This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/UZnR7krr0WxNGuMXqqMwEqI0uNY.roa File: UZnR7krr0WxNGuMXqqMwEqI0uNY.roa (raw, json) Hash identifier: 7OMTTixXOCOobkw7DoVQUXPk+DCWUZ6TyuOZgMdC1Xo= Subject key identifier: 51:99:D1:EE:4A:EB:D1:6C:4D:1A:E3:17:AA:A3:30:12:A2:34:B8:D6 Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a Certificate serial: 019B7FF1C5951CD16A3A3A195231C5206AB2 Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/UZnR7krr0WxNGuMXqqMwEqI0uNY.roa Signing time: Fri 02 Jan 2026 18:21:49 +0000 ROA not before: Fri 02 Jan 2026 18:21:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215357 IP address blocks: 2a03:5840:128::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:c5:95:1c:d1:6a:3a:3a:19:52:31:c5:20:6a:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a Validity Not Before: Jan 2 18:21:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5199d1ee4aebd16c4d1ae317aaa33012a234b8d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:46:a6:68:2f:b0:f2:10:4e:43:76:59:7f:2c: 2d:91:3b:2a:27:99:c0:66:99:dd:17:b6:6e:aa:75: 4b:8b:c7:92:16:e4:be:13:64:f2:32:14:15:4f:3e: a5:bb:40:35:c0:b5:cf:70:b1:c9:25:9e:19:80:a6: 1e:6a:3a:e7:81:ea:3d:a5:cd:82:bc:03:57:62:82: d9:16:e3:d0:17:4e:b8:82:8b:1c:83:a5:e5:81:45: a1:51:98:8a:45:bb:71:3c:e8:4c:ae:4c:47:64:f6: b8:b2:fc:2b:87:23:0d:f1:06:e6:64:10:85:9d:66: 3b:86:9d:20:2d:e9:fa:3a:a3:17:e7:6f:e3:89:12: 12:eb:a4:a7:4c:44:52:27:cc:80:db:2d:7c:74:a5: e9:37:a0:73:93:a6:12:e9:b5:05:f1:ce:f2:49:cd: 94:b7:24:81:45:dc:ba:1a:b2:45:75:3c:12:65:bf: 71:ba:60:26:14:04:51:3d:b6:d5:aa:ce:7a:93:5d: 31:31:15:22:07:aa:39:d0:0b:2e:71:59:d5:67:37: 1f:46:42:12:a8:da:a9:05:0d:45:ed:06:76:45:f0: 12:ca:5c:97:71:43:bc:c3:bc:73:47:a0:de:fc:60: 65:e8:d2:eb:12:32:d0:2a:74:d9:93:68:01:63:89: c8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:99:D1:EE:4A:EB:D1:6C:4D:1A:E3:17:AA:A3:30:12:A2:34:B8:D6 X509v3 Authority Key Identifier: keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/UZnR7krr0WxNGuMXqqMwEqI0uNY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:5840:128::/48 Signature Algorithm: sha256WithRSAEncryption 22:61:b5:8c:41:1a:ec:97:09:c6:a0:b6:b4:50:67:dd:61:51: 15:5e:b3:29:be:e4:f3:c8:53:a1:4e:56:c6:36:5a:27:50:96: 92:24:32:31:e4:06:91:34:a2:60:4a:13:a0:62:1f:3b:a8:af: a7:80:fc:b1:ab:bd:38:2a:a2:c8:ee:b9:61:39:13:11:5d:06: 45:30:93:06:58:2b:e0:29:dd:b0:f5:1b:9d:29:18:f4:57:99: 3d:64:09:a5:3a:e8:da:c9:39:16:43:1a:b6:bd:34:37:66:1b: 18:50:fc:2b:a6:fb:d5:c7:9f:39:90:49:44:af:a6:57:9e:8e: 41:e3:91:a0:50:8c:0d:cc:2c:65:5c:ca:69:e0:9f:de:f9:0d: bc:be:f1:e1:68:d5:eb:4f:f5:72:fb:55:e5:d1:a6:28:c3:9f: 2c:e0:59:57:36:64:06:e7:07:8a:e0:5c:17:95:5f:dd:2e:b3: bc:7d:e1:30:e8:39:3d:d1:13:8c:c0:ee:7e:82:10:a6:9e:b5: 95:36:cc:8c:a0:ea:ca:fd:f8:19:c9:3d:30:0c:3f:65:76:d6: 6b:0b:4d:08:84:2c:4a:27:82:90:b8:e3:51:58:bd:a7:07:55: c4:37:c7:57:b5:d1:8d:b0:9d:eb:9d:90:3f:3e:26:aa:f0:b4: 30:4d:9b:48 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/8cWVHNFqOjoZUjHFIGqyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3NzcwNWU4OWJiNjViNDcyZTRlMDE4NGQ2ZmU5YmZiOGM1 ODYzNWEwHhcNMjYwMTAyMTgyMTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTk5ZDFlZTRhZWJkMTZjNGQxYWUzMTdhYWEzMzAxMmEyMzRiOGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkamaC+w8hBOQ3ZZfywtkTsqJ5nA ZpndF7ZuqnVLi8eSFuS+E2TyMhQVTz6lu0A1wLXPcLHJJZ4ZgKYeajrngeo9pc2C vANXYoLZFuPQF064goscg6XlgUWhUZiKRbtxPOhMrkxHZPa4svwrhyMN8QbmZBCF nWY7hp0gLen6OqMX52/jiRIS66SnTERSJ8yA2y18dKXpN6Bzk6YS6bUF8c7ySc2U tySBRdy6GrJFdTwSZb9xumAmFARRPbbVqs56k10xMRUiB6o50AsucVnVZzcfRkIS qNqpBQ1F7QZ2RfASylyXcUO8w7xzR6De/GBl6NLrEjLQKnTZk2gBY4nILQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFGZ0e5K69FsTRrjF6qjMBKiNLjWMB8GA1UdIwQY MBaAFPd3BeibtltHLk4BhNb+m/uMWGNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYt NmNiODk3OTFkN2ZkLzEvVVpuUjdrcnIwV3hOR3VNWHFxTXdFcUkwdU5ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYtNmNiODk3OTFkN2Zk LzEvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgNYQAEo MA0GCSqGSIb3DQEBCwUAA4IBAQAiYbWMQRrslwnGoLa0UGfdYVEVXrMpvuTzyFOh TlbGNlonUJaSJDIx5AaRNKJgShOgYh87qK+ngPyxq704KqLI7rlhORMRXQZFMJMG WCvgKd2w9RudKRj0V5k9ZAmlOujayTkWQxq2vTQ3ZhsYUPwrpvvVx585kElEr6ZX no5B45GgUIwNzCxlXMpp4J/e+Q28vvHhaNXrT/Vy+1Xl0aYow58s4FlXNmQG5weK 4FwXlV/dLrO8feEw6Dk90ROMwO5+ghCmnrWVNsyMoOrK/fgZyT0wDD9ldtZrC00I hCxKJ4KQuONRWL2nB1XEN8dXtdGNsJ3rnZA/Piaq8LQwTZtI -----END CERTIFICATE-----Generated at Fri Jan 23 15:23:45 2026 by rpki-client