This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/9u6sJcqLBYXf8bJ4qh9tJWsXs9o.roa File: 9u6sJcqLBYXf8bJ4qh9tJWsXs9o.roa (raw, json) Hash identifier: DQ64qJQDQQ2NHmRxc6iO8PoA/9NNcc5mJA3wo6ZxOo8= Subject key identifier: F6:EE:AC:25:CA:8B:05:85:DF:F1:B2:78:AA:1F:6D:25:6B:17:B3:DA Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Certificate serial: 019B7758EF6D1D221553268FF8777EDFC611 Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/9u6sJcqLBYXf8bJ4qh9tJWsXs9o.roa Signing time: Thu 01 Jan 2026 02:17:55 +0000 ROA not before: Thu 01 Jan 2026 02:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29007 IP address blocks: 5.226.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:ef:6d:1d:22:15:53:26:8f:f8:77:7e:df:c6:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Validity Not Before: Jan 1 02:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6eeac25ca8b0585dff1b278aa1f6d256b17b3da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:50:87:45:40:98:98:2f:12:f3:08:7d:84:6a: eb:d0:cb:27:d1:16:2e:d4:64:67:8e:22:a0:c5:c6: bc:57:79:8d:93:33:cf:c8:66:3b:f9:43:85:35:f7: 93:5d:eb:b6:13:0a:92:d3:29:5f:51:66:6a:c5:75: ce:61:bb:fb:19:d8:91:ed:08:d2:2e:20:94:3f:56: 4c:20:35:27:3f:3d:29:5c:77:86:1b:35:ec:3a:43: 02:3a:d0:0c:80:f3:e8:0f:a5:3e:b7:9f:16:bb:f6: b1:13:b0:c8:73:a4:26:7e:7e:06:56:6a:43:40:8e: fa:34:bc:9f:50:a8:2e:b6:7c:73:22:16:a0:0a:dd: 83:49:87:20:f7:fb:ee:27:dd:00:be:17:e9:df:bb: d3:11:21:64:57:4e:86:15:d9:e4:11:96:22:f0:11: c7:4b:7f:7f:55:a5:b2:1b:38:16:af:45:a8:b4:0c: e2:98:52:46:39:d0:4a:53:31:e0:e0:9d:a9:90:c5: a3:cf:d8:95:c5:c2:5d:3c:15:1f:c6:bc:69:f6:b3: 5a:c0:ff:b5:30:c3:bb:9d:2d:c3:1b:fe:f3:c2:b7: f9:1e:a5:f0:87:a0:43:f0:76:5b:70:ac:51:e7:a2: a7:0c:0e:81:54:45:a1:2b:47:d4:54:b2:a9:08:30: 2c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:EE:AC:25:CA:8B:05:85:DF:F1:B2:78:AA:1F:6D:25:6B:17:B3:DA X509v3 Authority Key Identifier: keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/9u6sJcqLBYXf8bJ4qh9tJWsXs9o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.226.128.0/22 Signature Algorithm: sha256WithRSAEncryption 0a:53:be:a8:8b:a6:aa:c2:63:2c:9e:46:9d:3e:b3:e3:cd:78: 60:60:a2:f5:34:62:64:2d:89:18:41:90:b2:35:ba:48:f8:45: 83:79:3b:fb:a5:d8:da:db:04:b0:2c:b8:16:f8:45:21:fa:af: 10:4b:91:bb:ac:38:4c:6e:57:53:b6:2c:10:14:d0:cc:86:1d: b3:d4:44:ad:76:91:57:76:8f:fb:e5:41:9f:43:f0:3d:a4:a8: 35:25:17:07:95:41:92:66:83:11:62:aa:3a:ce:85:e4:17:d7: be:33:74:6a:c7:c4:ce:a0:71:6a:63:66:c8:c6:da:ed:58:be: 83:86:af:f9:9b:39:c5:5a:5a:66:4f:2f:30:cd:f1:55:17:c3: ba:58:31:ed:53:3a:ff:6f:3f:0d:65:04:51:42:db:74:89:f1: 94:8b:da:03:6f:d4:5c:a9:b4:e2:00:d5:be:e9:77:ee:d4:76: 61:f4:9c:7c:07:a8:31:79:41:b1:06:4f:c6:bd:86:4d:8c:a6: e4:4b:69:1d:78:dc:63:47:dd:bc:9a:ca:bc:9e:23:cc:5b:4d: a5:84:81:be:d5:a5:75:92:0c:45:a4:7b:a0:a1:f2:9b:e3:d2: 39:f9:c9:b9:1b:58:af:39:76:72:4d:c7:bc:73:16:39:fe:a6: d4:0b:35:6e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WO9tHSIVUyaP+Hd+38YRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx YjM2ZTgwHhcNMjYwMTAxMDIxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmVlYWMyNWNhOGIwNTg1ZGZmMWIyNzhhYTFmNmQyNTZiMTdiM2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklCHRUCYmC8S8wh9hGrr0Msn0RYu 1GRnjiKgxca8V3mNkzPPyGY7+UOFNfeTXeu2EwqS0ylfUWZqxXXOYbv7GdiR7QjS LiCUP1ZMIDUnPz0pXHeGGzXsOkMCOtAMgPPoD6U+t58Wu/axE7DIc6Qmfn4GVmpD QI76NLyfUKgutnxzIhagCt2DSYcg9/vuJ90Avhfp37vTESFkV06GFdnkEZYi8BHH S39/VaWyGzgWr0WotAzimFJGOdBKUzHg4J2pkMWjz9iVxcJdPBUfxrxp9rNawP+1 MMO7nS3DG/7zwrf5HqXwh6BD8HZbcKxR56KnDA6BVEWhK0fUVLKpCDAsrQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPburCXKiwWF3/GyeKofbSVrF7PaMB8GA1UdIwQY MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt MDI0YjE2NTVjMjQ3LzEvOXU2c0pjcUxCWVhmOGJKNHFoOXRKV3NYczlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3 LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBeKAMA0G CSqGSIb3DQEBCwUAA4IBAQAKU76oi6aqwmMsnkadPrPjzXhgYKL1NGJkLYkYQZCy NbpI+EWDeTv7pdja2wSwLLgW+EUh+q8QS5G7rDhMbldTtiwQFNDMhh2z1EStdpFX do/75UGfQ/A9pKg1JRcHlUGSZoMRYqo6zoXkF9e+M3Rqx8TOoHFqY2bIxtrtWL6D hq/5mznFWlpmTy8wzfFVF8O6WDHtUzr/bz8NZQRRQtt0ifGUi9oDb9RcqbTiANW+ 6Xfu1HZh9Jx8B6gxeUGxBk/GvYZNjKbkS2kdeNxjR928msq8niPMW02lhIG+1aV1 kgxFpHugofKb49I5+cm5G1ivOXZyTce8cxY5/qbUCzVu -----END CERTIFICATE-----Generated at Sun Jan 25 20:29:47 2026 by rpki-client