This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/UVRNeFdK0MFmPktuaxuakdFBiyw.roa File: UVRNeFdK0MFmPktuaxuakdFBiyw.roa (raw, json) Hash identifier: Qe3jYuCQSRz8rrbqzPjF4ta2+ILAQBCmo8wsXzpnbtM= Subject key identifier: 51:54:4D:78:57:4A:D0:C1:66:3E:4B:6E:6B:1B:9A:91:D1:41:8B:2C Certificate issuer: /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Certificate serial: 019B7F80D5F5BB9158973C9ACC087EE31D7C Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/UVRNeFdK0MFmPktuaxuakdFBiyw.roa Signing time: Fri 02 Jan 2026 16:18:28 +0000 ROA not before: Fri 02 Jan 2026 16:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50926 IP address blocks: 2a0b:8f80:202::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:d5:f5:bb:91:58:97:3c:9a:cc:08:7e:e3:1d:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Validity Not Before: Jan 2 16:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51544d78574ad0c1663e4b6e6b1b9a91d1418b2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a4:d7:5e:8a:9d:e9:38:06:d5:8d:10:44:a0: ce:6f:98:57:20:d5:c7:28:6d:16:6e:35:a3:ae:b2: a6:9e:4f:bf:21:bc:0c:49:86:69:17:dd:e4:3f:46: 07:3f:53:a8:65:b9:02:fe:6e:c6:e1:20:7b:0c:8a: 38:fd:1a:db:3d:ae:43:2c:fa:46:66:d9:3d:98:31: 9b:8e:cf:36:d5:eb:ca:1b:a7:d8:47:1d:cc:79:1d: 17:a6:6a:e0:f6:67:b8:cc:5b:bd:de:10:2d:49:8a: 30:fc:6e:ef:83:f0:a8:2c:71:df:54:0d:cb:39:9d: 73:05:7f:69:db:68:a9:60:61:b4:ab:cc:9a:a4:3a: 4a:be:40:01:df:67:3a:b7:3e:b8:8b:56:2a:f6:4d: 7b:56:70:86:79:9b:d3:3d:67:af:3f:21:7c:a8:9b: 60:09:f3:f8:68:12:1f:83:2d:73:38:77:7b:b2:31: 89:0f:b3:b3:52:5d:8d:9d:d4:34:86:9e:f5:b2:04: 30:70:ea:62:3e:c6:01:d1:a3:e5:95:2d:0d:75:6d: 86:e2:b8:74:40:d0:a9:bb:75:c9:33:d6:09:10:df: 56:ea:51:f5:b3:35:67:a7:d7:af:60:e2:8f:98:f2: ff:a5:4e:10:e2:b1:a0:d2:cf:b7:06:bb:f3:d3:09: 14:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:54:4D:78:57:4A:D0:C1:66:3E:4B:6E:6B:1B:9A:91:D1:41:8B:2C X509v3 Authority Key Identifier: keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/UVRNeFdK0MFmPktuaxuakdFBiyw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:8f80:202::/48 Signature Algorithm: sha256WithRSAEncryption 2d:a3:cd:2c:89:26:96:ea:d0:4c:bb:83:6b:9a:c2:3b:ec:d9: 3d:d6:36:aa:36:6c:66:3c:a3:a2:5b:87:e5:fd:90:70:d7:34: b1:34:f3:1f:fe:1b:c4:88:2b:05:b5:b3:3d:8d:d7:8b:77:31: b8:a4:a1:4e:02:12:c1:0a:4c:6b:2b:32:80:c9:c7:9b:73:63: 0d:d4:8d:93:43:a0:e5:7e:06:e6:ec:de:3d:b0:cb:a6:81:0e: 18:73:01:36:8e:23:c2:79:64:90:7d:7b:c4:75:8b:12:23:49: 9c:1c:b0:c5:fd:3a:1b:34:87:d0:05:ca:9b:4d:6c:78:b0:ff: e9:18:e1:64:eb:20:43:1f:3f:da:1f:bb:64:a6:f6:a8:2b:42: 2d:67:e7:ed:4f:22:6c:87:1a:de:71:71:d2:45:83:17:c8:1a: df:56:b9:72:ca:df:4d:ef:81:45:d9:8b:ce:10:a5:02:5e:fe: e2:36:13:b5:2f:20:c7:ec:31:9c:ee:ff:29:d5:41:01:80:83: f5:f9:51:0f:3d:15:86:25:e4:b4:04:b0:0a:8c:6f:77:9b:4e: d0:34:ff:d6:49:bd:ce:a8:66:51:24:14:96:14:60:30:ed:ae: 8e:b8:20:86:62:25:b0:a6:99:af:84:25:0f:bc:9b:93:7c:62: d1:ad:58:bb -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/gNX1u5FYlzyazAh+4x18MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4OGM2NWRjMzU5YjU4Y2E2YmE1ZDNkYWViODc0ZjA1ODY4 NGU4YzYwHhcNMjYwMTAyMTYxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTU0NGQ3ODU3NGFkMGMxNjYzZTRiNmU2YjFiOWE5MWQxNDE4YjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKTXXoqd6TgG1Y0QRKDOb5hXINXH KG0WbjWjrrKmnk+/IbwMSYZpF93kP0YHP1OoZbkC/m7G4SB7DIo4/RrbPa5DLPpG Ztk9mDGbjs821evKG6fYRx3MeR0Xpmrg9me4zFu93hAtSYow/G7vg/CoLHHfVA3L OZ1zBX9p22ipYGG0q8yapDpKvkAB32c6tz64i1Yq9k17VnCGeZvTPWevPyF8qJtg CfP4aBIfgy1zOHd7sjGJD7OzUl2NndQ0hp71sgQwcOpiPsYB0aPllS0NdW2G4rh0 QNCpu3XJM9YJEN9W6lH1szVnp9evYOKPmPL/pU4Q4rGg0s+3Brvz0wkU+QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFFUTXhXStDBZj5LbmsbmpHRQYssMB8GA1UdIwQY MBaAFEiMZdw1m1jKa6XT2uuHTwWGhOjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQt YjBkNzJlOTEwZWZlLzEvVVZSTmVGZEswTUZtUGt0dWF4dWFrZEZCaXl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQtYjBkNzJlOTEwZWZl LzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKguPgAIC MA0GCSqGSIb3DQEBCwUAA4IBAQAto80siSaW6tBMu4NrmsI77Nk91jaqNmxmPKOi W4fl/ZBw1zSxNPMf/hvEiCsFtbM9jdeLdzG4pKFOAhLBCkxrKzKAycebc2MN1I2T Q6Dlfgbm7N49sMumgQ4YcwE2jiPCeWSQfXvEdYsSI0mcHLDF/TobNIfQBcqbTWx4 sP/pGOFk6yBDHz/aH7tkpvaoK0ItZ+ftTyJshxrecXHSRYMXyBrfVrlyyt9N74FF 2YvOEKUCXv7iNhO1LyDH7DGc7v8p1UEBgIP1+VEPPRWGJeS0BLAKjG93m07QNP/W Sb3OqGZRJBSWFGAw7a6OuCCGYiWwppmvhCUPvJuTfGLRrVi7 -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:48 2026 by rpki-client