This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uBrITHEVEeAf7k48uJiUJ6Kad4Q.roa File: uBrITHEVEeAf7k48uJiUJ6Kad4Q.roa (raw, json) Hash identifier: SKB6ihyC1p2ZsFPesOzaFpazYcPyR0Cg//z7zQtbDxA= Subject key identifier: B8:1A:C8:4C:71:15:11:E0:1F:EE:4E:3C:B8:98:94:27:A2:9A:77:84 Certificate issuer: /CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d Certificate serial: 019B783555BAB1279462DB7A5156C202F12A Authority key identifier: BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uBrITHEVEeAf7k48uJiUJ6Kad4Q.roa Signing time: Thu 01 Jan 2026 06:18:39 +0000 ROA not before: Thu 01 Jan 2026 06:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215849 IP address blocks: 2a13:ccc5:f000::/36 maxlen: 36 2a13:ccc5:f001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:55:ba:b1:27:94:62:db:7a:51:56:c2:02:f1:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d Validity Not Before: Jan 1 06:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b81ac84c711511e01fee4e3cb8989427a29a7784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5f:bb:8a:49:d0:64:cb:a3:a2:0b:c1:3c:20: cd:84:31:05:bd:39:c4:c6:6b:64:e2:db:dd:06:38: e8:a2:b1:75:0e:32:7c:28:35:58:06:60:46:a7:86: 7b:22:51:cb:75:68:d5:25:dd:54:7b:fe:47:43:90: 31:0c:23:ff:5d:14:48:74:c0:ad:9f:66:fc:af:61: db:22:2e:7c:07:9b:5e:3c:3a:61:61:22:ea:a3:5e: ed:5e:db:80:4d:ef:77:e2:04:d1:ba:39:0b:23:24: 45:66:63:17:c1:42:b7:07:69:fa:05:6f:22:61:f4: 8b:53:cf:48:0a:34:3c:c8:cb:9d:b2:60:76:64:dd: 99:da:40:50:29:d0:61:a3:af:76:37:fa:df:cc:53: e9:76:09:36:af:56:c9:74:a6:7b:fd:bd:6a:95:2a: 51:a8:83:d0:db:fc:ba:3c:93:e7:e2:b3:ef:8e:5a: 89:fa:5e:c4:b7:b7:e7:44:6d:ba:b3:6f:22:bd:5c: 83:c1:da:45:bb:c9:40:b0:dd:79:e9:fb:fc:b4:5d: 05:3f:0d:1b:2c:c7:4d:61:18:5a:ed:75:0d:0a:7a: f3:b5:34:e6:c8:c1:cd:7e:2f:f6:c6:47:62:6c:26: e2:5f:bf:87:f9:7a:56:59:ce:4e:65:84:b1:1b:b4: 2f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:1A:C8:4C:71:15:11:E0:1F:EE:4E:3C:B8:98:94:27:A2:9A:77:84 X509v3 Authority Key Identifier: keyid:BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uBrITHEVEeAf7k48uJiUJ6Kad4Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:ccc5:f000::/36 Signature Algorithm: sha256WithRSAEncryption 9a:3e:ef:16:bc:8b:3c:7e:c0:cb:68:4b:69:8f:b2:9a:10:e8: 27:05:cc:f9:5c:d1:21:11:2c:2b:e2:e9:dd:f9:ab:b2:c9:a3: 4c:ba:00:fb:a8:6c:e9:e9:22:76:9e:81:eb:f6:3e:15:09:c6: 6d:b5:8d:34:f9:96:55:01:a6:a2:45:da:90:9a:e9:93:b9:c4: fd:70:f6:6a:2a:ee:a9:d2:d7:0f:fa:32:a3:a4:70:8f:7c:b6: 09:07:78:93:a8:39:ff:6a:c7:7f:41:9e:36:dc:a3:0c:40:8d: c4:29:d2:5d:d4:2a:6f:f6:07:ed:61:a3:96:0c:24:8b:1e:12: c3:cb:89:b1:97:9b:01:1d:7c:40:3a:9a:1d:94:38:2f:8f:8d: 78:2a:eb:1a:c1:27:9b:f9:53:91:1a:c2:a4:f1:15:70:c4:de: 1f:b1:06:96:06:e9:76:77:56:f4:2a:1d:f1:94:bd:af:d0:95: e9:6a:b6:ec:79:73:ae:2b:9e:10:bc:04:c8:38:58:df:10:9c: b8:83:c5:4e:10:8a:d7:2e:65:ab:dc:b7:6f:1f:eb:8d:10:a3: e2:ec:2c:e5:12:ef:a6:8a:47:f8:6d:75:48:c8:88:74:af:18: e5:9e:e3:77:b5:38:03:06:ec:ff:72:3f:9e:c4:a6:5a:91:95: bd:c3:08:eb -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt4NVW6sSeUYtt6UVbCAvEqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYWE3NDhiYTE0YTc2ZTVkOGE2ZWRhY2I1NDI2MDgyYTU2 ZjVlM2QwHhcNMjYwMTAxMDYxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODFhYzg0YzcxMTUxMWUwMWZlZTRlM2NiODk4OTQyN2EyOWE3Nzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2l+7iknQZMujogvBPCDNhDEFvTnE xmtk4tvdBjjoorF1DjJ8KDVYBmBGp4Z7IlHLdWjVJd1Ue/5HQ5AxDCP/XRRIdMCt n2b8r2HbIi58B5tePDphYSLqo17tXtuATe934gTRujkLIyRFZmMXwUK3B2n6BW8i YfSLU89ICjQ8yMudsmB2ZN2Z2kBQKdBho692N/rfzFPpdgk2r1bJdKZ7/b1qlSpR qIPQ2/y6PJPn4rPvjlqJ+l7Et7fnRG26s28ivVyDwdpFu8lAsN156fv8tF0FPw0b LMdNYRha7XUNCnrztTTmyMHNfi/2xkdibCbiX7+H+XpWWc5OZYSxG7QvRwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFLgayExxFRHgH+5OPLiYlCeimneEMB8GA1UdIwQY MBaAFLqqdIuhSnbl2KbtrLVCYIKlb149MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFwMGk2RktkdVhZcHUyc3RVSmdncVZ2WGowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9hOGU0NWItMTdjNi00MzZkLTgxYTgt YzUxOTUxNjJlM2JlLzEvdUJySVRIRVZFZUFmN2s0OHVKaVVKNkthZDRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9hOGU0NWItMTdjNi00MzZkLTgxYTgtYzUxOTUxNjJlM2Jl LzEvdXFwMGk2RktkdVhZcHUyc3RVSmdncVZ2WGowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKhPMxfAw DQYJKoZIhvcNAQELBQADggEBAJo+7xa8izx+wMtoS2mPspoQ6CcFzPlc0SERLCvi 6d35q7LJo0y6APuobOnpInaegev2PhUJxm21jTT5llUBpqJF2pCa6ZO5xP1w9moq 7qnS1w/6MqOkcI98tgkHeJOoOf9qx39BnjbcowxAjcQp0l3UKm/2B+1ho5YMJIse EsPLibGXmwEdfEA6mh2UOC+PjXgq6xrBJ5v5U5EawqTxFXDE3h+xBpYG6XZ3VvQq HfGUva/Qlelqtux5c64rnhC8BMg4WN8QnLiDxU4QitcuZavct28f640Qo+LsLOUS 76aKR/htdUjIiHSvGOWe43e1OAMG7P9yP57EplqRlb3DCOs= -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:17 2026 by rpki-client