This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/5UKCjWYXJhyBQNmMy29k3i-dI6I.roa File: 5UKCjWYXJhyBQNmMy29k3i-dI6I.roa (raw, json) Hash identifier: L9+uWzqnh3NG9YW0wmViHHjVcPe4HEKjb81RrmqWLY4= Subject key identifier: E5:42:82:8D:66:17:26:1C:81:40:D9:8C:CB:6F:64:DE:2F:9D:23:A2 Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B7910902FD8DB5F0A823F6AE06C856B67 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/5UKCjWYXJhyBQNmMy29k3i-dI6I.roa Signing time: Thu 01 Jan 2026 10:18:07 +0000 ROA not before: Thu 01 Jan 2026 10:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198889 IP address blocks: 2a12:bec0:2c0::/44 maxlen: 48 2a12:bec0:2ce::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:90:2f:d8:db:5f:0a:82:3f:6a:e0:6c:85:6b:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e542828d6617261c8140d98ccb6f64de2f9d23a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b5:d7:ac:2c:5c:7c:f2:a1:77:7e:82:ae:35: 0d:db:0b:5a:60:e1:df:53:82:c4:2e:16:27:76:c3: ed:a2:ea:7f:af:e8:d9:45:42:cd:16:fe:c7:a1:e3: 24:46:b9:48:82:28:00:f5:e2:e7:40:c0:32:c0:f6: 9b:d3:54:94:f1:6e:7a:80:53:d7:33:9e:a9:f3:03: 58:ea:71:58:88:4c:e7:d4:fa:bd:49:6e:97:09:02: 0a:4e:df:8d:1f:86:0f:b6:2e:ae:29:c6:eb:09:a1: f4:c0:cb:7d:cf:9c:b9:66:a8:b4:d7:1a:df:8f:ec: 7f:a4:9e:fa:43:e4:a3:66:c4:7f:33:7d:36:26:d8: 31:b2:1e:d6:b5:c3:3b:54:5a:24:b7:c0:ee:41:88: 2a:2c:21:d7:7e:5e:e4:75:e6:06:5e:67:d2:b3:c9: cd:15:9d:50:f0:d4:89:6c:50:42:27:58:4e:09:64: b6:9e:86:f3:3a:36:61:1d:62:c4:4f:c6:2d:e9:c8: e3:d7:fc:da:15:f7:05:ce:04:6e:13:2e:ca:29:fc: 50:97:87:a4:2b:bc:df:3e:91:e7:af:26:3b:ec:8b: 75:eb:77:ad:7f:6f:21:9d:9e:90:a1:92:a0:49:3c: 13:0c:78:8a:1e:26:9d:25:4a:8d:4a:1a:fc:91:42: 8a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:42:82:8D:66:17:26:1C:81:40:D9:8C:CB:6F:64:DE:2F:9D:23:A2 X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/5UKCjWYXJhyBQNmMy29k3i-dI6I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec0:2c0::/44 Signature Algorithm: sha256WithRSAEncryption 6a:c4:89:cb:95:cb:dc:9e:30:d7:9f:46:ed:48:1d:2f:8c:73: e7:2e:56:18:c8:91:2f:98:23:f5:a9:5d:d1:de:4d:52:3c:f0: 05:d2:ac:36:79:f6:81:87:b0:30:87:fe:03:41:2e:64:43:a5: a9:36:10:28:c8:01:4d:df:e1:17:6d:43:e8:7d:51:44:49:41: d5:90:9f:a0:1f:0e:89:f6:10:c4:b5:27:35:4a:fc:ca:2d:ac: b1:e8:b9:4c:37:63:81:23:7c:c6:f1:6f:b4:2d:b3:76:4e:96: 76:d5:7f:4d:3f:67:e6:33:12:38:20:84:df:ed:5c:02:c5:dd: 66:77:a4:60:c2:c5:72:be:cd:78:c4:76:e1:c8:95:d2:73:a2: 3d:79:c7:17:8a:1a:62:10:ab:5d:a1:19:f5:d6:02:e1:f4:ca: e2:46:0c:8c:9d:f1:8f:6e:9d:2a:8d:7a:45:fe:e6:5e:31:57: fe:5d:ee:2c:91:f2:70:6f:c3:8e:49:62:09:39:62:b0:69:9f: 25:7a:3a:a9:85:a3:d2:53:e0:b0:9e:80:ad:a4:1a:02:53:6d: 12:53:12:80:ce:ad:02:f7:d4:a8:49:86:1e:7e:84:08:0b:3c: b4:18:8b:61:91:28:73:5f:db:be:c4:c1:d1:fe:e8:0e:63:38: 3d:05:c1:9d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EJAv2NtfCoI/auBshWtnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTQyODI4ZDY2MTcyNjFjODE0MGQ5OGNjYjZmNjRkZTJmOWQyM2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLXXrCxcfPKhd36CrjUN2wtaYOHf U4LELhYndsPtoup/r+jZRULNFv7HoeMkRrlIgigA9eLnQMAywPab01SU8W56gFPX M56p8wNY6nFYiEzn1Pq9SW6XCQIKTt+NH4YPti6uKcbrCaH0wMt9z5y5Zqi01xrf j+x/pJ76Q+SjZsR/M302Jtgxsh7WtcM7VFokt8DuQYgqLCHXfl7kdeYGXmfSs8nN FZ1Q8NSJbFBCJ1hOCWS2nobzOjZhHWLET8Yt6cjj1/zaFfcFzgRuEy7KKfxQl4ek K7zfPpHnryY77It163etf28hnZ6QoZKgSTwTDHiKHiadJUqNShr8kUKKQwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOVCgo1mFyYcgUDZjMtvZN4vnSOiMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvNVVLQ2pXWVhKaHlCUU5tTXkyOWszaS1kSTZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+wALA MA0GCSqGSIb3DQEBCwUAA4IBAQBqxInLlcvcnjDXn0btSB0vjHPnLlYYyJEvmCP1 qV3R3k1SPPAF0qw2efaBh7Awh/4DQS5kQ6WpNhAoyAFN3+EXbUPofVFESUHVkJ+g Hw6J9hDEtSc1SvzKLayx6LlMN2OBI3zG8W+0LbN2TpZ21X9NP2fmMxI4IITf7VwC xd1md6RgwsVyvs14xHbhyJXSc6I9eccXihpiEKtdoRn11gLh9MriRgyMnfGPbp0q jXpF/uZeMVf+Xe4skfJwb8OOSWIJOWKwaZ8lejqphaPSU+CwnoCtpBoCU20SUxKA zq0C99SoSYYefoQICzy0GIthkShzX9u+xMHR/ugOYzg9BcGd -----END CERTIFICATE-----Generated at Tue Jan 20 02:49:13 2026 by rpki-client