This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/UikTrUC-2DsDHw5Izq7A013vsK4.roa
File: UikTrUC-2DsDHw5Izq7A013vsK4.roa (raw, json)
Hash identifier: WWeo5jlTxNVbDlt52GNnE81h3OK/EnTtfPjD3xyIbrg=
Subject key identifier: 52:29:13:AD:40:BE:D8:3B:03:1F:0E:48:CE:AE:C0:D3:5D:EF:B0:AE
Certificate issuer: /CN=374e2729b17369890a1512f643cd08e4ba2ff414
Certificate serial: 019BEFC6EEE7EBB7D513FAC3FB830C3A479E
Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/UikTrUC-2DsDHw5Izq7A013vsK4.roa
Signing time: Sat 24 Jan 2026 11:32:30 +0000
ROA not before: Sat 24 Jan 2026 11:32:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216157
IP address blocks: 2a05:f684::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:ef:c6:ee:e7:eb:b7:d5:13:fa:c3:fb:83:0c:3a:47:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414
Validity
Not Before: Jan 24 11:32:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=522913ad40bed83b031f0e48ceaec0d35defb0ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:96:e6:41:2b:2a:6a:b9:00:10:b9:d2:66:72:
32:cd:7e:bb:33:6a:05:9b:31:96:34:43:e0:dd:2f:
f3:a7:41:38:ac:1f:7e:43:7b:e0:36:ce:55:58:8b:
3c:66:34:e6:f6:15:03:af:2e:02:87:e8:30:df:b8:
a8:ac:4b:b6:6f:20:80:1b:f0:70:e7:83:46:c2:ba:
62:0e:9c:3c:49:6e:a0:c8:4d:4f:82:f0:40:7c:47:
64:62:d5:2c:9c:67:2f:bf:92:02:a9:1b:87:9d:22:
e1:93:aa:60:be:34:17:dd:5d:4f:a3:fb:23:dc:5f:
99:97:b5:c6:aa:84:ca:5a:3b:60:d6:4f:49:3b:11:
29:35:11:dd:aa:c8:0a:b8:1f:71:1c:3e:7c:ea:c3:
a4:ef:60:20:e8:78:16:fb:7e:2c:bf:7c:d6:cf:41:
de:c0:ba:a4:ef:83:38:45:7c:37:8c:91:4d:98:38:
37:68:71:20:82:f8:0d:60:00:d2:1a:e0:0c:87:c8:
a6:c4:91:ae:85:08:80:c7:8d:fa:2e:b0:9a:f6:ce:
0d:a1:11:14:e4:86:69:b8:d0:4a:46:d4:95:5c:34:
ac:4b:79:02:1d:9e:91:1d:cd:44:3e:25:89:3d:ce:
8d:bc:1a:68:20:86:60:8b:59:45:23:b4:04:05:1e:
9a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:29:13:AD:40:BE:D8:3B:03:1F:0E:48:CE:AE:C0:D3:5D:EF:B0:AE
X509v3 Authority Key Identifier:
keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/UikTrUC-2DsDHw5Izq7A013vsK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:f684::/32
Signature Algorithm: sha256WithRSAEncryption
0f:9d:7b:7c:9e:ef:f2:ca:db:38:cb:a7:7d:40:f1:43:14:6e:
e3:33:74:2d:6d:bf:8a:93:70:f4:2a:d1:f9:09:c6:e2:f9:42:
89:bc:2f:b4:76:9c:ae:51:8a:f9:8b:c6:17:35:aa:03:3b:38:
38:cc:53:f8:e9:f8:ea:2a:d1:c2:dd:ae:e3:cd:f5:e0:03:29:
d2:ec:70:97:9b:04:64:94:65:4a:f7:bc:b8:fa:fa:e2:c8:cf:
84:63:2f:82:10:a3:22:b1:2a:5d:b4:3f:98:7f:b1:41:d5:50:
c6:a5:41:1c:0a:2c:90:64:83:66:93:d2:f7:fc:19:c8:f4:f0:
93:1d:7e:30:d7:7e:53:6b:20:7a:45:80:aa:84:a2:bf:71:c1:
d1:29:14:6e:74:65:da:d9:38:b9:18:33:ae:f0:af:0e:b9:1f:
01:ab:2f:a8:dc:bf:4d:6c:b3:99:7c:11:e6:d9:bb:7a:d1:cc:
fd:6d:17:68:5c:b2:58:f3:17:80:58:b5:4e:03:59:ed:ad:e5:
6c:7b:22:1b:07:b9:cc:c0:c2:43:bf:99:c9:a6:59:92:f0:9e:
2d:16:e9:3c:b3:d1:69:38:53:ca:21:e8:fe:9e:4a:9a:10:87:
27:cd:6f:a7:07:30:49:b3:3c:2d:4e:f3:44:b6:06:a3:70:b5:
fe:1b:04:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:33:21 2026 by rpki-client