This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/uWpjW8EwvAg8xDTN_thfrhA4LAw.roa
File: uWpjW8EwvAg8xDTN_thfrhA4LAw.roa (raw, json)
Hash identifier: ymWyRdJuJht5zV2QVlIv93b0gP0KmipQqoXtKDEDweQ=
Subject key identifier: B9:6A:63:5B:C1:30:BC:08:3C:C4:34:CD:FE:D8:5F:AE:10:38:2C:0C
Certificate issuer: /CN=2f8d8d0ceebccd75b606ba4968f5c7946e8d47c0
Certificate serial: 019B797E303D9D8AC163CF5C220B7AF0A47F
Authority key identifier: 2F:8D:8D:0C:EE:BC:CD:75:B6:06:BA:49:68:F5:C7:94:6E:8D:47:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L42NDO68zXW2BrpJaPXHlG6NR8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/uWpjW8EwvAg8xDTN_thfrhA4LAw.roa
Signing time: Thu 01 Jan 2026 12:17:51 +0000
ROA not before: Thu 01 Jan 2026 12:17:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199268
IP address blocks: 2001:67c:1328::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/L42NDO68zXW2BrpJaPXHlG6NR8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:30:3d:9d:8a:c1:63:cf:5c:22:0b:7a:f0:a4:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8d8d0ceebccd75b606ba4968f5c7946e8d47c0
Validity
Not Before: Jan 1 12:17:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b96a635bc130bc083cc434cdfed85fae10382c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ef:e5:ec:da:0e:4c:4a:6a:6a:57:6c:1e:30:
0c:12:3f:70:10:b9:c0:37:78:d7:db:e3:8a:78:00:
2f:fb:09:cf:25:5c:a0:5f:fa:27:95:8d:59:11:aa:
de:91:6d:77:5f:c9:db:f2:a0:4f:c8:bd:e6:e6:27:
dc:1d:5e:6b:27:16:36:e2:02:21:95:2c:f8:ac:7d:
b6:96:8b:56:99:94:48:85:70:ac:5b:2e:55:cd:71:
1d:8b:cd:da:20:46:b8:04:d0:2b:05:6c:3c:d2:5b:
1e:ee:13:e7:66:c4:7a:23:54:5d:b5:03:fe:d9:9c:
de:c1:78:9a:58:00:ef:c0:d2:a8:e6:4f:85:76:4f:
aa:f5:ca:76:47:0f:99:43:af:52:ef:a5:01:ee:16:
b2:00:fb:82:05:bc:e5:60:33:ed:a4:92:2d:d9:df:
cd:e3:51:05:23:33:93:a2:96:9c:4e:56:27:ca:19:
a2:0c:15:bf:db:31:33:5a:4f:77:ae:bb:d8:d4:c7:
10:0a:4a:c0:60:5b:82:d4:d1:32:8e:a1:e1:4d:8b:
30:1f:9b:80:94:60:8e:57:34:9e:68:67:69:3f:04:
e7:6a:c5:3d:96:48:c3:e6:e8:ec:49:43:c2:b4:3e:
ab:54:59:9f:88:b0:da:7d:99:51:88:1f:59:84:77:
8f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:6A:63:5B:C1:30:BC:08:3C:C4:34:CD:FE:D8:5F:AE:10:38:2C:0C
X509v3 Authority Key Identifier:
keyid:2F:8D:8D:0C:EE:BC:CD:75:B6:06:BA:49:68:F5:C7:94:6E:8D:47:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L42NDO68zXW2BrpJaPXHlG6NR8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/uWpjW8EwvAg8xDTN_thfrhA4LAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1328::/48
Signature Algorithm: sha256WithRSAEncryption
7c:99:0c:df:b8:aa:9f:6d:2a:30:2d:3a:a0:e1:b7:9c:65:3c:
fd:6f:6a:ce:6b:16:eb:81:38:17:1f:a0:74:48:5c:d1:79:e0:
20:17:e2:2a:8e:09:3f:d0:6b:72:23:df:bd:c1:97:19:2c:e8:
55:ba:07:ec:3a:f2:8d:5b:2f:63:4b:d6:82:bc:ae:72:e4:88:
cc:9d:21:05:3b:fe:7e:44:54:04:e0:81:4c:0e:c0:08:b5:eb:
a9:14:95:04:2c:69:4d:a9:84:ce:5e:2d:e4:f1:42:fd:f3:54:
67:ff:69:c0:37:1a:7c:59:ae:53:3a:58:29:b0:d5:65:ce:d3:
09:13:75:87:14:96:39:28:f6:88:c3:0f:b8:d5:d0:2a:94:f4:
0b:31:2a:bf:fa:cf:98:60:30:b2:96:80:dc:b0:b8:21:fd:c1:
33:21:33:e5:bb:03:55:cb:4c:3a:17:bf:d5:f1:81:76:47:20:
8d:61:46:31:a8:fc:53:d9:7f:a9:2d:0c:f6:42:4b:10:0b:de:
be:51:77:af:16:51:de:19:39:ee:16:ac:77:6b:78:75:7d:b0:
ea:02:6a:7f:42:b2:c0:f9:2f:47:de:1f:16:5f:7d:a1:f2:58:
4f:07:b5:eb:32:39:78:44:ed:8c:a9:d4:43:5b:3e:25:d1:c6:
5c:91:87:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:36:22 2026 by rpki-client