This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/uBIxs7ssxXDGyk8SQNxkeydPi80.roa File: uBIxs7ssxXDGyk8SQNxkeydPi80.roa (raw, json) Hash identifier: EJE4RSVi+Vk5YmcZI9DMOpSqKh06AU4ky+hWC3DDJTc= Subject key identifier: B8:12:31:B3:BB:2C:C5:70:C6:CA:4F:12:40:DC:64:7B:27:4F:8B:CD Certificate issuer: /CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921 Certificate serial: 019B7D5BFDFE8C0E9523A56DD23B496BB90A Authority key identifier: E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/uBIxs7ssxXDGyk8SQNxkeydPi80.roa Signing time: Fri 02 Jan 2026 06:18:59 +0000 ROA not before: Fri 02 Jan 2026 06:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43668 IP address blocks: 2a13:3ac0::/32 maxlen: 32 2a13:3ac1::/32 maxlen: 32 2a13:3ac2::/32 maxlen: 32 2a13:3ac3::/32 maxlen: 32 2a13:3ac4::/32 maxlen: 32 2a13:3ac5::/32 maxlen: 32 2a13:3ac6::/32 maxlen: 32 2a13:3ac7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:fd:fe:8c:0e:95:23:a5:6d:d2:3b:49:6b:b9:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921 Validity Not Before: Jan 2 06:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b81231b3bb2cc570c6ca4f1240dc647b274f8bcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:69:90:45:e1:e3:42:7d:55:d7:6d:40:4c:68: 94:1a:e0:bb:0e:dc:70:8b:2f:23:20:80:15:5a:1a: f7:d6:59:7a:16:8f:67:64:00:b4:54:dd:8b:e3:47: 93:61:86:42:ba:64:4e:fe:86:59:21:a2:38:f9:75: ff:e4:ad:49:7f:61:73:e4:3c:83:fc:26:c8:b1:aa: 2d:f8:46:b0:c8:1b:5b:6b:56:53:c1:29:81:a1:a6: fe:d8:0b:21:15:97:e2:ca:8e:33:f8:e7:fa:20:a0: 58:69:56:9b:76:16:bb:e1:5c:e4:b8:5c:e6:50:4e: 5a:dd:92:08:ef:45:04:5b:6f:80:ad:35:32:9c:0a: 44:73:0a:65:a1:67:3b:72:fa:65:6f:52:3e:79:6b: 05:aa:85:24:49:4c:3c:ef:2d:de:78:40:e2:a1:80: b6:00:c6:f9:b7:31:6a:f7:2b:b3:b8:5d:bf:3d:6d: 0e:e8:ea:38:5d:06:fd:4a:cd:fa:27:6f:8f:24:a9: ec:e8:af:d7:1d:ea:93:08:a3:43:18:92:1a:ad:2d: 60:9d:da:fa:76:7c:1e:9b:25:45:85:49:4f:1d:2a: ea:5a:24:50:58:fd:45:2e:11:e8:a8:2c:38:de:07: 4c:27:35:c0:e9:b7:de:04:db:41:de:5d:60:f8:ab: 31:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:12:31:B3:BB:2C:C5:70:C6:CA:4F:12:40:DC:64:7B:27:4F:8B:CD X509v3 Authority Key Identifier: keyid:E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/uBIxs7ssxXDGyk8SQNxkeydPi80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:3ac0::/29 Signature Algorithm: sha256WithRSAEncryption 49:98:5f:70:83:7b:80:8c:9d:a6:19:58:12:35:ce:13:ef:53: 0b:16:36:38:f0:c6:61:13:04:d6:f2:a5:80:ea:1d:f7:10:25: 74:41:41:9a:f6:ee:3a:2c:f9:36:58:72:20:9d:16:d8:99:ce: 58:5c:6d:05:f3:2e:00:20:2d:14:8a:31:39:63:c2:cd:28:f7: f5:e4:1f:b9:bc:bd:50:9a:26:c9:99:70:46:c5:94:f4:4c:86: 84:4a:0c:9d:ab:cc:a7:ab:dd:b0:1e:5e:8e:76:b3:6a:0b:fa: a5:f6:49:a8:95:3b:e6:a0:3e:17:79:81:31:fa:2d:1a:53:e0: 39:94:96:27:c6:52:22:d5:8c:d0:b7:fc:c8:c7:b8:6e:53:50: 53:da:69:74:ac:b0:bd:08:bb:97:5a:09:e9:e2:ef:61:3d:dc: f5:5f:80:d5:e6:3b:43:ec:36:22:01:a0:09:1c:17:1b:e6:ca: da:72:d6:03:a4:4b:de:3f:79:bd:51:f2:e6:32:8a:a8:27:08: 33:d7:1e:57:95:21:01:8c:25:8e:05:b7:2c:db:af:86:d4:4f: 23:30:15:ec:d2:c5:64:0a:3c:d1:86:7f:55:23:38:b4:55:cf: 9e:5e:7f:21:6b:da:4b:14:40:c9:5d:f1:a5:61:15:f8:49:bf: 44:02:77:75 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9W/3+jA6VI6Vt0jtJa7kKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyOTJjOGM3NzliNmVkNmVkZTcyYThjZjExNDkwZWY2ZDdh OWU5MjEwHhcNMjYwMTAyMDYxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODEyMzFiM2JiMmNjNTcwYzZjYTRmMTI0MGRjNjQ3YjI3NGY4YmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmmQReHjQn1V121ATGiUGuC7Dtxw iy8jIIAVWhr31ll6Fo9nZAC0VN2L40eTYYZCumRO/oZZIaI4+XX/5K1Jf2Fz5DyD /CbIsaot+EawyBtba1ZTwSmBoab+2AshFZfiyo4z+Of6IKBYaVabdha74VzkuFzm UE5a3ZII70UEW2+ArTUynApEcwploWc7cvplb1I+eWsFqoUkSUw87y3eeEDioYC2 AMb5tzFq9yuzuF2/PW0O6Oo4XQb9Ss36J2+PJKns6K/XHeqTCKNDGJIarS1gndr6 dnwemyVFhUlPHSrqWiRQWP1FLhHoqCw43gdMJzXA6bfeBNtB3l1g+KsxdwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFLgSMbO7LMVwxspPEkDcZHsnT4vNMB8GA1UdIwQY MBaAFOKSyMd5tu1u3nKozxFJDvbXqekhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHBMSXgzbTI3VzdlY3FqUEVVa085dGVwNlNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC80YTJlOTctMjU3MC00NzhiLWI5YmMt NWViYjYzNzgwMDllLzEvdUJJeHM3c3N4WERHeWs4U1FOeGtleWRQaTgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC80YTJlOTctMjU3MC00NzhiLWI5YmMtNWViYjYzNzgwMDll LzEvNHBMSXgzbTI3VzdlY3FqUEVVa085dGVwNlNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhM6wDAN BgkqhkiG9w0BAQsFAAOCAQEASZhfcIN7gIydphlYEjXOE+9TCxY2OPDGYRME1vKl gOod9xAldEFBmvbuOiz5NlhyIJ0W2JnOWFxtBfMuACAtFIoxOWPCzSj39eQfuby9 UJomyZlwRsWU9EyGhEoMnavMp6vdsB5ejnazagv6pfZJqJU75qA+F3mBMfotGlPg OZSWJ8ZSItWM0Lf8yMe4blNQU9ppdKywvQi7l1oJ6eLvYT3c9V+A1eY7Q+w2IgGg CRwXG+bK2nLWA6RL3j95vVHy5jKKqCcIM9ceV5UhAYwljgW3LNuvhtRPIzAV7NLF ZAo80YZ/VSM4tFXPnl5/IWvaSxRAyV3xpWEV+Em/RAJ3dQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:31 2026 by rpki-client