This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ustsKef3_kQrz_t0nmHTw0MaqT0.roa File: ustsKef3_kQrz_t0nmHTw0MaqT0.roa (raw, json) Hash identifier: QAz/jM+TUevEvBm3ClnKE5FN9ZTcnHmV+8tjFLI7axU= Subject key identifier: BA:CB:6C:29:E7:F7:FE:44:2B:CF:FB:74:9E:61:D3:C3:43:1A:A9:3D Certificate issuer: /CN=12520f8b2af8a1453089a620d2392f66b0a3ebf4 Certificate serial: 019B7E372EE5A86313F9B3DA8F0559637CCE Authority key identifier: 12:52:0F:8B:2A:F8:A1:45:30:89:A6:20:D2:39:2F:66:B0:A3:EB:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ustsKef3_kQrz_t0nmHTw0MaqT0.roa Signing time: Fri 02 Jan 2026 10:18:24 +0000 ROA not before: Fri 02 Jan 2026 10:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 2a07:eb80::/48 maxlen: 48 2a07:eb80:1::/48 maxlen: 48 2a07:eb80:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 01:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:2e:e5:a8:63:13:f9:b3:da:8f:05:59:63:7c:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12520f8b2af8a1453089a620d2392f66b0a3ebf4 Validity Not Before: Jan 2 10:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bacb6c29e7f7fe442bcffb749e61d3c3431aa93d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:54:9f:d1:98:1b:ea:9a:6c:b1:e3:3c:6d:66: d8:42:3b:8a:03:8c:da:71:95:69:64:1d:d7:4e:8e: 3b:56:dd:b7:4f:1a:af:eb:2d:2b:c1:6f:04:46:b2: b5:16:44:5d:2f:75:da:ac:00:69:fc:24:28:5b:19: 68:80:c7:4b:c0:85:ad:ef:91:08:ff:9f:8d:20:bb: 4a:00:7c:69:50:44:94:55:98:ae:af:67:86:65:7e: d6:6b:ab:15:29:42:7e:6f:bc:bf:a2:19:d1:f0:68: 36:82:65:20:ff:7a:d9:65:c0:8d:a4:92:e1:f2:dc: 05:07:01:49:68:ab:00:27:87:4c:34:c8:ec:42:6d: d1:cf:b5:b9:d2:e8:dc:3f:3c:77:f8:6b:08:ea:aa: 92:4d:62:fc:fc:c2:57:8e:ae:f3:73:2a:00:02:fd: fe:94:9e:3a:34:23:16:26:49:31:0e:ac:91:bb:c4: 49:03:e4:a2:d7:b3:1d:c9:83:8f:27:4e:68:db:a2: 92:61:9e:52:d6:4c:28:07:8d:4d:90:ea:67:1b:ad: 2b:96:af:fc:29:6d:01:44:bf:88:77:75:89:dc:5c: 18:94:13:1f:ac:bd:c4:af:c8:e7:95:6f:38:25:b0: f3:1f:8f:9a:6d:fb:d9:99:61:f9:20:c3:fc:0f:4a: aa:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:CB:6C:29:E7:F7:FE:44:2B:CF:FB:74:9E:61:D3:C3:43:1A:A9:3D X509v3 Authority Key Identifier: keyid:12:52:0F:8B:2A:F8:A1:45:30:89:A6:20:D2:39:2F:66:B0:A3:EB:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ustsKef3_kQrz_t0nmHTw0MaqT0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:eb80::-2a07:eb80:2:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 50:ec:5f:2e:d4:11:2a:bd:af:12:39:06:02:8b:28:8d:52:c3: 1a:4e:87:da:9a:d2:8e:ed:76:4f:2e:43:a8:37:9a:bc:83:9f: eb:71:ae:34:b1:9d:3b:17:96:f6:f3:10:0f:f4:86:ba:05:d3: 3d:7f:fb:7e:93:ec:77:59:3d:07:48:af:51:7c:69:61:7f:d7: 86:41:fa:bb:0a:4b:9f:84:32:fe:98:f2:ca:37:07:70:e4:a4: e0:c4:61:05:41:76:e6:eb:25:5c:0f:b0:38:a9:b9:44:97:61: b5:9e:a0:49:f5:20:83:e4:8b:51:65:e7:c3:35:46:35:d8:d8: fb:86:d9:2b:93:fc:1d:d8:cb:24:3a:c6:cf:18:e6:7b:49:68: 12:46:c1:b2:11:f2:64:a0:ca:04:75:1a:1b:c8:94:c0:77:0b: a8:8c:6a:92:dc:18:3b:a2:1d:c7:c5:db:18:2a:5f:b8:1e:e9: a4:61:00:ed:80:f5:72:ee:24:a9:8a:74:10:c3:98:94:1c:65: 96:80:ed:7b:cd:9a:a3:3a:1b:a6:bf:27:ed:85:3d:c4:84:a8: 09:f6:0f:53:bd:a6:c1:61:5e:57:b4:1f:f1:aa:06:a1:cf:30: 1a:5e:f5:b2:af:37:58:72:79:40:11:b2:cf:94:12:5c:c2:29: e5:db:4f:e4 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+Ny7lqGMT+bPajwVZY3zOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNTIwZjhiMmFmOGExNDUzMDg5YTYyMGQyMzkyZjY2YjBh M2ViZjQwHhcNMjYwMTAyMTAxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYWNiNmMyOWU3ZjdmZTQ0MmJjZmZiNzQ5ZTYxZDNjMzQzMWFhOTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVSf0Zgb6ppsseM8bWbYQjuKA4za cZVpZB3XTo47Vt23Txqv6y0rwW8ERrK1FkRdL3XarABp/CQoWxlogMdLwIWt75EI /5+NILtKAHxpUESUVZiur2eGZX7Wa6sVKUJ+b7y/ohnR8Gg2gmUg/3rZZcCNpJLh 8twFBwFJaKsAJ4dMNMjsQm3Rz7W50ujcPzx3+GsI6qqSTWL8/MJXjq7zcyoAAv3+ lJ46NCMWJkkxDqyRu8RJA+Si17MdyYOPJ05o26KSYZ5S1kwoB41NkOpnG60rlq/8 KW0BRL+Id3WJ3FwYlBMfrL3Er8jnlW84JbDzH4+abfvZmWH5IMP8D0qqyQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLrLbCnn9/5EK8/7dJ5h08NDGqk9MB8GA1UdIwQY MBaAFBJSD4sq+KFFMImmINI5L2awo+v0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWxJUGl5cjRvVVV3aWFZZzBqa3ZackNqNl9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85NzY1NjUtYTY5OS00ZDg4LTgxMTct MzQyMWVhNDFkZjM2LzEvdXN0c0tlZjNfa1Fyel90MG5tSFR3ME1hcVQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS85NzY1NjUtYTY5OS00ZDg4LTgxMTctMzQyMWVhNDFkZjM2 LzEvRWxJUGl5cjRvVVV3aWFZZzBqa3ZackNqNl9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASMBADBQcqB+uA AwcAKgfrgAACMA0GCSqGSIb3DQEBCwUAA4IBAQBQ7F8u1BEqva8SOQYCiyiNUsMa TofamtKO7XZPLkOoN5q8g5/rca40sZ07F5b28xAP9Ia6BdM9f/t+k+x3WT0HSK9R fGlhf9eGQfq7CkufhDL+mPLKNwdw5KTgxGEFQXbm6yVcD7A4qblEl2G1nqBJ9SCD 5ItRZefDNUY12Nj7htkrk/wd2MskOsbPGOZ7SWgSRsGyEfJkoMoEdRobyJTAdwuo jGqS3Bg7oh3HxdsYKl+4HumkYQDtgPVy7iSpinQQw5iUHGWWgO17zZqjOhumvyft hT3EhKgJ9g9TvabBYV5XtB/xqgahzzAaXvWyrzdYcnlAEbLPlBJcwinl20/k -----END CERTIFICATE-----Generated at Sat Jan 17 06:46:19 2026 by rpki-client