This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/uuHljZPCvASdL1cahmx3sk-UM6k.roa File: uuHljZPCvASdL1cahmx3sk-UM6k.roa (raw, json) Hash identifier: YZhlBGblOcfxdLBJ41C2ivgjxSeLyB952u1KN3aoLfw= Subject key identifier: BA:E1:E5:8D:93:C2:BC:04:9D:2F:57:1A:86:6C:77:B2:4F:94:33:A9 Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664 Certificate serial: 019B7A5B2DF416AAB8C4B85069BFB6772B82 Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/uuHljZPCvASdL1cahmx3sk-UM6k.roa Signing time: Thu 01 Jan 2026 16:19:14 +0000 ROA not before: Thu 01 Jan 2026 16:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15830 IP address blocks: 2a0e:d780::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:2d:f4:16:aa:b8:c4:b8:50:69:bf:b6:77:2b:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664 Validity Not Before: Jan 1 16:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bae1e58d93c2bc049d2f571a866c77b24f9433a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bc:da:3a:60:35:d0:b4:96:93:84:5e:15:6f: fa:2e:b5:7d:9a:eb:14:9e:d5:66:38:ad:97:2b:22: c8:76:33:9f:e2:d8:de:6d:d6:15:31:b8:5e:dd:f1: 3a:a3:98:c7:6d:f5:8f:af:68:9b:ff:a4:0a:d8:0b: 0b:53:27:dc:a3:c2:f2:8a:8d:20:cd:66:d7:22:b0: 11:25:9d:8f:47:67:9e:77:27:63:ea:e4:05:fe:fd: f5:2a:fd:c5:b0:9e:40:7c:b9:e9:e0:0d:20:0c:5c: f9:48:08:e1:7f:56:9f:a7:6f:10:63:34:fb:85:6c: 1e:93:8e:7d:7e:a5:18:1a:c9:70:a3:a0:75:d1:2b: c0:9d:ea:47:ba:97:a2:bc:50:f3:f3:50:ba:39:1b: 40:92:4e:a4:24:27:1f:12:57:d6:4d:c5:f6:66:bd: 8a:e6:d8:c8:b8:0f:57:63:fa:91:57:38:26:dd:09: 7a:b1:f9:af:ce:de:c5:a8:20:55:9a:76:50:8f:45: 56:e0:5b:a5:16:da:b5:ab:e7:f5:ef:89:11:89:9b: 83:5e:5d:f8:b6:83:e5:c3:4f:31:59:25:91:13:63: e6:30:38:a0:26:23:76:4f:0e:df:85:8b:46:59:94: a3:8c:19:f5:a1:94:a8:d8:2f:25:42:7e:64:24:5d: b0:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E1:E5:8D:93:C2:BC:04:9D:2F:57:1A:86:6C:77:B2:4F:94:33:A9 X509v3 Authority Key Identifier: keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/uuHljZPCvASdL1cahmx3sk-UM6k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:d780::/32 Signature Algorithm: sha256WithRSAEncryption 75:05:d7:9b:f4:49:8c:fb:d6:df:91:36:5c:0e:83:18:ee:17: 97:08:e1:26:93:a7:fa:82:ba:fa:40:01:4b:52:d0:9a:a6:ad: 0e:60:fd:c1:35:57:ff:75:bc:3c:54:1c:ff:46:58:ab:53:d8: 49:9a:34:77:9e:2a:c8:f3:cd:e7:cf:4a:23:08:17:44:d5:aa: fa:40:73:9d:7d:ba:f0:ed:18:a2:f6:ed:e8:98:50:42:1c:69: eb:09:a6:05:c8:db:bb:e2:e3:02:71:a5:cc:db:0f:6e:d6:d1: cd:43:78:f1:df:d1:50:48:b1:61:c4:e0:99:6f:70:8a:a4:89: c4:19:8c:98:32:15:a6:67:12:9a:9f:97:93:9e:1e:ac:e1:a1: 4b:11:9e:25:b9:94:1d:98:b1:34:3d:77:eb:34:55:3d:9d:f6: 0a:51:7d:60:79:77:f3:0a:f8:64:99:22:5d:72:16:87:a7:11: eb:42:ea:c7:d0:64:4b:7c:a6:87:7d:b5:d5:ca:76:65:69:4e: e5:c0:ca:0f:7b:08:9e:ea:8d:4c:45:22:0e:15:3b:d4:0b:bc: 71:32:60:46:da:aa:26:8c:07:c1:ce:e6:2b:20:9e:30:e0:a4: 39:c0:ec:56:22:23:1b:00:97:e0:71:e1:8f:2b:00:6d:a3:de: 28:c3:09:5f -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt6Wy30Fqq4xLhQab+2dyuCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMjk5OTA0MmM1ZTIwMDZiZDVhZWI3YTA1ZGUxZTk2YTVl NzM2NjQwHhcNMjYwMTAxMTYxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYWUxZTU4ZDkzYzJiYzA0OWQyZjU3MWE4NjZjNzdiMjRmOTQzM2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbzaOmA10LSWk4ReFW/6LrV9musU ntVmOK2XKyLIdjOf4tjebdYVMbhe3fE6o5jHbfWPr2ib/6QK2AsLUyfco8Lyio0g zWbXIrARJZ2PR2eedydj6uQF/v31Kv3FsJ5AfLnp4A0gDFz5SAjhf1afp28QYzT7 hWwek459fqUYGslwo6B10SvAnepHupeivFDz81C6ORtAkk6kJCcfElfWTcX2Zr2K 5tjIuA9XY/qRVzgm3Ql6sfmvzt7FqCBVmnZQj0VW4FulFtq1q+f174kRiZuDXl34 toPlw08xWSWRE2PmMDigJiN2Tw7fhYtGWZSjjBn1oZSo2C8lQn5kJF2wYQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFLrh5Y2TwrwEnS9XGoZsd7JPlDOpMB8GA1UdIwQY MBaAFA0pmQQsXiAGvVrregXeHpal5zZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUt OGMxNTM5NjViYWM5LzEvdXVIbGpaUEN2QVNkTDFjYWhteDNzay1VTTZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUtOGMxNTM5NjViYWM5 LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg7XgDAN BgkqhkiG9w0BAQsFAAOCAQEAdQXXm/RJjPvW35E2XA6DGO4XlwjhJpOn+oK6+kAB S1LQmqatDmD9wTVX/3W8PFQc/0ZYq1PYSZo0d54qyPPN589KIwgXRNWq+kBznX26 8O0Yovbt6JhQQhxp6wmmBcjbu+LjAnGlzNsPbtbRzUN48d/RUEixYcTgmW9wiqSJ xBmMmDIVpmcSmp+Xk54erOGhSxGeJbmUHZixND136zRVPZ32ClF9YHl38wr4ZJki XXIWh6cR60Lqx9BkS3ymh3211cp2ZWlO5cDKD3sInuqNTEUiDhU71Au8cTJgRtqq JowHwc7mKyCeMOCkOcDsViIjGwCX4HHhjysAbaPeKMMJXw== -----END CERTIFICATE-----Generated at Sat Jan 3 04:53:25 2026 by rpki-client