This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/ufROvs79R76pKz3Vd4MoqsPH7FE.roa File: ufROvs79R76pKz3Vd4MoqsPH7FE.roa (raw, json) Hash identifier: ceBVv5+PSaDyQdnhFVj50M1kNdgLsXZLAIeGcsQzNgc= Subject key identifier: B9:F4:4E:BE:CE:FD:47:BE:A9:2B:3D:D5:77:83:28:AA:C3:C7:EC:51 Certificate issuer: /CN=a15237c39a325aa309b69e66fe09237da1ad0d2b Certificate serial: 019B7EA6B5F5A3609572875BCE1CE82DB863 Authority key identifier: A1:52:37:C3:9A:32:5A:A3:09:B6:9E:66:FE:09:23:7D:A1:AD:0D:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/ufROvs79R76pKz3Vd4MoqsPH7FE.roa Signing time: Fri 02 Jan 2026 12:20:13 +0000 ROA not before: Fri 02 Jan 2026 12:20:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60271 IP address blocks: 2a13:75c1:1000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.crl rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:b5:f5:a3:60:95:72:87:5b:ce:1c:e8:2d:b8:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a15237c39a325aa309b69e66fe09237da1ad0d2b Validity Not Before: Jan 2 12:20:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9f44ebecefd47bea92b3dd5778328aac3c7ec51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c9:bd:f1:2e:2d:f5:39:3a:8f:b4:a8:8a:ae: 51:bc:4a:18:e5:81:a0:cf:f2:a4:d9:de:90:42:37: 5f:a7:cc:dc:34:60:56:1b:34:fa:d8:2f:bf:88:32: 3d:ce:d3:7c:d1:ed:ce:e9:a3:db:e5:7d:6b:4d:05: fe:c8:ff:70:cc:ce:57:2a:57:a5:a3:42:b4:18:e5: bd:17:92:21:fb:c2:d1:c8:46:1b:07:33:b2:e0:78: d5:40:1b:f4:01:1a:32:98:40:b1:7a:07:b8:fc:c5: 0f:b8:2f:3c:52:8d:6f:b9:64:bf:77:c8:02:03:85: 32:41:57:b4:f9:f0:f3:85:44:66:9a:ac:05:fd:1f: 8c:2a:05:7d:bb:be:54:fc:e4:19:5d:ec:0e:5e:80: 3c:c4:9b:2f:b7:a8:03:76:58:23:57:90:29:b1:0e: e5:9a:ff:f4:01:83:6f:56:fd:e4:4c:b9:20:fd:5e: 7c:ce:86:dc:15:bd:a4:c9:0a:38:a7:c3:54:4b:10: d4:9a:bb:a7:b5:8c:80:ca:b4:da:e4:d5:e7:6a:92: ad:c3:1f:f0:23:b0:27:3e:00:09:7e:5b:b2:4c:1a: 71:0c:17:ad:6b:65:4a:1c:b2:c0:09:de:b8:a7:ac: 93:a8:48:f1:15:6e:1d:27:e6:48:6b:07:6e:2e:fb: 20:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F4:4E:BE:CE:FD:47:BE:A9:2B:3D:D5:77:83:28:AA:C3:C7:EC:51 X509v3 Authority Key Identifier: keyid:A1:52:37:C3:9A:32:5A:A3:09:B6:9E:66:FE:09:23:7D:A1:AD:0D:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/ufROvs79R76pKz3Vd4MoqsPH7FE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:75c1:1000::/36 Signature Algorithm: sha256WithRSAEncryption 5c:d1:a3:31:5a:cd:0e:04:d8:9a:a0:bc:34:f7:98:e3:ec:a1: 52:72:b1:9e:7e:8a:26:8c:a4:f0:39:f7:3e:69:c7:de:44:f0: b1:a2:1e:2f:17:47:54:4b:38:07:33:19:25:93:c6:a4:0c:7a: 03:ef:f1:5f:7e:30:21:3e:12:ad:26:d9:df:b5:e4:5e:b3:de: 7f:11:91:4f:1a:5f:e3:a6:14:d4:0a:3d:39:fb:c8:4b:68:fc: 5c:61:f0:66:1a:1d:38:a3:16:c8:bb:0c:71:b4:bf:a1:9f:71: cc:5d:28:10:e0:44:ca:d2:f3:8b:c1:03:8b:06:a0:3d:5f:02: 99:21:b1:ed:26:c9:ad:d6:99:1d:0d:7e:5f:ff:f0:c1:96:eb: ae:97:8d:92:2c:0a:18:96:0a:59:ef:fa:09:4d:41:e2:96:f6: cc:1f:d1:29:54:a2:56:22:b6:bf:7a:bf:27:81:a8:0e:8b:39: 03:31:fb:ec:5d:1c:74:5e:29:eb:69:94:f7:fe:c6:2b:90:fa: a2:05:dd:5b:a3:26:f3:ec:24:f8:e1:c1:00:a9:83:2c:1a:ba: d3:3a:cc:a4:6f:90:f4:97:49:29:b2:e4:f0:7b:23:1b:d3:9e: 50:5b:f9:3a:f5:2a:3d:98:9d:7f:6d:a6:2c:70:72:4d:41:c8: fe:5f:4b:68 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+prX1o2CVcodbzhzoLbhjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExNTIzN2MzOWEzMjVhYTMwOWI2OWU2NmZlMDkyMzdkYTFh ZDBkMmIwHhcNMjYwMTAyMTIyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWY0NGViZWNlZmQ0N2JlYTkyYjNkZDU3NzgzMjhhYWMzYzdlYzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8m98S4t9Tk6j7Soiq5RvEoY5YGg z/Kk2d6QQjdfp8zcNGBWGzT62C+/iDI9ztN80e3O6aPb5X1rTQX+yP9wzM5XKlel o0K0GOW9F5Ih+8LRyEYbBzOy4HjVQBv0ARoymECxege4/MUPuC88Uo1vuWS/d8gC A4UyQVe0+fDzhURmmqwF/R+MKgV9u75U/OQZXewOXoA8xJsvt6gDdlgjV5ApsQ7l mv/0AYNvVv3kTLkg/V58zobcFb2kyQo4p8NUSxDUmruntYyAyrTa5NXnapKtwx/w I7AnPgAJfluyTBpxDBeta2VKHLLACd64p6yTqEjxFW4dJ+ZIawduLvsgAQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFLn0Tr7O/Ue+qSs91XeDKKrDx+xRMB8GA1UdIwQY MBaAFKFSN8OaMlqjCbaeZv4JI32hrQ0rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1ZJM3c1b3lXcU1KdHA1bV9na2pmYUd0RFNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9mMzMyMjktY2EyZC00MTA4LTg5MmQt NGM5MTBhZTM3MzVkLzEvdWZST3ZzNzlSNzZwS3ozVmQ0TW9xc1BIN0ZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9mMzMyMjktY2EyZC00MTA4LTg5MmQtNGM5MTBhZTM3MzVk LzEvb1ZJM3c1b3lXcU1KdHA1bV9na2pmYUd0RFNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKhN1wRAw DQYJKoZIhvcNAQELBQADggEBAFzRozFazQ4E2JqgvDT3mOPsoVJysZ5+iiaMpPA5 9z5px95E8LGiHi8XR1RLOAczGSWTxqQMegPv8V9+MCE+Eq0m2d+15F6z3n8RkU8a X+OmFNQKPTn7yEto/Fxh8GYaHTijFsi7DHG0v6GfccxdKBDgRMrS84vBA4sGoD1f Apkhse0mya3WmR0Nfl//8MGW666XjZIsChiWClnv+glNQeKW9swf0SlUolYitr96 vyeBqA6LOQMx++xdHHReKetplPf+xiuQ+qIF3VujJvPsJPjhwQCpgywautM6zKRv kPSXSSmy5PB7IxvTnlBb+Tr1Kj2YnX9tpixwck1ByP5fS2g= -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:47 2026 by rpki-client