This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/UGVa8Xyqk4ksPGgnfd31vBitCIY.roa File: UGVa8Xyqk4ksPGgnfd31vBitCIY.roa (raw, json) Hash identifier: bZ6endjeA2RujV7R8PyJfRemO9ZBIhAjsInbMMWdh90= Subject key identifier: 50:65:5A:F1:7C:AA:93:89:2C:3C:68:27:7D:DD:F5:BC:18:AD:08:86 Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Certificate serial: 019B7AC8EB11CB53052F56D09468A758D391 Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/UGVa8Xyqk4ksPGgnfd31vBitCIY.roa Signing time: Thu 01 Jan 2026 18:19:06 +0000 ROA not before: Thu 01 Jan 2026 18:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212775 IP address blocks: 2a00:7180:8010::/46 maxlen: 46 2a04:800:9000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:eb:11:cb:53:05:2f:56:d0:94:68:a7:58:d3:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Validity Not Before: Jan 1 18:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50655af17caa93892c3c68277dddf5bc18ad0886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:88:86:19:b8:16:ad:e3:bd:ad:5d:2f:80:c0: 7d:b5:63:d8:36:57:34:41:e8:d7:02:c6:6f:cd:ad: d6:88:81:78:83:69:d6:11:d5:f3:f4:fc:c9:c9:67: 4b:77:a0:4d:7d:a1:11:b3:51:12:f3:f7:c3:e4:15: 1b:65:ad:84:ed:05:fe:28:4b:e4:05:00:25:0f:88: d7:ee:b2:05:4f:6c:25:4d:84:b0:cc:05:49:c9:9f: 9b:57:b1:e2:0b:98:2c:ad:eb:d5:67:c5:4b:c4:e1: 7d:20:be:02:bd:e1:de:20:7c:17:99:75:b0:87:d0: fa:96:f3:11:cd:03:7c:72:0d:06:e8:46:1d:ef:07: 36:ac:d0:00:10:da:16:16:77:c3:6a:7d:a3:14:0a: 84:23:09:2b:57:fc:6b:30:44:77:b7:9c:32:ad:9c: de:ee:9f:05:3c:d3:54:9e:87:2e:1e:cc:09:e8:b2: 73:d4:e6:69:54:be:20:c5:af:42:0c:00:04:41:f8: 09:f3:1f:d6:03:e4:16:eb:78:13:ea:f2:b8:bf:8e: e7:b2:c0:a7:3d:d5:81:97:e9:33:5a:4b:60:0f:34: dc:f5:87:9c:59:c4:89:51:43:7e:a7:34:73:a5:36: f6:51:b5:8d:42:70:a3:8f:42:4f:73:60:50:78:08: c1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:65:5A:F1:7C:AA:93:89:2C:3C:68:27:7D:DD:F5:BC:18:AD:08:86 X509v3 Authority Key Identifier: keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/UGVa8Xyqk4ksPGgnfd31vBitCIY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:7180:8010::/46 2a04:800:9000::/36 Signature Algorithm: sha256WithRSAEncryption 58:0f:8e:79:e4:c7:62:33:ad:39:5e:18:d2:f8:ac:61:fc:b0: 70:0a:b3:d4:7a:40:a3:ab:f0:c0:b1:1f:a8:d5:25:ac:c6:e7: 2a:e4:e5:d6:47:b6:5c:8a:ed:5c:c0:0c:c5:b3:cc:5a:ad:af: 51:91:80:67:a3:89:03:e5:3f:f9:e1:b3:5b:38:2c:9f:e2:b3: 4c:5e:8e:27:b8:2d:5d:58:18:fd:42:8d:49:51:ee:b0:41:39: 93:16:51:93:3f:3d:c8:72:20:cc:32:52:bc:c5:f9:48:a1:fa: 24:87:50:82:0c:27:c2:7f:f2:97:3e:f3:f4:5a:67:57:be:64: 4a:85:93:29:7d:d2:d2:11:70:a7:a3:3e:f5:1e:b0:2b:0d:91: 5e:e4:27:37:95:be:fd:39:b5:0c:fe:c1:fe:97:82:bf:15:6b: 12:7b:76:31:de:0d:7f:0a:c6:6f:91:1b:4e:f1:a2:a1:a3:70: ed:e2:24:0c:c1:c9:fa:ec:01:b5:21:74:e5:71:6a:f2:06:f3: 43:bf:a6:c7:c1:c1:70:59:30:3d:10:35:47:f3:56:a6:c4:43: ab:b9:bf:43:3d:05:3c:76:cd:b1:58:1c:d3:5a:00:d9:52:9a: f2:35:3c:31:98:08:f8:35:d0:e7:97:7a:f8:37:ed:a0:7e:91: f1:6c:48:46 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgISAZt6yOsRy1MFL1bQlGinWNORMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZWY1ZmJiZmNhN2E5M2NmZWU5NjVlZWI2YmRlZTZmYjQz YzQwM2UwHhcNMjYwMTAxMTgxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDY1NWFmMTdjYWE5Mzg5MmMzYzY4Mjc3ZGRkZjViYzE4YWQwODg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYiGGbgWreO9rV0vgMB9tWPYNlc0 QejXAsZvza3WiIF4g2nWEdXz9PzJyWdLd6BNfaERs1ES8/fD5BUbZa2E7QX+KEvk BQAlD4jX7rIFT2wlTYSwzAVJyZ+bV7HiC5gsrevVZ8VLxOF9IL4CveHeIHwXmXWw h9D6lvMRzQN8cg0G6EYd7wc2rNAAENoWFnfDan2jFAqEIwkrV/xrMER3t5wyrZze 7p8FPNNUnocuHswJ6LJz1OZpVL4gxa9CDAAEQfgJ8x/WA+QW63gT6vK4v47nssCn PdWBl+kzWktgDzTc9YecWcSJUUN+pzRzpTb2UbWNQnCjj0JPc2BQeAjBHQIDAQAB o4ICFDCCAhAwHQYDVR0OBBYEFFBlWvF8qpOJLDxoJ33d9bwYrQiGMB8GA1UdIwQY MBaAFKDvX7v8p6k8/ull7ra97m+0PEA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt MDI5MmIwMjAxNTBhLzEvVUdWYThYeXFrNGtzUEdnbmZkMzF2Qml0Q0lZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh LzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcCKgBxgIAQ AwYEKgQIAJAwDQYJKoZIhvcNAQELBQADggEBAFgPjnnkx2IzrTleGNL4rGH8sHAK s9R6QKOr8MCxH6jVJazG5yrk5dZHtlyK7VzADMWzzFqtr1GRgGejiQPlP/nhs1s4 LJ/is0xejie4LV1YGP1CjUlR7rBBOZMWUZM/PchyIMwyUrzF+Uih+iSHUIIMJ8J/ 8pc+8/RaZ1e+ZEqFkyl90tIRcKejPvUesCsNkV7kJzeVvv05tQz+wf6Xgr8VaxJ7 djHeDX8Kxm+RG07xoqGjcO3iJAzByfrsAbUhdOVxavIG80O/psfBwXBZMD0QNUfz VqbEQ6u5v0M9BTx2zbFYHNNaANlSmvI1PDGYCPg10OeXevg37aB+kfFsSEY= -----END CERTIFICATE-----Generated at Mon Jan 26 21:04:38 2026 by rpki-client