This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/uCNLYkMpygNunXFvH6vpKE2NN28.roa File: uCNLYkMpygNunXFvH6vpKE2NN28.roa (raw, json) Hash identifier: jZxZzuY2jmV8G4KIhZiQuYNw9N0R/IOj9mu4mI2n1s4= Subject key identifier: B8:23:4B:62:43:29:CA:03:6E:9D:71:6F:1F:AB:E9:28:4D:8D:37:6F Certificate issuer: /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f Certificate serial: 019B76EB6557089BF079BDC0F95D6CEAB4E7 Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/uCNLYkMpygNunXFvH6vpKE2NN28.roa Signing time: Thu 01 Jan 2026 00:18:16 +0000 ROA not before: Thu 01 Jan 2026 00:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203729 IP address blocks: 2a0b:6b81:1::/48 maxlen: 48 2a0b:6b81:205::/48 maxlen: 48 2a0b:6b81:208::/48 maxlen: 48 2a0b:6b81:210::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:65:57:08:9b:f0:79:bd:c0:f9:5d:6c:ea:b4:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f Validity Not Before: Jan 1 00:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8234b624329ca036e9d716f1fabe9284d8d376f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:59:6e:06:f8:ca:79:38:54:9b:7d:e2:21:12: ff:92:3d:e6:04:55:dd:ea:9e:d2:b7:92:17:cf:82: 45:85:97:ea:93:d4:69:ee:3f:9c:17:2d:b9:4b:45: 0f:9c:c2:a9:b0:0f:9e:0d:14:ba:29:b7:f5:92:be: c2:28:4e:4a:bf:a2:de:b3:4b:23:6f:9a:63:e1:22: ad:2b:63:6a:d0:9d:2a:dc:ef:04:42:c1:ff:da:3b: 62:9b:43:da:75:e0:b2:2e:45:d6:5b:66:25:6a:a6: 80:3b:e4:93:b3:14:d0:34:27:3c:1a:4c:9b:bf:89: cb:f5:a7:62:1e:8b:75:c5:2b:c7:e8:f7:51:32:22: 3e:50:e8:00:0d:1d:af:61:a1:11:ae:aa:49:da:41: 28:1e:68:6c:1d:6e:93:a0:97:65:fb:2f:28:4f:30: 1f:c3:37:d0:09:9c:9a:ea:01:5b:b2:4d:c7:5b:53: 43:95:cf:83:65:36:cc:62:52:8a:0c:60:49:51:ed: 5e:b7:3d:fe:3e:ca:ae:71:74:d1:70:25:68:e9:20: 3c:a8:e8:58:a1:de:55:11:65:d1:53:1e:fa:b2:65: c5:a8:ed:08:e9:c1:25:10:2a:2d:8a:87:84:82:3a: 0f:d8:e4:1c:6c:6f:ab:7c:5d:85:5f:03:0b:45:b1: 97:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:23:4B:62:43:29:CA:03:6E:9D:71:6F:1F:AB:E9:28:4D:8D:37:6F X509v3 Authority Key Identifier: keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/uCNLYkMpygNunXFvH6vpKE2NN28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:6b81:1::/48 2a0b:6b81:205::/48 2a0b:6b81:208::/48 2a0b:6b81:210::/48 Signature Algorithm: sha256WithRSAEncryption 4f:3b:c5:f8:7c:d6:fe:ab:c8:80:4d:d9:9e:5c:3a:f3:3c:70: cb:cf:46:22:64:e6:34:9c:32:81:59:4e:d6:90:56:43:ba:19: be:ad:97:b6:cb:5f:02:20:e1:89:09:49:60:91:f2:5f:17:07: f0:e2:85:f3:04:83:00:b6:91:52:ef:65:64:16:7f:12:ac:b8: 91:62:36:3c:57:35:38:be:3f:5c:98:0e:87:45:f2:70:f6:c9: b5:ac:f6:40:c6:7c:25:85:5e:46:17:fd:7c:42:e0:ec:9a:75: 6b:a5:32:df:0f:a8:11:64:81:e2:ab:33:23:89:8d:ee:5e:0b: 1d:2a:54:bd:22:ff:9c:00:29:6a:64:e0:66:86:f8:04:3c:dd: 09:86:6b:76:34:f5:72:7f:af:b8:ba:f6:55:f1:be:9d:25:bb: c4:09:6c:d8:a6:3e:51:56:76:91:3e:97:9c:dc:8d:ce:21:87: b2:40:9c:db:3b:03:78:7b:2a:74:07:98:56:72:d0:fe:2e:da: d9:c3:38:a1:47:43:2f:5e:88:27:02:d5:c8:6f:ef:90:08:dd: 4f:e8:5e:07:3f:16:f5:45:21:2f:4d:e6:b8:8a:d6:a6:80:3a: a8:7b:d3:07:e0:d2:28:bd:ba:bd:a2:34:36:d0:ff:4a:2f:96: 5b:d9:43:8f -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt262VXCJvweb3A+V1s6rTnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNWJjOWJiNTQ3ZTI3Nzg4ZDIyMWJjOGJiZDVmYjAyZTAy NDQ4MGYwHhcNMjYwMTAxMDAxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODIzNGI2MjQzMjljYTAzNmU5ZDcxNmYxZmFiZTkyODRkOGQzNzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlluBvjKeThUm33iIRL/kj3mBFXd 6p7St5IXz4JFhZfqk9Rp7j+cFy25S0UPnMKpsA+eDRS6Kbf1kr7CKE5Kv6Les0sj b5pj4SKtK2Nq0J0q3O8EQsH/2jtim0PadeCyLkXWW2YlaqaAO+STsxTQNCc8Gkyb v4nL9adiHot1xSvH6PdRMiI+UOgADR2vYaERrqpJ2kEoHmhsHW6ToJdl+y8oTzAf wzfQCZya6gFbsk3HW1NDlc+DZTbMYlKKDGBJUe1etz3+PsqucXTRcCVo6SA8qOhY od5VEWXRUx76smXFqO0I6cElECotioeEgjoP2OQcbG+rfF2FXwMLRbGXYwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFLgjS2JDKcoDbp1xbx+r6ShNjTdvMB8GA1UdIwQY MBaAFINbybtUfid4jSIbyLvV+wLgJEgPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzF2SnUxUi1KM2lOSWh2SXU5WDdBdUFrU0E4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC85NjJmYjEtM2RmMC00ZWMyLWI1MGEt YjM2YTI0ZDM5NDI3LzEvdUNOTFlrTXB5Z051blhGdkg2dnBLRTJOTjI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC85NjJmYjEtM2RmMC00ZWMyLWI1MGEtYjM2YTI0ZDM5NDI3 LzEvZzF2SnUxUi1KM2lOSWh2SXU5WDdBdUFrU0E4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAAjAkAwcAKgtrgQAB AwcAKgtrgQIFAwcAKgtrgQIIAwcAKgtrgQIQMA0GCSqGSIb3DQEBCwUAA4IBAQBP O8X4fNb+q8iATdmeXDrzPHDLz0YiZOY0nDKBWU7WkFZDuhm+rZe2y18CIOGJCUlg kfJfFwfw4oXzBIMAtpFS72VkFn8SrLiRYjY8VzU4vj9cmA6HRfJw9sm1rPZAxnwl hV5GF/18QuDsmnVrpTLfD6gRZIHiqzMjiY3uXgsdKlS9Iv+cAClqZOBmhvgEPN0J hmt2NPVyf6+4uvZV8b6dJbvECWzYpj5RVnaRPpec3I3OIYeyQJzbOwN4eyp0B5hW ctD+LtrZwzihR0MvXognAtXIb++QCN1P6F4HPxb1RSEvTea4itamgDqoe9MH4NIo vbq9ojQ20P9KL5Zb2UOP -----END CERTIFICATE-----Generated at Sun Jan 25 16:54:05 2026 by rpki-client