This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/uZTTho6XgSigY6M7r_D1NX2DLSQ.roa File: uZTTho6XgSigY6M7r_D1NX2DLSQ.roa (raw, json) Hash identifier: ivw0GUSdmhcgSVLXWkL84Xd3MeIdECHj+xV2zfbtO/c= Subject key identifier: B9:94:D3:86:8E:97:81:28:A0:63:A3:3B:AF:F0:F5:35:7D:83:2D:24 Certificate issuer: /CN=3aca50858a1856ffa02e91356f14236e7c38b85a Certificate serial: 019B7E38B90DE497E90DB3761EF92F71BBCC Authority key identifier: 3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/uZTTho6XgSigY6M7r_D1NX2DLSQ.roa Signing time: Fri 02 Jan 2026 10:20:05 +0000 ROA not before: Fri 02 Jan 2026 10:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61230 IP address blocks: 2a0e:1107:10::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.crl rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:b9:0d:e4:97:e9:0d:b3:76:1e:f9:2f:71:bb:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aca50858a1856ffa02e91356f14236e7c38b85a Validity Not Before: Jan 2 10:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b994d3868e978128a063a33baff0f5357d832d24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:46:d8:ad:d1:44:50:5d:90:83:51:18:e5:da: b8:ea:fc:7d:f3:9d:e7:70:1c:09:79:57:0c:bf:e1: 0f:83:1c:98:5c:6f:fd:cb:4c:b6:b9:ce:ee:4d:43: 61:10:49:7d:ea:17:c1:4f:10:6b:29:42:ef:cf:f4: e4:40:65:d7:86:79:0c:1d:dd:39:45:80:11:eb:58: 1a:af:28:bb:e9:30:8c:28:87:7c:65:70:3e:9d:2f: 9c:73:fe:38:c4:d6:8d:77:9f:9a:78:f0:72:71:ed: 63:4f:34:52:a2:3c:3a:1d:c5:0f:5d:98:58:07:3f: 7d:8f:a8:38:11:5b:4f:94:25:2c:65:10:ec:d3:9e: ee:fa:86:e7:50:5b:7c:5a:a8:74:dc:f4:be:4b:87: cb:67:06:e8:7b:e5:6a:04:7a:4b:2f:77:20:c1:ae: bc:8e:16:9c:27:c4:f1:d5:fa:a4:a1:c8:f0:b6:f6: 66:70:79:a6:d8:ad:92:73:5a:de:a4:93:55:3a:d4: 78:ef:04:1a:5d:d9:63:ed:87:78:9b:4d:03:86:78: 33:d1:09:72:26:9b:d0:09:a9:b8:fb:e4:da:cb:8d: ad:a8:e4:ab:2d:6e:d6:ce:38:f7:c1:ec:f9:99:05: 4e:8b:1c:b1:45:87:fa:b3:15:04:12:ac:55:dd:73: c6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:94:D3:86:8E:97:81:28:A0:63:A3:3B:AF:F0:F5:35:7D:83:2D:24 X509v3 Authority Key Identifier: keyid:3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/uZTTho6XgSigY6M7r_D1NX2DLSQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:1107:10::/44 Signature Algorithm: sha256WithRSAEncryption 43:0d:67:d3:13:0f:c5:a4:21:8d:30:e0:39:e7:33:28:97:3c: 3b:72:e9:6f:6a:2c:a1:df:5e:73:d0:49:3d:ff:f3:95:53:da: 28:6a:7d:1a:93:da:52:3e:cd:d9:a1:0a:ee:4c:be:8e:d3:a5: c2:b2:60:84:af:b4:e1:96:75:aa:8e:c5:0c:0c:78:c4:7d:7d: c5:61:9a:d1:8f:24:79:c8:ef:00:ee:35:4c:10:91:36:b3:6f: 14:ab:2d:9c:50:06:2b:48:98:a8:49:88:3d:2e:82:43:26:eb: f4:3e:55:43:3e:64:72:ec:16:ba:75:05:bc:02:8c:b9:ec:2b: 2e:e6:3a:74:f8:42:8e:e3:96:9d:3f:16:10:71:64:2c:a9:2f: d9:3e:53:17:a3:9e:3f:ec:56:85:27:4b:c8:0e:fb:25:09:86: 37:7a:fd:a8:30:08:01:6e:36:4b:5d:d2:73:d4:83:30:72:b1: 2f:3d:4f:0a:53:b9:01:f4:da:55:8f:de:df:d0:ab:7b:7f:63: 94:41:2c:55:61:61:08:fe:d1:71:2c:48:0f:68:4a:0c:62:ca: 0a:79:33:eb:1e:b3:d9:53:a4:d4:86:88:3b:c5:79:74:f9:77: 36:7e:d8:9a:c0:55:03:95:7e:5a:82:81:53:ff:36:28:a2:01: 31:8a:54:ff -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OLkN5JfpDbN2HvkvcbvMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhY2E1MDg1OGExODU2ZmZhMDJlOTEzNTZmMTQyMzZlN2Mz OGI4NWEwHhcNMjYwMTAyMTAyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTk0ZDM4NjhlOTc4MTI4YTA2M2EzM2JhZmYwZjUzNTdkODMyZDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30bYrdFEUF2Qg1EY5dq46vx9853n cBwJeVcMv+EPgxyYXG/9y0y2uc7uTUNhEEl96hfBTxBrKULvz/TkQGXXhnkMHd05 RYAR61garyi76TCMKId8ZXA+nS+cc/44xNaNd5+aePByce1jTzRSojw6HcUPXZhY Bz99j6g4EVtPlCUsZRDs057u+obnUFt8Wqh03PS+S4fLZwboe+VqBHpLL3cgwa68 jhacJ8Tx1fqkocjwtvZmcHmm2K2Sc1repJNVOtR47wQaXdlj7Yd4m00Dhngz0Qly JpvQCam4++Tay42tqOSrLW7Wzjj3wez5mQVOixyxRYf6sxUEEqxV3XPG5QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLmU04aOl4EooGOjO6/w9TV9gy0kMB8GA1UdIwQY MBaAFDrKUIWKGFb/oC6RNW8UI258OLhaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3NwUWhZb1lWdi1nTHBFMWJ4UWpibnc0dUZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xMmI5MzctODkwZC00N2I1LWEwNDEt MzMxZDdmYzc3YmQ0LzEvdVpUVGhvNlhnU2lnWTZNN3JfRDFOWDJETFNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8xMmI5MzctODkwZC00N2I1LWEwNDEtMzMxZDdmYzc3YmQ0 LzEvT3NwUWhZb1lWdi1nTHBFMWJ4UWpibnc0dUZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg4RBwAQ MA0GCSqGSIb3DQEBCwUAA4IBAQBDDWfTEw/FpCGNMOA55zMolzw7culvaiyh315z 0Ek9//OVU9ooan0ak9pSPs3ZoQruTL6O06XCsmCEr7ThlnWqjsUMDHjEfX3FYZrR jyR5yO8A7jVMEJE2s28Uqy2cUAYrSJioSYg9LoJDJuv0PlVDPmRy7Ba6dQW8Aoy5 7Csu5jp0+EKO45adPxYQcWQsqS/ZPlMXo54/7FaFJ0vIDvslCYY3ev2oMAgBbjZL XdJz1IMwcrEvPU8KU7kB9NpVj97f0Kt7f2OUQSxVYWEI/tFxLEgPaEoMYsoKeTPr HrPZU6TUhog7xXl0+Xc2ftiawFUDlX5agoFT/zYoogExilT/ -----END CERTIFICATE-----Generated at Sun Jan 25 23:49:29 2026 by rpki-client