This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/a19b9f-469f-4475-a1e8-b8395d653e6e/1/UQ-Obiva26_mmAwhjKc3uzVQ7mM.roa File: UQ-Obiva26_mmAwhjKc3uzVQ7mM.roa (raw, json) Hash identifier: a+cVa2kzi7Q/+FGH9LfCA4p6Z3qaWMrupfp1ELf+pAg= Subject key identifier: 51:0F:8E:6E:2B:DA:DB:AF:E6:98:0C:21:8C:A7:37:BB:35:50:EE:63 Certificate issuer: /CN=fb01e011cf657f4ad3f22c6dee70c7ff57b3b8b9 Certificate serial: 019B7E37CE9B1BABF1616878D18553BCF51B Authority key identifier: FB:01:E0:11:CF:65:7F:4A:D3:F2:2C:6D:EE:70:C7:FF:57:B3:B8:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wHgEc9lf0rT8ixt7nDH_1ezuLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/a19b9f-469f-4475-a1e8-b8395d653e6e/1/UQ-Obiva26_mmAwhjKc3uzVQ7mM.roa Signing time: Fri 02 Jan 2026 10:19:05 +0000 ROA not before: Fri 02 Jan 2026 10:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211474 IP address blocks: 2a05:a840::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/a19b9f-469f-4475-a1e8-b8395d653e6e/1/1-wHgEc9lf0rT8ixt7nDH_1ezuLk.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/a19b9f-469f-4475-a1e8-b8395d653e6e/1/1-wHgEc9lf0rT8ixt7nDH_1ezuLk.mft rsync://rpki.ripe.net/repository/DEFAULT/1-wHgEc9lf0rT8ixt7nDH_1ezuLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:ce:9b:1b:ab:f1:61:68:78:d1:85:53:bc:f5:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb01e011cf657f4ad3f22c6dee70c7ff57b3b8b9 Validity Not Before: Jan 2 10:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=510f8e6e2bdadbafe6980c218ca737bb3550ee63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ac:7b:76:7e:6e:6e:52:9e:e1:77:d8:33:ce: 8c:6c:29:14:4b:79:a5:0e:5e:b9:39:58:5a:c9:57: d8:39:7c:92:ee:ea:37:ee:33:92:b8:b7:dc:97:11: c7:0b:75:aa:ca:57:68:25:8b:c0:e4:ea:73:0c:e7: 49:31:60:c3:19:77:51:60:9e:8a:d6:64:9e:4f:28: 6f:0c:b4:0d:eb:ca:15:77:d2:04:1f:2b:ee:cf:ba: fc:c4:b5:f5:0e:de:ab:29:3e:27:1e:11:44:6d:8e: 77:6e:d4:34:16:ee:68:fc:dd:e8:22:57:68:87:fc: c6:66:54:ec:64:80:36:01:60:1a:e7:da:0a:d1:fa: d4:0d:0a:fe:ee:c0:8f:62:1a:93:35:4a:30:0a:c4: 46:02:ef:d1:32:6e:93:df:73:42:f8:53:68:27:41: 52:6e:3f:2a:e4:c0:55:50:77:fa:17:ab:d8:7e:e1: 83:d6:0b:10:ce:6c:06:9c:0f:6a:d1:dd:d8:b9:db: dd:8c:7c:09:f5:e7:a1:80:55:87:2d:81:1a:78:ad: 14:39:a9:2f:b7:4c:aa:f8:bc:fd:aa:8f:1b:b6:f4: 18:a7:95:54:f2:e4:cb:44:fe:3f:82:47:d4:21:0c: 77:d0:10:8a:7b:fe:6d:ec:59:50:85:35:ee:42:41: 2d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:0F:8E:6E:2B:DA:DB:AF:E6:98:0C:21:8C:A7:37:BB:35:50:EE:63 X509v3 Authority Key Identifier: keyid:FB:01:E0:11:CF:65:7F:4A:D3:F2:2C:6D:EE:70:C7:FF:57:B3:B8:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wHgEc9lf0rT8ixt7nDH_1ezuLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/a19b9f-469f-4475-a1e8-b8395d653e6e/1/UQ-Obiva26_mmAwhjKc3uzVQ7mM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/a19b9f-469f-4475-a1e8-b8395d653e6e/1/1-wHgEc9lf0rT8ixt7nDH_1ezuLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:a840::/29 Signature Algorithm: sha256WithRSAEncryption 6d:b8:08:8a:e9:53:b3:de:fe:95:11:5a:4b:9f:85:ea:fa:20: 71:d0:cb:6a:2f:af:b4:94:c6:1e:5d:72:11:6f:71:b2:cb:c3: 27:45:c8:48:07:6c:94:dd:cc:34:04:7d:9a:14:e7:5b:b2:ff: 85:58:ce:7e:39:1f:83:54:e2:e9:07:ec:b7:8a:f4:49:db:41: 2d:cd:26:06:51:b6:4e:0d:c6:03:b9:98:40:a7:71:19:e9:82: a7:8a:1f:28:15:55:47:17:04:6f:52:34:9a:ea:5a:e3:a4:fc: 09:81:a8:11:69:a5:60:c2:ec:f8:d6:da:49:76:61:54:8e:64: 45:66:1d:e9:1c:22:6d:8b:77:26:84:9f:bf:c6:8f:6d:ea:15: d1:bb:e9:e6:03:c5:ee:0d:09:e8:6e:a6:48:f2:8a:4f:05:22: 06:93:e6:e2:e9:cd:d0:11:ef:db:22:bd:a5:e5:cd:bb:36:d4: a3:19:02:68:e1:87:67:2b:3b:c1:72:89:78:12:ad:96:b0:d7: 3e:46:60:6d:03:d6:72:a1:2b:43:94:ce:f0:b3:ac:41:90:f5: f5:23:cb:16:a1:81:9e:8c:51:5a:40:4f:72:69:d2:2a:58:03: 28:7e:ae:f8:95:7d:2d:07:ca:68:a2:5b:3c:ec:4a:94:72:9f: 2a:37:a0:ce -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+N86bG6vxYWh40YVTvPUbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiMDFlMDExY2Y2NTdmNGFkM2YyMmM2ZGVlNzBjN2ZmNTdi M2I4YjkwHhcNMjYwMTAyMTAxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTBmOGU2ZTJiZGFkYmFmZTY5ODBjMjE4Y2E3MzdiYjM1NTBlZTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6x7dn5ublKe4XfYM86MbCkUS3ml Dl65OVhayVfYOXyS7uo37jOSuLfclxHHC3WqyldoJYvA5OpzDOdJMWDDGXdRYJ6K 1mSeTyhvDLQN68oVd9IEHyvuz7r8xLX1Dt6rKT4nHhFEbY53btQ0Fu5o/N3oIldo h/zGZlTsZIA2AWAa59oK0frUDQr+7sCPYhqTNUowCsRGAu/RMm6T33NC+FNoJ0FS bj8q5MBVUHf6F6vYfuGD1gsQzmwGnA9q0d3YudvdjHwJ9eehgFWHLYEaeK0UOakv t0yq+Lz9qo8btvQYp5VU8uTLRP4/gkfUIQx30BCKe/5t7FlQhTXuQkEtWwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFEPjm4r2tuv5pgMIYynN7s1UO5jMB8GA1UdIwQY MBaAFPsB4BHPZX9K0/Isbe5wx/9Xs7i5MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS13SGdFYzlsZjByVDhpeHQ3bkRIXzFlenVMay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2EvYTE5YjlmLTQ2OWYtNDQ3NS1hMWU4 LWI4Mzk1ZDY1M2U2ZS8xL1VRLU9iaXZhMjZfbW1Bd2hqS2MzdXpWUTdtTS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvM2EvYTE5YjlmLTQ2OWYtNDQ3NS1hMWU4LWI4Mzk1ZDY1M2U2 ZS8xLzEtd0hnRWM5bGYwclQ4aXh0N25ESF8xZXp1TGsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQMqBahA MA0GCSqGSIb3DQEBCwUAA4IBAQBtuAiK6VOz3v6VEVpLn4Xq+iBx0MtqL6+0lMYe XXIRb3Gyy8MnRchIB2yU3cw0BH2aFOdbsv+FWM5+OR+DVOLpB+y3ivRJ20EtzSYG UbZODcYDuZhAp3EZ6YKnih8oFVVHFwRvUjSa6lrjpPwJgagRaaVgwuz41tpJdmFU jmRFZh3pHCJti3cmhJ+/xo9t6hXRu+nmA8XuDQnobqZI8opPBSIGk+bi6c3QEe/b Ir2l5c27NtSjGQJo4YdnKzvBcol4Eq2WsNc+RmBtA9ZyoStDlM7ws6xBkPX1I8sW oYGejFFaQE9yadIqWAMofq74lX0tB8pools87EqUcp8qN6DO -----END CERTIFICATE-----Generated at Mon Feb 9 22:24:51 2026 by rpki-client