This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/upo56Z93ZuxfUzsBXT8Mop0ljfI.roa File: upo56Z93ZuxfUzsBXT8Mop0ljfI.roa (raw, json) Hash identifier: YhDFF8pQFZdnO5Ubp8t393cVmTF+JmT/Dc4jBewkDSI= Subject key identifier: BA:9A:39:E9:9F:77:66:EC:5F:53:3B:01:5D:3F:0C:A2:9D:25:8D:F2 Certificate issuer: /CN=a9480cf18fd7859df9ad997940013a99b8dee374 Certificate serial: 019B7D5BD91CC266613C1BA4CB9736D6936B Authority key identifier: A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/upo56Z93ZuxfUzsBXT8Mop0ljfI.roa Signing time: Fri 02 Jan 2026 06:18:49 +0000 ROA not before: Fri 02 Jan 2026 06:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61292 IP address blocks: 2a05:e883::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:d9:1c:c2:66:61:3c:1b:a4:cb:97:36:d6:93:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9480cf18fd7859df9ad997940013a99b8dee374 Validity Not Before: Jan 2 06:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba9a39e99f7766ec5f533b015d3f0ca29d258df2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f1:77:89:41:29:20:78:fb:e8:85:96:1f:c9: 68:ca:59:ec:1f:9f:19:28:c6:f0:c8:45:34:12:a7: 88:45:5d:4c:a7:72:2f:73:8f:26:98:11:54:51:f8: e0:1d:bd:25:9c:76:a2:9f:7f:50:dd:bf:ee:ad:1f: da:4e:40:32:ed:b5:c4:bd:7d:f8:0c:66:89:d2:eb: 52:14:17:f6:a4:36:22:1b:11:cb:33:c5:25:88:9c: 49:42:21:03:d9:21:f2:cb:94:cc:8d:56:4a:9f:14: 62:96:09:ee:5d:56:2e:cf:04:56:0f:61:6e:09:ec: be:aa:6b:18:b6:9d:9c:25:9a:07:a9:eb:1f:d7:b2: 2a:fb:10:7a:7e:0a:04:4b:6c:65:b2:6e:5b:b0:4b: ad:ab:66:2f:99:0e:e7:1e:e4:3e:d8:09:1e:3a:77: 68:af:1f:d0:81:36:21:99:76:12:42:26:75:4b:4a: f0:9d:99:d2:17:04:3d:06:84:8e:f5:1a:40:6f:32: c8:c7:e8:a1:11:08:e3:85:a6:6d:61:6e:08:24:44: f5:d9:f5:36:1f:4a:f9:81:8e:92:22:02:d9:01:14: 48:07:ae:9d:e4:4e:ee:8a:8e:b2:4e:28:00:4c:04: 7e:b9:b9:49:0f:9f:c6:b6:9f:71:21:a4:17:6f:85: 5e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:9A:39:E9:9F:77:66:EC:5F:53:3B:01:5D:3F:0C:A2:9D:25:8D:F2 X509v3 Authority Key Identifier: keyid:A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/upo56Z93ZuxfUzsBXT8Mop0ljfI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:e883::/36 Signature Algorithm: sha256WithRSAEncryption 05:ea:a7:67:af:ae:5e:13:65:ff:fa:bd:1d:03:ff:66:e1:d4: 79:5d:b3:59:03:d1:da:35:36:26:17:ef:86:d2:f5:d8:fa:f4: 8a:2f:cd:4d:b6:1c:22:ad:09:f7:c9:87:8a:5d:e6:88:e6:ac: 77:0b:81:68:cb:c9:70:a4:05:76:55:1a:be:f9:0c:57:5d:cc: f3:c2:73:16:e9:88:e0:1d:a5:c2:2c:8f:1f:e4:d3:d9:03:8f: 96:15:c7:1f:a6:76:90:3c:aa:36:a3:5f:d7:00:06:71:7f:b8: 74:ef:5f:37:5f:d2:b6:35:ac:d9:0b:52:21:88:0e:ea:07:9d: 3b:3c:12:23:b5:e9:3c:16:4b:2e:74:ef:21:d0:8c:0d:a2:52: 7d:25:74:a4:13:dd:f0:a5:61:12:1f:85:ea:88:cd:fc:7a:52: a4:b7:31:1b:e6:81:4f:31:06:fb:ef:33:19:b0:37:d6:09:7c: ed:60:6f:47:43:60:1f:16:39:bb:04:1d:92:2f:63:c0:35:b8: f8:0e:f6:62:eb:d6:35:44:a8:e3:06:62:27:24:c0:b7:36:8b: 8d:60:65:74:04:87:4f:b2:ae:37:8c:4a:90:d8:bd:f0:6e:f2: c6:ad:cf:3f:af:75:39:3a:bf:35:5a:3c:01:44:2a:72:e9:53: ac:0f:bb:e9 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt9W9kcwmZhPBuky5c21pNrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5NDgwY2YxOGZkNzg1OWRmOWFkOTk3OTQwMDEzYTk5Yjhk ZWUzNzQwHhcNMjYwMTAyMDYxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTlhMzllOTlmNzc2NmVjNWY1MzNiMDE1ZDNmMGNhMjlkMjU4ZGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPF3iUEpIHj76IWWH8loylnsH58Z KMbwyEU0EqeIRV1Mp3Ivc48mmBFUUfjgHb0lnHain39Q3b/urR/aTkAy7bXEvX34 DGaJ0utSFBf2pDYiGxHLM8UliJxJQiED2SHyy5TMjVZKnxRilgnuXVYuzwRWD2Fu Cey+qmsYtp2cJZoHqesf17Iq+xB6fgoES2xlsm5bsEutq2YvmQ7nHuQ+2AkeOndo rx/QgTYhmXYSQiZ1S0rwnZnSFwQ9BoSO9RpAbzLIx+ihEQjjhaZtYW4IJET12fU2 H0r5gY6SIgLZARRIB66d5E7uio6yTigATAR+ublJD5/Gtp9xIaQXb4VetQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFLqaOemfd2bsX1M7AV0/DKKdJY3yMB8GA1UdIwQY MBaAFKlIDPGP14Wd+a2ZeUABOpm43uN0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVVnTThZX1hoWjM1clpsNVFBRTZtYmplNDNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9hMzkxMzgtZjRmMS00MjU5LWE0Yjkt YWNkODdjNTQ2MDQ4LzEvdXBvNTZaOTNadXhmVXpzQlhUOE1vcDBsamZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9hMzkxMzgtZjRmMS00MjU5LWE0YjktYWNkODdjNTQ2MDQ4 LzEvcVVnTThZX1hoWjM1clpsNVFBRTZtYmplNDNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgXogwAw DQYJKoZIhvcNAQELBQADggEBAAXqp2evrl4TZf/6vR0D/2bh1Hlds1kD0do1NiYX 74bS9dj69IovzU22HCKtCffJh4pd5ojmrHcLgWjLyXCkBXZVGr75DFddzPPCcxbp iOAdpcIsjx/k09kDj5YVxx+mdpA8qjajX9cABnF/uHTvXzdf0rY1rNkLUiGIDuoH nTs8EiO16TwWSy507yHQjA2iUn0ldKQT3fClYRIfheqIzfx6UqS3MRvmgU8xBvvv MxmwN9YJfO1gb0dDYB8WObsEHZIvY8A1uPgO9mLr1jVEqOMGYickwLc2i41gZXQE h0+yrjeMSpDYvfBu8satzz+vdTk6vzVaPAFEKnLpU6wPu+k= -----END CERTIFICATE-----Generated at Mon Jan 26 02:02:42 2026 by rpki-client