This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/uB8MKGWb3Ah0aZK2Vf2usmZHzG8.roa File: uB8MKGWb3Ah0aZK2Vf2usmZHzG8.roa (raw, json) Hash identifier: BfFc9lt0STbJmAF8lGnEz5SYrhiI62mYVaN3nT2PLtQ= Subject key identifier: B8:1F:0C:28:65:9B:DC:08:74:69:92:B6:55:FD:AE:B2:66:47:CC:6F Certificate issuer: /CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef Certificate serial: 019B79ED5E6C07B22C65EE758968635BBF05 Authority key identifier: D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/uB8MKGWb3Ah0aZK2Vf2usmZHzG8.roa Signing time: Thu 01 Jan 2026 14:19:17 +0000 ROA not before: Thu 01 Jan 2026 14:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212469 IP address blocks: 2a0e:e704:60::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:5e:6c:07:b2:2c:65:ee:75:89:68:63:5b:bf:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef Validity Not Before: Jan 1 14:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b81f0c28659bdc08746992b655fdaeb26647cc6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:92:2b:22:a0:e1:18:d7:10:3d:48:1f:6d:8c: 29:f3:52:b1:b1:68:d1:7e:1e:60:26:7e:8d:3c:d0: 62:a9:76:8a:30:c3:e4:7b:69:49:a8:0e:3d:67:5d: 73:9f:7a:98:34:99:c5:dc:e6:ee:d4:02:51:72:b0: 28:45:7f:3b:e1:65:25:a0:c2:56:04:c1:86:4f:fd: c2:e4:7d:e8:83:1e:e4:54:0f:a9:00:3c:d3:e4:9c: fb:0c:19:8d:f8:06:28:11:72:7d:2b:c4:71:81:22: f1:63:cc:61:af:9b:c9:ee:6d:94:ec:6f:c3:c6:cd: 34:6b:95:4c:e4:b2:d1:0f:0b:75:99:1a:21:1f:51: 27:00:ae:b1:20:41:1e:2e:f8:72:8a:a8:7f:f2:80: f1:39:18:20:6c:38:12:9b:f5:3f:c9:ea:37:f7:23: 0b:ac:8c:c1:5c:48:fc:fc:d9:fd:fa:59:2b:1c:ec: 3c:06:15:1c:b5:86:f5:11:26:70:d9:ae:36:67:a5: 95:bd:df:06:3a:5e:bd:8a:ce:a1:93:69:83:5e:38: 4d:a4:b6:2b:57:11:de:0a:fc:2e:79:44:90:c6:98: d3:63:7a:1c:2c:fe:50:51:08:fa:61:5e:ba:4d:fa: ae:6d:45:6b:3d:c5:1c:5b:68:50:c4:c3:ce:c0:0b: de:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:1F:0C:28:65:9B:DC:08:74:69:92:B6:55:FD:AE:B2:66:47:CC:6F X509v3 Authority Key Identifier: keyid:D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/uB8MKGWb3Ah0aZK2Vf2usmZHzG8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:e704:60::/44 Signature Algorithm: sha256WithRSAEncryption 31:97:1b:b0:b4:c0:37:28:70:1f:92:97:a0:93:11:da:ca:25: 44:10:73:ba:1d:f2:eb:be:14:29:c3:53:3d:47:f5:b9:06:32: 0d:cc:3b:cc:2c:b2:68:2e:bd:65:b7:e4:3b:0e:7e:b4:57:b3: 6a:82:7d:b1:99:13:60:dd:39:9b:f2:e0:83:ee:16:1d:ce:ed: fa:f7:4b:23:6e:65:52:ca:e7:38:f8:03:77:a9:4a:4e:43:ed: d5:73:5d:21:5a:24:4f:f0:bf:21:bf:99:37:2e:4b:8e:54:bc: 4c:4d:eb:56:96:a7:61:6f:f5:79:31:69:2d:ac:77:0e:6b:f4: 61:9e:6b:87:aa:4c:47:27:f3:8b:85:b6:2c:f4:b6:b7:ba:19: df:e3:85:74:2f:22:37:84:6f:13:e4:ec:91:34:1f:42:e6:17: 45:41:91:f7:9a:68:48:57:56:78:e2:61:35:16:42:f5:67:14: c0:7f:ba:e6:3b:6e:81:e9:c8:9b:02:f9:1b:ad:07:87:a0:16: 79:bc:13:b3:f0:6e:c0:35:30:aa:e3:4a:ca:7a:6a:2d:e4:09: a1:b2:7f:7d:7f:b1:30:cf:19:bd:76:b6:f5:d5:7f:ba:63:a3: 30:e9:40:08:d1:db:fb:31:e4:73:63:e4:0a:98:4c:79:2a:14: 5d:c5:76:9a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57V5sB7IsZe51iWhjW78FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MGY0NWY3Y2M0YjY5MWZkNGEzMWMxZjFjMGI0ZjYwNWQ3 N2E2ZWYwHhcNMjYwMTAxMTQxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODFmMGMyODY1OWJkYzA4NzQ2OTkyYjY1NWZkYWViMjY2NDdjYzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JIrIqDhGNcQPUgfbYwp81KxsWjR fh5gJn6NPNBiqXaKMMPke2lJqA49Z11zn3qYNJnF3Obu1AJRcrAoRX874WUloMJW BMGGT/3C5H3ogx7kVA+pADzT5Jz7DBmN+AYoEXJ9K8RxgSLxY8xhr5vJ7m2U7G/D xs00a5VM5LLRDwt1mRohH1EnAK6xIEEeLvhyiqh/8oDxORggbDgSm/U/yeo39yML rIzBXEj8/Nn9+lkrHOw8BhUctYb1ESZw2a42Z6WVvd8GOl69is6hk2mDXjhNpLYr VxHeCvwueUSQxpjTY3ocLP5QUQj6YV66TfqubUVrPcUcW2hQxMPOwAveQQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLgfDChlm9wIdGmStlX9rrJmR8xvMB8GA1UdIwQY MBaAFNYPRffMS2kf1KMcHxwLT2Bdd6bvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzkt YTk1NGQwNTM5OTRhLzEvdUI4TUtHV2IzQWgwYVpLMlZmMnVzbVpIekc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzktYTk1NGQwNTM5OTRh LzEvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg7nBABg MA0GCSqGSIb3DQEBCwUAA4IBAQAxlxuwtMA3KHAfkpegkxHayiVEEHO6HfLrvhQp w1M9R/W5BjINzDvMLLJoLr1lt+Q7Dn60V7Nqgn2xmRNg3Tmb8uCD7hYdzu3690sj bmVSyuc4+AN3qUpOQ+3Vc10hWiRP8L8hv5k3LkuOVLxMTetWlqdhb/V5MWktrHcO a/RhnmuHqkxHJ/OLhbYs9La3uhnf44V0LyI3hG8T5OyRNB9C5hdFQZH3mmhIV1Z4 4mE1FkL1ZxTAf7rmO26B6cibAvkbrQeHoBZ5vBOz8G7ANTCq40rKemot5Amhsn99 f7Ewzxm9drb11X+6Y6Mw6UAI0dv7MeRzY+QKmEx5KhRdxXaa -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:21 2026 by rpki-client