This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/UPtDvLcJFubeoQG5Q0TCHOF5BEg.roa File: UPtDvLcJFubeoQG5Q0TCHOF5BEg.roa (raw, json) Hash identifier: NKl8G4cgidJynX/o0nzP2O7LhxMKHj4quMBrSfkRxwY= Subject key identifier: 50:FB:43:BC:B7:09:16:E6:DE:A1:01:B9:43:44:C2:1C:E1:79:04:48 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CECE457FCE793CC170EA5CFFD3B50 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/UPtDvLcJFubeoQG5Q0TCHOF5BEg.roa Signing time: Fri 02 Jan 2026 06:20:00 +0000 ROA not before: Fri 02 Jan 2026 06:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202340 IP address blocks: 2a10:cc40:210::/44 maxlen: 48 2a10:cc40:211::/48 maxlen: 48 2a10:cc40:212::/48 maxlen: 48 2a10:cc40:213::/48 maxlen: 48 2a10:cc40:214::/48 maxlen: 48 2a10:cc40:215::/48 maxlen: 48 2a10:cc40:216::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ec:e4:57:fc:e7:93:cc:17:0e:a5:cf:fd:3b:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50fb43bcb70916e6dea101b94344c21ce1790448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:5c:4a:fd:b9:e9:f2:09:d1:3f:ea:20:6c:33: 8a:90:28:bd:61:d6:a6:cf:e9:42:52:2b:ec:7f:79: 3b:65:db:f4:e6:8c:b2:bb:b0:06:ae:04:2b:83:9e: 1f:cf:47:d5:55:07:32:b8:ce:84:fc:a5:66:d6:3e: 75:01:83:c3:68:ce:48:ae:00:a7:6d:7a:36:b3:fb: 88:bd:5a:0d:e5:7e:0d:52:16:8a:f1:2b:55:3f:40: 44:43:66:08:70:64:8f:3a:39:d2:0d:3a:3e:58:83: a8:05:98:63:07:3e:04:62:1b:21:49:5c:49:13:55: 0d:39:7d:6c:01:71:f5:65:9d:bb:73:72:12:3d:97: c3:b8:ab:af:37:8c:ea:45:8c:79:98:48:85:f8:6d: 8f:1f:a0:9c:5c:a5:49:d3:79:4a:3d:d4:72:1b:2c: 91:12:84:e6:ce:67:1d:b0:bd:a1:dc:05:ff:20:4f: 70:60:ce:be:62:e8:3c:ac:7c:19:02:9d:0b:d3:39: 11:cc:f3:d7:2f:83:44:b0:4b:28:c6:6b:de:48:de: ca:d7:64:48:87:21:31:3f:11:fd:cd:b1:1b:96:2f: 2d:01:be:6d:5c:e5:90:85:5b:ed:d1:52:6d:7e:89: 2d:6f:cc:42:2e:39:b0:e6:32:9a:ed:c3:17:88:d7: 98:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:FB:43:BC:B7:09:16:E6:DE:A1:01:B9:43:44:C2:1C:E1:79:04:48 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/UPtDvLcJFubeoQG5Q0TCHOF5BEg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:cc40:210::/44 Signature Algorithm: sha256WithRSAEncryption bf:a4:bf:9d:11:55:a0:dd:85:37:8e:7f:c6:b5:90:7d:1c:a6: 53:1a:e5:15:b9:06:f3:0a:bf:92:d2:a2:a5:22:69:61:4b:8a: 44:41:16:d1:7b:31:01:c9:c3:18:de:37:71:1b:3a:2f:df:44: 78:88:20:c1:fb:3d:f5:fb:ae:e0:c5:73:83:64:e1:a5:71:ff: ed:bc:7a:d3:29:ec:a6:9a:87:61:d2:98:b1:4e:4e:72:19:e5: da:0f:ce:59:52:8f:17:43:74:70:e2:45:92:af:51:0f:c4:a1: f7:7e:72:0a:d0:d3:f5:32:4c:79:4d:bf:da:8b:1a:34:0b:fc: e6:d7:60:22:be:69:f6:2e:ab:81:84:be:ab:ea:8c:82:75:c1: 5f:43:b9:f1:2b:67:58:0b:1f:ce:b3:04:2f:4e:65:7c:ab:be: 42:f7:41:2e:ca:16:8b:8c:06:7a:e7:32:d5:43:ca:10:2c:cb: d0:1e:b6:57:ca:c1:55:6d:77:10:64:3d:6a:7a:12:40:4c:af: 79:21:2c:e3:6a:46:eb:54:43:ec:19:31:1f:5d:53:2a:19:b2: d0:6e:f5:98:8c:5d:7e:bd:9b:fe:d8:cc:fa:a7:af:ee:63:e3: 62:f4:be:ae:5a:48:f7:1a:ed:22:27:33:13:33:bd:ee:3d:03: 7b:f2:84:bc -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XOzkV/znk8wXDqXP/TtQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MGZiNDNiY2I3MDkxNmU2ZGVhMTAxYjk0MzQ0YzIxY2UxNzkwNDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lxK/bnp8gnRP+ogbDOKkCi9Ydam z+lCUivsf3k7Zdv05oyyu7AGrgQrg54fz0fVVQcyuM6E/KVm1j51AYPDaM5IrgCn bXo2s/uIvVoN5X4NUhaK8StVP0BEQ2YIcGSPOjnSDTo+WIOoBZhjBz4EYhshSVxJ E1UNOX1sAXH1ZZ27c3ISPZfDuKuvN4zqRYx5mEiF+G2PH6CcXKVJ03lKPdRyGyyR EoTmzmcdsL2h3AX/IE9wYM6+Yug8rHwZAp0L0zkRzPPXL4NEsEsoxmveSN7K12RI hyExPxH9zbEbli8tAb5tXOWQhVvt0VJtfoktb8xCLjmw5jKa7cMXiNeYPwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFD7Q7y3CRbm3qEBuUNEwhzheQRIMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvVVB0RHZMY0pGdWJlb1FHNVEwVENIT0Y1QkVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhDMQAIQ MA0GCSqGSIb3DQEBCwUAA4IBAQC/pL+dEVWg3YU3jn/GtZB9HKZTGuUVuQbzCr+S 0qKlImlhS4pEQRbRezEBycMY3jdxGzov30R4iCDB+z31+67gxXODZOGlcf/tvHrT Keymmodh0pixTk5yGeXaD85ZUo8XQ3Rw4kWSr1EPxKH3fnIK0NP1Mkx5Tb/aixo0 C/zm12Aivmn2LquBhL6r6oyCdcFfQ7nxK2dYCx/OswQvTmV8q75C90EuyhaLjAZ6 5zLVQ8oQLMvQHrZXysFVbXcQZD1qehJATK95ISzjakbrVEPsGTEfXVMqGbLQbvWY jF1+vZv+2Mz6p6/uY+Ni9L6uWkj3Gu0iJzMTM73uPQN78oS8 -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:21 2026 by rpki-client