This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/uWmLk5k2zxERG5iAn6QzDWqDfPs.roa File: uWmLk5k2zxERG5iAn6QzDWqDfPs.roa (raw, json) Hash identifier: pll+MttvkQdtFZD9rTubFBhF/TVVXiRM3xiehM6Bwxg= Subject key identifier: B9:69:8B:93:99:36:CF:11:11:1B:98:80:9F:A4:33:0D:6A:83:7C:FB Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362 Certificate serial: 019B7C7F7A553C1F2C2B06A33C6AF2749656 Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/uWmLk5k2zxERG5iAn6QzDWqDfPs.roa Signing time: Fri 02 Jan 2026 02:18:07 +0000 ROA not before: Fri 02 Jan 2026 02:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205227 IP address blocks: 2a09:a780::/30 maxlen: 30 2a09:a784::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:7a:55:3c:1f:2c:2b:06:a3:3c:6a:f2:74:96:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362 Validity Not Before: Jan 2 02:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9698b939936cf11111b98809fa4330d6a837cfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7e:2f:82:52:f8:1d:0f:34:31:92:5b:52:9d: 11:5a:ba:34:d0:c9:53:e4:b7:7e:3c:40:30:f6:e6: be:e1:b8:87:19:d3:20:14:b5:15:77:4b:88:60:92: 0a:f6:1f:71:6d:7b:45:5a:96:c7:5c:6c:87:06:16: 56:0f:59:81:a0:2d:a8:d3:75:da:d7:79:b3:c6:d7: dc:e7:a1:a9:a6:e7:c8:2c:59:48:10:f4:73:3a:01: c9:e4:c3:d0:9d:c4:bf:c6:d9:1b:01:17:ee:84:3a: 26:14:ce:26:21:e4:2d:1c:ac:c6:f7:2e:65:a7:e9: dc:51:49:ce:6f:60:2a:ea:d5:19:0f:77:3c:60:ef: 85:d5:99:2a:97:0a:7f:66:61:a0:be:52:13:9d:c3: 6a:59:fa:9a:50:47:60:ab:90:8d:f3:3a:0f:2c:1e: bd:07:b3:ae:45:fd:7e:d6:68:b3:a6:84:2a:53:fc: d5:7c:b8:da:2d:81:8d:4a:fc:4d:87:9a:bb:e8:31: 33:77:55:bd:cf:8b:cf:d3:2f:e6:6b:b1:04:73:b7: b6:37:d7:64:de:04:c3:77:26:55:cd:88:36:56:a5: 3c:ac:77:e8:40:86:4c:50:32:6b:55:2e:f3:d4:b3: d5:95:44:71:06:15:2b:a3:46:fe:65:f7:c1:94:fa: e0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:69:8B:93:99:36:CF:11:11:1B:98:80:9F:A4:33:0D:6A:83:7C:FB X509v3 Authority Key Identifier: keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/uWmLk5k2zxERG5iAn6QzDWqDfPs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:a780::/29 Signature Algorithm: sha256WithRSAEncryption 8d:30:37:cf:9e:59:be:1c:3f:d2:f5:51:a5:26:ee:a0:d4:f6: 93:d5:db:bd:1b:9b:00:30:b6:bb:c6:f2:2e:04:f2:38:22:c1: 9e:6a:54:48:8a:84:57:0d:d7:17:a3:50:3c:90:2d:e2:34:fe: 8c:2b:32:c0:6e:92:4a:8f:a9:19:de:9f:ad:05:c6:b2:4b:d2: cd:ad:41:85:e2:a4:7b:04:51:01:59:b0:0e:55:3c:bb:f5:e0: e3:fe:90:d8:c7:bd:36:9c:5d:68:7c:97:6b:cc:0c:03:b1:86: 73:f4:df:03:ad:50:86:39:b5:63:50:fa:84:e5:d9:19:f9:85: 43:0b:ea:4c:27:64:02:6a:2d:2f:2b:22:e6:8c:1e:c6:9a:1a: a5:10:e4:2c:a9:d1:b4:96:54:51:48:8c:81:42:a2:3b:42:2d: 6c:90:3f:08:f3:17:31:5a:49:1e:01:a3:e0:62:81:40:fc:f9: 9b:32:79:47:3e:fd:de:95:65:ee:00:8a:a4:c4:8a:e5:3d:16: bf:d5:22:e1:e3:ed:6f:a0:4b:62:47:40:a5:1f:38:d5:86:a8: c1:f1:f2:6a:f0:6a:7f:25:09:6e:83:ea:95:f8:c2:c4:f6:c6: 8e:6e:2e:b2:85:fe:c5:38:39:f4:e2:e2:20:09:02:af:e9:33: e5:5e:08:64 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8f3pVPB8sKwajPGrydJZWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNzYwM2E5M2JjYTMxYjAxOGY1MTFmNmQ0YjBiNzU0NmU5 NjMzNjIwHhcNMjYwMTAyMDIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTY5OGI5Mzk5MzZjZjExMTExYjk4ODA5ZmE0MzMwZDZhODM3Y2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsn4vglL4HQ80MZJbUp0RWro00MlT 5Ld+PEAw9ua+4biHGdMgFLUVd0uIYJIK9h9xbXtFWpbHXGyHBhZWD1mBoC2o03Xa 13mzxtfc56GppufILFlIEPRzOgHJ5MPQncS/xtkbARfuhDomFM4mIeQtHKzG9y5l p+ncUUnOb2Aq6tUZD3c8YO+F1Zkqlwp/ZmGgvlITncNqWfqaUEdgq5CN8zoPLB69 B7OuRf1+1mizpoQqU/zVfLjaLYGNSvxNh5q76DEzd1W9z4vP0y/ma7EEc7e2N9dk 3gTDdyZVzYg2VqU8rHfoQIZMUDJrVS7z1LPVlURxBhUro0b+ZffBlPrgfwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFLlpi5OZNs8RERuYgJ+kMw1qg3z7MB8GA1UdIwQY MBaAFIJ2A6k7yjGwGPUR9tSwt1RuljNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYt YjE2Y2I0ZGZhZGQzLzEvdVdtTGs1azJ6eEVSRzVpQW42UXpEV3FEZlBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYtYjE2Y2I0ZGZhZGQz LzEvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgmngDAN BgkqhkiG9w0BAQsFAAOCAQEAjTA3z55Zvhw/0vVRpSbuoNT2k9XbvRubADC2u8by LgTyOCLBnmpUSIqEVw3XF6NQPJAt4jT+jCsywG6SSo+pGd6frQXGskvSza1BheKk ewRRAVmwDlU8u/Xg4/6Q2Me9NpxdaHyXa8wMA7GGc/TfA61Qhjm1Y1D6hOXZGfmF QwvqTCdkAmotLysi5owexpoapRDkLKnRtJZUUUiMgUKiO0ItbJA/CPMXMVpJHgGj 4GKBQPz5mzJ5Rz793pVl7gCKpMSK5T0Wv9Ui4ePtb6BLYkdApR841YaowfHyavBq fyUJboPqlfjCxPbGjm4usoX+xTg59OLiIAkCr+kz5V4IZA== -----END CERTIFICATE-----Generated at Sun Jan 25 14:36:38 2026 by rpki-client