This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/UKefcXbsOX1hzF3bSGdhWpmnR0E.roa File: UKefcXbsOX1hzF3bSGdhWpmnR0E.roa (raw, json) Hash identifier: 6q6T2oyQvBATe5oq82tfjs34M6o1q8gnelyGOqhHGH0= Subject key identifier: 50:A7:9F:71:76:EC:39:7D:61:CC:5D:DB:48:67:61:5A:99:A7:47:41 Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8 Certificate serial: 019B7F8173C1F6CBB542C85B6F9C6CF3E4D3 Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/UKefcXbsOX1hzF3bSGdhWpmnR0E.roa Signing time: Fri 02 Jan 2026 16:19:08 +0000 ROA not before: Fri 02 Jan 2026 16:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31216 IP address blocks: 2001:678:8b8::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 10:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:73:c1:f6:cb:b5:42:c8:5b:6f:9c:6c:f3:e4:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8 Validity Not Before: Jan 2 16:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50a79f7176ec397d61cc5ddb4867615a99a74741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f1:cb:5e:c4:2c:a3:cf:e3:d5:b9:5c:8d:7d: 30:58:5b:52:76:5a:eb:14:6e:30:50:ce:76:16:6c: 15:5e:b6:6d:c8:19:e1:6f:ea:37:0f:51:fb:c3:78: 97:97:e3:4b:75:b1:fe:7b:12:3b:e5:14:d4:75:20: 3a:b4:03:32:b4:39:ea:93:4d:df:e3:f0:09:b4:94: 50:c2:7f:a9:25:9d:88:cc:0d:07:12:09:28:bb:bf: 17:66:98:84:fd:bb:a2:43:5a:1e:9e:87:08:58:ac: 1e:f9:2e:c1:64:f2:0f:0b:12:b0:b9:c9:84:cd:69: 19:1b:ce:63:49:6b:19:49:fa:6a:cc:41:7a:54:54: e0:5d:bd:5b:18:46:04:5f:ad:aa:45:c6:5e:97:c3: ff:ac:95:6a:17:33:92:2c:07:5a:8a:ba:3b:f6:af: 47:6f:05:db:60:c9:46:3c:79:d3:36:03:16:b1:19: bb:54:2f:14:69:1f:28:cf:8c:da:fb:4e:1b:e6:32: 27:e9:38:df:e1:2b:2a:45:33:ad:95:a4:dd:7c:e9: 92:19:d4:70:99:7c:80:35:87:b9:d7:ce:85:53:25: 31:1a:79:53:72:e0:a0:43:5e:37:77:17:20:fb:74: b7:69:59:b6:99:58:b8:06:ae:3f:fd:76:a2:24:97: 19:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:A7:9F:71:76:EC:39:7D:61:CC:5D:DB:48:67:61:5A:99:A7:47:41 X509v3 Authority Key Identifier: keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/UKefcXbsOX1hzF3bSGdhWpmnR0E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:8b8::/48 Signature Algorithm: sha256WithRSAEncryption 33:4d:b0:d2:55:85:25:2d:d4:4b:2e:6b:50:5b:bc:40:7c:6e: bb:22:f1:13:6b:1c:f4:96:c9:dc:8e:38:ca:3f:db:4e:fe:0a: 79:8e:ea:d3:48:61:ec:f5:71:3e:57:ee:83:d5:a2:a2:0b:49: 36:0f:fd:7d:2a:c4:9b:6b:23:20:9e:fa:67:ef:ff:4b:e8:21: df:68:a9:c3:11:7c:c6:bb:dc:58:93:62:8a:8b:09:8f:97:22: e5:bf:fa:0c:a8:02:f3:2e:67:9b:8c:cf:d7:66:dd:e6:14:0f: 42:75:45:83:ca:03:d2:2c:48:7d:fd:ac:aa:23:3e:fe:de:b1: 3f:64:eb:3c:0b:9d:a5:86:5e:05:4f:4f:9d:4e:03:d6:01:42: 75:a9:c5:07:94:d7:74:34:da:31:55:5c:e4:ce:2c:b9:e0:c3: c4:ca:30:06:ef:96:6e:ad:91:f7:7b:68:b4:2a:26:7a:cc:d1: b7:bf:10:65:15:bf:fd:0d:34:67:8f:6b:c1:f4:16:41:1c:3d: 54:fa:77:95:6a:7f:8d:db:88:fd:48:91:dd:b5:88:50:9c:e0: 34:01:1b:94:ad:2a:c0:5c:b8:8b:9a:d7:b6:cc:48:00:66:eb: 92:6d:42:08:6e:0c:4a:e4:8b:91:24:1a:43:c6:4c:7a:6a:2f: 23:57:9c:70 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/gXPB9su1Qshbb5xs8+TTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNjYwNWI0ZDI3ZjEzOTY4ZTg3OTRlNmVmMDkxMjIzNzQ4 ODE3ZDgwHhcNMjYwMTAyMTYxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MGE3OWY3MTc2ZWMzOTdkNjFjYzVkZGI0ODY3NjE1YTk5YTc0NzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fHLXsQso8/j1blcjX0wWFtSdlrr FG4wUM52FmwVXrZtyBnhb+o3D1H7w3iXl+NLdbH+exI75RTUdSA6tAMytDnqk03f 4/AJtJRQwn+pJZ2IzA0HEgkou78XZpiE/buiQ1oenocIWKwe+S7BZPIPCxKwucmE zWkZG85jSWsZSfpqzEF6VFTgXb1bGEYEX62qRcZel8P/rJVqFzOSLAdairo79q9H bwXbYMlGPHnTNgMWsRm7VC8UaR8oz4za+04b5jIn6Tjf4SsqRTOtlaTdfOmSGdRw mXyANYe5186FUyUxGnlTcuCgQ143dxcg+3S3aVm2mVi4Bq4//XaiJJcZgwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFCnn3F27Dl9Ycxd20hnYVqZp0dBMB8GA1UdIwQY MBaAFIJmBbTSfxOWjoeU5u8JEiN0iBfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEt MmQxOTE4YmExYzBlLzEvVUtlZmNYYnNPWDFoekYzYlNHZGhXcG1uUjBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEtMmQxOTE4YmExYzBl LzEvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAi4 MA0GCSqGSIb3DQEBCwUAA4IBAQAzTbDSVYUlLdRLLmtQW7xAfG67IvETaxz0lsnc jjjKP9tO/gp5jurTSGHs9XE+V+6D1aKiC0k2D/19KsSbayMgnvpn7/9L6CHfaKnD EXzGu9xYk2KKiwmPlyLlv/oMqALzLmebjM/XZt3mFA9CdUWDygPSLEh9/ayqIz7+ 3rE/ZOs8C52lhl4FT0+dTgPWAUJ1qcUHlNd0NNoxVVzkziy54MPEyjAG75ZurZH3 e2i0KiZ6zNG3vxBlFb/9DTRnj2vB9BZBHD1U+neVan+N24j9SJHdtYhQnOA0ARuU rSrAXLiLmte2zEgAZuuSbUIIbgxK5IuRJBpDxkx6ai8jV5xw -----END CERTIFICATE-----Generated at Fri Jan 9 16:49:22 2026 by rpki-client