This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/UzvZI-CFEC216U2uq8NWpnqxMl8.roa File: UzvZI-CFEC216U2uq8NWpnqxMl8.roa (raw, json) Hash identifier: ywJslVydxgjVF+GcCTS0/GKO6cV6t0SiOPU8DcBxf2E= Subject key identifier: 53:3B:D9:23:E0:85:10:2D:B5:E9:4D:AE:AB:C3:56:A6:7A:B1:32:5F Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CA8F18F9AE10DC12301E99F901A54 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/UzvZI-CFEC216U2uq8NWpnqxMl8.roa Signing time: Fri 02 Jan 2026 06:19:43 +0000 ROA not before: Fri 02 Jan 2026 06:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 38173 IP address blocks: 2a0e:b107:1520::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:a8:f1:8f:9a:e1:0d:c1:23:01:e9:9f:90:1a:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=533bd923e085102db5e94daeabc356a67ab1325f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:23:ab:6a:be:85:45:e6:57:02:4c:73:f5:af: d2:58:0c:83:74:b4:16:9a:50:fe:c9:9e:3b:84:50: 72:b2:15:9d:b0:ff:6b:bd:f6:20:6b:26:53:e5:3e: 0d:d8:94:6c:c0:ac:ee:4c:b1:02:50:d5:49:5d:cd: d8:a2:8c:78:ae:41:57:87:38:10:61:32:f9:06:68: 12:ea:62:74:a3:63:bc:02:bc:1c:8b:40:8a:b7:9f: 09:51:27:17:5e:37:93:90:de:f2:39:5d:b1:f7:4c: 81:64:1d:9c:a3:93:18:02:50:9f:21:c5:a2:38:9a: 5b:bb:01:15:4e:92:c3:d0:41:a8:7b:18:2c:b1:83: 81:16:5c:3c:67:9d:5f:c1:26:aa:a8:4c:f4:50:8b: 5d:c9:a4:52:d8:66:c2:9e:4e:eb:c0:de:9f:fd:cc: 3e:a9:1f:29:31:c7:fe:de:bf:5d:3e:03:94:2a:24: ed:14:24:c9:8a:a0:ed:4a:b8:77:e8:03:8f:a7:69: a3:d7:dc:08:d5:36:d9:c8:e4:63:92:ac:b3:b0:18: ba:5c:d0:23:d1:d8:ca:83:09:13:3a:71:df:04:74: 95:61:86:cd:15:54:cf:b7:d6:da:0a:e4:aa:df:ed: 98:2a:49:86:71:7e:cb:94:b1:dd:c8:e3:d4:8b:65: 6d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:3B:D9:23:E0:85:10:2D:B5:E9:4D:AE:AB:C3:56:A6:7A:B1:32:5F X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/UzvZI-CFEC216U2uq8NWpnqxMl8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:1520::/48 Signature Algorithm: sha256WithRSAEncryption 13:86:39:17:30:ed:bc:d6:04:e9:6c:02:54:3c:00:c0:7c:8a: d7:24:11:fd:13:a4:c0:63:0d:57:74:00:2a:17:f6:ea:0e:40: d8:04:85:9b:ca:4a:79:ba:5c:26:ee:c3:4f:b6:6b:ce:79:c5: 16:df:31:4d:70:7b:2d:35:2c:60:56:af:e7:ae:a8:52:55:26: 97:fa:c3:0c:98:6b:1e:58:22:f3:1e:39:7c:e8:eb:25:22:a1: 3b:35:2e:f4:2f:79:e1:f3:93:fc:f8:b2:d0:1c:51:1c:b6:8d: c3:c2:94:92:e5:9a:f3:86:e5:65:27:2b:3b:03:53:94:4d:e3: c4:78:60:0d:81:5e:3f:ea:45:94:a4:92:93:23:18:5f:0f:a5: be:c1:71:5d:e9:27:cb:84:d1:e0:87:af:c8:ad:88:a9:c3:13: b6:2c:fd:34:77:b3:5a:c5:3c:9a:ce:04:7d:c3:58:fe:07:1a: 97:15:72:5c:22:1f:a1:2c:23:db:f5:ae:0c:7f:5c:c3:43:f7: b1:37:98:2b:d1:b5:d8:d8:fb:ef:81:45:5d:6b:6c:85:80:8f: b2:9b:e5:6e:4b:e1:b1:aa:38:6b:5c:46:c6:cc:2e:37:cc:26: c9:20:3e:85:4c:e1:b4:21:f5:14:a3:55:cb:fc:9f:ca:b9:09: ca:47:53:b0 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XKjxj5rhDcEjAemfkBpUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzNiZDkyM2UwODUxMDJkYjVlOTRkYWVhYmMzNTZhNjdhYjEzMjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5iOrar6FReZXAkxz9a/SWAyDdLQW mlD+yZ47hFByshWdsP9rvfYgayZT5T4N2JRswKzuTLECUNVJXc3Yoox4rkFXhzgQ YTL5BmgS6mJ0o2O8Arwci0CKt58JUScXXjeTkN7yOV2x90yBZB2co5MYAlCfIcWi OJpbuwEVTpLD0EGoexgssYOBFlw8Z51fwSaqqEz0UItdyaRS2GbCnk7rwN6f/cw+ qR8pMcf+3r9dPgOUKiTtFCTJiqDtSrh36AOPp2mj19wI1TbZyORjkqyzsBi6XNAj 0djKgwkTOnHfBHSVYYbNFVTPt9baCuSq3+2YKkmGcX7LlLHdyOPUi2VtTQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFM72SPghRAttelNrqvDVqZ6sTJfMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvVXp2WkktQ0ZFQzIxNlUydXE4TldwbnF4TWw4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBxUg MA0GCSqGSIb3DQEBCwUAA4IBAQAThjkXMO281gTpbAJUPADAfIrXJBH9E6TAYw1X dAAqF/bqDkDYBIWbykp5ulwm7sNPtmvOecUW3zFNcHstNSxgVq/nrqhSVSaX+sMM mGseWCLzHjl86OslIqE7NS70L3nh85P8+LLQHFEcto3DwpSS5ZrzhuVlJys7A1OU TePEeGANgV4/6kWUpJKTIxhfD6W+wXFd6SfLhNHgh6/IrYipwxO2LP00d7NaxTya zgR9w1j+BxqXFXJcIh+hLCPb9a4Mf1zDQ/exN5gr0bXY2PvvgUVda2yFgI+ym+Vu S+GxqjhrXEbGzC43zCbJID6FTOG0IfUUo1XL/J/KuQnKR1Ow -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:46 2026 by rpki-client