This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/UXNMn6ZQUOz2CCzWldQGTXf2JTM.roa File: UXNMn6ZQUOz2CCzWldQGTXf2JTM.roa (raw, json) Hash identifier: EBrIv2rLj1VLA/jFGUX2Qc6NsD6MIreCYFtq7GrJEDY= Subject key identifier: 51:73:4C:9F:A6:50:50:EC:F6:08:2C:D6:95:D4:06:4D:77:F6:25:33 Certificate issuer: /CN=e5da8e9cfc8b160ec59b540f39d8973d4218312a Certificate serial: 019B7DCA65D82072A80F5175FBD48E9959C1 Authority key identifier: E5:DA:8E:9C:FC:8B:16:0E:C5:9B:54:0F:39:D8:97:3D:42:18:31:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/UXNMn6ZQUOz2CCzWldQGTXf2JTM.roa Signing time: Fri 02 Jan 2026 08:19:34 +0000 ROA not before: Fri 02 Jan 2026 08:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 2a10:4780:a4::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.crl rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft rsync://rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 11:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:65:d8:20:72:a8:0f:51:75:fb:d4:8e:99:59:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5da8e9cfc8b160ec59b540f39d8973d4218312a Validity Not Before: Jan 2 08:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51734c9fa65050ecf6082cd695d4064d77f62533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:fd:31:ae:b5:f9:6f:26:90:43:64:0a:6f:15: bc:27:bb:08:42:59:9e:11:97:b8:c4:d8:12:8c:40: ef:fa:7d:cf:4e:12:27:d9:07:d9:65:94:0a:b5:73: 46:63:51:3a:18:3c:07:e9:ae:d2:bd:b7:9c:5d:d4: 38:e8:d1:7f:2b:a9:e5:be:ea:e9:d8:fa:96:e3:b0: 4c:ee:72:46:26:99:e2:a4:d2:95:58:84:ec:00:5b: ed:98:96:2c:6e:47:ef:09:39:9b:ea:d8:ee:ec:eb: 12:e1:ad:b7:6b:34:d6:66:40:9b:a6:19:c0:9f:85: 5f:36:82:41:54:65:1c:f2:d8:00:0a:6f:fd:5c:13: 3e:1e:71:bc:bd:7b:9e:fb:b8:db:0a:e8:96:05:15: 9e:57:f0:db:91:30:79:98:bc:e9:ac:8a:e2:3d:ee: ed:51:46:f3:21:dd:12:b8:25:8c:2f:6f:a2:85:c1: 1d:91:6a:e6:1a:b0:ac:4c:ed:48:29:86:e6:7f:06: 4a:42:bf:30:b7:ff:ef:ce:7d:19:65:21:82:b0:5f: 67:3a:12:56:f4:8b:5b:4b:2a:91:cf:38:ac:15:3e: 3d:b8:d4:24:cb:6e:02:05:5b:ef:54:18:e5:cd:3e: 47:8d:47:1b:e5:fe:79:ad:ff:85:3a:bb:7a:05:30: 1f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:73:4C:9F:A6:50:50:EC:F6:08:2C:D6:95:D4:06:4D:77:F6:25:33 X509v3 Authority Key Identifier: keyid:E5:DA:8E:9C:FC:8B:16:0E:C5:9B:54:0F:39:D8:97:3D:42:18:31:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/UXNMn6ZQUOz2CCzWldQGTXf2JTM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:4780:a4::/46 Signature Algorithm: sha256WithRSAEncryption 5c:13:72:74:1d:4c:46:57:5a:51:a7:df:1b:f8:5d:38:e5:fa: ea:fe:1b:e7:df:aa:74:60:7f:11:9a:8e:4f:9e:9b:b7:5c:26: 65:52:81:5a:f4:90:be:02:38:7c:e0:89:18:6b:23:15:43:e3: 24:e6:06:27:7d:7e:96:45:95:0f:1f:3f:8f:ef:9f:f3:2d:f8: 83:ee:48:f0:14:62:89:b7:2b:b1:50:56:b9:cf:0d:63:11:99: 2b:c8:21:c5:ae:88:4c:0a:04:18:bc:be:2b:57:47:77:86:c5: 9a:e1:fe:f2:55:42:bc:6c:6b:90:bd:44:a0:95:ee:27:8c:49: 38:d0:57:1f:34:f8:5e:14:fe:7d:2c:36:ba:c7:bf:ab:79:cb: b3:01:47:0a:7e:bc:25:ff:0a:51:1a:d5:b8:c5:2c:c3:c5:b6: b1:c7:7b:07:01:bf:6f:6f:6b:e9:41:a8:d5:1c:82:a3:74:2c: af:13:8f:a1:54:12:5e:ab:62:60:11:bb:78:a6:09:77:5d:d7: 3b:8f:da:54:5b:ca:56:97:18:32:df:b7:67:b1:68:45:92:49: 36:d5:64:40:d7:8f:f5:2d:3f:87:78:4c:5f:1f:6a:3f:0e:71: 07:a5:54:6e:01:e6:63:58:8d:bd:ec:cb:8c:cc:f8:3a:50:87: b2:2a:e3:d1 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9ymXYIHKoD1F1+9SOmVnBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ZGE4ZTljZmM4YjE2MGVjNTliNTQwZjM5ZDg5NzNkNDIx ODMxMmEwHhcNMjYwMTAyMDgxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTczNGM5ZmE2NTA1MGVjZjYwODJjZDY5NWQ0MDY0ZDc3ZjYyNTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1v0xrrX5byaQQ2QKbxW8J7sIQlme EZe4xNgSjEDv+n3PThIn2QfZZZQKtXNGY1E6GDwH6a7SvbecXdQ46NF/K6nlvurp 2PqW47BM7nJGJpnipNKVWITsAFvtmJYsbkfvCTmb6tju7OsS4a23azTWZkCbphnA n4VfNoJBVGUc8tgACm/9XBM+HnG8vXue+7jbCuiWBRWeV/DbkTB5mLzprIriPe7t UUbzId0SuCWML2+ihcEdkWrmGrCsTO1IKYbmfwZKQr8wt//vzn0ZZSGCsF9nOhJW 9ItbSyqRzzisFT49uNQky24CBVvvVBjlzT5HjUcb5f55rf+FOrt6BTAfoQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFFzTJ+mUFDs9ggs1pXUBk139iUzMB8GA1UdIwQY MBaAFOXajpz8ixYOxZtUDznYlz1CGDEqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWRxT25QeUxGZzdGbTFRUE9kaVhQVUlZTVNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8wMDNjYTktYzM5MC00Mjc0LThmYzYt N2M1MDQ3MDNiYjAyLzEvVVhOTW42WlFVT3oyQ0N6V2xkUUdUWGYySlRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8wMDNjYTktYzM5MC00Mjc0LThmYzYtN2M1MDQ3MDNiYjAy LzEvNWRxT25QeUxGZzdGbTFRUE9kaVhQVUlZTVNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCKhBHgACk MA0GCSqGSIb3DQEBCwUAA4IBAQBcE3J0HUxGV1pRp98b+F045frq/hvn36p0YH8R mo5Pnpu3XCZlUoFa9JC+Ajh84IkYayMVQ+Mk5gYnfX6WRZUPHz+P75/zLfiD7kjw FGKJtyuxUFa5zw1jEZkryCHFrohMCgQYvL4rV0d3hsWa4f7yVUK8bGuQvUSgle4n jEk40FcfNPheFP59LDa6x7+recuzAUcKfrwl/wpRGtW4xSzDxbaxx3sHAb9vb2vp QajVHIKjdCyvE4+hVBJeq2JgEbt4pgl3Xdc7j9pUW8pWlxgy37dnsWhFkkk21WRA 14/1LT+HeExfH2o/DnEHpVRuAeZjWI297MuMzPg6UIeyKuPR -----END CERTIFICATE-----Generated at Fri Jan 9 17:05:13 2026 by rpki-client