This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/NUXllTqSdpN4oj-91enqhPaxn_g.roa File: NUXllTqSdpN4oj-91enqhPaxn_g.roa (raw, json) Hash identifier: zUBN88PFCT58EDOaUR/KD8LNv3qUQqSVC0r5OJ8VAzc= Subject key identifier: 35:45:E5:95:3A:92:76:93:78:A2:3F:BD:D5:E9:EA:84:F6:B1:9F:F8 Certificate issuer: /CN=615758aea479d4f32a9e89e9808f30edfc23b2e7 Certificate serial: 019BE0EE6B2A50A7119897E568735C8278ED Authority key identifier: 61:57:58:AE:A4:79:D4:F3:2A:9E:89:E9:80:8F:30:ED:FC:23:B2:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YVdYrqR51PMqnonpgI8w7fwjsuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/NUXllTqSdpN4oj-91enqhPaxn_g.roa Signing time: Wed 21 Jan 2026 14:21:19 +0000 ROA not before: Wed 21 Jan 2026 14:21:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13335 IP address blocks: 2a07:8240::/48 maxlen: 48 2a07:8240:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.mft rsync://rpki.ripe.net/repository/DEFAULT/YVdYrqR51PMqnonpgI8w7fwjsuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:ee:6b:2a:50:a7:11:98:97:e5:68:73:5c:82:78:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615758aea479d4f32a9e89e9808f30edfc23b2e7 Validity Not Before: Jan 21 14:21:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3545e5953a92769378a23fbdd5e9ea84f6b19ff8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3e:54:42:1b:1d:a0:64:73:fb:de:bd:49:f5: a5:36:ef:a4:47:58:97:1f:eb:6c:b1:11:5e:66:6e: a7:a8:8a:44:32:99:69:bd:2f:be:fb:6d:fa:e6:08: 33:05:96:b0:ef:3f:f7:6c:3f:c0:50:cb:1f:3f:4f: 2f:7c:78:27:d2:9a:aa:75:c2:54:d0:8f:a5:60:81: 62:55:a8:9b:0b:d7:f5:db:3a:44:54:b7:50:04:49: 6a:0f:2a:8a:7c:56:47:4d:29:d5:f6:40:5e:97:78: e8:f8:6e:46:f0:14:45:4e:cd:5f:20:f0:ad:bd:d5: c4:99:f5:89:b1:08:bf:5c:bd:08:52:31:c2:53:24: d0:38:e1:7d:c8:2b:13:34:7c:96:36:14:54:e0:5b: 11:bf:ff:90:fe:ff:a8:24:38:41:c5:6a:74:69:4a: 79:c5:7a:ce:fb:59:df:c2:1b:c6:48:53:ec:07:a1: 28:fe:db:30:75:ac:3c:63:a5:5e:a5:2c:50:4e:8d: 9d:82:f3:24:fe:fb:99:a2:2b:ee:79:27:27:43:a7: 5c:e7:71:bf:6c:82:aa:cb:4e:02:bd:e2:71:ed:0e: b8:16:1a:4f:8d:05:84:bb:6c:24:22:d2:2f:46:86: 1f:9c:f9:17:69:ee:25:f2:b9:87:b5:81:ea:6b:6c: b0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:45:E5:95:3A:92:76:93:78:A2:3F:BD:D5:E9:EA:84:F6:B1:9F:F8 X509v3 Authority Key Identifier: keyid:61:57:58:AE:A4:79:D4:F3:2A:9E:89:E9:80:8F:30:ED:FC:23:B2:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YVdYrqR51PMqnonpgI8w7fwjsuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/NUXllTqSdpN4oj-91enqhPaxn_g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:8240::/47 Signature Algorithm: sha256WithRSAEncryption 02:fa:53:cc:01:70:30:b0:03:01:07:c7:4d:0f:a2:b8:65:e0: 52:5b:52:99:ba:69:e8:1b:91:6d:1f:c3:35:40:d5:a7:0f:28: a7:06:ee:e3:9a:bb:48:c7:04:18:48:d2:f8:b5:64:22:6d:9d: 09:e1:f4:b3:cd:88:f7:c9:40:2e:80:5e:9e:b8:d3:19:fe:8f: 43:ee:3f:ed:2b:35:ad:45:8c:e4:d5:0d:64:8c:2c:49:65:7a: 61:24:bd:68:22:65:dd:e9:56:d9:e9:f1:ab:29:a2:a1:ba:d4: a7:33:f9:8b:69:f5:58:87:b0:fa:af:8b:9f:4e:f5:d4:17:8b: bf:4c:1c:b4:3e:f5:0e:30:cd:a4:6f:90:af:6d:a6:3e:f4:1d: 41:07:c8:22:e6:a8:3a:be:85:69:6b:41:f8:31:5b:77:f1:9a: b5:c7:06:84:7d:54:c2:28:c1:5a:ba:53:27:85:48:16:dd:82: 5f:ac:13:ee:b7:45:78:c3:64:56:9f:27:88:1d:3b:69:68:c9: 17:87:f1:36:26:db:1e:90:89:76:ee:33:d0:ed:d5:1c:ee:1e: b0:23:32:d8:c9:cf:f0:11:42:38:97:e1:d7:a4:ce:e9:f0:81: e9:ee:33:98:a3:6f:df:89:0e:52:2c:c7:0d:ac:8a:24:0e:c9: e3:ee:ff:5a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZvg7msqUKcRmJflaHNcgnjtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNTc1OGFlYTQ3OWQ0ZjMyYTllODllOTgwOGYzMGVkZmMy M2IyZTcwHhcNMjYwMTIxMTQyMTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTQ1ZTU5NTNhOTI3NjkzNzhhMjNmYmRkNWU5ZWE4NGY2YjE5ZmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvT5UQhsdoGRz+969SfWlNu+kR1iX H+tssRFeZm6nqIpEMplpvS+++2365ggzBZaw7z/3bD/AUMsfP08vfHgn0pqqdcJU 0I+lYIFiVaibC9f12zpEVLdQBElqDyqKfFZHTSnV9kBel3jo+G5G8BRFTs1fIPCt vdXEmfWJsQi/XL0IUjHCUyTQOOF9yCsTNHyWNhRU4FsRv/+Q/v+oJDhBxWp0aUp5 xXrO+1nfwhvGSFPsB6Eo/tswdaw8Y6VepSxQTo2dgvMk/vuZoivueScnQ6dc53G/ bIKqy04CveJx7Q64FhpPjQWEu2wkItIvRoYfnPkXae4l8rmHtYHqa2ywlQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDVF5ZU6knaTeKI/vdXp6oT2sZ/4MB8GA1UdIwQY MBaAFGFXWK6kedTzKp6J6YCPMO38I7LnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVZkWXJxUjUxUE1xbm9ucGdJOHc3Zndqc3VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9hMWM5NWYtZjNlMy00NTMxLWE0NjUt ZTkwZDk4MzBlOGM1LzEvTlVYbGxUcVNkcE40b2otOTFlbnFoUGF4bl9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9hMWM5NWYtZjNlMy00NTMxLWE0NjUtZTkwZDk4MzBlOGM1 LzEvWVZkWXJxUjUxUE1xbm9ucGdJOHc3Zndqc3VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKgeCQAAA MA0GCSqGSIb3DQEBCwUAA4IBAQAC+lPMAXAwsAMBB8dND6K4ZeBSW1KZumnoG5Ft H8M1QNWnDyinBu7jmrtIxwQYSNL4tWQibZ0J4fSzzYj3yUAugF6euNMZ/o9D7j/t KzWtRYzk1Q1kjCxJZXphJL1oImXd6VbZ6fGrKaKhutSnM/mLafVYh7D6r4ufTvXU F4u/TBy0PvUOMM2kb5CvbaY+9B1BB8gi5qg6voVpa0H4MVt38Zq1xwaEfVTCKMFa ulMnhUgW3YJfrBPut0V4w2RWnyeIHTtpaMkXh/E2JtsekIl27jPQ7dUc7h6wIzLY yc/wEUI4l+HXpM7p8IHp7jOYo2/fiQ5SLMcNrIokDsnj7v9a -----END CERTIFICATE-----Generated at Sun Jan 25 09:03:52 2026 by rpki-client