This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/wU7UXJTytHy3PiMHcD7sGscj8UU.roa File: wU7UXJTytHy3PiMHcD7sGscj8UU.roa (raw, json) Hash identifier: +SsUnX48TKNad5n7G2zrkmhLQEecIJqG1W5xpOPLtwE= Subject key identifier: C1:4E:D4:5C:94:F2:B4:7C:B7:3E:23:07:70:3E:EC:1A:C7:23:F1:45 Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Certificate serial: 019B7EA65C477711F3754C882AF910BCFD2B Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/wU7UXJTytHy3PiMHcD7sGscj8UU.roa Signing time: Fri 02 Jan 2026 12:19:50 +0000 ROA not before: Fri 02 Jan 2026 12:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 133944 IP address blocks: 2a0d:db00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:5c:47:77:11:f3:75:4c:88:2a:f9:10:bc:fd:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Validity Not Before: Jan 2 12:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c14ed45c94f2b47cb73e2307703eec1ac723f145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1e:4d:04:70:65:ac:33:ee:e9:0a:cb:00:16: 56:99:8f:6e:94:73:88:14:17:5d:4d:79:0b:bd:1b: a4:f3:5f:cb:94:bf:de:b7:28:f7:f9:a8:71:43:d7: 30:ba:e7:ac:d6:e9:e1:2b:10:f0:41:58:55:79:60: 3e:f9:9a:29:04:32:c6:b2:74:14:18:4d:b2:5e:49: b1:85:93:56:14:0a:6e:f3:f6:5d:6a:f3:93:02:93: 64:66:f8:cc:fb:fb:06:8e:a2:2c:fd:65:a5:83:1a: d6:6c:25:38:2e:ea:79:8e:fb:91:b1:2a:51:0a:f7: dc:a2:69:39:f3:b8:a2:42:1c:86:aa:e6:e5:8e:ea: 8f:40:cf:f5:35:f1:f3:7d:f3:98:94:f6:d7:71:b0: 7e:79:44:2f:0b:15:1d:89:48:a7:75:4a:71:31:aa: 17:41:7c:c7:f5:3a:00:f6:fb:82:31:ea:67:e4:62: 57:3c:39:32:fd:8b:82:0c:4d:50:30:d1:d7:6e:51: 0c:07:79:1e:cd:12:68:a3:ec:12:ac:a9:a7:c9:31: 70:a4:dc:b4:5f:3c:94:fb:7a:e6:f6:7f:ab:4f:fd: 11:fa:f6:10:b4:11:f2:da:97:63:be:f0:a7:4d:d7: dd:d8:d8:32:eb:cc:cf:39:59:db:ce:83:d7:62:cd: fe:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:4E:D4:5C:94:F2:B4:7C:B7:3E:23:07:70:3E:EC:1A:C7:23:F1:45 X509v3 Authority Key Identifier: keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/wU7UXJTytHy3PiMHcD7sGscj8UU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:db00::/29 Signature Algorithm: sha256WithRSAEncryption 62:85:61:fc:8f:8c:7b:24:1c:54:50:bd:9f:08:50:d2:35:ca: ee:9e:7b:9d:df:f9:34:37:ed:5d:23:2d:8d:f7:81:3c:c9:13: 23:ae:a5:4b:aa:b9:ca:11:cf:43:32:35:66:b0:33:30:22:cb: df:e3:4e:5f:12:b5:d6:66:33:83:0b:2a:29:7a:3b:7a:55:02: e1:fc:30:09:af:3e:9e:22:fb:30:8d:12:df:55:e6:d5:28:a7: 15:cf:59:9f:9a:ad:ee:af:29:37:93:e3:30:5c:fa:94:54:57: 8d:5b:cb:94:8d:fc:10:8c:f8:59:77:d9:b0:f1:d5:f1:c1:6c: 77:09:15:19:42:82:da:a9:1d:28:c9:cd:2a:db:ef:49:bd:04: dc:b8:7f:45:fa:ef:29:48:c6:5f:db:3c:08:53:9a:b5:3e:01: ea:ad:81:54:8f:b9:56:d9:a8:ed:5c:2c:7b:b3:2f:cf:ae:ea: e3:9e:eb:47:fe:64:16:27:5b:e4:ae:e7:eb:e5:aa:40:1a:39: c9:f1:a1:36:8e:88:ae:fd:b4:a8:3e:0e:28:62:6c:33:db:ed: 26:44:22:f0:17:e7:12:13:d4:1e:4b:5b:8e:c8:bd:5a:a8:b1: 2f:a1:57:f2:9d:a5:7d:6e:da:a8:3c:73:f1:5e:ad:c5:1f:3b: 01:57:79:d9 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+plxHdxHzdUyIKvkQvP0rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjYzQ3OGRkOWNjZDYxNjJmODI0ODhhYzZmYzUwYzIxZDM2 OWYyYTAwHhcNMjYwMTAyMTIxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTRlZDQ1Yzk0ZjJiNDdjYjczZTIzMDc3MDNlZWMxYWM3MjNmMTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnB5NBHBlrDPu6QrLABZWmY9ulHOI FBddTXkLvRuk81/LlL/etyj3+ahxQ9cwuues1unhKxDwQVhVeWA++ZopBDLGsnQU GE2yXkmxhZNWFApu8/ZdavOTApNkZvjM+/sGjqIs/WWlgxrWbCU4Lup5jvuRsSpR Cvfcomk587iiQhyGqubljuqPQM/1NfHzffOYlPbXcbB+eUQvCxUdiUindUpxMaoX QXzH9ToA9vuCMepn5GJXPDky/YuCDE1QMNHXblEMB3kezRJoo+wSrKmnyTFwpNy0 XzyU+3rm9n+rT/0R+vYQtBHy2pdjvvCnTdfd2Ngy68zPOVnbzoPXYs3+bwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFMFO1FyU8rR8tz4jB3A+7BrHI/FFMB8GA1UdIwQY MBaAFMzEeN2czWFi+CSIrG/FDCHTafKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUt NDI4NTk5ODM5MmQzLzEvd1U3VVhKVHl0SHkzUGlNSGNEN3NHc2NqOFVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUtNDI4NTk5ODM5MmQz LzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg3bADAN BgkqhkiG9w0BAQsFAAOCAQEAYoVh/I+MeyQcVFC9nwhQ0jXK7p57nd/5NDftXSMt jfeBPMkTI66lS6q5yhHPQzI1ZrAzMCLL3+NOXxK11mYzgwsqKXo7elUC4fwwCa8+ niL7MI0S31Xm1SinFc9Zn5qt7q8pN5PjMFz6lFRXjVvLlI38EIz4WXfZsPHV8cFs dwkVGUKC2qkdKMnNKtvvSb0E3Lh/RfrvKUjGX9s8CFOatT4B6q2BVI+5Vtmo7Vws e7Mvz67q457rR/5kFidb5K7n6+WqQBo5yfGhNo6Irv20qD4OKGJsM9vtJkQi8Bfn EhPUHktbjsi9WqixL6FX8p2lfW7aqDxz8V6txR87AVd52Q== -----END CERTIFICATE-----Generated at Sun Jan 25 15:11:35 2026 by rpki-client