This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/UNOsWFAGcF-oztZSo2ygn787rtk.roa File: UNOsWFAGcF-oztZSo2ygn787rtk.roa (raw, json) Hash identifier: TuVlwpc/oHLBc3H7lWmrWu4OxeOQhSzZI8d4p+D2a1Q= Subject key identifier: 50:D3:AC:58:50:06:70:5F:A8:CE:D6:52:A3:6C:A0:9F:BF:3B:AE:D9 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CF768CB589B912FC7CE6924128A48 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/UNOsWFAGcF-oztZSo2ygn787rtk.roa Signing time: Fri 02 Jan 2026 06:20:03 +0000 ROA not before: Fri 02 Jan 2026 06:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204051 IP address blocks: 2a0e:97c0:b90::/44 maxlen: 48 2a10:2f00:186::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:f7:68:cb:58:9b:91:2f:c7:ce:69:24:12:8a:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50d3ac585006705fa8ced652a36ca09fbf3baed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e2:fb:69:20:c2:dd:8a:b4:ff:89:63:f0:97: d1:80:c3:85:32:57:7c:4d:47:6c:41:09:61:a4:a0: 9d:7c:ca:84:8b:5d:9c:a8:c8:b8:72:2c:e9:c6:62: 13:24:b7:68:09:46:a1:b2:ed:2c:94:62:0d:ef:19: f8:21:f5:cf:33:76:3e:b7:ef:3e:19:e1:6e:62:fd: 82:d7:13:4a:c4:a5:14:5c:ca:19:84:f3:f8:eb:19: 7c:27:66:df:3d:97:8d:f1:82:51:83:91:36:2a:db: e8:24:12:c0:f0:5e:a0:c3:18:e8:18:83:66:1b:26: 3e:3b:08:0d:fb:30:86:00:5b:70:a8:fd:70:14:cb: 1c:b3:b3:72:c6:ba:51:f6:4a:c1:88:0d:d0:91:f5: 0e:7d:be:7c:d2:68:73:5c:74:ce:8e:18:69:f7:5e: 69:29:86:55:e9:c5:15:66:0b:89:47:fd:53:a3:00: 3d:96:85:10:f4:68:c1:7c:1c:db:f9:5b:ab:e9:e2: da:1b:80:2e:d3:2c:f4:fc:ca:b4:f4:0a:ce:c6:69: 93:e8:12:54:92:fa:01:db:60:6c:88:9c:56:43:42: 5d:a8:52:01:67:63:13:34:ed:dd:7c:68:1e:71:51: 48:8c:50:e4:fc:70:63:20:c2:a2:e4:83:74:07:7c: 61:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D3:AC:58:50:06:70:5F:A8:CE:D6:52:A3:6C:A0:9F:BF:3B:AE:D9 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/UNOsWFAGcF-oztZSo2ygn787rtk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:b90::/44 2a10:2f00:186::/48 Signature Algorithm: sha256WithRSAEncryption 59:8e:fe:f9:b7:28:5c:40:e7:72:9c:63:b2:4c:96:95:24:d4: 76:6d:b5:9c:0a:16:ed:47:7e:ca:91:a2:ad:14:16:d2:43:ec: 75:fe:26:17:72:bb:66:d3:a7:34:b8:19:07:74:33:42:dc:6f: 06:50:06:ae:f3:45:6f:a5:57:5b:95:1d:0c:e5:28:9b:3a:32: 28:9c:59:18:98:78:ef:73:2c:ee:e6:ef:d4:83:59:93:24:50: cb:37:93:f0:50:2f:c7:63:34:51:69:ef:0f:85:3e:70:98:c4: 60:60:84:96:93:20:23:ae:d9:2e:d1:9f:61:42:83:ca:87:5c: 9d:0e:0e:d4:85:1f:f0:fb:57:01:33:df:a8:91:d3:bd:24:44: 13:cf:2a:08:e5:76:2e:90:ec:58:d9:80:2f:da:96:4c:8d:f3: 4e:3e:a1:22:58:2c:cf:04:4a:f5:64:a8:39:89:ca:a9:f4:00: db:12:1c:c0:7e:84:b1:cc:d8:33:42:86:fb:5b:0a:54:0c:28: b6:d6:51:32:0a:a3:48:c8:ec:d7:ad:47:fd:7a:e4:ef:50:4c: a4:05:7b:5d:33:a2:e0:64:8c:57:1d:c6:53:f5:e7:40:a3:12: bf:c5:35:61:b5:e9:e6:b5:56:7a:44:10:88:83:12:67:4a:49: 7a:dd:53:40 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XPdoy1ibkS/HzmkkEopIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MGQzYWM1ODUwMDY3MDVmYThjZWQ2NTJhMzZjYTA5ZmJmM2JhZWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+L7aSDC3Yq0/4lj8JfRgMOFMld8 TUdsQQlhpKCdfMqEi12cqMi4cizpxmITJLdoCUahsu0slGIN7xn4IfXPM3Y+t+8+ GeFuYv2C1xNKxKUUXMoZhPP46xl8J2bfPZeN8YJRg5E2KtvoJBLA8F6gwxjoGINm GyY+OwgN+zCGAFtwqP1wFMscs7NyxrpR9krBiA3QkfUOfb580mhzXHTOjhhp915p KYZV6cUVZguJR/1TowA9loUQ9GjBfBzb+Vur6eLaG4Au0yz0/Mq09ArOxmmT6BJU kvoB22BsiJxWQ0JdqFIBZ2MTNO3dfGgecVFIjFDk/HBjIMKi5IN0B3xhEQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFDTrFhQBnBfqM7WUqNsoJ+/O67ZMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvVU5Pc1dGQUdjRi1venRaU28yeWduNzg3cnRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKg6XwAuQ AwcAKhAvAAGGMA0GCSqGSIb3DQEBCwUAA4IBAQBZjv75tyhcQOdynGOyTJaVJNR2 bbWcChbtR37KkaKtFBbSQ+x1/iYXcrtm06c0uBkHdDNC3G8GUAau80VvpVdblR0M 5SibOjIonFkYmHjvcyzu5u/Ug1mTJFDLN5PwUC/HYzRRae8PhT5wmMRgYISWkyAj rtku0Z9hQoPKh1ydDg7UhR/w+1cBM9+okdO9JEQTzyoI5XYukOxY2YAv2pZMjfNO PqEiWCzPBEr1ZKg5icqp9ADbEhzAfoSxzNgzQob7WwpUDCi21lEyCqNIyOzXrUf9 euTvUEykBXtdM6LgZIxXHcZT9edAoxK/xTVhtenmtVZ6RBCIgxJnSkl63VNA -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:26 2026 by rpki-client