This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/yUI0ol2D7NKC0wmPoOYbnSO0OAU.roa File: yUI0ol2D7NKC0wmPoOYbnSO0OAU.roa (raw, json) Hash identifier: VrfZRHbwNUuJCG6SkR3/uzrGqb4L2R0YFXg3gGN6hno= Subject key identifier: C9:42:34:A2:5D:83:EC:D2:82:D3:09:8F:A0:E6:1B:9D:23:B4:38:05 Certificate issuer: /CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Certificate serial: 019B77594C44A1897B75DACC27BE650618E7 Authority key identifier: 51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/yUI0ol2D7NKC0wmPoOYbnSO0OAU.roa Signing time: Thu 01 Jan 2026 02:18:19 +0000 ROA not before: Thu 01 Jan 2026 02:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216000 IP address blocks: 2a13:cc87:fc02::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:4c:44:a1:89:7b:75:da:cc:27:be:65:06:18:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Validity Not Before: Jan 1 02:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c94234a25d83ecd282d3098fa0e61b9d23b43805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e7:d2:4a:34:3a:e5:08:09:f6:4c:e8:64:3e: 12:c0:27:71:d2:96:54:d0:b7:6c:cc:7f:7a:58:ef: 95:84:af:cc:7b:f3:74:e8:76:83:cc:55:39:54:61: 59:dd:69:af:ba:36:73:09:a8:2e:4e:51:15:00:86: 45:c8:23:8f:0e:4b:9a:88:cc:9c:78:e3:ba:70:4b: d4:11:98:02:52:4a:5f:39:71:da:ca:5f:13:b3:ba: a3:64:74:42:f3:4e:c1:02:f5:eb:8d:0d:c2:d6:aa: 79:80:9a:02:8b:14:82:76:d2:4a:09:46:da:a1:47: 03:ce:f0:65:83:c7:70:43:3c:a9:5c:da:09:22:dc: 61:5b:bc:d9:f2:c2:25:5f:d8:97:a1:74:5e:80:88: 94:d8:17:92:69:b8:6c:35:05:dd:5e:8b:a5:9a:8d: 0a:06:12:08:9a:08:bc:a3:5c:c4:97:72:da:67:64: ad:24:24:65:8f:5e:6f:e5:d0:56:36:c9:ea:05:13: d7:dc:fd:d3:0f:e0:5e:bd:ed:ce:18:c8:12:3e:73: 03:10:38:95:7a:01:72:3f:56:0e:a2:ca:35:aa:7b: 67:f0:6c:66:24:2b:30:76:e5:6c:32:3d:16:d9:a5: e9:24:8a:1f:c6:6d:00:18:61:ec:a2:80:3d:c5:67: 4b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:42:34:A2:5D:83:EC:D2:82:D3:09:8F:A0:E6:1B:9D:23:B4:38:05 X509v3 Authority Key Identifier: keyid:51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/yUI0ol2D7NKC0wmPoOYbnSO0OAU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:cc87:fc02::/48 Signature Algorithm: sha256WithRSAEncryption bf:74:8a:cd:9d:0d:2d:8a:d1:9a:de:35:b0:de:eb:3e:0a:65: d8:cc:08:3f:48:2c:68:b5:f7:0d:b6:70:c5:24:0c:2e:1b:31: 0f:50:12:4c:1f:5a:a2:f2:b7:2c:84:19:e6:02:42:f5:54:8d: e1:7c:52:5a:9b:6f:86:3b:20:89:78:7d:e5:0d:2d:2d:95:99: 29:7a:b2:b6:99:e7:d0:d9:bd:35:49:51:e9:b2:92:8b:9c:0c: 82:b1:ee:60:88:8f:b0:11:48:36:14:6a:22:d8:12:8f:f8:1b: f1:24:5a:89:cc:a9:da:f2:43:0d:2b:c1:20:a6:03:a6:be:7d: 7a:d0:be:85:4c:d9:a2:66:a0:0d:3a:9d:ea:f5:81:9f:73:0c: 1f:35:f9:10:27:76:26:5a:48:1c:ae:88:ca:67:13:fb:f3:5d: 3b:f5:e6:2d:6d:d3:c2:a5:84:94:6b:7a:2b:eb:a7:8b:8b:37: 14:73:17:bb:37:b8:eb:4f:2c:49:d9:7a:50:7f:ac:a4:de:9c: 7c:f1:46:ae:3d:5b:c3:0d:b5:5a:39:e2:55:ad:25:c7:35:74: ab:c5:55:62:b1:0b:82:de:3f:5b:dc:58:37:00:0b:17:30:87: 3e:7b:f6:1a:91:66:be:dd:98:25:11:16:b3:fd:9a:a3:c7:67: 9c:28:ab:81 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WUxEoYl7ddrMJ75lBhjnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxN2EwYzk2ODQyYmFmYzlmNjMwYmExNGI4M2VhNzliZDEy YTUzYjkwHhcNMjYwMTAxMDIxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTQyMzRhMjVkODNlY2QyODJkMzA5OGZhMGU2MWI5ZDIzYjQzODA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApefSSjQ65QgJ9kzoZD4SwCdx0pZU 0LdszH96WO+VhK/Me/N06HaDzFU5VGFZ3WmvujZzCaguTlEVAIZFyCOPDkuaiMyc eOO6cEvUEZgCUkpfOXHayl8Ts7qjZHRC807BAvXrjQ3C1qp5gJoCixSCdtJKCUba oUcDzvBlg8dwQzypXNoJItxhW7zZ8sIlX9iXoXRegIiU2BeSabhsNQXdXoulmo0K BhIImgi8o1zEl3LaZ2StJCRlj15v5dBWNsnqBRPX3P3TD+Beve3OGMgSPnMDEDiV egFyP1YOoso1qntn8GxmJCswduVsMj0W2aXpJIofxm0AGGHsooA9xWdLIQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMlCNKJdg+zSgtMJj6DmG50jtDgFMB8GA1UdIwQY MBaAFFF6DJaEK6/J9jC6FLg+p5vRKlO5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMt YjBlYjY3MTVlMGFmLzEveVVJMG9sMkQ3TktDMHdtUG9PWWJuU08wT0FVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMtYjBlYjY3MTVlMGFm LzEvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhPMh/wC MA0GCSqGSIb3DQEBCwUAA4IBAQC/dIrNnQ0titGa3jWw3us+CmXYzAg/SCxotfcN tnDFJAwuGzEPUBJMH1qi8rcshBnmAkL1VI3hfFJam2+GOyCJeH3lDS0tlZkperK2 mefQ2b01SVHpspKLnAyCse5giI+wEUg2FGoi2BKP+BvxJFqJzKna8kMNK8EgpgOm vn160L6FTNmiZqANOp3q9YGfcwwfNfkQJ3YmWkgcrojKZxP781079eYtbdPCpYSU a3or66eLizcUcxe7N7jrTyxJ2XpQf6yk3px88UauPVvDDbVaOeJVrSXHNXSrxVVi sQuC3j9b3Fg3AAsXMIc+e/YakWa+3ZglERaz/Zqjx2ecKKuB -----END CERTIFICATE-----Generated at Wed Jan 7 22:29:17 2026 by rpki-client