This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_UeIR86mAYIMM4qfVeod70FnHeU.roa File: _UeIR86mAYIMM4qfVeod70FnHeU.roa (raw, json) Hash identifier: gJtZGF03F1RrUX4ClOUUDpiw0HTEmZALNayLMAI//sg= Subject key identifier: FD:47:88:47:CE:A6:01:82:0C:33:8A:9F:55:EA:1D:EF:41:67:1D:E5 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B7FF1B34493FA1B89B476D2B921988513 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_UeIR86mAYIMM4qfVeod70FnHeU.roa Signing time: Fri 02 Jan 2026 18:21:44 +0000 ROA not before: Fri 02 Jan 2026 18:21:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47152 IP address blocks: 2a12:f5c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:b3:44:93:fa:1b:89:b4:76:d2:b9:21:98:85:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 2 18:21:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd478847cea601820c338a9f55ea1def41671de5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:44:e5:15:09:29:5d:cf:7d:84:53:0d:b0:3f: 15:12:0b:6f:2b:12:40:0f:2f:48:33:b6:d4:41:f2: 4a:be:4b:47:21:85:29:a4:b6:4d:2a:3f:30:9b:58: 75:84:08:c0:7e:ba:97:48:fe:7b:fc:c5:65:42:f3: 1e:8c:32:3c:6c:79:93:76:b9:18:5d:d3:56:79:0e: 7a:3b:08:7a:37:37:6f:f4:db:cf:5e:dd:ee:c9:ea: 34:72:13:29:7b:f8:17:e6:6c:ef:c9:de:f3:80:e7: 1e:6f:b4:79:55:bb:5f:de:1e:67:7c:17:92:5c:4e: 6e:82:98:6b:83:09:e7:5a:4c:cd:3a:ee:31:bf:aa: 29:11:92:fe:4f:a0:72:3a:d9:24:a1:ab:84:cd:13: e8:5a:89:63:36:d3:31:fc:43:d3:05:9c:8f:1a:d8: 00:95:b2:ee:2b:31:f3:43:3f:de:cd:bd:2f:6c:16: 7a:ce:40:12:03:7b:f0:d1:33:eb:d8:ef:bb:ce:fc: f2:17:cf:db:93:7e:b3:aa:b2:9e:4a:22:19:f0:24: fb:20:71:88:a8:87:2b:a7:2b:4e:85:bb:42:34:ab: 70:ef:50:a9:af:c0:a9:4f:12:5d:ec:f3:99:20:17: ae:19:7f:c4:a4:64:93:60:13:c7:6a:ae:ba:36:46: 29:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:47:88:47:CE:A6:01:82:0C:33:8A:9F:55:EA:1D:EF:41:67:1D:E5 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_UeIR86mAYIMM4qfVeod70FnHeU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:f5c0::/29 Signature Algorithm: sha256WithRSAEncryption b3:1e:e0:b3:08:18:58:e4:18:6f:3d:5c:cf:6b:49:f1:9e:e3: 39:22:25:da:32:0f:39:60:aa:79:ef:b7:52:74:4c:04:45:cf: fe:4b:8e:41:7c:d9:a9:2e:25:dc:f4:67:27:c5:bc:ee:92:dc: e5:d6:8a:03:0a:74:b2:ab:08:83:2d:25:d5:e6:b5:46:e6:c7: a0:3b:fa:96:ab:9f:f1:e9:38:47:09:b3:b4:f6:cf:73:f0:6a: 28:d7:55:dd:86:3f:52:1d:0c:46:92:f2:52:3d:4e:19:19:b8: d4:ec:9c:fd:cc:eb:53:7c:68:bd:f4:de:20:53:ff:c2:a9:75: 35:fc:ea:76:7c:7a:f5:32:f7:5c:9b:3e:f9:60:a6:9f:24:47: 12:34:9f:2b:0d:f8:fc:79:50:be:78:dc:42:13:97:70:32:1e: 4c:07:94:29:98:bc:ac:cb:c0:66:69:6f:a5:88:42:c3:61:f3: 68:0e:15:53:77:df:b0:97:fd:31:b2:83:d3:80:b2:8d:62:5a: c7:c8:e5:08:ef:7b:22:99:fa:83:c8:2d:62:ab:a4:0a:a7:63: 24:43:f9:db:c7:d8:58:ae:fb:28:cf:2f:2e:7c:53:51:01:de: 1f:3c:4f:df:d8:75:a3:d8:c5:19:d4:7b:b5:a1:6a:04:b2:f4: 90:84:65:d9 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/8bNEk/obibR20rkhmIUTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTAyMTgyMTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDQ3ODg0N2NlYTYwMTgyMGMzMzhhOWY1NWVhMWRlZjQxNjcxZGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0TlFQkpXc99hFMNsD8VEgtvKxJA Dy9IM7bUQfJKvktHIYUppLZNKj8wm1h1hAjAfrqXSP57/MVlQvMejDI8bHmTdrkY XdNWeQ56Owh6Nzdv9NvPXt3uyeo0chMpe/gX5mzvyd7zgOceb7R5Vbtf3h5nfBeS XE5ugphrgwnnWkzNOu4xv6opEZL+T6ByOtkkoauEzRPoWoljNtMx/EPTBZyPGtgA lbLuKzHzQz/ezb0vbBZ6zkASA3vw0TPr2O+7zvzyF8/bk36zqrKeSiIZ8CT7IHGI qIcrpytOhbtCNKtw71Cpr8CpTxJd7POZIBeuGX/EpGSTYBPHaq66NkYpjQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFP1HiEfOpgGCDDOKn1XqHe9BZx3lMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvX1VlSVI4Nm1BWUlNTTRxZlZlb2Q3MEZuSGVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhL1wDAN BgkqhkiG9w0BAQsFAAOCAQEAsx7gswgYWOQYbz1cz2tJ8Z7jOSIl2jIPOWCqee+3 UnRMBEXP/kuOQXzZqS4l3PRnJ8W87pLc5daKAwp0sqsIgy0l1ea1RubHoDv6lquf 8ek4RwmztPbPc/BqKNdV3YY/Uh0MRpLyUj1OGRm41Oyc/czrU3xovfTeIFP/wql1 Nfzqdnx69TL3XJs++WCmnyRHEjSfKw34/HlQvnjcQhOXcDIeTAeUKZi8rMvAZmlv pYhCw2HzaA4VU3ffsJf9MbKD04CyjWJax8jlCO97Ipn6g8gtYqukCqdjJEP528fY WK77KM8vLnxTUQHeHzxP39h1o9jFGdR7taFqBLL0kIRl2Q== -----END CERTIFICATE-----Generated at Sat Jan 10 22:06:48 2026 by rpki-client