This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_uhmDxy0bPKVDKE3_BuDsYOFfc8.roa File: _uhmDxy0bPKVDKE3_BuDsYOFfc8.roa (raw, json) Hash identifier: Ej7uUDNCVZsLavhouVACJHkTzDzHQuvQQWR3StpOuic= Subject key identifier: FE:E8:66:0F:1C:B4:6C:F2:95:0C:A1:37:FC:1B:83:B1:83:85:7D:CF Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Certificate serial: 019B7E38AF07CF800F8E56F15491583E52E8 Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_uhmDxy0bPKVDKE3_BuDsYOFfc8.roa Signing time: Fri 02 Jan 2026 10:20:02 +0000 ROA not before: Fri 02 Jan 2026 10:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51087 IP address blocks: 2a13:a5c7:1400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:af:07:cf:80:0f:8e:56:f1:54:91:58:3e:52:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Validity Not Before: Jan 2 10:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fee8660f1cb46cf2950ca137fc1b83b183857dcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a7:0f:51:9d:33:f6:ce:b0:35:ea:09:1d:69: 43:d4:f3:cf:74:c0:2a:28:14:8c:be:d4:d0:ed:f7: af:57:fb:da:5e:f0:17:d6:1f:91:b6:68:0c:a1:d7: 25:60:44:fd:7a:b2:84:f3:37:a3:90:0e:66:c2:48: ef:1e:eb:44:d0:91:1d:04:86:f9:de:e6:e9:bf:e1: ff:ed:56:e0:96:90:13:05:fe:6a:a2:8a:bc:9d:65: 42:30:7a:96:15:65:45:3e:51:f1:19:5c:f7:18:8f: e0:3e:0a:37:a8:27:1b:74:92:c5:bd:d8:61:5d:e5: 6b:de:d6:09:c2:73:90:95:00:95:4e:48:4f:89:96: da:3c:cc:0c:4d:35:ce:65:77:06:70:5f:06:fe:d2: 82:dc:c2:df:d1:78:88:15:d3:05:39:5a:67:55:06: 0b:9c:7d:ed:a4:a4:20:ba:48:49:74:f3:f8:bc:a8: fe:f6:fc:b4:0e:24:a2:8c:15:45:c7:43:d6:eb:38: a2:6a:6a:df:4b:a5:a8:ef:87:e0:36:3a:17:b6:9d: 9d:d1:65:0a:35:8a:6e:2f:49:82:f8:8c:4d:a9:e7: b0:9c:8f:d1:f4:8f:25:01:62:93:d7:1a:e6:d1:4a: 41:49:9c:2f:f6:7d:1a:3f:25:3b:3b:92:69:a1:bf: e6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E8:66:0F:1C:B4:6C:F2:95:0C:A1:37:FC:1B:83:B1:83:85:7D:CF X509v3 Authority Key Identifier: keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_uhmDxy0bPKVDKE3_BuDsYOFfc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:a5c7:1400::/40 Signature Algorithm: sha256WithRSAEncryption 4d:14:84:80:45:fd:cb:f4:39:ba:2f:31:7c:b0:3b:9f:a9:8b: 79:70:fd:93:e4:63:df:0f:8d:cb:c2:25:0b:31:e5:dc:96:7a: 98:b8:d2:55:0e:b8:8e:eb:f2:75:fc:11:d7:da:01:99:a7:99: 69:1d:00:1c:ad:b5:48:6c:85:ce:6d:59:67:58:a5:8d:27:33: db:c9:1b:04:74:4f:42:ad:1b:c6:89:8d:a9:74:09:b6:d9:c1: 20:be:5a:c4:5f:af:07:5d:7c:70:62:9f:be:ad:db:80:70:e5: bc:a9:97:bd:37:49:e9:c4:8b:e9:92:57:a9:43:a3:1a:c7:bc: 8b:79:64:e0:c1:72:6f:c1:65:14:36:a1:19:fb:8b:38:f6:c6: 43:a5:46:08:c4:2b:38:30:b1:c3:e8:a2:20:dc:3e:59:ae:55: cd:9e:7d:4a:35:a2:d4:b4:98:08:0e:ca:37:e2:97:f8:05:9e: 84:98:f5:e3:c6:86:1e:aa:30:31:83:d7:89:6d:4e:4b:81:ad: cc:56:dc:de:2e:c1:68:e1:0e:29:03:ee:69:2a:77:9c:98:f5: 0c:19:de:ff:70:8f:73:e9:97:7d:3a:18:22:58:16:cf:d5:5e: ac:c4:69:c2:9e:2f:bd:69:6a:b2:24:47:bd:79:05:dd:d9:a5: b8:b0:bd:c7 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+OK8Hz4APjlbxVJFYPlLoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZDZlZTAxMGI5OTBhMzM3MzU3NTZiNGZlMmYzZDNjMjY3 MWRkOWQwHhcNMjYwMTAyMTAyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZWU4NjYwZjFjYjQ2Y2YyOTUwY2ExMzdmYzFiODNiMTgzODU3ZGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnacPUZ0z9s6wNeoJHWlD1PPPdMAq KBSMvtTQ7fevV/vaXvAX1h+RtmgModclYET9erKE8zejkA5mwkjvHutE0JEdBIb5 3ubpv+H/7VbglpATBf5qooq8nWVCMHqWFWVFPlHxGVz3GI/gPgo3qCcbdJLFvdhh XeVr3tYJwnOQlQCVTkhPiZbaPMwMTTXOZXcGcF8G/tKC3MLf0XiIFdMFOVpnVQYL nH3tpKQgukhJdPP4vKj+9vy0DiSijBVFx0PW6ziiamrfS6Wo74fgNjoXtp2d0WUK NYpuL0mC+IxNqeewnI/R9I8lAWKT1xrm0UpBSZwv9n0aPyU7O5Jpob/mLwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFP7oZg8ctGzylQyhN/wbg7GDhX3PMB8GA1UdIwQY MBaAFP3W7gELmQozc1dWtP4vPTwmcd2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDct NjNjNzIxY2YxZjU2LzEvX3VobUR4eTBiUEtWREtFM19CdURzWU9GZmM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDctNjNjNzIxY2YxZjU2 LzEvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhOlxxQw DQYJKoZIhvcNAQELBQADggEBAE0UhIBF/cv0ObovMXywO5+pi3lw/ZPkY98PjcvC JQsx5dyWepi40lUOuI7r8nX8EdfaAZmnmWkdAByttUhshc5tWWdYpY0nM9vJGwR0 T0KtG8aJjal0CbbZwSC+WsRfrwddfHBin76t24Bw5bypl703SenEi+mSV6lDoxrH vIt5ZODBcm/BZRQ2oRn7izj2xkOlRgjEKzgwscPooiDcPlmuVc2efUo1otS0mAgO yjfil/gFnoSY9ePGhh6qMDGD14ltTkuBrcxW3N4uwWjhDikD7mkqd5yY9QwZ3v9w j3Ppl306GCJYFs/VXqzEacKeL71parIkR715Bd3Zpbiwvcc= -----END CERTIFICATE-----Generated at Mon Jan 5 03:47:28 2026 by rpki-client