This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/UvulvKNPlQ3DW7OFO84K_Dsu4xs.roa File: UvulvKNPlQ3DW7OFO84K_Dsu4xs.roa (raw, json) Hash identifier: sbA5hsgIPFLxYaMguAK/fWfL4FZLjCI5T2S6fCZgzls= Subject key identifier: 52:FB:A5:BC:A3:4F:95:0D:C3:5B:B3:85:3B:CE:0A:FC:3B:2E:E3:1B Certificate issuer: /CN=ae4a29c6138e2d93d54a36328b94cb1f8a382a6b Certificate serial: 019B79EC16D7626D12631E0754218EA36FAB Authority key identifier: AE:4A:29:C6:13:8E:2D:93:D5:4A:36:32:8B:94:CB:1F:8A:38:2A:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/UvulvKNPlQ3DW7OFO84K_Dsu4xs.roa Signing time: Thu 01 Jan 2026 14:17:53 +0000 ROA not before: Thu 01 Jan 2026 14:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200350 IP address blocks: 2a0b:1447::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:16:d7:62:6d:12:63:1e:07:54:21:8e:a3:6f:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae4a29c6138e2d93d54a36328b94cb1f8a382a6b Validity Not Before: Jan 1 14:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52fba5bca34f950dc35bb3853bce0afc3b2ee31b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:45:c6:08:28:aa:9f:b5:52:24:c3:9c:10:94: 2d:84:45:c6:d2:be:64:a8:c1:07:00:bd:f1:00:d7: e8:d9:f3:a5:06:25:8e:b6:69:e4:f1:b6:8f:b1:e6: cf:08:ba:da:ea:f1:70:7b:9a:3f:99:de:07:98:ca: ca:43:11:7b:0e:5b:90:4c:24:b1:ef:2a:2e:24:1b: ff:01:7c:a8:7d:de:5a:8c:6a:6a:94:f6:06:27:61: d8:2d:a8:be:b8:a2:48:15:a0:75:c6:5a:44:ca:0f: 26:aa:eb:5a:e3:dd:cf:5c:df:24:50:03:78:ab:ac: af:e6:5e:86:91:bd:e4:4d:94:a4:1a:85:bb:63:06: 47:91:99:2b:01:02:f7:f0:6e:35:3e:0d:d4:bd:bb: 05:1a:19:85:38:3d:0c:96:9e:55:c5:3c:2f:4d:c7: 7d:df:48:0b:35:d3:d3:49:2c:88:b9:7e:11:3e:c3: 06:23:20:66:a7:e5:11:d7:7b:53:d5:3b:bb:7c:81: 7c:8c:65:7d:de:71:53:b8:bc:d4:74:62:1c:78:36: e0:9b:ff:46:8e:6a:4e:4b:4f:b1:a6:45:68:21:de: 1e:a4:93:55:f6:69:b4:9d:53:eb:b9:99:b5:7f:40: 65:56:f7:55:c3:4f:4b:9e:3b:dd:89:ba:63:82:8f: 2e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:FB:A5:BC:A3:4F:95:0D:C3:5B:B3:85:3B:CE:0A:FC:3B:2E:E3:1B X509v3 Authority Key Identifier: keyid:AE:4A:29:C6:13:8E:2D:93:D5:4A:36:32:8B:94:CB:1F:8A:38:2A:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/UvulvKNPlQ3DW7OFO84K_Dsu4xs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:1447::/32 Signature Algorithm: sha256WithRSAEncryption 7c:7d:9c:23:cc:4d:ca:74:ac:34:0e:e6:4d:39:f4:b2:e5:f0: cd:57:ee:f6:cc:30:52:45:c9:0c:d5:77:f5:15:59:06:ae:0b: a3:34:4b:3a:3b:b0:f5:e7:a3:43:7e:10:33:eb:b4:b3:32:b3: b1:0b:04:30:59:56:e8:43:ea:ec:bc:70:46:19:d5:a0:37:a9: 5b:96:63:ef:ef:a7:de:8e:cf:f5:8c:73:59:38:8f:8b:ae:14: 06:3c:f9:eb:77:7a:4f:1b:58:77:62:fa:52:6d:ce:80:4b:08: 46:92:53:2a:f5:48:81:3b:76:e5:73:8f:44:df:cc:dc:c9:c7: 3b:aa:77:72:8a:1b:cd:e7:4c:29:3a:d8:d3:08:0c:db:6a:18: cd:23:b1:28:92:ab:d0:2e:d5:c7:5c:6c:1d:af:62:0f:f3:ea: bc:e3:32:3a:39:f5:c0:5f:15:e6:db:1a:94:c3:d4:5b:72:88: 5a:9d:b4:7f:39:cc:ae:00:6c:57:f8:f7:18:6e:e4:96:ff:31: f1:a6:ac:92:08:a2:d0:27:92:36:1a:e9:82:c2:d3:d9:83:ae: 34:93:f9:2f:99:fb:50:34:f8:10:fe:78:6e:96:8c:4f:57:26: d5:d2:28:e1:cb:5d:35:48:1f:b1:cb:e7:81:3e:1f:7c:32:23: 2f:35:ee:c2 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt57BbXYm0SYx4HVCGOo2+rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNGEyOWM2MTM4ZTJkOTNkNTRhMzYzMjhiOTRjYjFmOGEz ODJhNmIwHhcNMjYwMTAxMTQxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmZiYTViY2EzNGY5NTBkYzM1YmIzODUzYmNlMGFmYzNiMmVlMzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA60XGCCiqn7VSJMOcEJQthEXG0r5k qMEHAL3xANfo2fOlBiWOtmnk8baPsebPCLra6vFwe5o/md4HmMrKQxF7DluQTCSx 7youJBv/AXyofd5ajGpqlPYGJ2HYLai+uKJIFaB1xlpEyg8mquta493PXN8kUAN4 q6yv5l6Gkb3kTZSkGoW7YwZHkZkrAQL38G41Pg3UvbsFGhmFOD0Mlp5VxTwvTcd9 30gLNdPTSSyIuX4RPsMGIyBmp+UR13tT1Tu7fIF8jGV93nFTuLzUdGIceDbgm/9G jmpOS0+xpkVoId4epJNV9mm0nVPruZm1f0BlVvdVw09Lnjvdibpjgo8uSwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFFL7pbyjT5UNw1uzhTvOCvw7LuMbMB8GA1UdIwQY MBaAFK5KKcYTji2T1Uo2MouUyx+KOCprMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmtvcHhoT09MWlBWU2pZeWk1VExING80S21zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zNWJlMDQtZDViNy00NGFhLWFkZTQt MTM0MDFkMWYyMmQyLzEvVXZ1bHZLTlBsUTNEVzdPRk84NEtfRHN1NHhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8zNWJlMDQtZDViNy00NGFhLWFkZTQtMTM0MDFkMWYyMmQy LzEvcmtvcHhoT09MWlBWU2pZeWk1VExING80S21zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgsURzAN BgkqhkiG9w0BAQsFAAOCAQEAfH2cI8xNynSsNA7mTTn0suXwzVfu9swwUkXJDNV3 9RVZBq4LozRLOjuw9eejQ34QM+u0szKzsQsEMFlW6EPq7LxwRhnVoDepW5Zj7++n 3o7P9YxzWTiPi64UBjz563d6TxtYd2L6Um3OgEsIRpJTKvVIgTt25XOPRN/M3MnH O6p3coobzedMKTrY0wgM22oYzSOxKJKr0C7Vx1xsHa9iD/PqvOMyOjn1wF8V5tsa lMPUW3KIWp20fznMrgBsV/j3GG7klv8x8aaskgii0CeSNhrpgsLT2YOuNJP5L5n7 UDT4EP54bpaMT1cm1dIo4ctdNUgfscvngT4ffDIjLzXuwg== -----END CERTIFICATE-----Generated at Tue Feb 10 06:06:50 2026 by rpki-client