This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Un6YiMPdPmnXJEAfLjnF4ejn4-U.roa File: Un6YiMPdPmnXJEAfLjnF4ejn4-U.roa (raw, json) Hash identifier: Vvj30zXhMxPg9hIHuIBZfVJuw/gM4ZcLB86Kjx9twm4= Subject key identifier: 52:7E:98:88:C3:DD:3E:69:D7:24:40:1F:2E:39:C5:E1:E8:E7:E3:E5 Certificate issuer: /CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1 Certificate serial: 019B7C805314C620CC3CB68E7A8BAB48AC1E Authority key identifier: 16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Un6YiMPdPmnXJEAfLjnF4ejn4-U.roa Signing time: Fri 02 Jan 2026 02:19:03 +0000 ROA not before: Fri 02 Jan 2026 02:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9890 IP address blocks: 155.45.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 17:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:53:14:c6:20:cc:3c:b6:8e:7a:8b:ab:48:ac:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1 Validity Not Before: Jan 2 02:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=527e9888c3dd3e69d724401f2e39c5e1e8e7e3e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:9a:1f:0d:5d:70:e8:b9:a9:c7:ba:c9:fa:87: 7b:86:25:c1:66:5c:6f:f9:cb:02:d0:68:09:29:5c: 95:f1:4d:2a:2d:1a:eb:fb:1a:87:55:59:ea:76:19: 1d:e8:28:7d:9c:4d:cd:77:07:dc:e0:5f:57:9f:0e: 97:af:66:a1:5f:7a:b6:02:a0:fc:3a:cf:d7:4e:fa: 75:02:2c:50:ee:16:36:88:4c:66:20:61:ad:0d:68: 16:13:0e:3c:e9:7d:02:8f:81:5f:f2:2e:f5:34:28: 14:36:2e:af:49:cf:d9:8a:bd:dd:0f:67:0d:8f:9a: f6:43:13:29:cb:ad:e0:7d:76:a1:fa:a5:27:a4:48: 7e:55:4a:13:80:eb:a3:28:6c:ce:fc:45:c6:aa:61: b7:8f:e3:d1:47:ea:55:1a:d5:a3:2a:97:c4:e9:2b: f1:d7:f8:5b:1c:10:7b:7b:1e:c4:98:88:0b:60:04: 9a:38:ea:25:b4:a0:e8:e9:ec:6d:53:c5:f5:e0:38: 38:d5:20:e1:42:1b:6a:74:5a:61:f4:a1:d1:93:78: 51:25:2f:59:d0:a0:ce:1a:0c:88:9e:5d:37:ce:13: c1:4b:a6:7d:d0:9a:e8:5b:f5:d3:f0:de:b7:ba:31: 16:c6:a7:69:fb:c3:42:03:7d:7a:29:75:b9:b1:d3: b3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:7E:98:88:C3:DD:3E:69:D7:24:40:1F:2E:39:C5:E1:E8:E7:E3:E5 X509v3 Authority Key Identifier: keyid:16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Un6YiMPdPmnXJEAfLjnF4ejn4-U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.45.130.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:59:c4:fe:c0:8a:03:58:40:25:86:4d:86:a6:99:3d:94:bb: 13:0f:c4:cc:98:cf:09:06:80:68:31:d2:0d:d9:45:93:69:31: 87:fc:ed:c7:ce:72:44:a5:02:1f:3f:06:14:5a:9c:96:48:eb: e9:0a:19:4e:33:2b:ed:b4:7e:50:80:ef:dd:65:28:1b:82:04: ea:9e:72:88:90:80:95:a9:6b:62:c4:2b:1b:b2:c1:8f:f8:b6: 22:83:16:b6:c6:3b:20:f9:8f:72:44:0b:74:bf:6e:c4:7f:3b: cb:59:2e:63:28:7c:e6:18:3d:18:ae:9c:50:9e:c0:f0:7d:18: 82:d4:e2:e2:c3:95:7b:af:87:3e:b9:4b:38:4f:9e:1c:40:b3: b0:80:c8:25:b9:20:73:b5:99:cb:02:8e:04:db:9b:66:26:b6: 35:ec:13:d3:88:b9:93:de:77:4f:67:ce:f1:2a:f5:9d:ea:7c: 19:2b:fe:38:9f:c2:6f:a0:0e:a9:7d:0b:b2:74:bb:7b:66:1b: e0:ff:75:6f:fb:2d:31:25:e8:89:dc:01:2a:8d:b6:05:91:96: f8:41:31:0f:25:53:55:37:51:cd:89:70:49:ed:ab:b6:0a:7e: 0f:23:de:ea:6a:cc:1d:78:f5:cc:37:eb:43:a0:35:f1:45:42: 35:1f:d7:5a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gFMUxiDMPLaOeourSKweMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2Y2RlMTM5YWUwNTczYjBhNGRkYTkzZTc3YjU3ZmYyN2Y5 YmViYTEwHhcNMjYwMTAyMDIxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjdlOTg4OGMzZGQzZTY5ZDcyNDQwMWYyZTM5YzVlMWU4ZTdlM2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpofDV1w6Lmpx7rJ+od7hiXBZlxv +csC0GgJKVyV8U0qLRrr+xqHVVnqdhkd6Ch9nE3Ndwfc4F9Xnw6Xr2ahX3q2AqD8 Os/XTvp1AixQ7hY2iExmIGGtDWgWEw486X0Cj4Ff8i71NCgUNi6vSc/Zir3dD2cN j5r2QxMpy63gfXah+qUnpEh+VUoTgOujKGzO/EXGqmG3j+PRR+pVGtWjKpfE6Svx 1/hbHBB7ex7EmIgLYASaOOoltKDo6extU8X14Dg41SDhQhtqdFph9KHRk3hRJS9Z 0KDOGgyInl03zhPBS6Z90JroW/XT8N63ujEWxqdp+8NCA316KXW5sdOzNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFJ+mIjD3T5p1yRAHy45xeHo5+PlMB8GA1UdIwQY MBaAFBbN4TmuBXOwpN2pPne1f/J/m+uhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnMzaE9hNEZjN0NrM2FrLWQ3Vl84bi1iNjZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8zYzAyZjYtN2M0MS00OWJiLWI5ZGUt YjY5ZGNlNzU0N2ExLzEvVW42WWlNUGRQbW5YSkVBZkxqbkY0ZWpuNC1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8zYzAyZjYtN2M0MS00OWJiLWI5ZGUtYjY5ZGNlNzU0N2Ex LzEvRnMzaE9hNEZjN0NrM2FrLWQ3Vl84bi1iNjZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmy2CMA0G CSqGSIb3DQEBCwUAA4IBAQA/WcT+wIoDWEAlhk2Gppk9lLsTD8TMmM8JBoBoMdIN 2UWTaTGH/O3HznJEpQIfPwYUWpyWSOvpChlOMyvttH5QgO/dZSgbggTqnnKIkICV qWtixCsbssGP+LYigxa2xjsg+Y9yRAt0v27EfzvLWS5jKHzmGD0YrpxQnsDwfRiC 1OLiw5V7r4c+uUs4T54cQLOwgMgluSBztZnLAo4E25tmJrY17BPTiLmT3ndPZ87x KvWd6nwZK/44n8JvoA6pfQuydLt7Zhvg/3Vv+y0xJeiJ3AEqjbYFkZb4QTEPJVNV N1HNiXBJ7au2Cn4PI97qaswdePXMN+tDoDXxRUI1H9da -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:49 2026 by rpki-client