This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/UOZsE5b35JNXfg_IIsLyehdpPrs.roa File: UOZsE5b35JNXfg_IIsLyehdpPrs.roa (raw, json) Hash identifier: B5Ar4Jz3LgUlDqwY0/hfOFF8E3tyzpK/7QyvL/RqoB4= Subject key identifier: 50:E6:6C:13:96:F7:E4:93:57:7E:0F:C8:22:C2:F2:7A:17:69:3E:BB Certificate issuer: /CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516 Certificate serial: 019B7B35DD2D73660A7A4996CCB0F50E30CD Authority key identifier: CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/UOZsE5b35JNXfg_IIsLyehdpPrs.roa Signing time: Thu 01 Jan 2026 20:18:06 +0000 ROA not before: Thu 01 Jan 2026 20:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 2a07:e00:19f::/48 maxlen: 48 2a07:e02:41::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:dd:2d:73:66:0a:7a:49:96:cc:b0:f5:0e:30:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516 Validity Not Before: Jan 1 20:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50e66c1396f7e493577e0fc822c2f27a17693ebb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:bc:c1:ec:26:b0:3b:1d:db:f9:76:31:b1:bd: c2:75:49:ef:d6:d4:df:c8:89:f4:77:7f:67:3f:87: 62:a2:7b:7b:08:fa:88:00:2d:4c:d7:c6:6d:f2:db: 2b:21:d8:6e:c6:29:90:9c:31:69:78:15:38:9e:bc: db:d8:8f:eb:d4:e9:88:a7:a9:28:bb:28:c9:4c:ff: 56:a7:02:2b:20:0c:34:b8:1f:8f:04:2a:87:e1:64: 43:61:e5:57:44:03:e5:0c:7a:57:d7:a6:75:70:0c: b2:c2:69:8f:58:d1:ae:1a:33:40:46:bf:95:44:96: 34:a3:86:46:c3:cc:19:85:98:59:10:be:08:6a:90: e1:4d:ac:b7:ad:fd:c9:73:e2:a0:49:1b:ab:d5:b3: 90:f2:72:ef:78:72:be:91:40:b8:82:ed:e4:24:25: ee:a4:e8:c6:d5:56:46:dc:7e:af:87:32:80:6d:ea: a9:63:93:0f:f3:ba:e8:5c:46:95:7b:0c:13:65:c4: 92:98:28:01:fa:85:47:da:19:3e:df:31:2a:9d:60: ed:e7:c6:e4:83:3d:93:1f:f9:73:96:b9:94:f0:6f: 7a:73:a2:20:d2:34:a7:ef:a9:fd:6c:5d:ca:0d:31: 9a:1a:52:ca:96:be:88:ae:2c:25:9f:6c:fc:ed:e4: 5e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:E6:6C:13:96:F7:E4:93:57:7E:0F:C8:22:C2:F2:7A:17:69:3E:BB X509v3 Authority Key Identifier: keyid:CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/UOZsE5b35JNXfg_IIsLyehdpPrs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:e00:19f::/48 2a07:e02:41::/48 Signature Algorithm: sha256WithRSAEncryption 1c:5c:53:af:31:e5:9c:62:59:1e:bc:40:ca:f5:37:f7:82:0b: 68:b6:a6:f0:36:ef:dd:b1:ca:79:ff:aa:34:de:ba:2d:f8:9d: 22:e9:14:f3:ed:19:fd:8d:66:52:c5:c2:2c:56:76:b1:a3:42: 0b:b0:c3:de:5a:d4:87:f7:d3:99:0e:ea:42:87:4f:2d:25:55: ca:a5:24:c5:08:1e:2a:64:06:5c:c0:17:5a:df:26:90:bc:65: 1c:92:81:f1:14:55:a4:d4:4b:e5:54:e4:84:0a:bc:b0:c9:30: a6:5b:9c:e1:18:93:36:7f:2c:7b:1b:a2:11:3c:8d:42:20:e4: ab:a9:a4:27:30:1b:bb:d4:dc:e8:0c:7c:3d:3c:82:ba:06:fb: 45:aa:1a:ad:c4:bd:e4:4c:6a:52:47:8b:4a:f7:ee:98:1b:c4: 86:b1:02:fa:6f:29:30:f4:92:c5:2a:ea:d5:3a:e6:0d:60:f7: 4f:12:00:7f:e5:a8:9d:94:4b:45:0d:7b:ed:02:98:61:9c:ba: e5:48:3d:8e:e5:7f:f4:b2:66:dd:8b:8a:ec:5a:d1:5f:8c:82: 08:25:39:9a:01:19:8d:47:a5:c0:0f:c3:3d:d7:37:57:b0:0f: f9:d2:05:42:fc:79:59:0d:3c:8e:2f:41:b7:dd:d4:8e:d7:b9: 76:b6:94:8e -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7Nd0tc2YKekmWzLD1DjDNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMmViNWIzOGJiNjJlZGU1Yzk4Y2JmYmNmZjk1MzI4NTIx ODA1MTYwHhcNMjYwMTAxMjAxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MGU2NmMxMzk2ZjdlNDkzNTc3ZTBmYzgyMmMyZjI3YTE3NjkzZWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LzB7CawOx3b+XYxsb3CdUnv1tTf yIn0d39nP4diont7CPqIAC1M18Zt8tsrIdhuximQnDFpeBU4nrzb2I/r1OmIp6ko uyjJTP9WpwIrIAw0uB+PBCqH4WRDYeVXRAPlDHpX16Z1cAyywmmPWNGuGjNARr+V RJY0o4ZGw8wZhZhZEL4IapDhTay3rf3Jc+KgSRur1bOQ8nLveHK+kUC4gu3kJCXu pOjG1VZG3H6vhzKAbeqpY5MP87roXEaVewwTZcSSmCgB+oVH2hk+3zEqnWDt58bk gz2TH/lzlrmU8G96c6Ig0jSn76n9bF3KDTGaGlLKlr6Iriwln2z87eReiwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFDmbBOW9+STV34PyCLC8noXaT67MB8GA1UdIwQY MBaAFMwutbOLti7eXJjL+8/5UyhSGAUWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekM2MXM0dTJMdDVjbU12N3pfbFRLRklZQlJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82ZjAyNjktODM0ZS00N2M1LTk4ZTEt ZjFmODAyZTY2MTNiLzEvVU9ac0U1YjM1Sk5YZmdfSUlzTHllaGRwUHJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC82ZjAyNjktODM0ZS00N2M1LTk4ZTEtZjFmODAyZTY2MTNi LzEvekM2MXM0dTJMdDVjbU12N3pfbFRLRklZQlJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgcOAAGf AwcAKgcOAgBBMA0GCSqGSIb3DQEBCwUAA4IBAQAcXFOvMeWcYlkevEDK9Tf3ggto tqbwNu/dscp5/6o03rot+J0i6RTz7Rn9jWZSxcIsVnaxo0ILsMPeWtSH99OZDupC h08tJVXKpSTFCB4qZAZcwBda3yaQvGUckoHxFFWk1EvlVOSECrywyTCmW5zhGJM2 fyx7G6IRPI1CIOSrqaQnMBu71NzoDHw9PIK6BvtFqhqtxL3kTGpSR4tK9+6YG8SG sQL6bykw9JLFKurVOuYNYPdPEgB/5aidlEtFDXvtAphhnLrlSD2O5X/0smbdi4rs WtFfjIIIJTmaARmNR6XAD8M91zdXsA/50gVC/HlZDTyOL0G33dSO17l2tpSO -----END CERTIFICATE-----Generated at Wed Jan 7 23:51:43 2026 by rpki-client