This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/pUzPMt6BClGR1jFtNbviU7uarko.roa File: pUzPMt6BClGR1jFtNbviU7uarko.roa (raw, json) Hash identifier: sTTxUsOajdJkBsH0LES6qRuCFvwILKUemPpUZvl8VgA= Subject key identifier: A5:4C:CF:32:DE:81:0A:51:91:D6:31:6D:35:BB:E2:53:BB:9A:AE:4A Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Certificate serial: 019BB6E142FB4C82C94EABADF226E4E3CD89 Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/pUzPMt6BClGR1jFtNbviU7uarko.roa Signing time: Tue 13 Jan 2026 10:22:54 +0000 ROA not before: Tue 13 Jan 2026 10:22:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202355 IP address blocks: 2a13:a5c7:3500::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 15:31:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b6:e1:42:fb:4c:82:c9:4e:ab:ad:f2:26:e4:e3:cd:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Validity Not Before: Jan 13 10:22:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a54ccf32de810a5191d6316d35bbe253bb9aae4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:64:e6:52:5c:51:16:3e:cd:24:ea:e3:e7:ba: eb:ba:4d:c0:c1:55:36:29:c6:22:3e:46:35:b1:91: 13:af:fc:c9:89:69:a9:b3:68:5a:dd:26:db:17:c4: 51:43:71:5e:7d:d6:26:a8:b4:2e:82:15:dc:0f:ff: 1f:b0:38:82:18:31:f2:64:72:1a:bb:74:a5:1b:7b: 42:0d:4b:0f:d2:99:06:07:d7:56:b3:b1:63:2c:1f: 10:de:c9:2e:ec:06:52:d5:2d:c1:32:68:4f:68:c3: 20:22:36:c9:82:7a:8a:0d:34:9f:fe:eb:c6:7c:dc: a6:40:6d:c0:70:ec:8d:1f:e7:d6:c8:62:4a:7d:d2: 32:13:79:e8:7e:8a:3f:54:bb:0c:e0:13:ab:fa:8e: 7f:0d:74:bc:1c:87:a7:31:bb:fc:c7:01:07:ef:52: 28:12:06:6f:ca:f7:7d:2e:67:fb:1d:e6:22:d5:21: a6:9f:8e:d4:bc:ad:96:b9:ad:99:06:36:69:04:a6: 34:2a:da:25:8f:20:94:82:99:63:55:7d:ee:3e:74: 4b:61:78:95:87:e6:5c:47:79:51:0f:e9:52:65:e1: f4:41:11:9a:f1:d0:e9:63:5c:81:c0:f9:8a:55:aa: 60:42:67:d0:f0:2d:a2:a2:96:5d:ba:45:c7:dc:1e: 5a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:4C:CF:32:DE:81:0A:51:91:D6:31:6D:35:BB:E2:53:BB:9A:AE:4A X509v3 Authority Key Identifier: keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/pUzPMt6BClGR1jFtNbviU7uarko.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:a5c7:3500::/40 Signature Algorithm: sha256WithRSAEncryption 1f:bb:45:c0:70:b5:bf:cf:27:f1:22:91:b7:4c:12:60:1c:5a: 46:b5:c8:c9:63:bc:2f:a7:4c:21:52:0f:9a:42:ef:f6:6f:e6: dd:8f:bc:1f:66:c4:21:45:0c:df:d0:d3:9f:e6:2a:87:b2:e0: 9c:b1:fa:48:fa:08:e5:a1:e3:a3:ba:60:d2:43:89:46:e3:1a: 2c:43:a2:5b:2e:3d:a6:a9:dc:a4:04:be:e4:9a:bd:ec:c8:d3: 30:e7:27:c7:b7:91:ca:ff:e8:32:cb:d7:d0:a3:9e:30:91:2c: 12:7a:49:92:e9:ea:aa:b2:e5:59:79:7a:83:73:39:ef:86:2a: bd:ea:14:b5:4f:93:49:b1:5a:b5:55:b1:e8:a8:8c:f0:1d:e9: 27:f8:ab:38:54:94:c4:fc:bb:a2:b7:7f:70:a8:20:3f:fe:b5: a6:54:f9:10:4e:3d:09:70:10:c3:f8:4a:ff:45:24:73:59:89: 86:a7:02:6e:55:85:3a:c8:b3:cf:eb:6b:a2:21:19:3e:6e:01: 74:6f:7d:b5:73:43:e5:3f:53:5c:38:0d:35:27:73:98:df:77: f2:7f:52:be:88:ab:1b:13:00:f1:c5:ce:eb:83:35:68:2c:aa: d6:af:5d:c8:16:d4:90:60:fa:16:d1:af:f9:63:2b:c9:a9:e3: 33:9b:50:66 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZu24UL7TILJTqut8ibk482JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZDZlZTAxMGI5OTBhMzM3MzU3NTZiNGZlMmYzZDNjMjY3 MWRkOWQwHhcNMjYwMTEzMTAyMjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTRjY2YzMmRlODEwYTUxOTFkNjMxNmQzNWJiZTI1M2JiOWFhZTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGTmUlxRFj7NJOrj57rruk3AwVU2 KcYiPkY1sZETr/zJiWmps2ha3SbbF8RRQ3FefdYmqLQughXcD/8fsDiCGDHyZHIa u3SlG3tCDUsP0pkGB9dWs7FjLB8Q3sku7AZS1S3BMmhPaMMgIjbJgnqKDTSf/uvG fNymQG3AcOyNH+fWyGJKfdIyE3nofoo/VLsM4BOr+o5/DXS8HIenMbv8xwEH71Io EgZvyvd9Lmf7HeYi1SGmn47UvK2Wua2ZBjZpBKY0KtoljyCUgpljVX3uPnRLYXiV h+ZcR3lRD+lSZeH0QRGa8dDpY1yBwPmKVapgQmfQ8C2iopZdukXH3B5a0QIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFKVMzzLegQpRkdYxbTW74lO7mq5KMB8GA1UdIwQY MBaAFP3W7gELmQozc1dWtP4vPTwmcd2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDct NjNjNzIxY2YxZjU2LzEvcFV6UE10NkJDbEdSMWpGdE5idmlVN3VhcmtvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDctNjNjNzIxY2YxZjU2 LzEvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhOlxzUw DQYJKoZIhvcNAQELBQADggEBAB+7RcBwtb/PJ/EikbdMEmAcWka1yMljvC+nTCFS D5pC7/Zv5t2PvB9mxCFFDN/Q05/mKoey4Jyx+kj6COWh46O6YNJDiUbjGixDolsu Paap3KQEvuSavezI0zDnJ8e3kcr/6DLL19CjnjCRLBJ6SZLp6qqy5Vl5eoNzOe+G Kr3qFLVPk0mxWrVVseiojPAd6Sf4qzhUlMT8u6K3f3CoID/+taZU+RBOPQlwEMP4 Sv9FJHNZiYanAm5VhTrIs8/ra6IhGT5uAXRvfbVzQ+U/U1w4DTUnc5jfd/J/Ur6I qxsTAPHFzuuDNWgsqtavXcgW1JBg+hbRr/ljK8mp4zObUGY= -----END CERTIFICATE-----Generated at Thu Jan 15 21:13:28 2026 by rpki-client