This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/UAWfVKnuk8IYKAompixGCt2JD4o.roa File: UAWfVKnuk8IYKAompixGCt2JD4o.roa (raw, json) Hash identifier: 1/V3Gy+/S90DB5jCTWmbg0P9LSy46xSNLw3S2ZpV9dA= Subject key identifier: 50:05:9F:54:A9:EE:93:C2:18:28:0A:26:A6:2C:46:0A:DD:89:0F:8A Certificate issuer: /CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6 Certificate serial: 019B77C6959267473B297038579ACA616D93 Authority key identifier: 65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/UAWfVKnuk8IYKAompixGCt2JD4o.roa Signing time: Thu 01 Jan 2026 04:17:41 +0000 ROA not before: Thu 01 Jan 2026 04:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59411 IP address blocks: 2a11:fe80:d100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:95:92:67:47:3b:29:70:38:57:9a:ca:61:6d:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6 Validity Not Before: Jan 1 04:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50059f54a9ee93c218280a26a62c460add890f8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:50:4e:fb:e7:0a:80:2c:c9:1e:12:34:cc:4c: 6c:09:b4:16:af:3a:d2:66:ca:58:e9:e3:38:dd:6c: 28:45:18:b6:29:b2:22:2a:e7:5d:49:c4:69:4f:67: fa:59:5a:72:cb:19:46:93:0e:39:e2:59:31:9d:14: d7:ca:d3:18:04:be:88:91:06:a7:d9:17:6d:2d:6f: 66:b0:e6:c5:6d:3b:7a:b2:20:a2:7d:dc:92:8d:c2: d5:26:d9:9a:1f:a4:7c:6b:a2:9f:0e:90:f7:17:92: ac:e4:9b:3e:13:42:ad:90:2c:15:d4:8f:ba:03:cf: b3:af:25:22:d8:8f:9e:3d:3b:b8:72:6d:06:0e:63: 4d:4e:52:a9:23:cb:9b:04:58:a2:34:72:78:32:73: e7:f6:d4:c0:7c:93:a7:3e:1c:82:c5:04:99:18:cc: f7:b6:d8:37:2c:2c:ba:03:73:9f:23:d4:fd:e5:92: 25:1f:c8:aa:30:62:af:72:96:02:1b:44:1c:28:0c: 48:84:34:ed:c6:3e:ef:b0:04:f0:c6:db:cb:89:3f: 9c:b9:8c:57:a1:44:6c:57:72:0d:03:b8:eb:ac:71: 32:b7:21:77:62:35:26:93:b7:28:63:4c:34:0b:9c: 17:45:f7:20:fd:d5:89:91:3f:cd:54:b1:5b:07:96: ba:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:05:9F:54:A9:EE:93:C2:18:28:0A:26:A6:2C:46:0A:DD:89:0F:8A X509v3 Authority Key Identifier: keyid:65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/UAWfVKnuk8IYKAompixGCt2JD4o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:fe80:d100::/40 Signature Algorithm: sha256WithRSAEncryption 11:a8:b5:a9:db:c8:89:bd:51:86:33:70:d7:db:31:46:7c:6a: 84:63:47:27:30:d1:93:72:5d:26:65:33:ca:32:b5:09:00:78: cf:c5:be:cf:e1:c1:ed:81:9d:7e:64:6c:67:38:6a:bb:c5:e8: 92:85:8b:29:97:89:31:80:93:e5:8b:54:c9:3e:51:e6:7d:b5: 3f:c5:ab:7e:25:ac:36:0c:f9:34:e8:bf:d5:ab:dd:b7:c4:33: eb:6e:36:80:fc:ad:0a:ab:b4:74:ca:57:bb:7d:43:e1:4d:7b: 40:67:6a:4d:d4:10:81:8b:54:ff:e1:50:d3:f9:02:8d:cb:f5: 4a:10:86:28:4f:d7:12:fb:21:0e:f8:f4:4f:24:21:4e:e2:8a: b7:4b:87:c4:a8:1b:03:51:e1:c0:ba:92:77:a6:0a:40:e2:d1: 57:a6:bd:bc:1e:44:4b:b7:77:34:c7:67:d2:6e:fd:52:46:64: 2f:4e:39:f5:ef:34:f1:b9:99:c9:27:10:c5:40:17:5c:4f:36: d2:b2:dc:e2:2d:f2:b8:a9:47:4f:4f:b0:ba:2b:ec:18:9d:ea: 36:c0:da:fb:01:7e:d2:6a:51:02:c1:e4:48:26:8e:7c:a1:36: 5a:c3:ad:29:e1:70:44:eb:48:6d:39:35:05:e5:28:f0:35:59: 56:14:7b:3f -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3xpWSZ0c7KXA4V5rKYW2TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ODNkMzIyZWYyNGM4NzE5OGI3NjVlYTFkMWM0MmMyODNh N2Y4ZjYwHhcNMjYwMTAxMDQxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDA1OWY1NGE5ZWU5M2MyMTgyODBhMjZhNjJjNDYwYWRkODkwZjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VBO++cKgCzJHhI0zExsCbQWrzrS ZspY6eM43WwoRRi2KbIiKuddScRpT2f6WVpyyxlGkw454lkxnRTXytMYBL6IkQan 2RdtLW9msObFbTt6siCifdySjcLVJtmaH6R8a6KfDpD3F5Ks5Js+E0KtkCwV1I+6 A8+zryUi2I+ePTu4cm0GDmNNTlKpI8ubBFiiNHJ4MnPn9tTAfJOnPhyCxQSZGMz3 ttg3LCy6A3OfI9T95ZIlH8iqMGKvcpYCG0QcKAxIhDTtxj7vsATwxtvLiT+cuYxX oURsV3INA7jrrHEytyF3YjUmk7coY0w0C5wXRfcg/dWJkT/NVLFbB5a6gQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFFAFn1Sp7pPCGCgKJqYsRgrdiQ+KMB8GA1UdIwQY MBaAFGWD0yLvJMhxmLdl6h0cQsKDp/j2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWllQVEl1OGt5SEdZdDJYcUhSeEN3b09uLVBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDk3MWEtODg5MS00YjUzLTk0NGMt NWJlOWUxMTdkYmRhLzEvVUFXZlZLbnVrOElZS0FvbXBpeEdDdDJKRDRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9mMDk3MWEtODg5MS00YjUzLTk0NGMtNWJlOWUxMTdkYmRh LzEvWllQVEl1OGt5SEdZdDJYcUhSeEN3b09uLVBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhH+gNEw DQYJKoZIhvcNAQELBQADggEBABGotanbyIm9UYYzcNfbMUZ8aoRjRycw0ZNyXSZl M8oytQkAeM/Fvs/hwe2BnX5kbGc4arvF6JKFiymXiTGAk+WLVMk+UeZ9tT/Fq34l rDYM+TTov9Wr3bfEM+tuNoD8rQqrtHTKV7t9Q+FNe0Bnak3UEIGLVP/hUNP5Ao3L 9UoQhihP1xL7IQ749E8kIU7iirdLh8SoGwNR4cC6knemCkDi0VemvbweREu3dzTH Z9Ju/VJGZC9OOfXvNPG5mcknEMVAF1xPNtKy3OIt8ripR09PsLor7Bid6jbA2vsB ftJqUQLB5EgmjnyhNlrDrSnhcETrSG05NQXlKPA1WVYUez8= -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:29 2026 by rpki-client