This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/UcL950VNXfeGMnUK-Fw9xlceECk.roa File: UcL950VNXfeGMnUK-Fw9xlceECk.roa (raw, json) Hash identifier: TqMsl3SUxzJ1mWiGN+NQ2Ox32wjkXQIKVSEw4efBhJ8= Subject key identifier: 51:C2:FD:E7:45:4D:5D:F7:86:32:75:0A:F8:5C:3D:C6:57:1E:10:29 Certificate issuer: /CN=aa9a164c656412b7daafae8571cc679cc6f587d0 Certificate serial: 019B7AC79A2E1D313625BA3A8F3D8F01B556 Authority key identifier: AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/UcL950VNXfeGMnUK-Fw9xlceECk.roa Signing time: Thu 01 Jan 2026 18:17:40 +0000 ROA not before: Thu 01 Jan 2026 18:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25145 IP address blocks: 2a09:6080::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 23:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:9a:2e:1d:31:36:25:ba:3a:8f:3d:8f:01:b5:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa9a164c656412b7daafae8571cc679cc6f587d0 Validity Not Before: Jan 1 18:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51c2fde7454d5df78632750af85c3dc6571e1029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:31:f6:bf:29:bc:88:44:04:97:c5:e6:c1:22: d9:8d:b2:4c:a0:86:32:3f:9e:93:e1:8c:8f:a0:0f: ee:01:e0:d5:90:e1:38:8c:ce:10:1d:35:2b:4e:b9: 13:f1:a6:a8:f0:b0:8d:90:8a:85:43:22:9d:fe:6a: da:55:a7:7d:f8:8e:49:9c:c3:e2:75:3b:84:25:17: b7:69:db:e5:38:85:51:f5:d1:a3:bf:6c:23:f8:c9: 36:ee:d5:9b:d4:4d:2c:32:e3:1d:aa:16:64:c9:17: fe:41:71:67:f1:2b:3b:0d:e2:f2:cd:5f:fc:e8:51: a7:07:77:8d:d1:9c:19:93:12:ad:de:d2:1e:33:c5: 09:fd:39:99:f6:bf:66:ed:13:f5:6d:dd:a1:f2:c3: d4:0a:26:c6:c3:2c:d8:18:f9:85:c1:cf:f1:52:23: f0:9d:cf:a9:2f:cd:68:12:fc:a2:d1:30:0a:03:7a: dd:6d:7f:31:03:7b:74:00:a2:c0:33:b3:6a:51:f7: 45:b9:d5:36:1f:10:35:2d:0a:57:07:95:f5:2c:08: 3b:98:bb:e3:b2:ae:7a:a8:df:09:ce:79:46:6a:55: 6b:12:03:bb:94:82:21:82:bc:16:ee:89:30:3d:f4: 4e:8f:80:de:b5:48:8a:bc:e4:63:7a:12:37:d3:67: 56:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:C2:FD:E7:45:4D:5D:F7:86:32:75:0A:F8:5C:3D:C6:57:1E:10:29 X509v3 Authority Key Identifier: keyid:AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/UcL950VNXfeGMnUK-Fw9xlceECk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:6080::/29 Signature Algorithm: sha256WithRSAEncryption 6f:c2:a6:c3:b0:2b:31:b4:67:b3:8a:74:f8:71:d6:d5:10:78: af:3a:ef:75:f7:a4:ae:12:63:5e:bc:1f:37:b6:08:d9:96:1b: b9:a7:50:69:8f:26:95:67:90:21:e7:10:a2:4e:43:ef:8a:f2: af:0c:5d:71:fe:13:37:2c:1c:f1:b7:8b:cc:30:3e:1e:46:a7: b0:0c:2f:29:d4:1f:56:c9:29:d9:ec:45:84:8e:d9:75:c2:04: 83:fb:c7:39:02:9b:e2:01:11:08:b9:9d:10:e6:7a:5f:f2:b6: d6:55:10:f2:6e:dd:db:36:1f:0a:7b:5f:04:10:48:ef:c5:25: c2:8f:50:2e:5d:7b:fa:27:7f:c3:c3:93:d4:69:fe:3b:52:31: fc:19:d2:58:b4:20:e7:62:83:43:ea:a2:f4:91:99:26:52:aa: 59:23:75:55:eb:cb:bf:e2:b6:74:4e:0c:7b:a6:ff:49:f9:d3: a7:c6:47:f6:64:32:31:ff:29:95:ed:86:1e:f5:b3:68:f2:81: 37:da:ef:b3:0b:5b:67:bd:1b:39:0d:27:61:d8:86:6d:76:aa: 65:45:5e:0b:ad:cf:f0:ec:b3:0c:1c:e2:f0:05:0c:3d:bc:74: b1:9d:77:3a:2b:e4:4f:f6:9b:12:dd:8d:72:25:ee:39:94:6f: c8:df:57:38 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt6x5ouHTE2Jbo6jz2PAbVWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhOWExNjRjNjU2NDEyYjdkYWFmYWU4NTcxY2M2NzljYzZm NTg3ZDAwHhcNMjYwMTAxMTgxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MWMyZmRlNzQ1NGQ1ZGY3ODYzMjc1MGFmODVjM2RjNjU3MWUxMDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jH2vym8iEQEl8XmwSLZjbJMoIYy P56T4YyPoA/uAeDVkOE4jM4QHTUrTrkT8aao8LCNkIqFQyKd/mraVad9+I5JnMPi dTuEJRe3advlOIVR9dGjv2wj+Mk27tWb1E0sMuMdqhZkyRf+QXFn8Ss7DeLyzV/8 6FGnB3eN0ZwZkxKt3tIeM8UJ/TmZ9r9m7RP1bd2h8sPUCibGwyzYGPmFwc/xUiPw nc+pL81oEvyi0TAKA3rdbX8xA3t0AKLAM7NqUfdFudU2HxA1LQpXB5X1LAg7mLvj sq56qN8JznlGalVrEgO7lIIhgrwW7okwPfROj4DetUiKvORjehI302dW/QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFFHC/edFTV33hjJ1CvhcPcZXHhApMB8GA1UdIwQY MBaAFKqaFkxlZBK32q+uhXHMZ5zG9YfQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXBvV1RHVmtFcmZhcjY2RmNjeG5uTWIxaDlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9hZmRhOWEtNjYzMC00YTlmLWI1MjIt Mjg4MjljMDNjNjlhLzEvVWNMOTUwVk5YZmVHTW5VSy1Gdzl4bGNlRUNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9hZmRhOWEtNjYzMC00YTlmLWI1MjItMjg4MjljMDNjNjlh LzEvcXBvV1RHVmtFcmZhcjY2RmNjeG5uTWIxaDlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKglggDAN BgkqhkiG9w0BAQsFAAOCAQEAb8Kmw7ArMbRns4p0+HHW1RB4rzrvdfekrhJjXrwf N7YI2ZYbuadQaY8mlWeQIecQok5D74ryrwxdcf4TNywc8beLzDA+HkansAwvKdQf Vskp2exFhI7ZdcIEg/vHOQKb4gERCLmdEOZ6X/K21lUQ8m7d2zYfCntfBBBI78Ul wo9QLl17+id/w8OT1Gn+O1Ix/BnSWLQg52KDQ+qi9JGZJlKqWSN1VevLv+K2dE4M e6b/SfnTp8ZH9mQyMf8ple2GHvWzaPKBN9rvswtbZ70bOQ0nYdiGbXaqZUVeC63P 8OyzDBzi8AUMPbx0sZ13OivkT/abEt2NciXuOZRvyN9XOA== -----END CERTIFICATE-----Generated at Wed Jan 7 04:16:14 2026 by rpki-client