This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/UUUSjQipgB1Dt7u0MIMnbSuyCBY.roa
File: UUUSjQipgB1Dt7u0MIMnbSuyCBY.roa (raw, json)
Hash identifier: WQNLJMdqNlepnyTMu010tU0r2QqyZ8joTssKUf14Y+k=
Subject key identifier: 51:45:12:8D:08:A9:80:1D:43:B7:BB:B4:30:83:27:6D:2B:B2:08:16
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019C359C2B8EE302A8B2B9A73C9F5671997C
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/UUUSjQipgB1Dt7u0MIMnbSuyCBY.roa
Signing time: Sat 07 Feb 2026 00:59:13 +0000
ROA not before: Sat 07 Feb 2026 00:59:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201407
IP address blocks: 2a06:9801:25::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Feb 2026 19:31:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:35:9c:2b:8e:e3:02:a8:b2:b9:a7:3c:9f:56:71:99:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Feb 7 00:59:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5145128d08a9801d43b7bbb43083276d2bb20816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a8:54:fe:2d:bb:cc:b2:7d:28:c1:7b:5a:da:
02:74:dc:f4:2b:ce:6d:5e:be:44:f4:35:4c:77:43:
87:9b:5a:f4:0b:31:53:a3:75:79:0a:3a:2e:66:f8:
c6:df:21:73:c4:62:c9:f7:70:d1:df:49:73:c2:30:
4a:4f:f0:dc:a3:e5:d1:71:2e:0b:7b:8f:87:58:96:
c5:4e:f0:ff:f4:40:45:2f:41:b2:ce:c9:02:0e:92:
6f:e8:ea:a9:ed:c8:35:c4:3e:df:8f:5d:01:7c:67:
35:ed:ce:57:2b:0a:30:6f:28:c4:4e:f3:e6:54:30:
4f:c2:88:57:1c:b7:cc:f3:98:9f:7d:b3:78:79:0a:
10:5b:59:12:07:9c:20:e5:ab:f3:e3:b4:ec:4a:0a:
f4:5a:00:97:b7:8f:83:30:c4:55:56:02:0f:61:cc:
6e:93:47:86:99:aa:4d:8a:22:dd:be:d6:99:1b:7e:
f6:b6:1e:77:7a:f2:f0:54:be:48:7a:c9:cb:92:2e:
a9:83:9a:d2:22:7d:0a:7d:ce:89:2f:c7:64:57:2c:
e8:b2:78:60:72:0f:23:a4:b3:b6:21:a7:ca:ce:22:
a2:fc:f7:e6:5f:82:44:3a:c9:ce:aa:4e:5f:d0:4e:
8b:f2:b5:39:25:8a:df:fa:25:8e:2b:99:3d:83:b8:
fb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:45:12:8D:08:A9:80:1D:43:B7:BB:B4:30:83:27:6D:2B:B2:08:16
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/UUUSjQipgB1Dt7u0MIMnbSuyCBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:25::/48
Signature Algorithm: sha256WithRSAEncryption
9d:d4:f9:7f:34:e4:45:da:69:12:5b:f0:d4:48:c7:35:74:9c:
6c:55:cd:6c:d5:62:f7:ac:f9:f7:be:51:18:e6:9b:54:85:3e:
11:84:2d:78:eb:b5:4f:d1:68:d6:22:19:50:41:54:63:0c:68:
b7:3c:b4:b4:7a:24:6b:0c:4a:f0:d8:cc:f7:de:2d:b8:7d:e1:
6c:ee:78:39:d6:f4:74:d3:81:da:1c:7c:bf:66:a7:d8:c4:ad:
da:a1:e2:fa:d7:81:4b:4f:45:ac:3e:c5:93:d9:d2:b9:38:be:
2c:bb:83:42:86:66:24:5c:9a:80:16:1a:5b:7b:47:32:ab:00:
3f:bb:e1:df:2f:31:c9:42:b5:bb:07:5d:b6:93:03:2f:74:60:
46:51:ff:a5:6e:29:23:b0:88:f9:07:5d:a8:78:29:2b:ef:d0:
6a:4c:29:f8:86:65:85:1d:5e:64:5d:0f:23:7c:6c:f5:08:aa:
28:9e:cc:ca:3a:44:c0:07:49:bd:ca:2f:bb:aa:49:95:57:c9:
50:4d:a3:74:67:83:66:08:62:61:61:8a:60:5d:fb:ea:b3:86:
a1:d6:a1:0e:f7:d1:58:75:19:0b:13:74:3d:47:94:2c:7e:df:
21:74:19:fc:6a:1a:7a:65:f6:c6:60:98:a8:5d:93:bc:32:18:
b8:57:d4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 8 04:50:39 2026 by rpki-client