This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/uQzutUAf-r2QuULAJhXjnmwt7ng.roa File: uQzutUAf-r2QuULAJhXjnmwt7ng.roa (raw, json) Hash identifier: 1veFTEsZ6F5oDeCmJlGSZOhtEnYT9oSi6cqBPJz1hiY= Subject key identifier: B9:0C:EE:B5:40:1F:FA:BD:90:B9:42:C0:26:15:E3:9E:6C:2D:EE:78 Certificate issuer: /CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137 Certificate serial: 019B7758A4A144927057BA8AD753E220996C Authority key identifier: C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/uQzutUAf-r2QuULAJhXjnmwt7ng.roa Signing time: Thu 01 Jan 2026 02:17:36 +0000 ROA not before: Thu 01 Jan 2026 02:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216225 IP address blocks: 2a13:d8c4:40::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:a4:a1:44:92:70:57:ba:8a:d7:53:e2:20:99:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137 Validity Not Before: Jan 1 02:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b90ceeb5401ffabd90b942c02615e39e6c2dee78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3e:97:93:86:2f:ee:98:a5:58:75:f5:63:32: 47:b7:76:e8:09:eb:d9:f0:25:21:5c:a2:5a:ff:3e: 76:28:ec:e5:8a:fb:ed:cd:f3:fa:a2:33:1c:08:c8: 5f:31:b8:0b:86:eb:4d:39:cc:f6:a4:06:ce:83:43: ab:73:91:cf:28:ef:6c:40:bf:bd:fb:c8:7f:c6:66: b9:9e:f5:e9:8e:0f:8a:a5:14:2b:f1:12:c2:18:06: 46:fe:6a:40:30:57:1f:8a:ca:0d:41:7d:4b:7e:50: 20:49:75:fc:77:e7:ff:24:bb:80:6c:38:c3:43:37: 4e:b7:72:bb:f0:5b:bc:9c:84:be:b6:24:86:2b:ae: 63:9f:fb:f0:21:e2:4b:07:5e:67:79:10:b1:d5:6e: 2e:b7:90:2b:81:ad:62:f1:2a:b0:9c:c2:d0:ef:55: ad:db:bf:8e:db:49:f1:c1:82:63:98:ac:10:fe:80: bd:9e:81:ad:2f:d1:59:48:cd:27:e8:88:d2:36:1d: 3e:ce:c5:2a:64:c4:67:45:bb:61:c2:4c:e7:ca:d3: fc:90:3c:0c:4b:e6:5f:e3:86:40:3c:c9:9a:86:cc: 67:0e:34:17:01:71:a1:a0:20:16:44:d9:20:10:0f: 58:e6:5a:1f:de:eb:10:e1:63:18:ba:37:a2:58:e9: e4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:0C:EE:B5:40:1F:FA:BD:90:B9:42:C0:26:15:E3:9E:6C:2D:EE:78 X509v3 Authority Key Identifier: keyid:C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/uQzutUAf-r2QuULAJhXjnmwt7ng.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:d8c4:40::/44 Signature Algorithm: sha256WithRSAEncryption 9b:9b:c5:99:8b:64:f1:9d:4e:9b:bf:c9:36:ac:cd:55:1c:5b: f5:ea:b5:25:b7:86:57:94:f4:47:20:ef:fb:bd:6b:01:03:25: 52:c8:ce:a3:61:e4:58:a3:61:45:9f:b5:ed:9c:ca:45:bc:c5: 3d:38:ca:51:5f:39:0e:59:76:b6:9c:2b:1d:7c:08:9f:8e:01: 89:39:5d:1b:91:25:9b:fe:5c:a9:e2:ee:54:d1:c9:27:2f:f8: b0:f7:2e:e0:67:85:c1:0e:22:2f:2e:b2:e1:0c:18:00:c4:70: 17:54:d3:35:76:0b:fe:9f:85:ad:ad:75:8f:8d:7e:bc:07:cb: 5b:f7:90:bb:fa:5b:71:f8:36:f3:94:9e:da:46:92:f1:c6:58: 2f:d9:ad:81:ef:5d:2c:ef:8e:f7:6c:e2:ca:8b:ff:05:46:bf: 9c:a5:ee:c1:58:95:c7:b5:16:9f:bf:e8:d9:19:fb:84:6e:2d: 19:f0:af:8f:e2:8c:2a:22:77:93:90:88:b0:ea:dc:24:aa:4d: 54:91:35:b7:d2:e2:d1:09:f2:2c:69:a3:e3:3a:32:1f:de:6b: 4e:fa:c1:82:1e:cb:7e:d0:42:e5:bf:20:96:3a:6d:81:ff:7f: 9c:9a:7d:0a:6a:2e:37:ae:98:61:9b:73:6d:db:80:e4:9d:87: e3:f4:c1:10 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WKShRJJwV7qK11PiIJlsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2ZjUzYzAzZDJmNGU3ZjA3YTgxZWE5MDNlY2VmMDFkNjhj NjgxMzcwHhcNMjYwMTAxMDIxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTBjZWViNTQwMWZmYWJkOTBiOTQyYzAyNjE1ZTM5ZTZjMmRlZTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwj6Xk4Yv7pilWHX1YzJHt3boCevZ 8CUhXKJa/z52KOzlivvtzfP6ojMcCMhfMbgLhutNOcz2pAbOg0Orc5HPKO9sQL+9 +8h/xma5nvXpjg+KpRQr8RLCGAZG/mpAMFcfisoNQX1LflAgSXX8d+f/JLuAbDjD QzdOt3K78Fu8nIS+tiSGK65jn/vwIeJLB15neRCx1W4ut5Arga1i8SqwnMLQ71Wt 27+O20nxwYJjmKwQ/oC9noGtL9FZSM0n6IjSNh0+zsUqZMRnRbthwkznytP8kDwM S+Zf44ZAPMmahsxnDjQXAXGhoCAWRNkgEA9Y5lof3usQ4WMYujeiWOnkIwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLkM7rVAH/q9kLlCwCYV455sLe54MB8GA1UdIwQY MBaAFMb1PAPS9OfweoHqkD7O8B1oxoE3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHZVOEE5TDA1X0I2Z2VxUVBzN3dIV2pHZ1RjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8zYzIyN2MtNDcwNi00Nzg3LTlhMDct OTBlYTM3MjljNTc0LzEvdVF6dXRVQWYtcjJRdVVMQUpoWGpubXd0N25nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8zYzIyN2MtNDcwNi00Nzg3LTlhMDctOTBlYTM3MjljNTc0 LzEveHZVOEE5TDA1X0I2Z2VxUVBzN3dIV2pHZ1RjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhPYxABA MA0GCSqGSIb3DQEBCwUAA4IBAQCbm8WZi2TxnU6bv8k2rM1VHFv16rUlt4ZXlPRH IO/7vWsBAyVSyM6jYeRYo2FFn7XtnMpFvMU9OMpRXzkOWXa2nCsdfAifjgGJOV0b kSWb/lyp4u5U0cknL/iw9y7gZ4XBDiIvLrLhDBgAxHAXVNM1dgv+n4WtrXWPjX68 B8tb95C7+ltx+DbzlJ7aRpLxxlgv2a2B710s7473bOLKi/8FRr+cpe7BWJXHtRaf v+jZGfuEbi0Z8K+P4owqIneTkIiw6twkqk1UkTW30uLRCfIsaaPjOjIf3mtO+sGC Hst+0ELlvyCWOm2B/3+cmn0Kai43rphhm3Nt24DknYfj9MEQ -----END CERTIFICATE-----Generated at Mon Jan 26 04:02:38 2026 by rpki-client