This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/UlqXzQzriiUSB0D-7u_SBoU8D38.roa File: UlqXzQzriiUSB0D-7u_SBoU8D38.roa (raw, json) Hash identifier: eeXsbIk4taq4w0yveUIeif+SOXAEruuS9VPV/g1uAV4= Subject key identifier: 52:5A:97:CD:0C:EB:8A:25:12:07:40:FE:EE:EF:D2:06:85:3C:0F:7F Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B7FF1A69CE273C731341DE9EE7C70AE03 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/UlqXzQzriiUSB0D-7u_SBoU8D38.roa Signing time: Fri 02 Jan 2026 18:21:41 +0000 ROA not before: Fri 02 Jan 2026 18:21:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24940 IP address blocks: 2a0f:e7c3:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:a6:9c:e2:73:c7:31:34:1d:e9:ee:7c:70:ae:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 2 18:21:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=525a97cd0ceb8a25120740feeeefd206853c0f7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:8a:39:cf:e3:95:d8:46:c7:f1:d2:02:98:5d: 5a:76:0c:e1:35:98:2d:7a:fd:ad:7c:98:e3:e3:67: 20:26:52:d0:ef:c5:4f:07:19:42:b7:59:6e:12:44: bc:ef:75:7a:4b:70:ad:e1:a4:f2:f7:09:34:58:aa: 23:b5:fa:a2:89:11:74:ee:f1:c1:4c:7e:0f:83:b6: e6:48:fe:b7:82:8c:03:4d:0f:27:89:5b:db:1c:d6: 17:52:74:ad:78:05:31:0a:b5:48:b7:5b:c3:98:1c: 98:65:9a:d1:60:e5:1d:13:17:cb:81:dd:b9:3f:cf: 8a:db:38:b4:29:16:11:b7:92:e4:7f:ee:22:f2:61: 90:57:f1:3f:51:68:1c:b6:a1:4f:34:2c:c2:c8:0c: 0a:ba:b3:a7:7f:8d:54:e4:d8:a7:66:4c:cb:36:fc: d1:e6:ed:c5:37:19:25:a7:80:26:ce:8c:b7:fe:26: e7:9f:b0:10:0a:14:7a:f2:ea:3b:d6:fa:70:c6:56: be:69:cf:de:52:4e:b7:8e:7f:81:20:8e:f3:3b:ce: ee:ae:98:67:2b:c9:d0:9a:11:1b:56:07:fd:ea:f0: 72:cb:9c:d9:7e:07:40:3f:68:bb:19:07:cd:c4:1e: 75:c3:86:88:12:2d:04:ae:cb:c4:70:ff:ff:1e:44: a7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:5A:97:CD:0C:EB:8A:25:12:07:40:FE:EE:EF:D2:06:85:3C:0F:7F X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/UlqXzQzriiUSB0D-7u_SBoU8D38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:e7c3:1::/48 Signature Algorithm: sha256WithRSAEncryption c5:6e:6e:ce:49:fa:07:52:ee:d6:55:33:d1:aa:84:bf:63:31: e1:02:15:48:76:d2:60:38:34:f1:24:f5:b5:42:b9:64:33:b3: c0:c8:d4:e5:e0:c1:f6:30:96:98:a7:81:14:7f:82:75:47:f2: 49:aa:46:72:95:37:42:60:ea:1d:ee:60:ca:b5:72:5f:ed:e9: a5:e0:a0:a8:dc:a3:48:a4:12:22:73:3c:0a:13:c8:29:97:5c: 9d:ca:fc:a3:86:ec:b7:47:43:14:a3:26:a2:46:74:72:9d:e2: 04:6b:45:e1:bb:c1:4c:56:3e:4b:75:dd:73:6a:58:84:46:22: da:75:06:45:cb:da:29:e0:bb:ed:5a:4f:11:e4:89:8c:8f:14: cd:71:dd:ad:89:26:29:aa:70:0a:64:0a:2d:ca:d8:c0:03:b9: 36:e8:bf:93:06:b2:f1:d7:a2:f2:6e:0f:50:66:42:77:89:d8: 44:46:b3:6f:73:74:67:76:40:4c:9c:59:fb:39:61:90:e8:7e: fa:d8:79:ae:c0:0c:13:44:6f:7d:da:ec:44:77:12:1c:3d:40: 5a:2a:01:cf:a5:84:73:be:80:7e:d9:5f:29:12:b8:52:09:ac: 5f:7e:d6:a1:6e:ff:e8:18:9b:00:f6:05:9a:d8:df:16:7b:e7: 13:53:69:72 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/8aac4nPHMTQd6e58cK4DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTAyMTgyMTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjVhOTdjZDBjZWI4YTI1MTIwNzQwZmVlZWVmZDIwNjg1M2MwZjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7oo5z+OV2EbH8dICmF1adgzhNZgt ev2tfJjj42cgJlLQ78VPBxlCt1luEkS873V6S3Ct4aTy9wk0WKojtfqiiRF07vHB TH4Pg7bmSP63gowDTQ8niVvbHNYXUnSteAUxCrVIt1vDmByYZZrRYOUdExfLgd25 P8+K2zi0KRYRt5Lkf+4i8mGQV/E/UWgctqFPNCzCyAwKurOnf41U5NinZkzLNvzR 5u3FNxklp4Amzoy3/ibnn7AQChR68uo71vpwxla+ac/eUk63jn+BII7zO87urphn K8nQmhEbVgf96vByy5zZfgdAP2i7GQfNxB51w4aIEi0ErsvEcP//HkSnUwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFJal80M64olEgdA/u7v0gaFPA9/MB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvVWxxWHpRenJpaVVTQjBELTd1X1NCb1U4RDM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg/nwwAB MA0GCSqGSIb3DQEBCwUAA4IBAQDFbm7OSfoHUu7WVTPRqoS/YzHhAhVIdtJgODTx JPW1QrlkM7PAyNTl4MH2MJaYp4EUf4J1R/JJqkZylTdCYOod7mDKtXJf7eml4KCo 3KNIpBIiczwKE8gpl1ydyvyjhuy3R0MUoyaiRnRyneIEa0Xhu8FMVj5Ldd1zaliE RiLadQZFy9op4LvtWk8R5ImMjxTNcd2tiSYpqnAKZAotytjAA7k26L+TBrLx16Ly bg9QZkJ3idhERrNvc3RndkBMnFn7OWGQ6H762HmuwAwTRG992uxEdxIcPUBaKgHP pYRzvoB+2V8pErhSCaxfftahbv/oGJsA9gWa2N8We+cTU2ly -----END CERTIFICATE-----Generated at Tue Jan 20 09:07:40 2026 by rpki-client