This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/uFClGSpeGEjwQsC_QTd20Dprr-I.roa File: uFClGSpeGEjwQsC_QTd20Dprr-I.roa (raw, json) Hash identifier: ZSHME475VpVZlfM6MiJmA1EyOYGOLuRVRvJ6kvFPsNM= Subject key identifier: B8:50:A5:19:2A:5E:18:48:F0:42:C0:BF:41:37:76:D0:3A:6B:AF:E2 Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Certificate serial: 019B7910F257ACEFAEA8A81A7CC84905E32B Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/uFClGSpeGEjwQsC_QTd20Dprr-I.roa Signing time: Thu 01 Jan 2026 10:18:32 +0000 ROA not before: Thu 01 Jan 2026 10:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213273 IP address blocks: 2a0d:f407:1006::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:f2:57:ac:ef:ae:a8:a8:1a:7c:c8:49:05:e3:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Validity Not Before: Jan 1 10:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b850a5192a5e1848f042c0bf413776d03a6bafe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1e:94:93:35:bf:96:3d:19:4b:58:f5:d0:d5: 29:99:a6:f6:6b:97:08:48:9d:17:d7:ca:29:f7:e2: 5b:a9:52:c5:20:01:2e:0a:ff:7e:a7:4d:df:b7:5e: 44:d0:13:6f:fa:8a:2a:6f:50:c2:64:25:d1:0e:d8: ac:14:6e:ea:d3:c7:d2:55:57:32:a7:60:d2:ac:20: 57:a3:fb:b4:cb:47:b5:8e:cc:64:5a:8d:94:b7:79: fe:63:31:c4:d6:6e:e7:33:9a:42:43:6c:3e:fc:49: c7:7d:34:35:47:41:a0:46:95:94:cd:1d:e3:ec:50: e0:a1:84:0c:67:27:49:bf:a0:e1:45:27:cf:4b:39: b1:5f:3f:7d:ea:91:7b:27:b8:9d:53:27:e9:05:26: a8:0a:75:11:09:a0:1d:ff:7f:73:71:c9:93:fc:7e: 08:e9:5d:92:04:b4:07:66:8e:08:5c:dc:7b:5a:1f: 39:db:5f:9a:29:32:63:83:87:b5:83:91:6b:1f:b0: e5:de:5c:4b:9f:24:8c:92:64:75:a3:43:73:2a:26: b9:ee:d4:30:0e:9c:e7:58:19:c3:2e:14:fb:86:44: f3:11:ab:16:84:56:fc:5a:2c:a8:8b:83:57:63:0b: e7:9d:7c:d9:00:19:90:e7:b3:45:4c:72:3a:e2:36: 39:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:50:A5:19:2A:5E:18:48:F0:42:C0:BF:41:37:76:D0:3A:6B:AF:E2 X509v3 Authority Key Identifier: keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/uFClGSpeGEjwQsC_QTd20Dprr-I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:f407:1006::/48 Signature Algorithm: sha256WithRSAEncryption 75:ae:09:e4:32:88:85:0e:61:7c:12:2e:7f:62:0a:50:2b:e5: 7b:8e:37:94:fe:e9:30:96:8a:ee:b7:a7:6a:06:dd:ea:0b:ea: 23:3b:50:07:99:df:e2:0b:cc:76:c5:f8:27:3a:e2:d0:32:43: 81:b1:c1:f2:fe:9a:4e:49:61:4b:74:7d:0a:d3:b6:8d:ba:2b: fb:69:51:4f:1c:22:7e:ef:19:ba:ca:53:34:fe:59:74:c3:72: a5:20:00:b1:02:06:3f:b5:a1:4a:96:55:72:8d:a9:88:ac:84: bc:61:71:39:60:3a:91:b6:3f:5e:e4:7b:74:ac:66:d9:8b:2d: 2d:f5:92:45:3f:12:f8:01:c3:fe:df:8f:6d:2d:eb:e8:0d:a9: 12:2e:be:7c:35:0f:d9:48:b8:22:bb:e3:77:58:33:4c:d2:f4: c8:f3:8e:20:fa:17:f1:8e:bc:3f:40:09:05:49:44:30:b0:5a: ef:11:96:71:dd:a0:ba:b8:93:72:1b:d7:f2:3d:33:c6:54:14: de:d2:b8:74:c7:00:89:95:b2:c9:3c:b2:e8:e4:df:34:73:89: 59:a5:fa:e0:71:1a:0f:16:39:57:5d:62:8b:8e:65:7f:f3:3e: 4c:8f:02:a2:84:c3:0d:3d:cd:a0:3e:ec:a2:67:d5:f3:a4:e5: c3:25:39:4c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EPJXrO+uqKgafMhJBeMrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy NTFkYWQwHhcNMjYwMTAxMTAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODUwYTUxOTJhNWUxODQ4ZjA0MmMwYmY0MTM3NzZkMDNhNmJhZmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyB6UkzW/lj0ZS1j10NUpmab2a5cI SJ0X18op9+JbqVLFIAEuCv9+p03ft15E0BNv+ooqb1DCZCXRDtisFG7q08fSVVcy p2DSrCBXo/u0y0e1jsxkWo2Ut3n+YzHE1m7nM5pCQ2w+/EnHfTQ1R0GgRpWUzR3j 7FDgoYQMZydJv6DhRSfPSzmxXz996pF7J7idUyfpBSaoCnURCaAd/39zccmT/H4I 6V2SBLQHZo4IXNx7Wh8521+aKTJjg4e1g5FrH7Dl3lxLnySMkmR1o0NzKia57tQw DpznWBnDLhT7hkTzEasWhFb8Wiyoi4NXYwvnnXzZABmQ57NFTHI64jY53wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLhQpRkqXhhI8ELAv0E3dtA6a6/iMB8GA1UdIwQY MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt YjdjNTc4Yjc0ZTM1LzEvdUZDbEdTcGVHRWp3UXNDX1FUZDIwRHByci1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1 LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg30BxAG MA0GCSqGSIb3DQEBCwUAA4IBAQB1rgnkMoiFDmF8Ei5/YgpQK+V7jjeU/ukwloru t6dqBt3qC+ojO1AHmd/iC8x2xfgnOuLQMkOBscHy/ppOSWFLdH0K07aNuiv7aVFP HCJ+7xm6ylM0/ll0w3KlIACxAgY/taFKllVyjamIrIS8YXE5YDqRtj9e5Ht0rGbZ iy0t9ZJFPxL4AcP+349tLevoDakSLr58NQ/ZSLgiu+N3WDNM0vTI844g+hfxjrw/ QAkFSUQwsFrvEZZx3aC6uJNyG9fyPTPGVBTe0rh0xwCJlbLJPLLo5N80c4lZpfrg cRoPFjlXXWKLjmV/8z5MjwKihMMNPc2gPuyiZ9XzpOXDJTlM -----END CERTIFICATE-----Generated at Sun Jan 25 15:07:12 2026 by rpki-client