This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/Ugs1R72eLpNOvqQLq80_hJnxxCs.roa File: Ugs1R72eLpNOvqQLq80_hJnxxCs.roa (raw, json) Hash identifier: HAAX/DAdp/HiBc6dDbGVPO1NxsuLn8+Z1EDMvgnvFTM= Subject key identifier: 52:0B:35:47:BD:9E:2E:93:4E:BE:A4:0B:AB:CD:3F:84:99:F1:C4:2B Certificate issuer: /CN=fd21cb4baa15862d1b5773bf2be60ca5f4fc24d4 Certificate serial: 019B7C11166CE1841E7EACC381238F31CC81 Authority key identifier: FD:21:CB:4B:AA:15:86:2D:1B:57:73:BF:2B:E6:0C:A5:F4:FC:24:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/Ugs1R72eLpNOvqQLq80_hJnxxCs.roa Signing time: Fri 02 Jan 2026 00:17:33 +0000 ROA not before: Fri 02 Jan 2026 00:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47152 IP address blocks: 2a10:ba87:fed0::/44 maxlen: 44 2a10:ba87:fef0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.crl rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft rsync://rpki.ripe.net/repository/DEFAULT/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:16:6c:e1:84:1e:7e:ac:c3:81:23:8f:31:cc:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd21cb4baa15862d1b5773bf2be60ca5f4fc24d4 Validity Not Before: Jan 2 00:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=520b3547bd9e2e934ebea40babcd3f8499f1c42b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1c:c9:20:04:76:3f:bf:f1:b1:9b:b9:8f:27: 59:c5:4e:83:ef:ee:b5:b2:81:e5:e7:68:61:28:09: 2e:16:0e:f8:58:65:a2:b6:1d:a5:a8:27:82:83:50: 7f:4c:07:3c:d1:ea:8b:e1:87:49:09:0a:a0:c4:da: 2c:ef:a3:81:63:78:0f:0b:2f:8a:11:ee:28:14:a7: 09:b3:cb:d6:49:8a:fd:fd:f1:2d:18:af:d6:ce:67: 53:a5:cb:30:15:8d:d2:b1:48:e1:74:60:2f:9c:50: 93:2a:a3:0b:3e:ae:f8:f9:75:46:d0:26:2d:e9:7d: bd:ba:c6:49:00:b9:a6:9c:81:fa:ee:9d:de:49:66: d1:10:ed:2e:82:4a:ac:27:32:da:81:eb:c1:48:cb: 23:9e:fc:ce:6a:3b:30:6e:7b:c8:1d:91:84:38:4b: e6:f5:00:35:4b:f9:59:af:f6:2a:47:8f:72:51:81: 3e:3e:34:24:71:76:67:dd:2e:12:6f:6d:84:97:9e: 76:80:ef:8e:8b:5c:ae:f2:53:6f:23:ee:a1:0d:b2: d7:a8:ec:ff:01:13:25:e6:86:19:d9:b9:ac:b6:3d: 1a:97:47:8c:39:fc:ee:da:2e:91:e3:6c:f3:08:e3: 9c:a9:56:4d:25:52:5d:d3:06:ae:d0:23:7c:fa:12: 53:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:0B:35:47:BD:9E:2E:93:4E:BE:A4:0B:AB:CD:3F:84:99:F1:C4:2B X509v3 Authority Key Identifier: keyid:FD:21:CB:4B:AA:15:86:2D:1B:57:73:BF:2B:E6:0C:A5:F4:FC:24:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/Ugs1R72eLpNOvqQLq80_hJnxxCs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:ba87:fed0::/44 2a10:ba87:fef0::/44 Signature Algorithm: sha256WithRSAEncryption aa:0b:29:be:ef:f6:17:6a:66:3c:d5:ca:f0:65:be:5e:fd:12: 34:4d:15:63:1c:39:6e:7c:84:8e:95:54:ac:93:05:0c:9f:72: cc:fd:fc:f9:c2:2a:6a:7b:71:cf:82:8b:3e:8f:f8:63:15:f6: 0c:e6:78:86:73:6a:cd:72:bd:f2:a9:b7:e2:87:d4:59:37:96: 85:32:bc:9e:a3:04:3f:6b:84:d1:18:a5:5b:4c:5a:0a:be:46: a0:d6:3c:20:94:ff:62:b5:89:d8:26:59:f4:a6:79:7a:16:f7: d8:8d:96:78:86:f5:78:2e:bd:b0:91:df:e6:6d:6c:70:ac:97: e4:d7:70:c9:8e:e1:a0:74:3e:04:67:09:d0:bf:93:22:1c:ed: 91:4b:d9:70:4c:dc:d6:65:3c:a7:4e:0f:53:ec:b3:a7:a9:03: 93:7a:55:da:b6:42:d8:39:16:d7:7c:70:92:fc:96:e2:95:e5: cc:fc:1c:3d:89:9a:50:7b:d1:da:8c:bd:62:17:21:9d:5b:97: 26:25:73:07:12:60:82:8b:f4:c3:c5:d4:4c:0f:38:c9:22:99: c3:fc:23:d9:a3:e2:bd:94:64:90:eb:81:f2:55:47:ec:d4:af: 92:2a:f6:5d:f6:6f:b5:42:e1:5b:16:e6:87:3d:5b:92:87:f0: 8e:d8:b9:67 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8ERZs4YQefqzDgSOPMcyBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMjFjYjRiYWExNTg2MmQxYjU3NzNiZjJiZTYwY2E1ZjRm YzI0ZDQwHhcNMjYwMTAyMDAxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjBiMzU0N2JkOWUyZTkzNGViZWE0MGJhYmNkM2Y4NDk5ZjFjNDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhzJIAR2P7/xsZu5jydZxU6D7+61 soHl52hhKAkuFg74WGWith2lqCeCg1B/TAc80eqL4YdJCQqgxNos76OBY3gPCy+K Ee4oFKcJs8vWSYr9/fEtGK/WzmdTpcswFY3SsUjhdGAvnFCTKqMLPq74+XVG0CYt 6X29usZJALmmnIH67p3eSWbREO0ugkqsJzLagevBSMsjnvzOajswbnvIHZGEOEvm 9QA1S/lZr/YqR49yUYE+PjQkcXZn3S4Sb22El552gO+Oi1yu8lNvI+6hDbLXqOz/ ARMl5oYZ2bmstj0al0eMOfzu2i6R42zzCOOcqVZNJVJd0wau0CN8+hJTvwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFILNUe9ni6TTr6kC6vNP4SZ8cQrMB8GA1UdIwQY MBaAFP0hy0uqFYYtG1dzvyvmDKX0/CTUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1NITFM2b1ZoaTBiVjNPX0stWU1wZlQ4Sk5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8zMjY2MDYtMTRiYS00NDM2LTk5ODUt YmU1NTIwYTVjODIxLzEvVWdzMVI3MmVMcE5PdnFRTHE4MF9oSm54eENzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8zMjY2MDYtMTRiYS00NDM2LTk5ODUtYmU1NTIwYTVjODIx LzEvX1NITFM2b1ZoaTBiVjNPX0stWU1wZlQ4Sk5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKhC6h/7Q AwcEKhC6h/7wMA0GCSqGSIb3DQEBCwUAA4IBAQCqCym+7/YXamY81crwZb5e/RI0 TRVjHDlufISOlVSskwUMn3LM/fz5wipqe3HPgos+j/hjFfYM5niGc2rNcr3yqbfi h9RZN5aFMryeowQ/a4TRGKVbTFoKvkag1jwglP9itYnYJln0pnl6FvfYjZZ4hvV4 Lr2wkd/mbWxwrJfk13DJjuGgdD4EZwnQv5MiHO2RS9lwTNzWZTynTg9T7LOnqQOT elXatkLYORbXfHCS/JbileXM/Bw9iZpQe9HajL1iFyGdW5cmJXMHEmCCi/TDxdRM DzjJIpnD/CPZo+K9lGSQ64HyVUfs1K+SKvZd9m+1QuFbFuaHPVuSh/CO2Lln -----END CERTIFICATE-----Generated at Sat Jan 10 22:07:04 2026 by rpki-client