This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uGIm4AdzZmwjM7caSARtNwbpE3U.roa File: uGIm4AdzZmwjM7caSARtNwbpE3U.roa (raw, json) Hash identifier: PoiauI8diczHcKKCWyPWfIYBGUI+44TCOi2Bolx7hLQ= Subject key identifier: B8:62:26:E0:07:73:66:6C:23:33:B7:1A:48:04:6D:37:06:E9:13:75 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CEBB43910E83155747574E6F3FF71 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uGIm4AdzZmwjM7caSARtNwbpE3U.roa Signing time: Fri 02 Jan 2026 06:20:00 +0000 ROA not before: Fri 02 Jan 2026 06:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202224 IP address blocks: 2a10:2f00:18b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:eb:b4:39:10:e8:31:55:74:75:74:e6:f3:ff:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b86226e00773666c2333b71a48046d3706e91375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:46:04:8e:a1:81:c3:c3:cd:12:ed:65:bf:c0: bd:96:6e:e1:0b:00:38:e4:30:99:a5:d5:ec:6b:1a: da:fe:6b:ed:5c:a4:2f:8b:fe:9a:04:e3:83:e7:cc: d9:f4:c5:23:5e:f5:ce:dd:60:86:5a:c7:b1:26:fe: 29:ca:4d:21:c7:54:59:59:5b:51:cb:cd:3d:6c:98: 52:4d:1c:61:77:e9:72:08:f3:3c:2e:fb:3f:5c:28: 31:9d:64:c9:11:5b:31:b9:2f:e0:d4:50:ad:55:84: f0:5e:5c:2d:92:24:41:19:58:66:6d:35:ca:0e:34: 46:c0:7f:af:84:7b:cb:1b:63:0a:b8:81:40:54:8e: 78:52:6e:06:37:b4:3a:06:1c:99:ad:a9:25:bd:09: d5:07:7a:c4:d2:95:5d:3e:58:83:ae:c4:c6:7e:75: 56:e5:6e:67:8f:9d:2b:0b:c2:20:20:88:b1:28:91: 81:67:8f:91:53:f8:61:a6:3d:f4:55:cf:b3:6b:fb: 60:16:e9:c3:9c:8b:23:a6:28:71:9e:02:03:1c:52: 15:40:f3:4e:7d:aa:ea:66:d8:ea:51:cf:f6:87:05: 12:9a:af:bf:0d:b9:b4:72:72:ee:72:db:9f:81:f1: 49:18:93:7d:a2:fb:c0:f4:2b:24:5b:f9:3f:b0:b2: 65:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:62:26:E0:07:73:66:6C:23:33:B7:1A:48:04:6D:37:06:E9:13:75 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uGIm4AdzZmwjM7caSARtNwbpE3U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:2f00:18b::/48 Signature Algorithm: sha256WithRSAEncryption 8f:5b:8a:a5:f6:5f:62:1a:df:98:7a:bc:b6:e3:5b:a2:df:c8: 65:ed:d8:e7:b4:04:ad:a7:27:2c:b4:b0:f0:e7:64:0f:12:0f: 6a:bf:98:ee:4d:96:58:b7:2b:9f:f5:d7:bb:16:2f:4d:fe:46: fe:18:f6:4d:79:d4:ed:b7:d6:1a:51:21:f7:9c:1f:91:47:3b: 8d:3f:44:e5:08:ef:b3:ca:d1:5a:ae:d8:a2:5c:2d:45:11:78: 6f:27:a2:db:de:9a:3c:e3:56:b6:05:e5:6d:8a:aa:42:fd:9c: 88:b5:aa:6d:98:5e:68:56:9a:9f:bb:ac:0a:56:67:ff:d4:1e: 7f:d6:6a:8e:8b:86:c7:19:2b:42:41:d0:4a:80:34:de:99:33: 84:83:4f:85:fd:9b:ab:05:e1:54:80:19:cf:a1:c4:da:74:a1: 50:a2:82:79:d5:ce:10:cf:7f:c3:1c:d1:9d:35:80:fa:68:c8: 21:d6:17:72:8e:10:be:2d:ca:b0:c4:df:2f:64:f9:69:58:dd: d0:f7:a0:86:69:44:c1:12:1c:3f:70:c2:4d:db:0d:6e:61:80: 04:02:7d:be:4a:ad:e2:c4:87:3e:f6:21:b0:82:51:d8:72:1e: 85:b0:7e:96:7b:db:e3:0a:87:bf:3a:b8:0a:70:05:30:a1:85: 3a:d5:c7:da -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XOu0ORDoMVV0dXTm8/9xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODYyMjZlMDA3NzM2NjZjMjMzM2I3MWE0ODA0NmQzNzA2ZTkxMzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUYEjqGBw8PNEu1lv8C9lm7hCwA4 5DCZpdXsaxra/mvtXKQvi/6aBOOD58zZ9MUjXvXO3WCGWsexJv4pyk0hx1RZWVtR y809bJhSTRxhd+lyCPM8Lvs/XCgxnWTJEVsxuS/g1FCtVYTwXlwtkiRBGVhmbTXK DjRGwH+vhHvLG2MKuIFAVI54Um4GN7Q6BhyZraklvQnVB3rE0pVdPliDrsTGfnVW 5W5nj50rC8IgIIixKJGBZ4+RU/hhpj30Vc+za/tgFunDnIsjpihxngIDHFIVQPNO farqZtjqUc/2hwUSmq+/Dbm0cnLuctufgfFJGJN9ovvA9CskW/k/sLJl2QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLhiJuAHc2ZsIzO3GkgEbTcG6RN1MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvdUdJbTRBZHpabXdqTTdjYVNBUnROd2JwRTNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhAvAAGL MA0GCSqGSIb3DQEBCwUAA4IBAQCPW4ql9l9iGt+Yery241ui38hl7djntAStpycs tLDw52QPEg9qv5juTZZYtyuf9de7Fi9N/kb+GPZNedTtt9YaUSH3nB+RRzuNP0Tl CO+zytFartiiXC1FEXhvJ6Lb3po841a2BeVtiqpC/ZyItaptmF5oVpqfu6wKVmf/ 1B5/1mqOi4bHGStCQdBKgDTemTOEg0+F/ZurBeFUgBnPocTadKFQooJ51c4Qz3/D HNGdNYD6aMgh1hdyjhC+LcqwxN8vZPlpWN3Q96CGaUTBEhw/cMJN2w1uYYAEAn2+ Sq3ixIc+9iGwglHYch6FsH6We9vjCoe/OrgKcAUwoYU61cfa -----END CERTIFICATE-----Generated at Fri Jan 9 13:12:01 2026 by rpki-client