This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/uxq0yW5coSGl1lvgK8AI21VLlfw.roa File: uxq0yW5coSGl1lvgK8AI21VLlfw.roa (raw, json) Hash identifier: LLMUkysUtvlHcLk1B7gedsoAKUf9RSmbuPHUQ0Z4nLI= Subject key identifier: BB:1A:B4:C9:6E:5C:A1:21:A5:D6:5B:E0:2B:C0:08:DB:55:4B:95:FC Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6D242C4229551C318A498054E99D8 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/uxq0yW5coSGl1lvgK8AI21VLlfw.roa Signing time: Fri 02 Jan 2026 12:20:20 +0000 ROA not before: Fri 02 Jan 2026 12:20:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 148971 IP address blocks: 2a0c:9a40:82f0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:d2:42:c4:22:95:51:c3:18:a4:98:05:4e:99:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb1ab4c96e5ca121a5d65be02bc008db554b95fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:c0:eb:84:0b:69:38:a4:28:fd:56:30:ab:46: 4f:6e:04:e6:0e:57:fc:04:bd:50:4e:d7:54:41:ac: 44:f5:23:6a:7b:65:fb:9f:54:4f:f9:6e:97:d5:ae: c8:72:49:ba:aa:13:fa:2a:08:05:34:a0:a5:fc:dc: 69:b7:06:ae:3f:3c:b4:49:3a:8a:98:d8:a9:11:67: d4:7f:e5:06:d2:2b:91:e2:3c:a4:08:fd:e6:6a:0c: de:30:12:95:18:4b:e3:da:46:b0:f9:ad:48:56:49: ec:d6:f4:b2:14:dc:bd:66:b9:d7:01:dd:84:78:91: 3a:d0:18:a3:f3:c0:82:bb:a5:b6:7b:9c:e8:be:84: 63:74:a7:7f:f8:c0:12:f9:7a:84:b9:dd:43:f3:07: 00:69:20:52:3c:13:ca:3a:0d:a4:23:a9:7c:68:85: dc:e6:4f:80:17:cd:17:32:73:6c:44:f4:fd:f2:1a: 84:8a:2d:49:b6:a9:91:bf:f9:b5:2a:36:33:0c:71: 1c:e4:dd:07:22:91:75:93:20:a4:50:d8:3f:7d:5b: 04:0e:2a:b3:73:b6:6e:cd:4c:7b:d9:78:83:e9:ea: 49:12:83:31:91:f8:c8:f3:16:d3:94:f8:c5:7b:38: f1:51:84:93:76:08:aa:fc:16:22:d8:f4:14:39:12: e7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:1A:B4:C9:6E:5C:A1:21:A5:D6:5B:E0:2B:C0:08:DB:55:4B:95:FC X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/uxq0yW5coSGl1lvgK8AI21VLlfw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:82f0::/44 Signature Algorithm: sha256WithRSAEncryption 97:a0:17:f5:f3:fb:b7:89:7c:b3:11:a6:02:cf:e2:10:f7:90: f2:05:e6:c7:be:06:3d:06:b7:de:b9:59:bd:cb:a9:81:38:3a: 41:ed:75:a9:ee:17:b5:2e:77:e4:dd:17:9e:df:05:f0:c6:f7: b1:48:e4:0a:19:8a:c5:cb:37:11:0b:10:d3:87:22:1e:d8:32: 15:81:bf:1a:7d:34:f8:a0:66:a1:87:cf:3c:c2:25:a3:19:d6: c5:6e:5a:40:a4:dd:16:13:39:1c:12:29:d4:cc:f6:b1:99:4e: 80:28:1f:83:cb:42:0b:fa:67:60:38:6c:f7:b5:47:8b:93:5c: a1:92:3b:89:3f:eb:a7:df:16:b4:70:f2:c3:d0:07:3e:d3:c8: fa:e6:a3:62:13:d9:40:42:c9:58:9c:2e:08:29:7e:00:70:67: f0:dc:de:4a:e2:e4:e5:a3:1f:5e:2c:7d:e3:3d:ab:3f:4e:4a: 41:71:dd:69:85:96:b9:b3:4a:14:07:da:93:5b:5f:07:6e:62: 38:9f:83:19:21:bc:f3:3b:d3:a6:b8:7a:a6:0f:bf:47:89:c7: e3:1d:78:33:dc:21:ed:4d:a3:04:c8:0c:1c:30:c6:f4:54:11: 8a:03:2a:64:09:72:37:ee:11:f1:6c:75:43:2f:79:a0:0e:f3: ed:59:53:5b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+ptJCxCKVUcMYpJgFTpnYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjFhYjRjOTZlNWNhMTIxYTVkNjViZTAyYmMwMDhkYjU1NGI5NWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA78DrhAtpOKQo/VYwq0ZPbgTmDlf8 BL1QTtdUQaxE9SNqe2X7n1RP+W6X1a7Ickm6qhP6KggFNKCl/NxptwauPzy0STqK mNipEWfUf+UG0iuR4jykCP3magzeMBKVGEvj2kaw+a1IVkns1vSyFNy9ZrnXAd2E eJE60Bij88CCu6W2e5zovoRjdKd/+MAS+XqEud1D8wcAaSBSPBPKOg2kI6l8aIXc 5k+AF80XMnNsRPT98hqEii1JtqmRv/m1KjYzDHEc5N0HIpF1kyCkUNg/fVsEDiqz c7ZuzUx72XiD6epJEoMxkfjI8xbTlPjFezjxUYSTdgiq/BYi2PQUORLnOwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLsatMluXKEhpdZb4CvACNtVS5X8MB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvdXhxMHlXNWNvU0dsMWx2Z0s4QUkyMVZMbGZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgyaQILw MA0GCSqGSIb3DQEBCwUAA4IBAQCXoBf18/u3iXyzEaYCz+IQ95DyBebHvgY9Brfe uVm9y6mBODpB7XWp7he1Lnfk3Ree3wXwxvexSOQKGYrFyzcRCxDThyIe2DIVgb8a fTT4oGahh888wiWjGdbFblpApN0WEzkcEinUzPaxmU6AKB+Dy0IL+mdgOGz3tUeL k1yhkjuJP+un3xa0cPLD0Ac+08j65qNiE9lAQslYnC4IKX4AcGfw3N5K4uTlox9e LH3jPas/TkpBcd1phZa5s0oUB9qTW18HbmI4n4MZIbzzO9OmuHqmD79HicfjHXgz 3CHtTaMEyAwcMMb0VBGKAypkCXI37hHxbHVDL3mgDvPtWVNb -----END CERTIFICATE-----Generated at Tue Jan 20 09:05:16 2026 by rpki-client