This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/ulFl9xA3_r04YuUSK9eoNoTFJKk.roa File: ulFl9xA3_r04YuUSK9eoNoTFJKk.roa (raw, json) Hash identifier: isVq8MJvxi135zQJ1rz5EGzvGDurQFrlBVCGVWBIULU= Subject key identifier: BA:51:65:F7:10:37:FE:BD:38:62:E5:12:2B:D7:A8:36:84:C5:24:A9 Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Certificate serial: 019B7E38C498FD85E882FCE81F892DB638F1 Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/ulFl9xA3_r04YuUSK9eoNoTFJKk.roa Signing time: Fri 02 Jan 2026 10:20:08 +0000 ROA not before: Fri 02 Jan 2026 10:20:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216299 IP address blocks: 2a13:a5c3:ff40::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:c4:98:fd:85:e8:82:fc:e8:1f:89:2d:b6:38:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Validity Not Before: Jan 2 10:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba5165f71037febd3862e5122bd7a83684c524a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:33:79:86:8a:62:b8:bd:e1:37:51:85:e4:b8: c2:f7:46:18:52:2d:73:c4:c8:5a:0c:4c:d5:c6:fb: b3:3d:3f:9a:a2:28:08:4b:9f:a8:0a:72:f8:ce:b8: 0b:f2:95:af:1b:c0:1c:f3:64:0c:9c:b6:0e:df:2c: 3b:95:23:6f:8d:8d:45:3e:90:28:5f:a1:6a:32:74: 92:8d:98:1e:91:19:f3:eb:d4:8e:4d:39:cb:f6:ba: 2a:f5:30:ad:0f:73:2e:ea:c8:17:fb:d3:17:e1:d7: bb:4e:f5:6f:8a:a3:20:c9:1c:03:8d:55:03:14:e9: 68:44:fe:10:a1:0e:49:2a:02:97:f9:34:f3:f2:7d: 92:72:37:4d:a3:b8:f4:38:52:6d:c6:bc:f8:f1:9d: 32:66:cd:52:d6:99:be:39:f5:62:b1:9a:1f:b8:d4: c4:6b:43:a7:9a:88:aa:14:61:cf:a3:04:dd:86:22: f2:a2:86:45:22:2a:e9:06:17:d7:a4:27:41:55:15: 09:91:8c:23:3e:8b:18:72:4c:0c:64:76:19:e1:4b: 6f:2d:b8:d8:f1:cf:2b:50:2d:7f:46:2d:c2:70:26: 75:dd:bd:49:f7:0f:a7:84:10:b9:61:22:b5:8d:03: 77:ba:e6:3c:68:72:df:8d:a1:dd:a6:f3:65:dc:b8: 9e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:51:65:F7:10:37:FE:BD:38:62:E5:12:2B:D7:A8:36:84:C5:24:A9 X509v3 Authority Key Identifier: keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/ulFl9xA3_r04YuUSK9eoNoTFJKk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:a5c3:ff40::/44 Signature Algorithm: sha256WithRSAEncryption 3b:5e:2a:c8:4c:5b:4b:78:32:37:df:ca:a9:d9:08:53:04:80: 84:7b:69:74:21:22:ce:09:e3:df:fa:5c:ea:20:32:dd:fe:6c: be:7a:35:a7:71:5b:8a:cc:6b:a9:c4:ed:01:5b:e2:84:cb:48: 8d:87:77:82:02:95:78:14:42:04:c2:17:97:f8:ef:ed:fa:d0: 65:aa:8d:bf:70:f9:cf:2b:cb:2c:0e:f7:0a:87:bb:27:32:39: 1b:5a:20:b8:8a:0a:33:d1:a1:69:4b:5d:0f:46:ff:2f:16:09: 40:a2:5c:d8:f8:06:54:07:74:95:b0:3d:01:d5:4c:0d:67:37: ad:3b:01:1d:e4:b8:b8:e1:79:70:19:50:49:ca:d0:1e:dd:13: e0:e1:67:fb:27:15:9e:d3:7a:e1:02:35:7c:ab:cf:50:74:92: d4:2f:e8:48:9a:51:8c:9e:02:7e:be:15:39:3f:bd:e2:2a:f2: 5b:f7:e8:ab:a5:17:4b:a2:26:ee:68:9e:bc:ca:28:4e:9b:e5: cb:f9:ba:6f:54:f0:d6:7b:62:ff:b5:93:fd:8d:fc:f5:57:c7: df:69:25:59:af:73:e7:b2:b9:cc:cd:59:a9:19:c7:8e:81:b3: 54:6e:c1:b7:b3:88:fc:90:26:c0:7f:de:9a:c2:53:9e:6d:86: 01:62:c6:a3 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OMSY/YXogvzoH4kttjjxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZDZlZTAxMGI5OTBhMzM3MzU3NTZiNGZlMmYzZDNjMjY3 MWRkOWQwHhcNMjYwMTAyMTAyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTUxNjVmNzEwMzdmZWJkMzg2MmU1MTIyYmQ3YTgzNjg0YzUyNGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjN5hopiuL3hN1GF5LjC90YYUi1z xMhaDEzVxvuzPT+aoigIS5+oCnL4zrgL8pWvG8Ac82QMnLYO3yw7lSNvjY1FPpAo X6FqMnSSjZgekRnz69SOTTnL9roq9TCtD3Mu6sgX+9MX4de7TvVviqMgyRwDjVUD FOloRP4QoQ5JKgKX+TTz8n2ScjdNo7j0OFJtxrz48Z0yZs1S1pm+OfVisZofuNTE a0OnmoiqFGHPowTdhiLyooZFIirpBhfXpCdBVRUJkYwjPosYckwMZHYZ4UtvLbjY 8c8rUC1/Ri3CcCZ13b1J9w+nhBC5YSK1jQN3uuY8aHLfjaHdpvNl3LieFQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLpRZfcQN/69OGLlEivXqDaExSSpMB8GA1UdIwQY MBaAFP3W7gELmQozc1dWtP4vPTwmcd2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDct NjNjNzIxY2YxZjU2LzEvdWxGbDl4QTNfcjA0WXVVU0s5ZW9Ob1RGSktrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDctNjNjNzIxY2YxZjU2 LzEvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhOlw/9A MA0GCSqGSIb3DQEBCwUAA4IBAQA7XirITFtLeDI338qp2QhTBICEe2l0ISLOCePf +lzqIDLd/my+ejWncVuKzGupxO0BW+KEy0iNh3eCApV4FEIEwheX+O/t+tBlqo2/ cPnPK8ssDvcKh7snMjkbWiC4igoz0aFpS10PRv8vFglAolzY+AZUB3SVsD0B1UwN ZzetOwEd5Li44XlwGVBJytAe3RPg4Wf7JxWe03rhAjV8q89QdJLUL+hImlGMngJ+ vhU5P73iKvJb9+irpRdLoibuaJ68yihOm+XL+bpvVPDWe2L/tZP9jfz1V8ffaSVZ r3PnsrnMzVmpGceOgbNUbsG3s4j8kCbAf96awlOebYYBYsaj -----END CERTIFICATE-----Generated at Mon Jan 5 03:50:03 2026 by rpki-client