This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/uyhrCiCJpztecp_hjURhugZm_Kc.roa File: uyhrCiCJpztecp_hjURhugZm_Kc.roa (raw, json) Hash identifier: g/bEkdFQHuomYm7J+Bpv/GaR48+RIoXCNye39j2ke3Q= Subject key identifier: BB:28:6B:0A:20:89:A7:3B:5E:72:9F:E1:8D:44:61:BA:06:66:FC:A7 Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82D5292037098C5285F28D8A183C49 Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/uyhrCiCJpztecp_hjURhugZm_Kc.roa Signing time: Fri 02 Jan 2026 16:20:39 +0000 ROA not before: Fri 02 Jan 2026 16:20:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210718 IP address blocks: 2a0b:b87:ff12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:d5:29:20:37:09:8c:52:85:f2:8d:8a:18:3c:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb286b0a2089a73b5e729fe18d4461ba0666fca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8a:76:f5:36:b5:f4:26:2e:f1:33:c7:f5:b8: 2c:cf:b0:72:a3:71:01:10:dc:e2:ec:52:d5:01:9b: 2b:0b:aa:bd:b6:0f:48:e8:d2:db:32:14:23:20:c9: 5d:0c:f8:12:c7:ed:56:91:04:7b:3f:ba:d3:1d:52: b3:43:a0:d2:d5:34:05:10:44:0d:d6:8c:76:1e:44: ab:c1:81:bd:6d:e6:da:7d:d1:0f:ee:21:af:45:db: cd:0a:f6:ba:ac:e4:9b:07:f8:45:4b:86:56:6a:41: cf:f9:d4:1f:93:91:18:8e:18:b7:40:e3:89:ab:da: 9c:25:d0:0f:43:0e:a4:c5:a9:75:3c:4d:1e:28:11: c1:65:df:9c:01:98:14:90:76:ba:bb:00:ac:8b:af: af:ef:aa:98:b8:2a:74:aa:76:cb:9a:c9:47:65:a2: 24:14:1c:cb:5d:49:39:72:d7:7d:b5:ea:e2:d3:b1: ab:2e:f6:33:ec:fe:73:9b:f2:77:e2:37:a0:f7:52: 50:b4:04:6f:f2:5a:1d:a9:da:42:c6:6b:ea:24:f7: 14:ad:0c:38:ae:9c:3e:28:4b:23:97:ea:d5:01:16: 1d:6c:5e:9a:f0:f0:99:1f:c1:73:b5:7e:84:51:5f: bb:bf:70:15:39:17:32:c3:9f:59:31:21:79:fc:57: ba:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:28:6B:0A:20:89:A7:3B:5E:72:9F:E1:8D:44:61:BA:06:66:FC:A7 X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/uyhrCiCJpztecp_hjURhugZm_Kc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:b87:ff12::/48 Signature Algorithm: sha256WithRSAEncryption 3f:4f:14:ad:d5:3d:0e:21:fb:f4:e3:a3:64:e9:31:52:aa:b6: 6e:57:36:66:7c:7f:a9:22:86:98:2b:c9:35:db:ba:25:32:c4: de:22:aa:5d:39:c9:63:78:a5:32:bc:4d:43:97:c5:8c:b7:93: 03:67:a9:79:94:26:a0:18:b7:8e:53:ad:e2:6b:0a:5e:d7:6f: 0a:ee:7f:a2:f7:8e:bb:54:13:f0:e4:17:65:8d:b3:51:70:4b: 1e:4a:85:96:a8:d9:a0:bc:8c:cc:60:19:62:77:e1:92:42:7d: d4:dc:e2:36:9e:bd:8d:6c:d9:26:20:4a:d0:38:18:d8:2c:9f: 59:2a:f4:db:2b:40:ad:80:7c:8d:44:1a:85:2e:d4:50:7b:34: 3d:ba:2e:3b:f0:42:0c:f7:15:1b:de:c1:09:07:25:9d:47:91: ec:9e:88:a9:9a:39:f6:01:e7:ba:12:38:7c:35:d1:78:c5:b0: 8a:51:7d:9d:dc:e6:01:7b:f3:70:ff:09:ae:59:ad:c7:db:26: 37:b7:01:99:ce:d2:b8:a3:55:5d:a2:1a:c4:5d:37:22:b5:54: f2:f9:88:2a:b1:87:94:46:96:7a:b3:2e:61:92:9f:4e:cc:8b: 16:61:9c:1a:51:f3:19:21:48:a1:5b:e5:33:45:e8:49:56:36: 4e:a7:fa:26 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/gtUpIDcJjFKF8o2KGDxJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjI4NmIwYTIwODlhNzNiNWU3MjlmZTE4ZDQ0NjFiYTA2NjZmY2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIp29Ta19CYu8TPH9bgsz7Byo3EB ENzi7FLVAZsrC6q9tg9I6NLbMhQjIMldDPgSx+1WkQR7P7rTHVKzQ6DS1TQFEEQN 1ox2HkSrwYG9bebafdEP7iGvRdvNCva6rOSbB/hFS4ZWakHP+dQfk5EYjhi3QOOJ q9qcJdAPQw6kxal1PE0eKBHBZd+cAZgUkHa6uwCsi6+v76qYuCp0qnbLmslHZaIk FBzLXUk5ctd9teri07GrLvYz7P5zm/J34jeg91JQtARv8lodqdpCxmvqJPcUrQw4 rpw+KEsjl+rVARYdbF6a8PCZH8FztX6EUV+7v3AVORcyw59ZMSF5/Fe6yQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLsoawogiac7XnKf4Y1EYboGZvynMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvdXlockNpQ0pwenRlY3BfaGpVUmh1Z1ptX0tjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgsLh/8S MA0GCSqGSIb3DQEBCwUAA4IBAQA/TxSt1T0OIfv046Nk6TFSqrZuVzZmfH+pIoaY K8k127olMsTeIqpdOcljeKUyvE1Dl8WMt5MDZ6l5lCagGLeOU63iawpe128K7n+i 9467VBPw5BdljbNRcEseSoWWqNmgvIzMYBlid+GSQn3U3OI2nr2NbNkmIErQOBjY LJ9ZKvTbK0CtgHyNRBqFLtRQezQ9ui478EIM9xUb3sEJByWdR5Hsnoipmjn2Aee6 Ejh8NdF4xbCKUX2d3OYBe/Nw/wmuWa3H2yY3twGZztK4o1VdohrEXTcitVTy+Ygq sYeURpZ6sy5hkp9OzIsWYZwaUfMZIUihW+UzRehJVjZOp/om -----END CERTIFICATE-----Generated at Tue Jan 20 15:20:55 2026 by rpki-client