This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/UchV2SCk82Tvd_4fs24QwHdOPdQ.roa
File: UchV2SCk82Tvd_4fs24QwHdOPdQ.roa (raw, json)
Hash identifier: 4HZjwsjUq2nzwGTStl2bgNTMT3SjnwxdvqEo5ClhfSE=
Subject key identifier: 51:C8:55:D9:20:A4:F3:64:EF:77:FE:1F:B3:6E:10:C0:77:4E:3D:D4
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 019B7910A9FA1C9B679C9A6EA39114BEA599
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/UchV2SCk82Tvd_4fs24QwHdOPdQ.roa
Signing time: Thu 01 Jan 2026 10:18:13 +0000
ROA not before: Thu 01 Jan 2026 10:18:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212396
IP address blocks: 2a12:bec0:24f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 16:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:a9:fa:1c:9b:67:9c:9a:6e:a3:91:14:be:a5:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 10:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51c855d920a4f364ef77fe1fb36e10c0774e3dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6e:6b:7a:e6:80:23:d0:d0:32:8c:f6:7a:ad:
80:9b:e1:92:21:6a:9d:5f:87:20:37:d9:0f:b6:23:
74:5a:54:03:3d:8c:29:27:41:85:55:b8:90:a5:c9:
1a:ab:8a:1c:cf:33:91:b2:6c:79:86:80:d8:10:2d:
35:cf:b5:ba:22:d8:cf:54:d7:13:06:2b:4e:35:a5:
71:35:1c:68:0a:a6:71:f3:74:41:6a:3e:4e:d5:06:
5f:77:96:13:05:6e:b9:6c:4f:35:75:89:35:39:58:
83:a5:6b:a1:fd:2d:b4:82:72:b5:96:84:32:af:23:
81:1f:0f:9d:f8:f6:6f:31:0d:e3:01:8d:67:39:6f:
06:9e:3d:60:ec:66:d4:7b:31:17:67:e0:96:aa:97:
5d:06:29:1d:68:39:c6:ba:6f:63:b6:f4:73:12:be:
9b:75:3f:cb:26:63:d9:99:c2:bc:cf:14:07:eb:19:
a1:12:39:74:d1:46:20:46:96:fc:85:fd:51:a9:46:
df:31:59:e0:99:84:33:2b:3c:8f:dd:69:3d:72:fd:
69:86:19:bf:7e:c8:a7:05:e3:66:ca:9a:98:c0:36:
0d:13:d8:65:a6:dc:d4:02:30:d3:eb:2b:b4:4e:d2:
8b:27:40:59:b9:8f:27:71:00:76:ce:a8:23:b8:1a:
af:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C8:55:D9:20:A4:F3:64:EF:77:FE:1F:B3:6E:10:C0:77:4E:3D:D4
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/UchV2SCk82Tvd_4fs24QwHdOPdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:24f::/48
Signature Algorithm: sha256WithRSAEncryption
a7:42:f2:13:24:c5:e4:c2:c7:19:cb:cb:bf:84:eb:09:40:1c:
98:c9:71:11:9f:1b:aa:0d:21:65:3c:40:a3:37:e7:7e:6e:68:
68:1c:26:78:df:5b:43:29:23:4f:30:14:d0:3a:a2:02:c0:0a:
e7:8d:a4:e9:b8:b4:c8:a2:8a:94:b2:72:35:94:b4:09:d7:a4:
88:19:7c:3a:6d:97:b1:9c:33:9d:6f:77:28:fc:8c:11:82:8b:
c4:e5:df:65:77:d6:16:d5:30:11:53:d8:df:0e:7c:39:aa:91:
df:ff:24:f5:5f:98:3b:79:2d:94:8c:94:4b:fc:6e:c7:0c:e8:
f1:af:12:d1:37:08:cf:ea:20:11:e2:12:ca:45:f5:49:3c:93:
5c:61:7f:00:27:4f:31:26:e0:d4:aa:1d:1c:cb:b7:f6:ca:c0:
93:0d:64:50:8d:7e:9d:c8:61:f5:53:2b:72:c9:16:50:1c:a0:
da:8b:af:bf:3a:d8:b3:62:8f:da:5d:f5:f2:93:92:28:74:f7:
29:29:03:b3:9b:cc:08:a9:75:6b:48:32:8a:52:8a:aa:25:a7:
f3:5b:70:24:8e:6a:80:ce:cf:d3:e0:59:ec:22:94:99:e8:a0:
a2:af:d0:3c:7d:61:3f:14:7e:7f:7e:da:0b:65:58:07:eb:f2:
5d:00:1e:61
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZt5EKn6HJtnnJpuo5EUvqWZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj
M2Q2NmYwHhcNMjYwMTAxMTAxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MWM4NTVkOTIwYTRmMzY0ZWY3N2ZlMWZiMzZlMTBjMDc3NGUzZGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAym5reuaAI9DQMoz2eq2Am+GSIWqd
X4cgN9kPtiN0WlQDPYwpJ0GFVbiQpckaq4oczzORsmx5hoDYEC01z7W6ItjPVNcT
BitONaVxNRxoCqZx83RBaj5O1QZfd5YTBW65bE81dYk1OViDpWuh/S20gnK1loQy
ryOBHw+d+PZvMQ3jAY1nOW8Gnj1g7GbUezEXZ+CWqpddBikdaDnGum9jtvRzEr6b
dT/LJmPZmcK8zxQH6xmhEjl00UYgRpb8hf1RqUbfMVngmYQzKzyP3Wk9cv1phhm/
fsinBeNmypqYwDYNE9hlptzUAjDT6yu0TtKLJ0BZuY8ncQB2zqgjuBqvIwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFHIVdkgpPNk73f+H7NuEMB3Tj3UMB8GA1UdIwQY
MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt
NTUzNjljZjUwN2VlLzEvVWNoVjJTQ2s4MlR2ZF80ZnMyNFF3SGRPUGRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl
LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhK+wAJP
MA0GCSqGSIb3DQEBCwUAA4IBAQCnQvITJMXkwscZy8u/hOsJQByYyXERnxuqDSFl
PECjN+d+bmhoHCZ431tDKSNPMBTQOqICwArnjaTpuLTIooqUsnI1lLQJ16SIGXw6
bZexnDOdb3co/IwRgovE5d9ld9YW1TARU9jfDnw5qpHf/yT1X5g7eS2UjJRL/G7H
DOjxrxLRNwjP6iAR4hLKRfVJPJNcYX8AJ08xJuDUqh0cy7f2ysCTDWRQjX6dyGH1
UytyyRZQHKDai6+/OtizYo/aXfXyk5IodPcpKQOzm8wIqXVrSDKKUoqqJafzW3Ak
jmqAzs/T4FnsIpSZ6KCir9A8fWE/FH5/ftoLZVgH6/JdAB5h
-----END CERTIFICATE-----
Generated at Tue Jan 20 02:46:31 2026 by rpki-client