9:69:3c:32:63:fc:08:7a: aa:8b:a3:63:cc:03:7d:2f:4a:1c:f7:7f:4c:b2:48: ea:65:aa:bf:7e:c9:57:be:1f:d6:27:ae:1d:1a:d3: ee:45:e3:0b:59:59:0f:8e:ad:cd:2e:ab:7b:35:71: 1e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:E5:BA:30:BD:D3:BC:99:92:57:D8:74:93:8B:CC:10:84:56:0B:94 X509v3 Authority Key Identifier: keyid:04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/nuW6ML3TvJmSV9h0k4vMEIRWC5Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:2e40::/29 Signature Algorithm: sha256WithRSAEncryption 4a:f6:db:96:28:30:37:2d:68:ad:99:5a:bb:08:fa:21:de:0c: e1:a8:62:ca:54:8e:e3:55:5e:af:4f:e9:d2:95:c9:4a:76:be: 44:45:69:5c:66:05:04:a0:ba:1f:aa:a9:e8:8a:15:e3:3a:51: 4d:74:0f:34:26:56:d6:27:3a:fb:d5:08:fe:d3:46:7d:d9:ba: 5b:dc:89:69:57:c1:1d:27:7e:5d:fb:ee:1a:d7:2c:28:bd:9d: 60:85:55:97:25:11:36:06:13:0a:f7:21:80:a4:cb:14:d4:57: a6:28:3a:66:7f:67:41:40:b8:8d:67:4a:a5:81:ab:05:79:d7: 3e:87:f0:3a:77:7e:37:68:c2:97:ee:9f:7c:52:62:8c:37:15: 96:c7:d2:af:7b:ea:e5:bb:ef:2a:1b:de:79:ef:e1:f8:eb:5d: 83:6f:0d:ac:fc:0a:eb:bd:b0:99:5e:6d:95:b8:2d:14:77:5c: 63:5e:96:67:3c:1c:97:7e:a0:f5:ca:1c:ef:e1:9b:40:eb:30: ce:c0:c9:fb:74:7f:e1:a9:5c:83:79:3c:09:5c:4e:41:56:43: eb:17:ab:17:c5:82:77:21:40:b9:38:7d:ef:b5:64:54:21:60: fc:b2:fa:e3:1f:d3:7f:6f:3a:56:0f:d9:ad:fe:eb:0d:44:41: a0:a9:1a:c0 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt5frFkcMXgUuOUKZLCyNL9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NGFhY2FiOWE0OWUxNDNkZTY4OTc5YWQxNTZiNDJkYWJk ZGRlOGMwHhcNMjYwMTAxMTIxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWU1YmEzMGJkZDNiYzk5OTI1N2Q4NzQ5MzhiY2MxMDg0NTYwYjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhU/SLyAQ+W5dx3IBVHLgRCU5E/y fZ5E49GiLE4lMFyZg5j2CJ1bR9SAwDHXppR1IPuqeKrvb4d/RaCj0liqq4uBSIiP bZeHS9QgIQj1X7NS3s7xvoZP+MpdgJlP7flMvlv8UA7Iad3NGwoi9qOkZXwDoohT Q4hB/Dfp9Eil/XaHrDNUqaIwDs8b+nNgxAURUNUD33XjdIhsg5vQdp+Dqjx1oHST wWwKKcu9M6zILrKgOzqO05kWd+TBeHAysb7l2Fa8ztMzL4+gyWk8MmP8CHqqi6Nj zAN9L0oc939MskjqZaq/fslXvh/WJ64dGtPuReMLWVkPjq3NLqt7NXEeewIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFJ7lujC907yZklfYdJOLzBCEVguUMB8GA1UdIwQY MBaAFARKrKuaSeFD3miXmtFWtC2r3d6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkVxc3E1cEo0VVBlYUplYTBWYTBMYXZkM293LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NmE3NGUtNGRiOC00ZmU5LTk4MDIt M2JiOTI2ODc2MDJjLzEvbnVXNk1MM1R2Sm1TVjloMGs0dk1FSVJXQzVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy84NmE3NGUtNGRiOC00ZmU5LTk4MDItM2JiOTI2ODc2MDJj LzEvQkVxc3E1cEo0VVBlYUplYTBWYTBMYXZkM293LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgcuQDAN BgkqhkiG9w0BAQsFAAOCAQEASvbbligwNy1orZlauwj6Id4M4ahiylSO41Ver0/p 0pXJSna+REVpXGYFBKC6H6qp6IoV4zpRTXQPNCZW1ic6+9UI/tNGfdm6W9yJaVfB HSd+XfvuGtcsKL2dYIVVlyURNgYTCvchgKTLFNRXpig6Zn9nQUC4jWdKpYGrBXnX PofwOnd+N2jCl+6ffFJijDcVlsfSr3vq5bvvKhveee/h+Otdg28NrPwK672wmV5t lbgtFHdcY16WZzwcl36g9coc7+GbQOswzsDJ+3R/4alcg3k8CVxOQVZD6xerF8WC dyFAuTh977VkVCFg/LL64x/Tf286Vg/Zrf7rDURBoKkawA== -----END CERTIFICATE-----Generated at Mon Jan 26 04:39:38 2026 by rpki-client