This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/UKf2nwCjK2pPnqlc_5HUaOPw-_I.roa File: UKf2nwCjK2pPnqlc_5HUaOPw-_I.roa (raw, json) Hash identifier: +RydMD9tcJzz6GSI56YNMyyIo7XbABOfi53zjNDjoEI= Subject key identifier: 50:A7:F6:9F:00:A3:2B:6A:4F:9E:A9:5C:FF:91:D4:68:E3:F0:FB:F2 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B9D60A53B08FE890357BC6E13F11821E1 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/UKf2nwCjK2pPnqlc_5HUaOPw-_I.roa Signing time: Thu 08 Jan 2026 11:31:55 +0000 ROA not before: Thu 08 Jan 2026 11:31:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201242 IP address blocks: 2a0c:9a40:8950::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9d:60:a5:3b:08:fe:89:03:57:bc:6e:13:f1:18:21:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 8 11:31:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50a7f69f00a32b6a4f9ea95cff91d468e3f0fbf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:72:af:0c:c6:70:cb:41:42:66:bb:33:dd:0b: 89:5b:80:4d:99:c1:63:3d:cc:67:78:5c:a3:0a:26: 13:29:fb:c4:6a:3f:7e:81:52:11:3d:df:d6:8f:a9: 6c:24:e9:35:be:bc:06:43:51:1a:86:46:a5:4a:62: 32:5f:b5:93:19:72:69:b6:a8:64:f9:c8:73:ac:96: 02:45:fb:e9:63:61:ba:6a:98:34:0b:72:f5:31:7e: 1b:06:af:18:ed:fb:cb:f9:71:9b:74:f7:a4:d8:67: f4:2a:15:24:56:01:28:ab:7f:22:b9:b4:49:a7:f2: 64:9f:44:48:df:06:11:e4:74:e7:93:ea:c0:66:f0: 34:51:9a:80:9c:b7:59:90:b7:65:86:4f:b6:b1:99: dd:e3:82:45:94:be:8d:bb:68:f3:4d:73:9a:e9:dc: 4b:db:2c:41:74:4f:c0:9e:f4:6b:2f:26:ee:4a:32: c6:01:3b:ff:aa:d4:90:9c:c1:b1:8e:7b:a9:2c:d6: bc:dc:c9:40:72:be:f1:88:01:80:c1:d3:cd:54:23: cf:92:54:d9:f5:1b:d9:5e:4c:e6:8e:64:ce:b5:c0: 25:f6:ff:a9:96:dd:16:35:72:bf:19:d5:03:97:62: 5d:c5:77:d4:72:3a:50:d5:a7:92:d2:37:e3:d4:52: e8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:A7:F6:9F:00:A3:2B:6A:4F:9E:A9:5C:FF:91:D4:68:E3:F0:FB:F2 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/UKf2nwCjK2pPnqlc_5HUaOPw-_I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8950::/48 Signature Algorithm: sha256WithRSAEncryption b9:51:f2:9e:13:b5:56:41:ce:db:b9:d3:02:57:8e:6e:5b:17: d0:56:13:20:3e:3f:9f:65:dc:40:84:6a:1a:0c:02:98:c1:d1: 15:8b:41:b1:2a:c7:4c:51:9c:33:43:a0:83:21:96:72:84:4c: fd:d5:c1:7b:78:50:88:06:1a:c1:f1:f4:8b:4a:6f:f4:6c:be: 8e:11:7f:20:10:08:99:ca:17:c8:8d:10:ba:00:09:bb:60:94: 16:47:f6:fa:b1:81:df:53:2a:04:c5:fd:42:22:89:c2:63:f5: bd:84:71:2c:59:1b:f8:a3:4a:9a:bd:5d:0b:56:51:5b:dd:e5: c4:a2:c1:52:30:f3:55:d1:4f:fc:a5:ab:01:0e:fc:f8:5b:bb: da:97:5e:f0:92:70:3b:cb:cd:af:1d:d5:00:4a:e3:c8:98:4f: 45:9b:b9:2d:d4:e5:be:40:52:6a:78:7e:80:1f:62:e0:2e:72: 47:89:56:70:cd:5b:d0:c5:89:3b:0c:95:5e:84:c2:21:ff:38: bf:c4:1e:5c:44:03:a8:73:86:71:60:e9:9e:68:4f:18:8d:c0: 2f:f8:f1:ea:f9:21:67:3b:63:55:cf:d7:d1:fb:d5:ac:bf:fe: 56:f7:03:d3:be:50:05:6c:aa:bf:36:48:ab:a6:ed:6e:19:41: b6:0a:49:e7 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZudYKU7CP6JA1e8bhPxGCHhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTA4MTEzMTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MGE3ZjY5ZjAwYTMyYjZhNGY5ZWE5NWNmZjkxZDQ2OGUzZjBmYmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXKvDMZwy0FCZrsz3QuJW4BNmcFj PcxneFyjCiYTKfvEaj9+gVIRPd/Wj6lsJOk1vrwGQ1EahkalSmIyX7WTGXJptqhk +chzrJYCRfvpY2G6apg0C3L1MX4bBq8Y7fvL+XGbdPek2Gf0KhUkVgEoq38iubRJ p/Jkn0RI3wYR5HTnk+rAZvA0UZqAnLdZkLdlhk+2sZnd44JFlL6Nu2jzTXOa6dxL 2yxBdE/AnvRrLybuSjLGATv/qtSQnMGxjnupLNa83MlAcr7xiAGAwdPNVCPPklTZ 9RvZXkzmjmTOtcAl9v+plt0WNXK/GdUDl2JdxXfUcjpQ1aeS0jfj1FLoJQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFCn9p8AoytqT56pXP+R1Gjj8PvyMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvVUtmMm53Q2pLMnBQbnFsY181SFVhT1B3LV9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIlQ MA0GCSqGSIb3DQEBCwUAA4IBAQC5UfKeE7VWQc7budMCV45uWxfQVhMgPj+fZdxA hGoaDAKYwdEVi0GxKsdMUZwzQ6CDIZZyhEz91cF7eFCIBhrB8fSLSm/0bL6OEX8g EAiZyhfIjRC6AAm7YJQWR/b6sYHfUyoExf1CIonCY/W9hHEsWRv4o0qavV0LVlFb 3eXEosFSMPNV0U/8pasBDvz4W7val17wknA7y82vHdUASuPImE9Fm7kt1OW+QFJq eH6AH2LgLnJHiVZwzVvQxYk7DJVehMIh/zi/xB5cRAOoc4ZxYOmeaE8YjcAv+PHq +SFnO2NVz9fR+9Wsv/5W9wPTvlAFbKq/Nkirpu1uGUG2Cknn -----END CERTIFICATE-----Generated at Tue Jan 20 09:05:19 2026 by rpki-client