This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/_UuDAqS0PdExdlQp8U_qcIAZmp0.roa
File: _UuDAqS0PdExdlQp8U_qcIAZmp0.roa (raw, json)
Hash identifier: 263gMWibWSJhKFdkBk8fmRAG9EDhxIlW2XGvSkC7XKM=
Subject key identifier: FD:4B:83:02:A4:B4:3D:D1:31:76:54:29:F1:4F:EA:70:80:19:9A:9D
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 019B7F82D3C878F54D4ABA82105C5C607F1A
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/_UuDAqS0PdExdlQp8U_qcIAZmp0.roa
Signing time: Fri 02 Jan 2026 16:20:38 +0000
ROA not before: Fri 02 Jan 2026 16:20:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210667
IP address blocks: 2a0b:b87:ff14::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Jan 2026 07:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:82:d3:c8:78:f5:4d:4a:ba:82:10:5c:5c:60:7f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 16:20:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd4b8302a4b43dd131765429f14fea7080199a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:21:4c:96:91:e2:f4:30:96:c6:36:07:0f:5f:
ab:76:dc:99:de:17:c9:0c:14:aa:22:bf:9f:77:18:
1f:57:fc:1e:4e:8e:b1:06:32:75:c6:3f:49:47:e4:
8b:60:e8:6d:b0:95:67:80:2d:84:a2:87:ef:f6:2b:
bc:35:6a:fe:0d:5a:ee:8f:40:64:b4:be:2b:94:47:
e3:98:7e:5e:c5:78:6d:5d:02:b6:40:90:68:9e:b5:
91:6c:60:01:cc:e8:0b:a1:f8:a6:60:6f:9c:55:da:
c1:6d:a1:f1:60:d7:e1:5b:26:81:e1:b6:a9:ca:e6:
f1:6f:c6:8f:71:1a:ac:ff:95:1c:0b:9b:60:94:6f:
e2:a4:ea:68:f5:8d:62:18:22:d0:99:2a:97:ad:ad:
c4:d9:03:97:f4:20:aa:36:4f:26:f0:60:0b:80:62:
12:6a:64:96:1d:79:3f:ad:d8:e5:7a:7a:01:29:89:
b1:f1:ae:b9:0f:8b:24:7c:8a:15:94:09:a3:9e:8d:
3b:32:32:82:b5:4d:c6:fd:83:31:75:7a:fe:00:5d:
db:47:1e:e7:03:1f:b0:27:1c:0a:ad:4f:e2:e2:3e:
d5:68:a2:e6:c8:5f:58:77:cd:6d:08:b5:3a:76:03:
1b:74:57:77:6a:ea:96:e6:a6:51:e0:eb:ed:d0:4c:
61:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:4B:83:02:A4:B4:3D:D1:31:76:54:29:F1:4F:EA:70:80:19:9A:9D
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/_UuDAqS0PdExdlQp8U_qcIAZmp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b87:ff14::/48
Signature Algorithm: sha256WithRSAEncryption
5c:ae:f1:e0:e7:56:41:5e:7a:d1:6b:48:47:db:85:13:e8:00:
88:30:e0:b3:62:03:d3:77:be:1b:a6:4f:4b:6f:8b:29:04:87:
e4:fd:21:ee:ec:ee:ba:6a:fb:8a:0f:2e:28:b6:93:a6:40:e1:
7a:8a:03:e3:28:7f:34:6a:4d:19:26:6c:5b:e5:ad:a2:37:94:
c2:07:77:84:47:e1:e2:f9:3d:23:29:bd:25:8b:b2:2b:35:37:
d6:1f:69:ae:f5:56:09:8a:d3:76:da:88:d5:e8:1c:36:02:f9:
d1:6a:0d:d7:fb:06:94:00:4a:f4:95:6e:80:c5:21:c8:f3:2d:
b2:2e:7c:c3:27:13:15:69:6f:b4:52:f3:65:1a:46:dc:ee:c7:
ae:a8:21:8f:52:0b:41:3a:5d:62:d4:7b:63:52:ea:b8:b5:6e:
a3:a5:4b:59:21:48:c9:2c:9a:a9:76:00:a2:e7:63:45:e5:c0:
09:32:43:cd:15:45:5f:88:a8:dc:47:d7:0f:c6:af:65:ba:ba:
e1:a8:57:74:39:ae:51:fa:be:94:47:5a:fd:29:c4:5e:02:75:
60:a2:f8:9a:d4:29:5e:11:92:04:55:9a:0b:c3:55:4f:68:67:
69:5b:c6:94:81:f9:4f:75:71:3e:5a:d5:e5:03:d4:d1:79:4d:
85:72:8e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 15:17:49 2026 by rpki-client