This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/UXW4TwBbqAg2KVwromTqDGJrE20.roa File: UXW4TwBbqAg2KVwromTqDGJrE20.roa (raw, json) Hash identifier: iC2l8xQ6yq60AZmCDOxhtpG1B+XfVb2gALUB/AI2BAQ= Subject key identifier: 51:75:B8:4F:00:5B:A8:08:36:29:5C:2B:A2:64:EA:0C:62:6B:13:6D Certificate issuer: /CN=998de60a867b49db29a627c6f7d223a266a322a9 Certificate serial: 019B797F2E62E68A5DDF1942196A19A86E7F Authority key identifier: 99:8D:E6:0A:86:7B:49:DB:29:A6:27:C6:F7:D2:23:A2:66:A3:22:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mY3mCoZ7SdsppifG99IjomajIqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/UXW4TwBbqAg2KVwromTqDGJrE20.roa Signing time: Thu 01 Jan 2026 12:18:56 +0000 ROA not before: Thu 01 Jan 2026 12:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203430 IP address blocks: 2001:678:1160::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.crl rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.mft rsync://rpki.ripe.net/repository/DEFAULT/mY3mCoZ7SdsppifG99IjomajIqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:2e:62:e6:8a:5d:df:19:42:19:6a:19:a8:6e:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=998de60a867b49db29a627c6f7d223a266a322a9 Validity Not Before: Jan 1 12:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5175b84f005ba80836295c2ba264ea0c626b136d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a2:55:69:c9:c8:25:b6:ec:77:1e:18:8c:9d: 84:a3:9c:82:73:6e:22:20:1b:88:6d:57:88:28:b0: 5b:66:ec:99:05:c8:97:08:60:d4:93:43:f0:f3:b5: ea:85:a6:4f:ca:8d:d8:c4:d2:8a:67:81:6d:7e:14: 0f:0d:cf:d0:18:17:c2:9f:96:34:cc:af:80:dc:bd: e6:78:2b:26:82:29:c7:5a:71:6f:f9:fa:ed:45:a6: 18:1b:f2:93:31:5c:96:a9:7f:77:e4:a9:67:ad:dd: 93:d5:6b:ad:d7:25:c8:a2:e4:d1:a6:83:d4:fa:cf: 98:af:03:60:c4:76:3f:86:a3:20:13:00:08:e5:26: 19:f1:fd:06:06:1b:b7:55:2c:63:c9:43:35:3a:ef: bb:17:8a:7d:fc:0a:e8:0c:2b:cc:98:ce:5d:12:fb: 19:cd:b2:54:33:59:76:88:5f:2e:d7:26:be:72:a7: ca:46:ac:ca:ea:3c:63:7d:d7:34:30:47:4f:56:a1: 26:ea:d9:af:57:7a:2b:db:9b:98:57:a0:9f:3e:39: 9e:86:ee:9a:3c:ed:03:2b:96:4b:30:9e:f6:24:d7: 44:70:13:5a:02:3a:63:e7:c1:43:52:51:22:33:2e: 60:44:dd:b9:a9:7c:77:a3:6e:3b:8d:42:4b:65:95: 8f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:75:B8:4F:00:5B:A8:08:36:29:5C:2B:A2:64:EA:0C:62:6B:13:6D X509v3 Authority Key Identifier: keyid:99:8D:E6:0A:86:7B:49:DB:29:A6:27:C6:F7:D2:23:A2:66:A3:22:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mY3mCoZ7SdsppifG99IjomajIqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/UXW4TwBbqAg2KVwromTqDGJrE20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:1160::/48 Signature Algorithm: sha256WithRSAEncryption 3c:8d:3a:d9:da:0a:12:2b:e3:22:67:7b:fa:4c:d7:60:e5:49: f3:4c:ef:02:c3:a1:df:12:80:08:c1:45:a8:7d:96:09:2e:e4: d0:1c:cc:34:65:fc:f9:3b:f1:d8:8d:50:62:cc:65:69:72:fc: c9:c4:18:07:8d:ee:22:f8:5a:19:36:5e:1b:25:23:96:54:20: b3:0c:bd:db:55:a1:44:4d:e9:bb:31:5f:8d:7f:f0:36:be:79: e2:37:f7:fd:07:79:87:a9:19:31:10:42:78:c4:8b:7a:3e:34: e2:6e:c6:e2:c1:59:6e:00:92:2d:a1:bb:2c:b4:2c:43:f6:42: 6c:6b:06:01:77:65:9e:04:8b:c4:28:6a:c8:c3:91:40:42:2d: ec:05:41:22:6b:a5:78:ae:18:61:e5:d7:2d:70:6f:c7:69:80: 09:8b:09:99:34:8e:4a:d8:1c:f9:22:70:7c:b7:72:95:58:4a: 6d:48:47:0a:f5:d7:ba:23:ef:f1:cb:12:80:bb:f3:a0:e7:25: 6e:81:de:65:46:9a:91:af:c3:3f:54:69:2b:bb:27:38:96:38: d4:37:59:79:96:ea:0d:e3:69:3f:1f:24:0f:de:2f:12:12:9a: 95:d4:a5:52:92:70:1c:b4:ee:b8:56:07:27:fb:99:9c:a2:42: f3:21:d3:df -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fy5i5opd3xlCGWoZqG5/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5OGRlNjBhODY3YjQ5ZGIyOWE2MjdjNmY3ZDIyM2EyNjZh MzIyYTkwHhcNMjYwMTAxMTIxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTc1Yjg0ZjAwNWJhODA4MzYyOTVjMmJhMjY0ZWEwYzYyNmIxMzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aJVacnIJbbsdx4YjJ2Eo5yCc24i IBuIbVeIKLBbZuyZBciXCGDUk0Pw87XqhaZPyo3YxNKKZ4FtfhQPDc/QGBfCn5Y0 zK+A3L3meCsmginHWnFv+frtRaYYG/KTMVyWqX935Klnrd2T1Wut1yXIouTRpoPU +s+YrwNgxHY/hqMgEwAI5SYZ8f0GBhu3VSxjyUM1Ou+7F4p9/AroDCvMmM5dEvsZ zbJUM1l2iF8u1ya+cqfKRqzK6jxjfdc0MEdPVqEm6tmvV3or25uYV6CfPjmehu6a PO0DK5ZLMJ72JNdEcBNaAjpj58FDUlEiMy5gRN25qXx3o247jUJLZZWP3wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFF1uE8AW6gINilcK6Jk6gxiaxNtMB8GA1UdIwQY MBaAFJmN5gqGe0nbKaYnxvfSI6JmoyKpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVkzbUNvWjdTZHNwcGlmRzk5SWpvbWFqSXFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9kZTE3MWItNWIzYy00Yjc2LWIwNjUt MjBkMzRlMThlMjcwLzEvVVhXNFR3QmJxQWcyS1Z3cm9tVHFER0pyRTIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9kZTE3MWItNWIzYy00Yjc2LWIwNjUtMjBkMzRlMThlMjcw LzEvbVkzbUNvWjdTZHNwcGlmRzk5SWpvbWFqSXFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBFg MA0GCSqGSIb3DQEBCwUAA4IBAQA8jTrZ2goSK+MiZ3v6TNdg5UnzTO8Cw6HfEoAI wUWofZYJLuTQHMw0Zfz5O/HYjVBizGVpcvzJxBgHje4i+FoZNl4bJSOWVCCzDL3b VaFETem7MV+Nf/A2vnniN/f9B3mHqRkxEEJ4xIt6PjTibsbiwVluAJItobsstCxD 9kJsawYBd2WeBIvEKGrIw5FAQi3sBUEia6V4rhhh5dctcG/HaYAJiwmZNI5K2Bz5 InB8t3KVWEptSEcK9de6I+/xyxKAu/Og5yVugd5lRpqRr8M/VGkruyc4ljjUN1l5 luoN42k/HyQP3i8SEpqV1KVSknActO64Vgcn+5mcokLzIdPf -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:38 2026 by rpki-client