This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/nUmVeUkNC8_ViD_UA6x1PEPc9jI.roa File: nUmVeUkNC8_ViD_UA6x1PEPc9jI.roa (raw, json) Hash identifier: SFQUWNNE8spFBp4DjpdKZ/dLlID0cBvRZXOgsiCgoVM= Subject key identifier: 9D:49:95:79:49:0D:0B:CF:D5:88:3F:D4:03:AC:75:3C:43:DC:F6:32 Certificate issuer: /CN=a82a023ebdb12e971e7a8729d826a7924cf7e832 Certificate serial: 019B7F854208AFB1AE8DB170EC901C063229 Authority key identifier: A8:2A:02:3E:BD:B1:2E:97:1E:7A:87:29:D8:26:A7:92:4C:F7:E8:32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/nUmVeUkNC8_ViD_UA6x1PEPc9jI.roa Signing time: Fri 02 Jan 2026 16:23:18 +0000 ROA not before: Fri 02 Jan 2026 16:23:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 11506 IP address blocks: 2a13:6203:3000::/44 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.crl rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:42:08:af:b1:ae:8d:b1:70:ec:90:1c:06:32:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a82a023ebdb12e971e7a8729d826a7924cf7e832 Validity Not Before: Jan 2 16:23:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d499579490d0bcfd5883fd403ac753c43dcf632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:01:e6:66:7d:1c:cc:a7:4d:2a:d1:07:03:a2: 59:a1:e6:9e:f9:94:e4:0f:6a:2d:f8:60:12:9f:dc: 14:7d:00:40:1e:62:db:86:b0:02:21:b3:06:d3:ec: 33:b2:4b:27:b6:2f:d4:7e:16:94:0f:f2:4d:b2:05: 83:e6:1d:86:5a:0a:0e:55:16:bc:5b:58:94:79:36: 5c:d8:6d:9c:e3:fd:43:7f:ca:bf:78:f7:e3:e8:a3: 40:78:e0:9d:e8:66:3d:27:55:2b:e5:b4:94:cf:28: 54:d6:66:fc:c4:d7:3f:5e:3a:4b:a3:a1:2c:0b:8b: 1a:c3:5f:a7:3a:b3:bb:24:d8:22:25:8b:90:59:d5: 17:72:8f:14:9e:0c:29:ee:1c:3e:d0:73:be:e9:cd: 01:04:d9:b4:65:2e:e4:5b:05:1c:cc:82:b0:9a:35: c2:c3:b3:2e:df:0a:fa:07:98:da:93:42:f6:9a:82: 4a:34:b7:c5:0d:64:d0:d0:43:6e:5e:70:70:55:54: d1:49:4a:63:5f:09:24:72:21:50:1a:0b:66:e0:dd: 7e:1a:70:b8:cf:26:ba:a6:8c:ee:e0:a6:00:dc:68: 65:80:66:b1:3c:53:ea:a0:d2:1b:c0:85:5d:10:ca: 9c:a6:b6:ca:a6:a9:8a:85:6b:3d:f0:80:e7:3e:1f: 24:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:49:95:79:49:0D:0B:CF:D5:88:3F:D4:03:AC:75:3C:43:DC:F6:32 X509v3 Authority Key Identifier: keyid:A8:2A:02:3E:BD:B1:2E:97:1E:7A:87:29:D8:26:A7:92:4C:F7:E8:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/nUmVeUkNC8_ViD_UA6x1PEPc9jI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:6203:3000::/44 Signature Algorithm: sha256WithRSAEncryption a6:fd:82:16:6a:25:6c:15:24:f1:ee:82:cf:e5:ff:2a:83:d5: eb:90:b2:cf:99:8e:a4:3c:d7:a6:79:68:57:62:7f:0c:1a:21: 5d:06:3e:c3:c5:20:db:af:01:64:e1:03:8f:ac:64:d7:70:21: 2a:ce:ff:c5:54:62:5e:e4:d6:bc:f0:a5:e9:5f:28:96:d1:d4: ef:6b:35:74:22:5e:24:43:76:96:76:a6:bd:34:0a:1f:88:0f: 2b:58:c7:4f:6e:4d:e2:5f:1b:ee:c4:e6:e9:a6:df:ff:c0:f0: f7:b8:01:9b:b6:a7:ae:bb:d7:ac:3f:c8:b8:5c:77:da:f3:21: 6e:f4:37:cc:3a:38:e4:2c:b1:97:02:3c:f4:8b:d5:ee:2b:2c: f4:be:4e:26:b6:c8:9b:90:0e:77:1b:e4:f4:2e:a0:ed:a3:9b: 5e:2f:9f:a8:af:3d:9d:0a:46:97:2a:d2:e3:c2:37:fc:d1:74: 6d:03:08:29:29:fc:9d:23:f1:fe:a2:ac:42:6e:78:2e:d6:41: a4:13:8b:8d:60:6a:0d:3a:12:81:71:e1:8e:f9:8f:d1:57:59: 5b:3b:04:e5:7d:7a:d1:e1:74:af:77:03:96:de:1c:da:c3:8f: cd:8a:de:3a:ad:14:48:d6:50:b3:12:4e:86:79:55:db:93:9d: 38:00:24:ab -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/hUIIr7GujbFw7JAcBjIpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4MmEwMjNlYmRiMTJlOTcxZTdhODcyOWQ4MjZhNzkyNGNm N2U4MzIwHhcNMjYwMTAyMTYyMzE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDQ5OTU3OTQ5MGQwYmNmZDU4ODNmZDQwM2FjNzUzYzQzZGNmNjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8AHmZn0czKdNKtEHA6JZoeae+ZTk D2ot+GASn9wUfQBAHmLbhrACIbMG0+wzsksnti/UfhaUD/JNsgWD5h2GWgoOVRa8 W1iUeTZc2G2c4/1Df8q/ePfj6KNAeOCd6GY9J1Ur5bSUzyhU1mb8xNc/XjpLo6Es C4saw1+nOrO7JNgiJYuQWdUXco8Ungwp7hw+0HO+6c0BBNm0ZS7kWwUczIKwmjXC w7Mu3wr6B5jak0L2moJKNLfFDWTQ0ENuXnBwVVTRSUpjXwkkciFQGgtm4N1+GnC4 zya6pozu4KYA3GhlgGaxPFPqoNIbwIVdEMqcprbKpqmKhWs98IDnPh8kCwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJ1JlXlJDQvP1Yg/1AOsdTxD3PYyMB8GA1UdIwQY MBaAFKgqAj69sS6XHnqHKdgmp5JM9+gyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUNvQ1ByMnhMcGNlZW9jcDJDYW5ra3ozNkRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8zMTdkZGQtNjg3ZC00NThhLTlmZjUt MjJmYzU4OGJjNjZmLzEvblVtVmVVa05DOF9WaURfVUE2eDFQRVBjOWpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My8zMTdkZGQtNjg3ZC00NThhLTlmZjUtMjJmYzU4OGJjNjZm LzEvcUNvQ1ByMnhMcGNlZW9jcDJDYW5ra3ozNkRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhNiAzAA MA0GCSqGSIb3DQEBCwUAA4IBAQCm/YIWaiVsFSTx7oLP5f8qg9XrkLLPmY6kPNem eWhXYn8MGiFdBj7DxSDbrwFk4QOPrGTXcCEqzv/FVGJe5Na88KXpXyiW0dTvazV0 Il4kQ3aWdqa9NAofiA8rWMdPbk3iXxvuxObppt//wPD3uAGbtqeuu9esP8i4XHfa 8yFu9DfMOjjkLLGXAjz0i9XuKyz0vk4mtsibkA53G+T0LqDto5teL5+orz2dCkaX KtLjwjf80XRtAwgpKfydI/H+oqxCbngu1kGkE4uNYGoNOhKBceGO+Y/RV1lbOwTl fXrR4XSvdwOW3hzaw4/Nit46rRRI1lCzEk6GeVXbk504ACSr -----END CERTIFICATE-----Generated at Mon Jan 26 07:23:40 2026 by rpki-client