This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/Uc0QtV-Uy9ROM9Lagf0zyddqO-A.roa File: Uc0QtV-Uy9ROM9Lagf0zyddqO-A.roa (raw, json) Hash identifier: qBob1+hxNu0E82je6stJlqm+eqW1Kxk60iKRE0AMvSE= Subject key identifier: 51:CD:10:B5:5F:94:CB:D4:4E:33:D2:DA:81:FD:33:C9:D7:6A:3B:E0 Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3 Certificate serial: 019C0F1DB60407B8C65AFC737ED1C25DD595 Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/Uc0QtV-Uy9ROM9Lagf0zyddqO-A.roa Signing time: Fri 30 Jan 2026 13:35:31 +0000 ROA not before: Fri 30 Jan 2026 13:35:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216138 IP address blocks: 2a06:cac0::/29 maxlen: 48 2a0f:d480::/32 maxlen: 40 2a11:9600::/29 maxlen: 48 2a11:f240::/32 maxlen: 40 2a12:ec0::/29 maxlen: 48 2a12:1900::/29 maxlen: 48 2a12:28c0::/29 maxlen: 48 2a12:6b80::/32 maxlen: 40 2a12:f0c0::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0f:1d:b6:04:07:b8:c6:5a:fc:73:7e:d1:c2:5d:d5:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3 Validity Not Before: Jan 30 13:35:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51cd10b55f94cbd44e33d2da81fd33c9d76a3be0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:8d:45:37:6a:99:77:9a:f2:90:71:fa:df:07: 64:56:9b:5e:d8:61:ef:e1:a2:b8:c3:79:c2:b4:59: 3c:d0:f4:57:34:11:f9:d4:61:5e:b1:93:73:09:3e: 83:fc:96:23:80:48:4e:b8:4b:d5:ce:89:49:29:18: 73:75:a9:ce:7c:37:10:42:73:cc:1f:53:f5:6c:e5: 3d:3f:8b:26:7a:e6:ed:fe:04:6a:1f:b3:00:28:b2: 85:e7:9d:08:8c:88:ed:5e:d9:78:74:c7:93:4f:3e: 21:5b:c2:0d:16:6f:f3:1e:48:6c:c6:2b:ca:43:6a: f2:d9:f5:b4:b4:81:ce:d0:b4:6a:9e:b1:30:09:55: 97:f1:b6:d9:23:29:b1:f0:50:52:71:d3:54:05:17: 5d:bc:81:6b:22:ee:a3:57:7a:3a:8f:3b:c0:34:26: bf:5a:2e:fd:5d:58:78:be:94:be:1e:8a:08:f5:95: b7:fd:b2:36:46:32:59:73:61:ae:06:19:39:a8:34: 33:9d:76:4a:b5:3d:72:0d:da:bd:d6:95:2f:e7:b1: 07:cd:01:78:28:7c:43:49:b5:c1:10:fa:94:fb:db: 02:d7:8f:af:b7:59:e6:1e:e3:b8:5b:a4:60:de:15: a6:1c:05:e5:35:1d:d2:c9:0b:e7:2b:b5:a5:83:7f: f8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:CD:10:B5:5F:94:CB:D4:4E:33:D2:DA:81:FD:33:C9:D7:6A:3B:E0 X509v3 Authority Key Identifier: keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/Uc0QtV-Uy9ROM9Lagf0zyddqO-A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:cac0::/29 2a0f:d480::/32 2a11:9600::/29 2a11:f240::/32 2a12:ec0::/29 2a12:1900::/29 2a12:28c0::/29 2a12:6b80::/32 2a12:f0c0::/32 Signature Algorithm: sha256WithRSAEncryption 60:98:6c:52:2e:c5:60:13:42:8a:0c:ad:b8:eb:c7:39:bc:25: c8:0d:d6:3c:86:d1:e1:90:38:78:d9:4a:3c:03:0f:37:b9:5c: de:d6:00:55:a7:51:a8:c8:53:8c:bb:4d:67:82:3c:02:b4:4a: ae:5a:94:f6:49:41:b8:a6:04:8a:df:1d:a4:44:79:b7:21:2e: 2c:21:28:c5:75:2f:1d:d2:33:cf:0c:f5:05:5b:e5:da:89:0b: b2:b0:94:10:e7:6e:4c:3e:39:ae:eb:5a:5d:30:cb:7f:ab:84: e4:6d:0d:9e:dc:99:cb:76:13:39:9b:bf:ed:c5:c8:f5:86:9b: 07:91:59:4f:07:4d:10:5c:59:06:4e:8d:d0:93:89:2a:d8:1d: d9:22:5a:47:8b:a0:f1:4f:62:f9:95:2c:56:23:05:3c:6d:0f: 62:d3:fe:d8:27:ba:d7:bf:b7:b9:4e:d2:ac:05:0b:39:80:8a: 57:c8:05:39:ed:27:fb:94:da:de:d2:fc:b0:f1:1d:5f:c9:db: 82:ec:ba:ac:2d:2c:c1:65:96:b9:39:a1:47:cd:96:b5:3e:64: 0b:6e:49:27:09:2a:29:ed:5e:f8:9a:45:38:ad:fa:36:fe:f8: 30:12:6d:e2:43:b3:52:82:1d:1e:4b:16:98:6e:04:40:d9:f2: de:e6:d1:c1 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgISAZwPHbYEB7jGWvxzftHCXdWVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4OWQ2YjU1ZDZhNjg4ZWU1ZTMzODE4ODNiYjVhZjY4NDMz Mjc2ZTMwHhcNMjYwMTMwMTMzNTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MWNkMTBiNTVmOTRjYmQ0NGUzM2QyZGE4MWZkMzNjOWQ3NmEzYmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmo1FN2qZd5rykHH63wdkVpte2GHv 4aK4w3nCtFk80PRXNBH51GFesZNzCT6D/JYjgEhOuEvVzolJKRhzdanOfDcQQnPM H1P1bOU9P4smeubt/gRqH7MAKLKF550IjIjtXtl4dMeTTz4hW8INFm/zHkhsxivK Q2ry2fW0tIHO0LRqnrEwCVWX8bbZIymx8FBScdNUBRddvIFrIu6jV3o6jzvANCa/ Wi79XVh4vpS+HooI9ZW3/bI2RjJZc2GuBhk5qDQznXZKtT1yDdq91pUv57EHzQF4 KHxDSbXBEPqU+9sC14+vt1nmHuO4W6Rg3hWmHAXlNR3SyQvnK7Wlg3/4iQIDAQAB o4ICQjCCAj4wHQYDVR0OBBYEFFHNELVflMvUTjPS2oH9M8nXajvgMB8GA1UdIwQY MBaAFBida1XWpojuXjOBiDu1r2hDMnbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUt YTJhNGM2YTYyMWNkLzEvVWMwUXRWLVV5OVJPTTlMYWdmMHp5ZGRxTy1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUtYTJhNGM2YTYyMWNk LzEvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzBFBAIAAjA/AwUDKgbKwAMF ACoP1IADBQMqEZYAAwUAKhHyQAMFAyoSDsADBQMqEhkAAwUDKhIowAMFACoSa4AD BQAqEvDAMA0GCSqGSIb3DQEBCwUAA4IBAQBgmGxSLsVgE0KKDK2468c5vCXIDdY8 htHhkDh42Uo8Aw83uVze1gBVp1GoyFOMu01ngjwCtEquWpT2SUG4pgSK3x2kRHm3 IS4sISjFdS8d0jPPDPUFW+XaiQuysJQQ525MPjmu61pdMMt/q4TkbQ2e3JnLdhM5 m7/txcj1hpsHkVlPB00QXFkGTo3Qk4kq2B3ZIlpHi6DxT2L5lSxWIwU8bQ9i0/7Y J7rXv7e5TtKsBQs5gIpXyAU57Sf7lNre0vyw8R1fyduC7LqsLSzBZZa5OaFHzZa1 PmQLbkknCSop7V74mkU4rfo2/vgwEm3iQ7NSgh0eSxaYbgRA2fLe5tHB -----END CERTIFICATE-----Generated at Wed Feb 4 06:58:04 2026 by rpki-client