This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9b30d2-efb5-4873-ac5c-0096d2bf7e98/1/uke6bA_qbi6_0aiMAFre1O2pGxU.roa File: uke6bA_qbi6_0aiMAFre1O2pGxU.roa (raw, json) Hash identifier: +tlXEw2nX5HWvmn3SMHQMvvAWGxYRdMQFuMZMhejA+4= Subject key identifier: BA:47:BA:6C:0F:EA:6E:2E:BF:D1:A8:8C:00:5A:DE:D4:ED:A9:1B:15 Certificate issuer: /CN=9cb352a5bdc622937b63787d4da8124f77201bbf Certificate serial: 019B99AA502C75A2EF884A02ABDA65756494 Authority key identifier: 9C:B3:52:A5:BD:C6:22:93:7B:63:78:7D:4D:A8:12:4F:77:20:1B:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLNSpb3GIpN7Y3h9TagST3cgG78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/9b30d2-efb5-4873-ac5c-0096d2bf7e98/1/uke6bA_qbi6_0aiMAFre1O2pGxU.roa Signing time: Wed 07 Jan 2026 18:13:54 +0000 ROA not before: Wed 07 Jan 2026 18:13:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214279 IP address blocks: 2a05:cfc0:3::/48 maxlen: 48 2a05:cfc0:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/9b30d2-efb5-4873-ac5c-0096d2bf7e98/1/nLNSpb3GIpN7Y3h9TagST3cgG78.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/9b30d2-efb5-4873-ac5c-0096d2bf7e98/1/nLNSpb3GIpN7Y3h9TagST3cgG78.mft rsync://rpki.ripe.net/repository/DEFAULT/nLNSpb3GIpN7Y3h9TagST3cgG78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:99:aa:50:2c:75:a2:ef:88:4a:02:ab:da:65:75:64:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cb352a5bdc622937b63787d4da8124f77201bbf Validity Not Before: Jan 7 18:13:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba47ba6c0fea6e2ebfd1a88c005aded4eda91b15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c9:3e:14:3e:e9:1f:bc:01:0b:88:5a:c1:b9: 68:69:c8:01:36:79:b5:e4:26:88:59:2b:c2:9d:1a: 5c:29:7f:b7:f6:86:86:88:e9:28:2b:2b:ce:09:b2: d4:a0:dd:a3:fb:64:0b:39:95:21:c0:41:1e:a9:94: 3e:0f:cf:9c:5c:db:50:3c:6a:56:4f:06:a4:cf:40: bd:6f:b0:cb:a8:a1:53:0c:c0:c1:69:00:f0:bb:49: 28:99:b0:34:1b:07:70:64:b0:3f:ea:27:16:d1:79: 22:85:cf:64:0f:64:ec:36:20:6c:8e:f2:62:db:b7: 0f:a7:70:b2:fa:56:e8:31:8f:ad:b9:7f:23:2e:0f: b2:59:c3:6a:c6:c1:81:71:ce:61:44:fb:f6:16:49: 4b:39:0a:17:b7:65:30:2a:d4:fe:37:1f:e4:0c:d0: d6:fb:e0:db:14:48:e6:59:db:91:3c:fd:b1:91:9b: 20:a1:ea:fe:2c:46:a4:3f:79:c7:a9:24:eb:d4:eb: e3:5b:99:fb:64:30:38:af:2d:28:e3:1d:de:20:3c: 52:16:c2:19:25:a9:65:9e:7e:98:f3:95:d5:31:e0: e0:ef:b8:fe:a5:f5:77:65:b3:29:b8:00:2f:f5:db: e8:57:7e:40:34:75:cd:82:1e:aa:61:9b:bf:19:30: 7d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:47:BA:6C:0F:EA:6E:2E:BF:D1:A8:8C:00:5A:DE:D4:ED:A9:1B:15 X509v3 Authority Key Identifier: keyid:9C:B3:52:A5:BD:C6:22:93:7B:63:78:7D:4D:A8:12:4F:77:20:1B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLNSpb3GIpN7Y3h9TagST3cgG78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9b30d2-efb5-4873-ac5c-0096d2bf7e98/1/uke6bA_qbi6_0aiMAFre1O2pGxU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9b30d2-efb5-4873-ac5c-0096d2bf7e98/1/nLNSpb3GIpN7Y3h9TagST3cgG78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:cfc0:3::-2a05:cfc0:4:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 2c:1c:b0:4c:df:5b:0a:2c:75:76:f2:7d:cb:fb:17:8f:14:cb: 5f:2d:ac:4c:07:ce:ce:6f:38:d6:4a:75:f6:6b:1c:21:9e:7f: f1:e4:cc:7b:88:2f:c3:e6:32:31:12:c0:e1:aa:27:75:22:8c: 77:a7:ab:66:c2:ed:e1:d3:71:68:04:7f:c2:b5:02:95:73:d5: 9e:d5:1c:98:3c:76:9d:5b:af:bc:17:2f:c5:c7:98:7b:95:f7: d0:ab:4e:1a:f7:8b:d6:ad:aa:ac:91:3d:df:7d:12:05:ac:20: d2:64:31:90:75:95:0f:2a:c0:cf:53:2e:81:62:1d:39:39:16: d1:1b:f0:11:ef:48:cb:ae:8e:3d:ab:cb:db:ee:82:9b:8e:7b: 0d:f7:af:d3:c5:e3:69:6d:75:d4:5f:62:2a:08:22:a0:c0:b2: 01:e8:a8:c4:1c:e9:96:e4:35:9d:1f:74:cc:1c:10:41:d1:80: 97:d9:1a:d2:63:29:d1:b1:14:cb:98:c3:8c:ac:8a:20:fe:8d: 3c:d3:a1:a2:cb:fc:89:b8:f3:8a:2c:9e:7a:09:18:d1:e1:80: 2d:83:ed:58:6c:e8:4f:80:87:a6:4f:cd:1c:4a:5f:6c:f8:a9: 10:43:56:38:11:71:c9:14:cc:78:01:52:32:e6:cf:47:77:98: 25:88:0e:d1 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZuZqlAsdaLviEoCq9pldWSUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYjM1MmE1YmRjNjIyOTM3YjYzNzg3ZDRkYTgxMjRmNzcy MDFiYmYwHhcNMjYwMTA3MTgxMzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTQ3YmE2YzBmZWE2ZTJlYmZkMWE4OGMwMDVhZGVkNGVkYTkxYjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8k+FD7pH7wBC4hawbloacgBNnm1 5CaIWSvCnRpcKX+39oaGiOkoKyvOCbLUoN2j+2QLOZUhwEEeqZQ+D8+cXNtQPGpW Twakz0C9b7DLqKFTDMDBaQDwu0kombA0GwdwZLA/6icW0Xkihc9kD2TsNiBsjvJi 27cPp3Cy+lboMY+tuX8jLg+yWcNqxsGBcc5hRPv2FklLOQoXt2UwKtT+Nx/kDNDW ++DbFEjmWduRPP2xkZsgoer+LEakP3nHqSTr1OvjW5n7ZDA4ry0o4x3eIDxSFsIZ Jallnn6Y85XVMeDg77j+pfV3ZbMpuAAv9dvoV35ANHXNgh6qYZu/GTB9uwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFLpHumwP6m4uv9GojABa3tTtqRsVMB8GA1UdIwQY MBaAFJyzUqW9xiKTe2N4fU2oEk93IBu/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkxOU3BiM0dJcE43WTNoOVRhZ1NUM2NnRzc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85YjMwZDItZWZiNS00ODczLWFjNWMt MDA5NmQyYmY3ZTk4LzEvdWtlNmJBX3FiaTZfMGFpTUFGcmUxTzJwR3hVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi85YjMwZDItZWZiNS00ODczLWFjNWMtMDA5NmQyYmY3ZTk4 LzEvbkxOU3BiM0dJcE43WTNoOVRhZ1NUM2NnRzc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAqBc/A AAMDBwAqBc/AAAQwDQYJKoZIhvcNAQELBQADggEBACwcsEzfWwosdXbyfcv7F48U y18trEwHzs5vONZKdfZrHCGef/HkzHuIL8PmMjESwOGqJ3UijHenq2bC7eHTcWgE f8K1ApVz1Z7VHJg8dp1br7wXL8XHmHuV99CrThr3i9atqqyRPd99EgWsINJkMZB1 lQ8qwM9TLoFiHTk5FtEb8BHvSMuujj2ry9vugpuOew33r9PF42ltddRfYioIIqDA sgHoqMQc6ZbkNZ0fdMwcEEHRgJfZGtJjKdGxFMuYw4ysiiD+jTzToaLL/Im484os nnoJGNHhgC2D7Vhs6E+Ah6ZPzRxKX2z4qRBDVjgRcckUzHgBUjLmz0d3mCWIDtE= -----END CERTIFICATE-----Generated at Mon Jan 26 03:57:16 2026 by rpki-client