This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/xUUNrHApt_tz2XjQJ5l7t1ZbC7o.roa File: xUUNrHApt_tz2XjQJ5l7t1ZbC7o.roa (raw, json) Hash identifier: KUBsi55PM0TDdS1qnpTlBLIS83SZ6OgFiXRyqYklnSY= Subject key identifier: C5:45:0D:AC:70:29:B7:FB:73:D9:78:D0:27:99:7B:B7:56:5B:0B:BA Certificate issuer: /CN=2cb178fc335df01543728e29b78e9528ef1f5f6e Certificate serial: 019B89F2ED4E3DC048A1D24997A1C54942EB Authority key identifier: 2C:B1:78:FC:33:5D:F0:15:43:72:8E:29:B7:8E:95:28:EF:1F:5F:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLF4_DNd8BVDco4pt46VKO8fX24.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/xUUNrHApt_tz2XjQJ5l7t1ZbC7o.roa Signing time: Sun 04 Jan 2026 16:59:17 +0000 ROA not before: Sun 04 Jan 2026 16:59:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44947 IP address blocks: 2001:3b80::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.mft rsync://rpki.ripe.net/repository/DEFAULT/LLF4_DNd8BVDco4pt46VKO8fX24.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:89:f2:ed:4e:3d:c0:48:a1:d2:49:97:a1:c5:49:42:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cb178fc335df01543728e29b78e9528ef1f5f6e Validity Not Before: Jan 4 16:59:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5450dac7029b7fb73d978d027997bb7565b0bba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:40:eb:76:35:26:57:9f:82:6f:ee:3a:c9:0d: be:fa:9f:27:1c:5d:d4:eb:b4:a4:04:9b:60:40:99: 74:b6:df:ed:3b:3a:1c:f0:74:9e:06:f6:d6:dc:75: 3d:1a:a3:03:08:0b:5c:3e:15:0f:6e:40:81:80:7d: 92:41:64:26:5a:32:a4:46:88:9c:68:6d:8d:63:96: 3b:6c:8d:a9:5b:54:c8:43:ef:a3:51:28:ac:e2:38: d4:5c:84:86:6a:2d:bc:f8:df:ba:bf:ad:ad:81:1c: 13:64:67:26:3f:d6:e9:65:29:08:54:08:aa:97:61: 65:7d:98:e1:b1:ae:35:57:1c:e3:84:8e:b5:6a:01: 41:68:69:34:45:8c:18:bb:3f:2c:82:35:52:2b:c8: 60:91:fb:0a:cd:bd:3f:62:ea:f1:2f:69:01:3b:b0: 81:b5:ee:33:3c:f3:11:14:dc:28:ce:20:7a:c8:da: 7f:66:7c:d6:91:ab:28:52:51:40:50:2c:e5:89:e3: c0:9c:93:90:86:b6:05:9c:ae:90:fa:e0:0b:d0:91: 5f:e1:32:5d:34:3d:c8:e4:39:f9:83:70:25:e0:8c: a1:bc:4f:ee:2d:0b:2a:76:e5:3c:31:01:63:cf:6d: c7:f6:9d:47:47:70:ad:ff:c7:a4:02:6d:c0:9a:7e: 40:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:45:0D:AC:70:29:B7:FB:73:D9:78:D0:27:99:7B:B7:56:5B:0B:BA X509v3 Authority Key Identifier: keyid:2C:B1:78:FC:33:5D:F0:15:43:72:8E:29:B7:8E:95:28:EF:1F:5F:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLF4_DNd8BVDco4pt46VKO8fX24.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/xUUNrHApt_tz2XjQJ5l7t1ZbC7o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:3b80::/29 Signature Algorithm: sha256WithRSAEncryption 8c:13:b2:f4:d2:72:da:f4:32:12:2a:db:26:28:8c:c7:36:d6: e2:e5:f3:30:8d:92:90:ac:78:87:53:36:6f:5d:5b:92:83:b7: 89:80:d9:eb:b0:f8:ba:86:52:0f:63:83:13:fd:db:25:ac:69: 57:13:eb:35:4b:c0:34:bb:f2:08:53:fb:f8:91:42:d6:01:d0: 6e:db:3f:cb:be:26:0d:48:74:89:ee:5a:f1:e4:f3:2d:1e:1b: f5:99:a7:80:ff:a3:9c:6f:91:57:e4:ab:41:ab:3c:2c:3e:60: 00:b4:b9:38:c1:dc:b4:18:b1:ae:09:c3:ec:8b:95:34:e4:c6: 93:3c:56:02:cc:b4:ea:3d:28:59:3f:d1:f6:6e:6b:7c:82:be: 53:8a:22:d4:40:d6:1e:02:b7:b0:c3:82:e3:d4:d3:76:f8:de: 6a:aa:25:87:74:64:57:3d:e6:42:2f:9b:89:9c:11:3d:ad:46: d0:08:61:e1:e7:f9:da:d1:a0:2b:ff:56:b2:44:d7:4a:d1:94: 62:a2:ae:d9:1a:14:94:67:80:50:f2:0a:a2:71:a8:86:5b:ca: 38:62:89:92:6d:c7:ce:e3:41:90:ab:12:21:a3:34:1a:d1:98: 7d:a3:84:e7:70:2e:40:a0:9a:2c:5b:aa:4f:61:23:e7:a7:4a: 63:c4:ee:51 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZuJ8u1OPcBIodJJl6HFSULrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjYjE3OGZjMzM1ZGYwMTU0MzcyOGUyOWI3OGU5NTI4ZWYx ZjVmNmUwHhcNMjYwMTA0MTY1OTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTQ1MGRhYzcwMjliN2ZiNzNkOTc4ZDAyNzk5N2JiNzU2NWIwYmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUDrdjUmV5+Cb+46yQ2++p8nHF3U 67SkBJtgQJl0tt/tOzoc8HSeBvbW3HU9GqMDCAtcPhUPbkCBgH2SQWQmWjKkRoic aG2NY5Y7bI2pW1TIQ++jUSis4jjUXISGai28+N+6v62tgRwTZGcmP9bpZSkIVAiq l2FlfZjhsa41VxzjhI61agFBaGk0RYwYuz8sgjVSK8hgkfsKzb0/YurxL2kBO7CB te4zPPMRFNwoziB6yNp/ZnzWkasoUlFAUCzliePAnJOQhrYFnK6Q+uAL0JFf4TJd ND3I5Dn5g3Al4IyhvE/uLQsqduU8MQFjz23H9p1HR3Ct/8ekAm3Amn5AxwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFMVFDaxwKbf7c9l40CeZe7dWWwu6MB8GA1UdIwQY MBaAFCyxePwzXfAVQ3KOKbeOlSjvH19uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTExGNF9ETmQ4QlZEY280cHQ0NlZLTzhmWDI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lZWEzMzAtZTViZS00ZjIyLWIxMWIt MGY3OTY0MzIxY2UxLzEveFVVTnJIQXB0X3R6MlhqUUo1bDd0MVpiQzdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9lZWEzMzAtZTViZS00ZjIyLWIxMWItMGY3OTY0MzIxY2Ux LzEvTExGNF9ETmQ4QlZEY280cHQ0NlZLTzhmWDI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDIAE7gDAN BgkqhkiG9w0BAQsFAAOCAQEAjBOy9NJy2vQyEirbJiiMxzbW4uXzMI2SkKx4h1M2 b11bkoO3iYDZ67D4uoZSD2ODE/3bJaxpVxPrNUvANLvyCFP7+JFC1gHQbts/y74m DUh0ie5a8eTzLR4b9ZmngP+jnG+RV+SrQas8LD5gALS5OMHctBixrgnD7IuVNOTG kzxWAsy06j0oWT/R9m5rfIK+U4oi1EDWHgK3sMOC49TTdvjeaqolh3RkVz3mQi+b iZwRPa1G0Ahh4ef52tGgK/9WskTXStGUYqKu2RoUlGeAUPIKonGohlvKOGKJkm3H zuNBkKsSIaM0GtGYfaOE53AuQKCaLFuqT2Ej56dKY8TuUQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:50:41 2026 by rpki-client