This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/UXO72pN93K891EJ5EOS-KSuDTh4.roa File: UXO72pN93K891EJ5EOS-KSuDTh4.roa (raw, json) Hash identifier: J4YBwoF1qT8QowRHgcLZczx88TgjbKfIhyS5Yc1Q/h4= Subject key identifier: 51:73:BB:DA:93:7D:DC:AF:3D:D4:42:79:10:E4:BE:29:2B:83:4E:1E Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c Certificate serial: 019B9A9CEDABBA68A128BE0F29A4B18F7860 Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/UXO72pN93K891EJ5EOS-KSuDTh4.roa Signing time: Wed 07 Jan 2026 22:38:54 +0000 ROA not before: Wed 07 Jan 2026 22:38:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211281 IP address blocks: 2a10:fa82:c000::/40 maxlen: 40 2a10:fa82:c100::/40 maxlen: 40 2a10:fa82:c200::/40 maxlen: 40 2a10:fa82:c300::/40 maxlen: 40 2a10:fa82:c400::/40 maxlen: 40 2a10:fa82:c500::/40 maxlen: 40 2a10:fa82:c600::/40 maxlen: 40 2a10:fa82:c700::/40 maxlen: 40 2a10:fa82:c800::/40 maxlen: 40 2a10:fa82:c900::/40 maxlen: 40 2a10:fa82:ca00::/40 maxlen: 40 2a10:fa82:cb00::/40 maxlen: 40 2a10:fa82:cc00::/40 maxlen: 40 2a10:fa82:cd00::/40 maxlen: 40 2a10:fa82:ce00::/40 maxlen: 40 2a10:fa82:cf00::/40 maxlen: 40 2a10:fa82:f000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9a:9c:ed:ab:ba:68:a1:28:be:0f:29:a4:b1:8f:78:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c Validity Not Before: Jan 7 22:38:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5173bbda937ddcaf3dd4427910e4be292b834e1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:01:ac:c8:96:c9:52:0d:a5:f6:a9:18:20:20: ae:35:41:2b:14:e2:95:b2:91:fe:bd:f0:d6:27:21: 8f:0b:40:23:32:4d:a4:9c:35:18:b3:1e:ba:54:6a: 6b:29:e8:a8:1f:d3:86:2c:37:10:e4:61:05:4c:f8: 61:b6:b1:c0:46:79:bf:9e:99:5f:47:a9:05:5b:43: c9:70:a7:2c:57:3f:d8:e1:a3:50:9d:ad:d4:2d:db: df:32:e8:91:78:6a:67:49:98:fa:2c:2e:22:a9:24: bd:0c:db:a1:8c:1e:22:5e:10:cb:49:68:aa:1a:ff: 9e:07:c7:4e:dc:0d:d2:18:99:65:67:d4:51:5a:6d: 74:3b:b3:3c:6b:11:77:b9:01:82:37:3c:79:56:68: 35:ba:95:a9:36:bf:62:8c:67:ae:bb:b6:98:2a:38: 8a:c4:2c:24:f0:ee:a2:32:73:14:55:76:4e:2f:7d: 1f:af:38:8c:2c:8b:4f:b0:c6:2a:f2:4c:06:2e:d9: 18:32:a9:69:6f:9e:76:77:0c:9d:10:6b:83:35:62: 99:41:dc:aa:d2:11:50:58:07:ee:0a:ed:b0:b1:34: bb:01:d0:f9:4f:55:6e:f5:a4:fb:bf:1c:17:31:61: 39:c7:0b:73:38:0b:da:e9:e6:03:56:b2:ac:8f:e1: 12:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:73:BB:DA:93:7D:DC:AF:3D:D4:42:79:10:E4:BE:29:2B:83:4E:1E X509v3 Authority Key Identifier: keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/UXO72pN93K891EJ5EOS-KSuDTh4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:fa82:c000::/36 2a10:fa82:f000::/40 Signature Algorithm: sha256WithRSAEncryption 77:ed:aa:e7:60:57:e9:c4:d9:97:85:f2:8d:12:80:69:53:f2: 82:12:55:5e:de:af:4d:b1:a9:f4:ca:7a:84:82:c9:ec:a5:52: 68:d9:48:f0:ad:cb:bf:4b:98:29:2f:79:b7:c1:43:f6:af:a8: af:c7:22:e4:81:ac:a3:eb:b7:aa:7c:99:e1:14:d7:70:f2:a5: 0a:1b:7d:e1:3f:bc:67:60:15:95:df:c9:53:f7:49:64:5b:37: 54:88:b8:2e:ac:0d:88:eb:24:35:2b:90:23:98:c8:bd:4a:e7: 46:59:98:14:b9:6e:9a:1d:5b:54:d8:e2:e1:a0:18:ad:c8:25: 43:55:5b:03:f7:a8:7e:bb:fa:b8:f4:76:e2:bd:75:12:3c:82: f8:de:ff:fd:32:bc:d5:57:ed:a2:5e:bc:9b:06:19:9f:27:8b: 69:d9:4e:87:1a:9a:a4:1e:0c:7d:ea:45:46:b8:30:6d:25:17: de:2a:f1:a2:4a:e6:44:af:e3:e4:2f:cb:dd:e5:13:32:8d:18: 9e:e3:12:aa:9e:0b:cd:ec:f4:20:53:c8:83:f7:60:95:ce:ea: 23:b8:35:c9:1d:30:14:c2:ce:00:70:f6:77:28:df:5f:22:6a: 7c:35:7a:86:b0:c6:15:37:53:60:42:93:ab:64:57:5f:89:77: ae:aa:f5:48 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgISAZuanO2rumihKL4PKaSxj3hgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2NTliMGJhODQwN2JlMTFjZmM5MTFiZDMxZWQxNDBjZDFj NjA0NmMwHhcNMjYwMTA3MjIzODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTczYmJkYTkzN2RkY2FmM2RkNDQyNzkxMGU0YmUyOTJiODM0ZTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6AGsyJbJUg2l9qkYICCuNUErFOKV spH+vfDWJyGPC0AjMk2knDUYsx66VGprKeioH9OGLDcQ5GEFTPhhtrHARnm/nplf R6kFW0PJcKcsVz/Y4aNQna3ULdvfMuiReGpnSZj6LC4iqSS9DNuhjB4iXhDLSWiq Gv+eB8dO3A3SGJllZ9RRWm10O7M8axF3uQGCNzx5Vmg1upWpNr9ijGeuu7aYKjiK xCwk8O6iMnMUVXZOL30frziMLItPsMYq8kwGLtkYMqlpb552dwydEGuDNWKZQdyq 0hFQWAfuCu2wsTS7AdD5T1Vu9aT7vxwXMWE5xwtzOAva6eYDVrKsj+ESdQIDAQAB o4ICEzCCAg8wHQYDVR0OBBYEFFFzu9qTfdyvPdRCeRDkvikrg04eMB8GA1UdIwQY MBaAFFZZsLqEB74Rz8kRvTHtFAzRxgRsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEt MjM5NGM2NjAwMDIyLzEvVVhPNzJwTjkzSzg5MUVKNUVPUy1LU3VEVGg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEtMjM5NGM2NjAwMDIy LzEvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwYEKhD6gsAD BgAqEPqC8DANBgkqhkiG9w0BAQsFAAOCAQEAd+2q52BX6cTZl4XyjRKAaVPyghJV Xt6vTbGp9Mp6hILJ7KVSaNlI8K3Lv0uYKS95t8FD9q+or8ci5IGso+u3qnyZ4RTX cPKlCht94T+8Z2AVld/JU/dJZFs3VIi4LqwNiOskNSuQI5jIvUrnRlmYFLlumh1b VNji4aAYrcglQ1VbA/eofrv6uPR24r11EjyC+N7//TK81Vftol68mwYZnyeLadlO hxqapB4MfepFRrgwbSUX3irxokrmRK/j5C/L3eUTMo0YnuMSqp4Lzez0IFPIg/dg lc7qI7g1yR0wFMLOAHD2dyjfXyJqfDV6hrDGFTdTYEKTq2RXX4l3rqr1SA== -----END CERTIFICATE-----Generated at Wed Jan 21 08:19:09 2026 by rpki-client