This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/1-UtCMLoYpQTccw0rAaKnjr3aeP4.roa File: 1-UtCMLoYpQTccw0rAaKnjr3aeP4.roa (raw, json) Hash identifier: N8latQNhGiEjvdqVYf+HsgaWPueV4r0S9nawy713xeE= Subject key identifier: F9:4B:42:30:BA:18:A5:04:DC:73:0D:2B:01:A2:A7:8E:BD:DA:78:FE Certificate issuer: /CN=3d0483538737453e2f57ffb57499c3922e83636d Certificate serial: 019B7CEDDADD93F4836F006727F660E03EBC Authority key identifier: 3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/1-UtCMLoYpQTccw0rAaKnjr3aeP4.roa Signing time: Fri 02 Jan 2026 04:18:41 +0000 ROA not before: Fri 02 Jan 2026 04:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200482 IP address blocks: 2a07:6d40:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:da:dd:93:f4:83:6f:00:67:27:f6:60:e0:3e:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d0483538737453e2f57ffb57499c3922e83636d Validity Not Before: Jan 2 04:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f94b4230ba18a504dc730d2b01a2a78ebdda78fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:58:ba:eb:9b:d5:63:44:f9:77:ad:66:90:ad: b0:43:54:39:71:3d:9b:39:dd:db:b4:f0:68:d2:a2: c4:99:6c:2f:0c:43:7a:79:7a:92:51:31:eb:11:70: bf:80:9b:87:26:61:b9:03:b1:63:58:ad:70:65:7f: d6:cc:e6:3c:14:f2:b4:91:d8:a4:05:57:9b:b9:74: 1d:7d:9c:62:7b:99:15:9d:a2:cd:e5:72:47:64:df: 56:4a:b1:46:da:5d:06:4c:e5:53:22:22:b6:ca:46: d5:6d:fc:27:43:db:52:82:cc:76:1c:50:60:5d:b2: fb:b5:42:7f:b1:10:ed:3e:85:ed:9b:53:90:df:7c: 58:8b:ee:89:03:8c:27:68:ab:b6:0a:af:1d:50:a1: e4:59:cd:77:61:86:1c:a6:ef:44:e1:4e:24:6e:c5: ae:79:e7:6e:20:e0:a2:07:ab:25:c4:80:a3:f6:23: 64:70:b1:d6:64:8b:a7:0a:f6:ad:8a:7e:5f:fa:3f: 44:45:96:b7:b2:16:1c:39:2e:fc:4f:6e:68:4d:a9: 84:f5:16:05:0e:61:9c:6c:44:0c:a4:f9:0f:33:62: b8:4e:21:8e:8b:d2:f8:e9:05:b1:c8:69:21:7a:ee: 16:5f:15:e2:45:83:98:6f:94:8e:2a:b6:88:e3:fc: 7c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:4B:42:30:BA:18:A5:04:DC:73:0D:2B:01:A2:A7:8E:BD:DA:78:FE X509v3 Authority Key Identifier: keyid:3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/1-UtCMLoYpQTccw0rAaKnjr3aeP4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:6d40:2::/48 Signature Algorithm: sha256WithRSAEncryption 9e:51:09:79:12:fc:88:40:05:84:71:86:49:2c:c8:40:ea:b6: 48:ba:1c:cf:93:e2:e5:e3:62:e5:dc:8d:f7:20:8d:29:b6:7b: 2d:1e:3c:02:d9:7b:14:c1:e0:5d:4a:f6:f2:97:54:61:fe:c8: b3:79:6e:65:ea:f9:d9:2f:63:47:b6:e6:e7:86:8c:b1:70:5e: 8c:e2:a1:cf:29:77:90:8f:ed:0a:f8:67:0d:48:73:90:a0:24: de:c2:72:b1:fd:5f:2b:41:c8:42:2d:f3:4b:a3:58:a8:1c:cb: ec:96:39:f3:0b:20:0e:2f:f4:0f:35:83:53:08:61:a2:7c:b5: 18:4c:27:a0:d7:f9:24:27:08:8a:b5:3d:eb:39:02:e2:61:15: 04:e9:54:dc:58:13:9b:40:83:63:0b:af:18:5a:83:eb:c2:9e: 93:94:3c:33:7a:c1:8a:a6:67:0b:9e:5d:8a:77:bc:91:9b:36: 26:26:94:1f:60:57:42:73:8c:67:8b:37:f3:41:b0:7d:43:6b: 24:c0:6c:33:bc:75:ff:0d:db:a4:42:66:db:19:5f:fa:24:62: 2f:16:27:66:3f:99:98:a7:96:c5:04:d1:23:e9:90:7f:0b:9d: c4:1d:2e:21:87:a1:d9:07:20:12:6f:64:61:7d:bf:1c:ad:59: f7:61:7e:a9 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZt87drdk/SDbwBnJ/Zg4D68MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkMDQ4MzUzODczNzQ1M2UyZjU3ZmZiNTc0OTljMzkyMmU4 MzYzNmQwHhcNMjYwMTAyMDQxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTRiNDIzMGJhMThhNTA0ZGM3MzBkMmIwMWEyYTc4ZWJkZGE3OGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFi665vVY0T5d61mkK2wQ1Q5cT2b Od3btPBo0qLEmWwvDEN6eXqSUTHrEXC/gJuHJmG5A7FjWK1wZX/WzOY8FPK0kdik BVebuXQdfZxie5kVnaLN5XJHZN9WSrFG2l0GTOVTIiK2ykbVbfwnQ9tSgsx2HFBg XbL7tUJ/sRDtPoXtm1OQ33xYi+6JA4wnaKu2Cq8dUKHkWc13YYYcpu9E4U4kbsWu eeduIOCiB6slxICj9iNkcLHWZIunCvatin5f+j9ERZa3shYcOS78T25oTamE9RYF DmGcbEQMpPkPM2K4TiGOi9L46QWxyGkheu4WXxXiRYOYb5SOKraI4/x8pwIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFPlLQjC6GKUE3HMNKwGip4692nj+MB8GA1UdIwQY MBaAFD0Eg1OHN0U+L1f/tXSZw5Iug2NtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFFTRFU0YzNSVDR2Vl8tMWRKbkRraTZEWTIwLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9lMTA2YzMtMGIxZi00MDEwLTg2ZjEt NjVhNDZjOGU0MWU5LzEvMS1VdENNTG9ZcFFUY2N3MHJBYUtuanIzYWVQNC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYTUvZTEwNmMzLTBiMWYtNDAxMC04NmYxLTY1YTQ2YzhlNDFl OS8xL1BRU0RVNGMzUlQ0dlZfLTFkSm5Ea2k2RFkyMC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoHbUAA AjANBgkqhkiG9w0BAQsFAAOCAQEAnlEJeRL8iEAFhHGGSSzIQOq2SLocz5Pi5eNi 5dyN9yCNKbZ7LR48Atl7FMHgXUr28pdUYf7Is3luZer52S9jR7bm54aMsXBejOKh zyl3kI/tCvhnDUhzkKAk3sJysf1fK0HIQi3zS6NYqBzL7JY58wsgDi/0DzWDUwhh ony1GEwnoNf5JCcIirU96zkC4mEVBOlU3FgTm0CDYwuvGFqD68Kek5Q8M3rBiqZn C55dine8kZs2JiaUH2BXQnOMZ4s380GwfUNrJMBsM7x1/w3bpEJm2xlf+iRiLxYn Zj+ZmKeWxQTRI+mQfwudxB0uIYeh2QcgEm9kYX2/HK1Z92F+qQ== -----END CERTIFICATE-----Generated at Sun Jan 25 16:09:35 2026 by rpki-client