This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/uSGmmmaLtoe3eUHigIrN47aVHko.roa File: uSGmmmaLtoe3eUHigIrN47aVHko.roa (raw, json) Hash identifier: tjzYIHWpoG3yiW/4rVWqjKVzthPOwUg7TejbjmApHRI= Subject key identifier: B9:21:A6:9A:66:8B:B6:87:B7:79:41:E2:80:8A:CD:E3:B6:95:1E:4A Certificate issuer: /CN=63392e929317ae6bde08a5a3b98a2b701ddb893a Certificate serial: 019B7A5B4A6A2959257DE323B6EC50BD5639 Authority key identifier: 63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/uSGmmmaLtoe3eUHigIrN47aVHko.roa Signing time: Thu 01 Jan 2026 16:19:21 +0000 ROA not before: Thu 01 Jan 2026 16:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60445 IP address blocks: 2a12:f8c2:600::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:4a:6a:29:59:25:7d:e3:23:b6:ec:50:bd:56:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63392e929317ae6bde08a5a3b98a2b701ddb893a Validity Not Before: Jan 1 16:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b921a69a668bb687b77941e2808acde3b6951e4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:66:04:a3:fe:97:17:6c:d5:d2:02:88:55:68: af:86:11:1b:ab:10:27:73:bf:f2:8e:6e:50:a8:4b: db:ec:f5:74:ba:52:3b:42:69:25:bc:19:72:c0:7c: e6:96:cb:14:15:45:3c:42:3d:e0:f6:2b:5c:a8:3b: 3e:e0:a4:4d:35:70:3c:92:b3:4c:25:b7:7b:92:8e: 78:ab:7b:e9:73:4a:54:46:b7:9b:30:3f:7c:31:5d: 2e:03:7a:0a:bf:70:a2:5c:fe:30:1c:bc:af:5a:dc: 30:04:ea:b0:11:bb:61:db:17:41:74:b3:b1:7c:a1: a8:d2:0d:53:69:7d:c1:dd:cc:c9:f1:c4:e1:bd:b5: 3f:ff:42:9e:13:51:58:2f:6c:f3:26:c7:eb:05:92: c4:cd:b7:3d:9c:56:6f:59:88:cd:74:c3:36:f8:08: 2d:86:61:7b:3b:48:ad:96:f9:c1:3f:52:bf:3e:90: 06:a8:21:1c:9f:f2:ba:86:f0:77:6b:34:1e:8d:d4: e2:80:42:7a:72:87:9b:e0:9c:6e:e9:59:c4:32:28: c4:18:02:2c:49:55:fd:de:61:c3:86:bc:5e:2f:44: d6:cc:c0:d0:78:36:df:eb:12:18:95:12:1d:56:3a: ed:0e:d0:e1:e1:d7:cb:f6:0e:5f:84:e2:4f:a6:0d: ae:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:21:A6:9A:66:8B:B6:87:B7:79:41:E2:80:8A:CD:E3:B6:95:1E:4A X509v3 Authority Key Identifier: keyid:63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/uSGmmmaLtoe3eUHigIrN47aVHko.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:f8c2:600::/40 Signature Algorithm: sha256WithRSAEncryption 19:94:6a:c5:88:0a:7d:12:3b:b6:dc:11:57:c4:7a:ef:fb:d2: a4:e7:ec:66:75:6f:67:15:96:1c:b6:c2:35:79:01:ba:90:70: 4b:d3:9d:45:88:cc:5c:83:4b:0c:7a:3f:27:6b:94:b8:14:59: df:b9:e7:ed:8f:31:b7:0c:88:65:c0:ea:cf:f5:de:4e:2b:63: 8e:12:0a:ec:53:70:be:0d:6c:b5:cc:32:34:af:38:3d:f6:d6: 66:1f:a1:eb:98:09:e4:d8:04:cd:20:6a:e7:4f:ea:e1:43:d4: c6:17:90:8b:c4:78:07:ef:04:73:aa:d9:92:78:99:96:fa:2c: 47:52:e9:cc:83:72:99:bd:2f:ae:30:a5:72:ee:db:b9:3c:15: 00:f2:73:6e:c7:78:d1:85:fd:c4:46:fd:5a:50:46:ca:7e:81: f1:da:76:60:9b:eb:31:20:39:82:59:a6:d1:81:df:89:8a:88: 9c:bf:05:7a:ef:c3:26:af:4f:54:85:0f:4f:d8:e8:52:b9:37: d8:91:01:65:49:57:fa:44:5a:71:62:df:1e:38:a8:27:b3:15: b8:91:09:7d:d3:7d:d1:00:ab:2b:b8:66:c6:de:11:c3:55:e0: 43:1f:f2:ab:8d:31:f1:f4:cb:6c:40:31:a4:fd:ae:57:fa:33: 9c:f0:dd:04 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt6W0pqKVklfeMjtuxQvVY5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMzkyZTkyOTMxN2FlNmJkZTA4YTVhM2I5OGEyYjcwMWRk Yjg5M2EwHhcNMjYwMTAxMTYxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTIxYTY5YTY2OGJiNjg3Yjc3OTQxZTI4MDhhY2RlM2I2OTUxZTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2YEo/6XF2zV0gKIVWivhhEbqxAn c7/yjm5QqEvb7PV0ulI7QmklvBlywHzmlssUFUU8Qj3g9itcqDs+4KRNNXA8krNM Jbd7ko54q3vpc0pURrebMD98MV0uA3oKv3CiXP4wHLyvWtwwBOqwEbth2xdBdLOx fKGo0g1TaX3B3czJ8cThvbU//0KeE1FYL2zzJsfrBZLEzbc9nFZvWYjNdMM2+Agt hmF7O0itlvnBP1K/PpAGqCEcn/K6hvB3azQejdTigEJ6coeb4Jxu6VnEMijEGAIs SVX93mHDhrxeL0TWzMDQeDbf6xIYlRIdVjrtDtDh4dfL9g5fhOJPpg2u0QIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFLkhpppmi7aHt3lB4oCKzeO2lR5KMB8GA1UdIwQY MBaAFGM5LpKTF65r3gilo7mKK3Ad24k6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEt ODcyNTBmNWEwN2NjLzEvdVNHbW1tYUx0b2UzZVVIaWdJck40N2FWSGtvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEtODcyNTBmNWEwN2Nj LzEvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhL4wgYw DQYJKoZIhvcNAQELBQADggEBABmUasWICn0SO7bcEVfEeu/70qTn7GZ1b2cVlhy2 wjV5AbqQcEvTnUWIzFyDSwx6PydrlLgUWd+55+2PMbcMiGXA6s/13k4rY44SCuxT cL4NbLXMMjSvOD321mYfoeuYCeTYBM0gaudP6uFD1MYXkIvEeAfvBHOq2ZJ4mZb6 LEdS6cyDcpm9L64wpXLu27k8FQDyc27HeNGF/cRG/VpQRsp+gfHadmCb6zEgOYJZ ptGB34mKiJy/BXrvwyavT1SFD0/Y6FK5N9iRAWVJV/pEWnFi3x44qCezFbiRCX3T fdEAqyu4ZsbeEcNV4EMf8quNMfH0y2xAMaT9rlf6M5zw3QQ= -----END CERTIFICATE-----Generated at Mon Jan 26 01:14:58 2026 by rpki-client