This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/UHFjp19VTTeRHg736ihMFbEYTRc.roa File: UHFjp19VTTeRHg736ihMFbEYTRc.roa (raw, json) Hash identifier: VQTPX/Dae9B2ux5+0tNHimzZf49IgU3sVk8b/y1bu+w= Subject key identifier: 50:71:63:A7:5F:55:4D:37:91:1E:0E:F7:EA:28:4C:15:B1:18:4D:17 Certificate issuer: /CN=6cc69c3d7030cec19f8fb66e543bde65595708a2 Certificate serial: 019B7F84204CAE189815EE4EC4FB1240A9BC Authority key identifier: 6C:C6:9C:3D:70:30:CE:C1:9F:8F:B6:6E:54:3B:DE:65:59:57:08:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/UHFjp19VTTeRHg736ihMFbEYTRc.roa Signing time: Fri 02 Jan 2026 16:22:04 +0000 ROA not before: Fri 02 Jan 2026 16:22:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204033 IP address blocks: 2a13:3d00:abc::/48 maxlen: 48 2a13:3d00:fff0::/48 maxlen: 48 2a13:3d00:fff1::/48 maxlen: 48 2a13:3d00:fff2::/48 maxlen: 48 2a13:3d00:fff3::/48 maxlen: 48 2a13:3d00:fff4::/48 maxlen: 48 2a13:3d00:fff5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.crl rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:20:4c:ae:18:98:15:ee:4e:c4:fb:12:40:a9:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cc69c3d7030cec19f8fb66e543bde65595708a2 Validity Not Before: Jan 2 16:22:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=507163a75f554d37911e0ef7ea284c15b1184d17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:12:9a:45:f3:28:7a:48:24:5d:4d:21:66:17: bd:ad:bc:44:f8:b7:77:1a:c2:7b:fa:3c:44:b9:00: d0:03:36:43:9a:b6:55:7d:21:f0:19:96:bb:ee:38: 29:26:ec:3d:ca:bf:0b:e9:c1:ee:92:41:4e:31:06: 75:db:98:13:f8:87:b8:3a:cb:69:be:e6:d1:35:e0: 3a:96:09:73:ab:62:62:3b:4b:f1:24:c9:b9:c1:0d: ff:f0:f2:77:d2:49:67:73:76:1c:d2:fd:af:d9:15: c1:bf:b9:d4:f5:59:e4:46:c0:d3:fc:ee:85:06:2b: 58:6b:23:07:bb:57:f8:a7:5f:24:44:e1:bb:d7:91: 9e:97:4a:af:39:5a:2b:dc:55:57:1c:f7:44:a7:67: a2:d6:11:cd:72:f2:2d:e0:63:9e:11:8b:7b:87:02: c6:28:23:ac:30:bc:bf:bf:c1:38:6a:34:96:bc:7c: 2e:d9:8a:e5:fd:26:e2:82:aa:b7:9c:34:ad:82:4c: e4:9f:65:ad:0c:d8:0c:3e:2a:ec:76:dc:e4:ac:94: 6e:5a:80:93:9f:64:ed:d0:5a:33:e6:96:1f:ec:4d: c4:7d:99:10:c0:7b:92:dd:7e:3b:80:b9:97:e6:0b: c8:72:81:cd:e2:3d:89:bb:a3:cc:bd:df:55:38:e4: 1b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:71:63:A7:5F:55:4D:37:91:1E:0E:F7:EA:28:4C:15:B1:18:4D:17 X509v3 Authority Key Identifier: keyid:6C:C6:9C:3D:70:30:CE:C1:9F:8F:B6:6E:54:3B:DE:65:59:57:08:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/UHFjp19VTTeRHg736ihMFbEYTRc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:3d00:abc::/48 2a13:3d00:fff0::-2a13:3d00:fff5:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 3a:5d:75:2b:73:f2:90:0b:a1:76:29:26:55:63:e9:9b:1e:e9: 94:58:e4:8f:19:33:b6:16:24:c8:cc:ba:c0:b4:06:7b:1d:22: fa:c2:b0:d5:37:b0:1b:f7:78:75:60:2a:35:ee:f6:ac:04:eb: bc:4d:af:ff:ff:7e:27:53:2b:c3:39:4d:34:b9:cd:35:ba:16: 08:f2:f5:4f:eb:ab:4c:41:92:15:4a:2a:e6:8c:ed:0d:04:59: cc:81:50:ea:9c:6d:1b:13:84:9b:22:6c:0b:56:07:93:df:70: 65:bf:8b:3c:9f:a2:06:6f:46:42:15:1c:74:f1:eb:52:e9:9d: 41:cd:f6:df:13:ec:93:89:ce:2d:e2:60:37:53:4e:b9:ac:31: 8b:03:4b:e6:62:4f:00:65:c4:5a:26:d5:d6:1e:cb:62:ff:05: d1:2f:ff:a1:ba:25:a9:38:54:2b:a9:cb:af:6b:1c:73:66:aa: fb:c0:83:a9:38:f9:44:54:dc:92:56:fa:a9:36:f3:54:b3:6b: f1:fe:a8:d4:b8:32:74:1e:f1:b6:e6:43:b5:94:1d:f0:f1:90: 94:d5:5c:1d:9f:3b:7e:db:a4:67:a3:49:f2:89:78:9e:00:c0: 16:8c:de:05:a2:e2:5a:d4:ad:b9:df:4e:40:ab:9b:2f:f7:d3: 6b:ab:03:24 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt/hCBMrhiYFe5OxPsSQKm8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYzY5YzNkNzAzMGNlYzE5ZjhmYjY2ZTU0M2JkZTY1NTk1 NzA4YTIwHhcNMjYwMTAyMTYyMjA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDcxNjNhNzVmNTU0ZDM3OTExZTBlZjdlYTI4NGMxNWIxMTg0ZDE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RKaRfMoekgkXU0hZhe9rbxE+Ld3 GsJ7+jxEuQDQAzZDmrZVfSHwGZa77jgpJuw9yr8L6cHukkFOMQZ125gT+Ie4Ostp vubRNeA6lglzq2JiO0vxJMm5wQ3/8PJ30klnc3Yc0v2v2RXBv7nU9VnkRsDT/O6F BitYayMHu1f4p18kROG715Gel0qvOVor3FVXHPdEp2ei1hHNcvIt4GOeEYt7hwLG KCOsMLy/v8E4ajSWvHwu2Yrl/Sbigqq3nDStgkzkn2WtDNgMPirsdtzkrJRuWoCT n2Tt0Foz5pYf7E3EfZkQwHuS3X47gLmX5gvIcoHN4j2Ju6PMvd9VOOQb+QIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFFBxY6dfVU03kR4O9+ooTBWxGE0XMB8GA1UdIwQY MBaAFGzGnD1wMM7Bn4+2blQ73mVZVwiiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk1hY1BYQXd6c0dmajdadVZEdmVaVmxYQ0tJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS85Y2E1OGUtOWUzMi00MjhmLTg0MTEt MWFlYjZhNGU0NWFkLzEvVUhGanAxOVZUVGVSSGc3MzZpaE1GYkVZVFJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS85Y2E1OGUtOWUzMi00MjhmLTg0MTEtMWFlYjZhNGU0NWFk LzEvYk1hY1BYQXd6c0dmajdadVZEdmVaVmxYQ0tJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAjBAIAAjAdAwcAKhM9AAq8 MBIDBwQqEz0A//ADBwEqEz0A//QwDQYJKoZIhvcNAQELBQADggEBADpddStz8pAL oXYpJlVj6Zse6ZRY5I8ZM7YWJMjMusC0BnsdIvrCsNU3sBv3eHVgKjXu9qwE67xN r///fidTK8M5TTS5zTW6Fgjy9U/rq0xBkhVKKuaM7Q0EWcyBUOqcbRsThJsibAtW B5PfcGW/izyfogZvRkIVHHTx61LpnUHN9t8T7JOJzi3iYDdTTrmsMYsDS+ZiTwBl xFom1dYey2L/BdEv/6G6Jak4VCupy69rHHNmqvvAg6k4+URU3JJW+qk281Sza/H+ qNS4MnQe8bbmQ7WUHfDxkJTVXB2fO37bpGejSfKJeJ4AwBaM3gWi4lrUrbnfTkCr my/302urAyQ= -----END CERTIFICATE-----Generated at Tue Feb 10 04:49:02 2026 by rpki-client