This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/u705RusaSvuc7EH6EPykfRGiVNE.roa File: u705RusaSvuc7EH6EPykfRGiVNE.roa (raw, json) Hash identifier: Uxi6awTK0JVTN4Iab0EWPeAZqgFJiY/Mi2s0A2eP9fU= Subject key identifier: BB:BD:39:46:EB:1A:4A:FB:9C:EC:41:FA:10:FC:A4:7D:11:A2:54:D1 Certificate issuer: /CN=5550e06ee02c5a32e54dc89853b4aa378f8604f7 Certificate serial: 019B7F832B2638CC9A2F19E33962953502FC Authority key identifier: 55:50:E0:6E:E0:2C:5A:32:E5:4D:C8:98:53:B4:AA:37:8F:86:04:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VVDgbuAsWjLlTciYU7SqN4-GBPc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/u705RusaSvuc7EH6EPykfRGiVNE.roa Signing time: Fri 02 Jan 2026 16:21:01 +0000 ROA not before: Fri 02 Jan 2026 16:21:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20649 IP address blocks: 2a11:1800::/32 maxlen: 32 2a11:1801::/32 maxlen: 32 2a11:1802::/32 maxlen: 32 2a11:1803::/32 maxlen: 32 2a11:1804::/32 maxlen: 32 2a11:1805::/32 maxlen: 32 2a11:1806::/32 maxlen: 32 2a11:1807::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.crl rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.mft rsync://rpki.ripe.net/repository/DEFAULT/VVDgbuAsWjLlTciYU7SqN4-GBPc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:2b:26:38:cc:9a:2f:19:e3:39:62:95:35:02:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5550e06ee02c5a32e54dc89853b4aa378f8604f7 Validity Not Before: Jan 2 16:21:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bbbd3946eb1a4afb9cec41fa10fca47d11a254d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:cb:96:87:92:c4:9e:9a:19:d2:fd:72:40:aa: aa:72:fa:5d:fb:4f:9c:27:ed:bd:df:9a:05:80:64: 52:0a:08:1a:ba:37:03:87:76:f6:1a:5e:d1:8f:d4: f3:1a:68:ef:67:47:e4:b2:b6:d7:58:26:30:9f:ec: 8c:ee:6a:43:9b:7c:6c:99:71:92:bd:7c:1d:12:9f: bd:da:42:0d:2c:2b:ec:ca:47:9c:a9:6f:90:1f:40: c3:50:c9:bc:8d:85:99:1d:34:37:e5:a7:ba:bb:b1: ce:6c:cc:c1:44:68:84:f9:da:58:e5:fa:d4:c7:34: 25:98:7d:c5:e8:d3:0e:1b:34:0e:9c:41:6a:04:4b: 9d:45:a1:28:35:55:68:74:e5:5a:0d:4d:9f:93:0d: 57:fa:ad:78:18:0e:fc:23:eb:3c:b0:4f:08:86:07: 19:53:1f:bb:af:68:85:86:55:b1:c2:94:ff:57:83: 1f:8d:7d:5d:d9:6a:e3:75:a5:4d:36:b8:88:75:5f: d6:84:8e:fe:17:68:93:9e:a2:3a:5b:5a:da:be:55: 44:e7:54:94:58:93:3b:eb:49:6a:ce:05:07:3c:55: 76:41:86:ba:90:05:b2:25:1c:3f:84:52:e8:50:db: af:b9:41:bc:55:a9:df:ce:3a:ce:f2:69:c5:3f:0c: 5f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:BD:39:46:EB:1A:4A:FB:9C:EC:41:FA:10:FC:A4:7D:11:A2:54:D1 X509v3 Authority Key Identifier: keyid:55:50:E0:6E:E0:2C:5A:32:E5:4D:C8:98:53:B4:AA:37:8F:86:04:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVDgbuAsWjLlTciYU7SqN4-GBPc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/u705RusaSvuc7EH6EPykfRGiVNE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:1800::/29 Signature Algorithm: sha256WithRSAEncryption 97:60:33:95:d8:bd:b5:45:8a:0e:2c:01:01:a8:3d:e6:24:49: c0:79:94:e9:24:63:c0:f4:5b:57:6d:ec:55:25:50:a8:00:c5: 98:8f:70:77:5c:f8:36:4d:c0:01:af:39:63:58:bf:ff:74:09: ea:41:1d:11:d0:49:56:83:8f:67:e9:9c:a9:d3:cd:76:b5:31: e6:98:3a:73:21:03:b5:c3:6c:53:13:7c:dc:50:49:7c:ab:c7: 85:92:92:ad:a7:a3:9f:4a:6d:8a:6b:97:c8:3c:aa:38:2f:2c: 55:af:72:8e:cd:de:d1:67:1f:2c:c1:2f:2c:31:b5:36:48:ae: cb:5b:ad:47:45:ca:61:7f:f8:c1:71:f3:65:9d:c9:a0:55:73: 5f:bc:f7:0a:e2:fc:49:8b:6b:f6:ef:cf:9e:fa:c6:c1:c4:57: 2d:30:c7:b9:af:50:29:60:af:31:7c:7f:4c:fe:2f:10:db:4c: 02:e9:e9:a4:91:15:a8:52:c1:16:78:4c:71:19:ec:e4:24:76: dc:a9:44:dc:fa:ba:4c:92:76:b1:10:29:6f:67:7d:90:a3:ae: 64:c6:0e:41:4c:93:c3:74:09:e4:11:48:43:31:ac:72:fa:2b: 8a:e5:9d:bc:6d:d8:88:b9:f7:63:64:c0:50:97:14:90:38:a5: 88:03:c7:21 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/gysmOMyaLxnjOWKVNQL8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1NTBlMDZlZTAyYzVhMzJlNTRkYzg5ODUzYjRhYTM3OGY4 NjA0ZjcwHhcNMjYwMTAyMTYyMTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYmJkMzk0NmViMWE0YWZiOWNlYzQxZmExMGZjYTQ3ZDExYTI1NGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcuWh5LEnpoZ0v1yQKqqcvpd+0+c J+2935oFgGRSCggaujcDh3b2Gl7Rj9TzGmjvZ0fksrbXWCYwn+yM7mpDm3xsmXGS vXwdEp+92kINLCvsykecqW+QH0DDUMm8jYWZHTQ35ae6u7HObMzBRGiE+dpY5frU xzQlmH3F6NMOGzQOnEFqBEudRaEoNVVodOVaDU2fkw1X+q14GA78I+s8sE8IhgcZ Ux+7r2iFhlWxwpT/V4MfjX1d2WrjdaVNNriIdV/WhI7+F2iTnqI6W1ravlVE51SU WJM760lqzgUHPFV2QYa6kAWyJRw/hFLoUNuvuUG8VanfzjrO8mnFPwxfSwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFLu9OUbrGkr7nOxB+hD8pH0RolTRMB8GA1UdIwQY MBaAFFVQ4G7gLFoy5U3ImFO0qjePhgT3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlZEZ2J1QXNXakxsVGNpWVU3U3FONC1HQlBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9kZWViNGMtOTlkNi00YTllLTgyMDAt N2NhYTk3OTI3MTQyLzEvdTcwNVJ1c2FTdnVjN0VINkVQeWtmUkdpVk5FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9kZWViNGMtOTlkNi00YTllLTgyMDAtN2NhYTk3OTI3MTQy LzEvVlZEZ2J1QXNXakxsVGNpWVU3U3FONC1HQlBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhEYADAN BgkqhkiG9w0BAQsFAAOCAQEAl2Azldi9tUWKDiwBAag95iRJwHmU6SRjwPRbV23s VSVQqADFmI9wd1z4Nk3AAa85Y1i//3QJ6kEdEdBJVoOPZ+mcqdPNdrUx5pg6cyED tcNsUxN83FBJfKvHhZKSraejn0ptimuXyDyqOC8sVa9yjs3e0WcfLMEvLDG1Nkiu y1utR0XKYX/4wXHzZZ3JoFVzX7z3CuL8SYtr9u/PnvrGwcRXLTDHua9QKWCvMXx/ TP4vENtMAunppJEVqFLBFnhMcRns5CR23KlE3Pq6TJJ2sRApb2d9kKOuZMYOQUyT w3QJ5BFIQzGscvoriuWdvG3YiLn3Y2TAUJcUkDiliAPHIQ== -----END CERTIFICATE-----Generated at Mon Jan 26 08:58:21 2026 by rpki-client