This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/UvqPCpj8h9SmABPyqMXYfbOk6rM.roa File: UvqPCpj8h9SmABPyqMXYfbOk6rM.roa (raw, json) Hash identifier: ycHvkbA70YgnYe11KgUbcsQmRidh840azHlvNquiOLo= Subject key identifier: 52:FA:8F:0A:98:FC:87:D4:A6:00:13:F2:A8:C5:D8:7D:B3:A4:EA:B3 Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EB23B33A57D179EC9C46C1AA995FB Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/UvqPCpj8h9SmABPyqMXYfbOk6rM.roa Signing time: Thu 01 Jan 2026 12:18:24 +0000 ROA not before: Thu 01 Jan 2026 12:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209557 IP address blocks: 2a0e:aa02:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:b2:3b:33:a5:7d:17:9e:c9:c4:6c:1a:a9:95:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52fa8f0a98fc87d4a60013f2a8c5d87db3a4eab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9b:e4:3a:73:80:b7:9c:28:fd:27:e3:00:a2: a6:0a:93:44:05:91:c5:11:17:10:f8:55:e3:a4:0b: 2d:66:73:96:bd:a6:a7:4b:39:33:d2:b3:39:4f:71: a4:84:48:e7:72:e5:2b:1e:96:50:f2:c8:19:1a:57: 9f:87:03:89:b0:c3:7f:ac:ef:be:ce:a7:c5:aa:e2: c7:89:4a:6d:9a:cb:d3:ec:16:ca:9e:1f:06:7c:36: 9d:01:15:ea:15:15:de:b7:7c:52:0f:0a:b8:92:2e: fd:be:90:00:6b:2c:c7:a5:29:68:91:3b:18:5c:6f: 99:e0:88:58:b3:f0:3e:47:4c:4b:29:b7:a8:f9:c6: 4d:1a:80:29:d7:b0:42:b0:bf:e2:2d:cc:53:d5:bf: b9:19:75:2f:f9:1f:cb:68:fd:75:46:34:a7:9e:df: 5f:f7:f4:34:78:52:16:a4:a4:be:50:0d:33:21:ae: a9:0c:05:4d:11:f5:fa:5e:47:ef:e9:16:0b:f5:6b: 64:ef:72:2a:0b:62:fa:0f:5d:1a:3d:76:c5:f5:cf: 4d:b7:30:29:80:d9:f9:86:73:19:d3:ad:89:63:1b: ef:8d:dc:95:f5:cd:c3:8c:77:a0:1f:dc:2e:3d:86: 26:61:1c:28:69:1b:5b:15:bf:4b:ff:0e:d2:90:d6: bc:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:FA:8F:0A:98:FC:87:D4:A6:00:13:F2:A8:C5:D8:7D:B3:A4:EA:B3 X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/UvqPCpj8h9SmABPyqMXYfbOk6rM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa02:1::/48 Signature Algorithm: sha256WithRSAEncryption 37:56:90:58:8e:5b:70:e7:6d:28:5c:7f:e4:f1:9a:f5:84:51: 95:29:1f:db:01:dc:b2:5c:d1:79:d1:d8:ff:f8:bd:cc:53:fa: 0d:e3:06:bc:34:70:33:26:ec:61:a1:40:0b:2c:0e:23:14:1c: fa:44:4b:a2:31:93:b6:18:fe:ef:01:5c:8a:b6:a3:3d:90:1c: 3c:82:aa:67:2a:db:39:93:ad:1c:ec:7b:26:17:10:bb:1f:84: e5:9f:55:81:a6:ec:ef:15:5a:ce:f6:eb:a4:23:74:06:11:29: d8:71:48:c4:bb:df:89:ca:c2:c6:d6:36:73:b2:07:a4:dc:6f: 70:5a:42:32:ec:0e:2d:98:1e:5c:78:3c:06:01:7d:5d:be:2b: 20:54:18:5f:7e:29:fb:02:e7:90:ba:eb:81:3a:84:85:e7:b4: 9a:72:6b:04:dc:b9:25:fd:68:cb:81:bc:de:18:b1:35:54:e7: 0b:fb:e3:27:6f:db:0d:7d:a5:57:2c:2d:39:81:cd:1a:7f:1c: 1f:fb:b1:13:a2:96:44:57:dc:ea:be:a9:ab:ca:61:83:43:32: 51:4e:7b:dc:c5:b9:d4:f6:3f:00:fc:4a:ac:72:ed:72:8a:97: ab:e8:51:58:ef:9b:fd:b5:01:57:b0:78:b2:44:cb:76:4f:19: 3c:9f:cd:f0 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5frI7M6V9F57JxGwaqZX7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmZhOGYwYTk4ZmM4N2Q0YTYwMDEzZjJhOGM1ZDg3ZGIzYTRlYWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpvkOnOAt5wo/SfjAKKmCpNEBZHF ERcQ+FXjpAstZnOWvaanSzkz0rM5T3GkhEjncuUrHpZQ8sgZGlefhwOJsMN/rO++ zqfFquLHiUptmsvT7BbKnh8GfDadARXqFRXet3xSDwq4ki79vpAAayzHpSlokTsY XG+Z4IhYs/A+R0xLKbeo+cZNGoAp17BCsL/iLcxT1b+5GXUv+R/LaP11RjSnnt9f 9/Q0eFIWpKS+UA0zIa6pDAVNEfX6Xkfv6RYL9Wtk73IqC2L6D10aPXbF9c9NtzAp gNn5hnMZ062JYxvvjdyV9c3DjHegH9wuPYYmYRwoaRtbFb9L/w7SkNa8kQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFL6jwqY/IfUpgAT8qjF2H2zpOqzMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvVXZxUENwajhoOVNtQUJQeXFNWFlmYk9rNnJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6qAgAB MA0GCSqGSIb3DQEBCwUAA4IBAQA3VpBYjltw520oXH/k8Zr1hFGVKR/bAdyyXNF5 0dj/+L3MU/oN4wa8NHAzJuxhoUALLA4jFBz6REuiMZO2GP7vAVyKtqM9kBw8gqpn Kts5k60c7HsmFxC7H4Tln1WBpuzvFVrO9uukI3QGESnYcUjEu9+JysLG1jZzsgek 3G9wWkIy7A4tmB5ceDwGAX1dvisgVBhffin7AueQuuuBOoSF57SacmsE3Lkl/WjL gbzeGLE1VOcL++Mnb9sNfaVXLC05gc0afxwf+7ETopZEV9zqvqmrymGDQzJRTnvc xbnU9j8A/Eqscu1yiper6FFY75v9tQFXsHiyRMt2Txk8n83w -----END CERTIFICATE-----Generated at Fri Jan 2 19:47:54 2026 by rpki-client