This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/CuUaPGtvCMhbfFTKvA6UReL_F_Y.roa File: CuUaPGtvCMhbfFTKvA6UReL_F_Y.roa (raw, json) Hash identifier: UAHd42O2KjlmEGP6gn2QJSSuqJWzfTB5HZHwnRpiaVs= Subject key identifier: 0A:E5:1A:3C:6B:6F:08:C8:5B:7C:54:CA:BC:0E:94:45:E2:FF:17:F6 Certificate issuer: /CN=a566d8337776c98746bd231e69e185db2a9a5be2 Certificate serial: 019B7BA3494E2206495074DD33068AB3A5AF Authority key identifier: A5:66:D8:33:77:76:C9:87:46:BD:23:1E:69:E1:85:DB:2A:9A:5B:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/CuUaPGtvCMhbfFTKvA6UReL_F_Y.roa Signing time: Thu 01 Jan 2026 22:17:37 +0000 ROA not before: Thu 01 Jan 2026 22:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207835 IP address blocks: 2a0e:1540:f9c0::/42 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:49:4e:22:06:49:50:74:dd:33:06:8a:b3:a5:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a566d8337776c98746bd231e69e185db2a9a5be2 Validity Not Before: Jan 1 22:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ae51a3c6b6f08c85b7c54cabc0e9445e2ff17f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a9:22:b1:b0:1a:e6:71:44:f2:73:b7:4c:d6: d4:ea:8b:30:93:1b:ce:2c:69:8c:28:e7:69:a5:d0: eb:da:e6:bf:13:98:e6:d8:3f:6b:4f:97:71:ef:f3: af:28:bb:dc:2b:fb:de:fa:f4:ca:be:2c:f3:2d:0b: a2:9d:09:75:79:4e:28:69:74:9f:21:6b:24:2b:0a: 29:9a:87:4c:40:6d:73:69:0a:0c:33:e4:84:bb:ab: 40:c0:ff:f7:81:e2:64:92:63:ce:eb:03:2b:9d:f1: 13:ad:93:0b:a6:05:d5:6e:c8:46:cd:19:b5:7a:2a: 27:99:39:ab:ed:d0:92:ed:37:78:63:14:fe:48:8b: c2:e5:3c:29:84:40:99:aa:08:b7:ea:e4:7f:29:c2: d9:18:3f:ae:83:d3:b7:be:ad:60:58:31:20:30:dc: f5:90:44:52:f8:80:88:d7:d2:42:46:d5:f7:41:a0: 25:e7:30:60:8d:d4:44:bc:b4:9f:9e:02:58:27:1e: 3c:7e:b0:6b:73:43:84:eb:bb:f4:f7:6a:c7:a8:2c: 9d:e1:09:cd:52:43:c2:de:4a:e1:0f:12:55:5f:64: ed:3b:20:bc:16:98:d1:57:33:73:94:5e:9d:a8:8b: 68:a0:b6:c2:c1:70:a6:cc:f1:92:1d:ac:20:1b:6e: 49:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:E5:1A:3C:6B:6F:08:C8:5B:7C:54:CA:BC:0E:94:45:E2:FF:17:F6 X509v3 Authority Key Identifier: keyid:A5:66:D8:33:77:76:C9:87:46:BD:23:1E:69:E1:85:DB:2A:9A:5B:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/CuUaPGtvCMhbfFTKvA6UReL_F_Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:1540:f9c0::/42 Signature Algorithm: sha256WithRSAEncryption 5a:0a:50:31:11:c2:10:72:3d:33:37:10:35:ad:af:dc:5d:4a: 2f:4b:ed:5b:29:fd:9e:3a:40:08:a7:d5:5d:ab:27:e6:20:2d: 4b:7e:b7:34:33:e3:b2:5b:35:9b:c1:fe:4d:db:88:31:fa:7f: e8:1e:5c:d6:a6:04:c5:ba:28:27:d5:d3:14:fe:31:77:1d:7b: 1f:7b:03:87:43:d0:04:65:f2:27:ba:1a:7f:b5:8c:55:1a:4b: 26:57:f9:63:a0:7d:61:1e:39:39:02:f0:72:90:b2:34:84:78: bb:e9:b9:24:b8:27:79:d1:81:38:07:fc:f7:f6:32:7c:57:2b: 86:b8:7c:57:6b:2d:4c:ad:44:b4:95:ae:6d:6f:f9:3e:a9:26: 6e:f0:f4:96:9c:58:e8:45:a9:db:90:4e:55:60:d2:32:71:5d: 85:ea:41:34:80:54:92:da:a7:b3:e5:f3:52:8f:3b:04:6e:a0: 6d:4c:27:eb:9f:e1:aa:75:39:75:89:af:5e:e7:b8:cb:bf:26: c5:f1:24:0b:3a:e9:5d:e1:0c:e3:fd:28:98:94:60:c4:2b:73: fb:e8:f9:5b:fb:b8:d3:59:b7:1d:99:20:d5:75:44:90:23:14: ac:e4:0c:a4:29:9b:51:0c:f8:b9:fc:51:74:c4:66:d2:f6:6d: db:45:cc:13 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7o0lOIgZJUHTdMwaKs6WvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NjZkODMzNzc3NmM5ODc0NmJkMjMxZTY5ZTE4NWRiMmE5 YTViZTIwHhcNMjYwMTAxMjIxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWU1MWEzYzZiNmYwOGM4NWI3YzU0Y2FiYzBlOTQ0NWUyZmYxN2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApakisbAa5nFE8nO3TNbU6oswkxvO LGmMKOdppdDr2ua/E5jm2D9rT5dx7/OvKLvcK/ve+vTKvizzLQuinQl1eU4oaXSf IWskKwopmodMQG1zaQoMM+SEu6tAwP/3geJkkmPO6wMrnfETrZMLpgXVbshGzRm1 eionmTmr7dCS7Td4YxT+SIvC5TwphECZqgi36uR/KcLZGD+ug9O3vq1gWDEgMNz1 kERS+ICI19JCRtX3QaAl5zBgjdREvLSfngJYJx48frBrc0OE67v092rHqCyd4QnN UkPC3krhDxJVX2TtOyC8FpjRVzNzlF6dqItooLbCwXCmzPGSHawgG25JJwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFArlGjxrbwjIW3xUyrwOlEXi/xf2MB8GA1UdIwQY MBaAFKVm2DN3dsmHRr0jHmnhhdsqmlviMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFdiWU0zZDJ5WWRHdlNNZWFlR0YyeXFhVy1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wMTY4YWMtMzQyYy00ZGQwLTkxYTgt MWI3NTg2N2U4ZGZmLzEvQ3VVYVBHdHZDTWhiZkZUS3ZBNlVSZUxfRl9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8wMTY4YWMtMzQyYy00ZGQwLTkxYTgtMWI3NTg2N2U4ZGZm LzEvcFdiWU0zZDJ5WWRHdlNNZWFlR0YyeXFhVy1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGKg4VQPnA MA0GCSqGSIb3DQEBCwUAA4IBAQBaClAxEcIQcj0zNxA1ra/cXUovS+1bKf2eOkAI p9VdqyfmIC1Lfrc0M+OyWzWbwf5N24gx+n/oHlzWpgTFuign1dMU/jF3HXsfewOH Q9AEZfInuhp/tYxVGksmV/ljoH1hHjk5AvBykLI0hHi76bkkuCd50YE4B/z39jJ8 VyuGuHxXay1MrUS0la5tb/k+qSZu8PSWnFjoRanbkE5VYNIycV2F6kE0gFSS2qez 5fNSjzsEbqBtTCfrn+GqdTl1ia9e57jLvybF8SQLOuld4Qzj/SiYlGDEK3P76Plb +7jTWbcdmSDVdUSQIxSs5AykKZtRDPi5/FF0xGbS9m3bRcwT -----END CERTIFICATE-----Generated at Sun Jan 25 19:17:45 2026 by rpki-client