This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/UA7LMIiQeWsCYqLf84mOzdyLwPQ.roa File: UA7LMIiQeWsCYqLf84mOzdyLwPQ.roa (raw, json) Hash identifier: YoyddCO9BRUvF8J7pU4P4rxi4V0YyGAPs2f6JVyC+dQ= Subject key identifier: 50:0E:CB:30:88:90:79:6B:02:62:A2:DF:F3:89:8E:CD:DC:8B:C0:F4 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA7088F287DA43BC81B2DF982786ACF Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/UA7LMIiQeWsCYqLf84mOzdyLwPQ.roa Signing time: Fri 02 Jan 2026 12:20:34 +0000 ROA not before: Fri 02 Jan 2026 12:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213774 IP address blocks: 2a0c:9a40:8a40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:08:8f:28:7d:a4:3b:c8:1b:2d:f9:82:78:6a:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=500ecb308890796b0262a2dff3898ecddc8bc0f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3e:62:66:7b:35:74:e7:75:6a:5c:4e:4f:02: 34:c5:49:99:43:bb:b2:f1:b7:4d:97:69:37:e2:70: 80:dd:22:c8:43:d4:81:db:45:79:3f:f4:20:cb:99: fc:d0:fb:f1:58:51:82:80:b8:51:0c:c2:00:76:f6: f0:38:3d:f9:f1:e0:df:f7:b3:e2:4c:81:12:7a:c6: 6c:40:ea:cf:c0:08:70:c1:db:b5:ea:67:b2:41:49: 7e:9d:69:62:ad:1a:a1:68:33:0a:58:60:be:c6:08: 6f:e7:cf:d8:8d:4b:15:f2:33:7a:36:98:bd:72:72: 33:0c:53:c0:9e:f6:7a:a7:7d:b8:5e:de:44:7b:a8: c8:c8:0a:d5:ce:e6:08:ae:3d:cc:dc:15:80:02:8d: f5:6e:01:d6:4f:52:2a:12:f2:1d:11:37:1d:6a:74: 91:38:a8:80:67:76:f7:28:48:b5:64:ba:df:7b:d7: 4b:1c:3c:57:a5:7b:99:41:0a:54:19:ca:fe:9e:87: 55:e5:97:0d:05:65:4b:31:5c:cd:b9:5c:88:16:9d: e2:ea:8a:63:6b:db:82:c9:ad:a8:48:1a:5a:e7:80: df:8f:9c:23:ed:fb:40:88:14:da:da:9a:6c:72:d9: c1:87:32:57:f7:db:51:f3:61:af:7e:b7:fb:2d:73: 40:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:0E:CB:30:88:90:79:6B:02:62:A2:DF:F3:89:8E:CD:DC:8B:C0:F4 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/UA7LMIiQeWsCYqLf84mOzdyLwPQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8a40::/48 Signature Algorithm: sha256WithRSAEncryption 07:08:8f:e5:91:17:b3:63:23:26:88:31:4b:2d:ce:7c:d5:01: 46:12:a3:8f:9c:e0:fe:dd:67:c4:6a:fe:cb:96:6d:3b:ca:1c: 19:ad:e5:12:d5:19:5f:93:78:3c:67:83:e8:bb:ae:ae:9f:25: ac:66:a3:69:51:8a:60:7b:92:24:e2:5a:10:fd:b5:4a:30:72: 52:f5:f5:e9:df:ab:c8:be:84:e4:53:c1:e2:ec:f9:46:b9:d0: f4:4f:ae:80:b8:1b:c1:47:3c:40:33:54:87:5c:d0:a3:72:d2: be:0c:36:40:09:dd:68:4a:89:07:80:af:22:82:c9:e8:46:d5: 4a:00:43:df:af:44:8e:2a:46:96:ec:4c:ca:de:ed:6c:57:b3: 9c:ac:9d:67:df:5f:92:fe:7d:c9:d9:67:7d:50:85:e1:81:fd: 4f:7b:8f:c3:3b:fd:7d:f3:91:22:49:77:26:ec:79:90:e7:5c: 5f:64:fc:8b:89:db:70:55:34:db:42:f1:99:a5:c0:83:11:28: 08:c6:04:00:4c:cd:a8:d1:41:9d:9e:1d:d2:38:89:45:5e:0b: 9b:58:1a:d5:2b:a7:f4:6d:f5:c6:d4:81:0d:f5:9f:99:70:db: d2:da:c5:91:4b:2f:77:c3:5d:d0:db:5b:e1:88:95:8c:70:c7: 0e:a7:8c:4d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pwiPKH2kO8gbLfmCeGrPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDBlY2IzMDg4OTA3OTZiMDI2MmEyZGZmMzg5OGVjZGRjOGJjMGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoD5iZns1dOd1alxOTwI0xUmZQ7uy 8bdNl2k34nCA3SLIQ9SB20V5P/Qgy5n80PvxWFGCgLhRDMIAdvbwOD358eDf97Pi TIESesZsQOrPwAhwwdu16meyQUl+nWlirRqhaDMKWGC+xghv58/YjUsV8jN6Npi9 cnIzDFPAnvZ6p324Xt5Ee6jIyArVzuYIrj3M3BWAAo31bgHWT1IqEvIdETcdanSR OKiAZ3b3KEi1ZLrfe9dLHDxXpXuZQQpUGcr+nodV5ZcNBWVLMVzNuVyIFp3i6opj a9uCya2oSBpa54Dfj5wj7ftAiBTa2ppsctnBhzJX99tR82Gvfrf7LXNAOQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFAOyzCIkHlrAmKi3/OJjs3ci8D0MB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvVUE3TE1JaVFlV3NDWXFMZjg0bU96ZHlMd1BRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIpA MA0GCSqGSIb3DQEBCwUAA4IBAQAHCI/lkRezYyMmiDFLLc581QFGEqOPnOD+3WfE av7Llm07yhwZreUS1Rlfk3g8Z4Pou66unyWsZqNpUYpge5Ik4loQ/bVKMHJS9fXp 36vIvoTkU8Hi7PlGudD0T66AuBvBRzxAM1SHXNCjctK+DDZACd1oSokHgK8igsno RtVKAEPfr0SOKkaW7EzK3u1sV7OcrJ1n31+S/n3J2Wd9UIXhgf1Pe4/DO/1985Ei SXcm7HmQ51xfZPyLidtwVTTbQvGZpcCDESgIxgQATM2o0UGdnh3SOIlFXgubWBrV K6f0bfXG1IEN9Z+ZcNvS2sWRSy93w13Q21vhiJWMcMcOp4xN -----END CERTIFICATE-----Generated at Tue Jan 20 09:06:13 2026 by rpki-client