This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/UnPZZ3Kg5vEIC6EGE2a0fCR05Us.roa File: UnPZZ3Kg5vEIC6EGE2a0fCR05Us.roa (raw, json) Hash identifier: nCSgngo72sAUBIAPkqY1n0nS+kfpLh6FUfGBWOhDNHw= Subject key identifier: 52:73:D9:67:72:A0:E6:F1:08:0B:A1:06:13:66:B4:7C:24:74:E5:4B Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Certificate serial: 019B77C769FA738DC33A18214DBA010152D9 Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/UnPZZ3Kg5vEIC6EGE2a0fCR05Us.roa Signing time: Thu 01 Jan 2026 04:18:35 +0000 ROA not before: Thu 01 Jan 2026 04:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206306 IP address blocks: 2a12:3bc6::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:69:fa:73:8d:c3:3a:18:21:4d:ba:01:01:52:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Validity Not Before: Jan 1 04:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5273d96772a0e6f1080ba1061366b47c2474e54b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:58:7d:4a:84:51:f9:d7:a4:dc:40:ad:ef:4a: 55:e2:da:11:e6:de:cb:0b:f1:04:3e:3e:dc:ea:c6: 04:d7:31:1f:fb:ca:4d:52:1b:85:ad:5d:df:67:37: 4e:44:33:90:29:8c:74:2c:80:a4:6f:10:6e:83:c6: 09:f5:06:19:1f:f7:f7:28:40:54:e6:2e:34:b2:e1: 48:22:07:fd:df:2b:fd:db:65:64:7d:65:07:84:6e: 63:08:50:8b:92:f2:5c:9e:c2:f9:e8:2d:13:cf:8a: 44:90:7b:f8:34:8d:12:ad:9b:3a:3f:95:00:c3:0f: 7c:ad:5e:a6:1c:0d:03:34:ca:d1:19:b4:e1:9f:c6: 61:de:13:1f:18:3f:dd:67:90:5f:a3:2c:e8:ef:22: d4:48:e1:a4:22:47:b9:9c:16:d7:a8:7f:20:85:f1: 77:92:2d:fa:44:81:52:6b:8a:29:ae:e5:6a:ef:f8: 54:3e:31:52:a4:09:3a:ed:89:6d:3c:09:40:94:c0: 87:00:4e:54:d1:1a:f5:68:0e:54:fd:a7:17:75:62: 47:36:b3:91:a3:01:ef:70:b6:24:ec:4a:82:7b:b0: cf:69:7c:14:09:85:42:1d:17:59:d4:3f:e2:5e:f6: 91:e6:2a:0e:c8:69:3d:65:b1:62:e9:bf:03:c0:a1: 3c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:73:D9:67:72:A0:E6:F1:08:0B:A1:06:13:66:B4:7C:24:74:E5:4B X509v3 Authority Key Identifier: keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/UnPZZ3Kg5vEIC6EGE2a0fCR05Us.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:3bc6::/32 Signature Algorithm: sha256WithRSAEncryption 9e:54:29:48:ab:4b:8e:fd:1c:29:3b:f9:e7:23:53:da:5a:06: 6a:58:bb:5d:2e:ce:02:52:f5:0b:71:58:68:cf:78:bd:c5:54: 7d:35:ce:d4:6b:3b:9a:47:1b:18:31:13:67:67:d3:25:9a:78: 5c:03:b0:51:ba:3e:6b:d2:a6:a1:ce:48:6c:68:1f:93:e5:b6: 58:ac:2f:5b:b1:5c:79:3c:15:e0:42:e6:d9:58:5b:93:27:75: 8f:71:f9:7c:70:20:1e:28:70:67:0d:88:ce:26:e0:d5:a0:66: c2:4e:05:77:ee:38:0f:21:8f:dd:3b:96:4f:14:16:a9:79:ea: 4f:0f:32:58:37:4b:e7:7a:b9:a4:48:bf:88:6d:33:0f:45:f9: b7:da:14:09:51:af:fa:e6:0c:40:1d:ce:95:12:0a:20:6a:ef: 8a:d7:fe:80:4d:cd:04:6a:ae:4e:70:a7:c6:f6:a0:11:a4:fd: 3d:93:3f:1f:c9:dd:a2:fc:ce:79:0b:5e:0f:b7:90:88:9d:c4: af:3c:b8:d5:3b:16:a2:bc:40:79:ad:eb:db:4a:18:fb:cb:65: ea:d6:55:a4:3e:fd:35:ad:05:dc:90:04:42:64:05:a3:48:d8: 75:d6:e7:36:2a:75:4d:0a:de:79:02:3a:e6:48:32:08:3a:21: bf:dc:93:5e -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt3x2n6c43DOhghTboBAVLZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiOTQ0N2ZlOWE0YWNjN2Q2ZmY3MmQ2Yzc5OGQ0M2Q2NmNk NTBjM2YwHhcNMjYwMTAxMDQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjczZDk2NzcyYTBlNmYxMDgwYmExMDYxMzY2YjQ3YzI0NzRlNTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlh9SoRR+dek3ECt70pV4toR5t7L C/EEPj7c6sYE1zEf+8pNUhuFrV3fZzdORDOQKYx0LICkbxBug8YJ9QYZH/f3KEBU 5i40suFIIgf93yv922VkfWUHhG5jCFCLkvJcnsL56C0Tz4pEkHv4NI0SrZs6P5UA ww98rV6mHA0DNMrRGbThn8Zh3hMfGD/dZ5Bfoyzo7yLUSOGkIke5nBbXqH8ghfF3 ki36RIFSa4opruVq7/hUPjFSpAk67YltPAlAlMCHAE5U0Rr1aA5U/acXdWJHNrOR owHvcLYk7EqCe7DPaXwUCYVCHRdZ1D/iXvaR5ioOyGk9ZbFi6b8DwKE8BwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFFJz2WdyoObxCAuhBhNmtHwkdOVLMB8GA1UdIwQY MBaAFHuUR/6aSsx9b/ctbHmNQ9Zs1Qw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUt OWZjZWI0NWQ2ZmRiLzEvVW5QWlozS2c1dkVJQzZFR0UyYTBmQ1IwNVVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUtOWZjZWI0NWQ2ZmRi LzEvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhI7xjAN BgkqhkiG9w0BAQsFAAOCAQEAnlQpSKtLjv0cKTv55yNT2loGali7XS7OAlL1C3FY aM94vcVUfTXO1Gs7mkcbGDETZ2fTJZp4XAOwUbo+a9Kmoc5IbGgfk+W2WKwvW7Fc eTwV4ELm2Vhbkyd1j3H5fHAgHihwZw2Izibg1aBmwk4Fd+44DyGP3TuWTxQWqXnq Tw8yWDdL53q5pEi/iG0zD0X5t9oUCVGv+uYMQB3OlRIKIGrvitf+gE3NBGquTnCn xvagEaT9PZM/H8ndovzOeQteD7eQiJ3Erzy41TsWorxAea3r20oY+8tl6tZVpD79 Na0F3JAEQmQFo0jYddbnNip1TQreeQI65kgyCDohv9yTXg== -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:14 2026 by rpki-client