This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/UQeZhixfXf_YkfYGyO2Lf14Z6_s.roa File: UQeZhixfXf_YkfYGyO2Lf14Z6_s.roa (raw, json) Hash identifier: eKAIar7WRAnNke9Qfa+HTZNykSJ9iONQr3Jz7CFyN/A= Subject key identifier: 51:07:99:86:2C:5F:5D:FF:D8:91:F6:06:C8:ED:8B:7F:5E:19:EB:FB Certificate issuer: /CN=f6af433974df373b70abd76b13e1c70c775f554b Certificate serial: 019B78348CE3B02C359AA21F744440028952 Authority key identifier: F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/UQeZhixfXf_YkfYGyO2Lf14Z6_s.roa Signing time: Thu 01 Jan 2026 06:17:48 +0000 ROA not before: Thu 01 Jan 2026 06:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207252 IP address blocks: 2a12:3e80:401::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:8c:e3:b0:2c:35:9a:a2:1f:74:44:40:02:89:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6af433974df373b70abd76b13e1c70c775f554b Validity Not Before: Jan 1 06:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=510799862c5f5dffd891f606c8ed8b7f5e19ebfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0d:06:f1:ea:aa:36:05:9d:8a:a6:68:2a:51: 58:72:1b:b1:5e:96:fc:e0:3c:a4:52:07:00:4b:c8: 0b:0d:87:90:72:e4:56:a4:05:69:25:e5:5e:52:ca: 3d:cd:40:ae:17:76:97:ba:b5:1f:f4:98:28:6a:c4: d9:8d:22:e8:9b:fb:23:3a:f3:66:ee:eb:78:3a:37: 66:e7:46:dc:45:9c:14:fe:20:26:7c:3b:b3:82:bd: 35:81:ca:1a:d9:c8:e9:51:41:3e:00:69:a1:56:e0: 00:e3:64:9e:3f:f0:56:57:8a:ec:5f:a9:8b:e1:91: 43:96:66:c8:36:9f:b0:8a:83:ef:67:9b:11:b6:a1: 3a:62:e5:5b:31:29:34:f7:5d:79:da:02:e3:42:e6: 4f:9d:be:5c:69:fa:98:af:f6:99:8c:7a:30:d1:d2: 5e:94:58:70:84:8c:f7:a5:48:9f:37:62:51:02:52: b6:5c:da:48:cb:b5:8d:7d:b8:7c:72:b5:6f:55:8e: b2:3d:d1:c7:88:30:35:56:ef:a3:6f:2c:a7:f9:4c: 8d:26:c6:45:04:bc:e1:f6:a0:a2:7e:58:96:b3:e5: e7:dc:1b:0a:9c:9e:48:c4:56:52:f4:57:ed:68:dd: 4e:57:c2:eb:6b:7b:eb:b7:b1:b5:40:b1:0e:32:c6: f1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:07:99:86:2C:5F:5D:FF:D8:91:F6:06:C8:ED:8B:7F:5E:19:EB:FB X509v3 Authority Key Identifier: keyid:F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/UQeZhixfXf_YkfYGyO2Lf14Z6_s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:3e80:401::/48 Signature Algorithm: sha256WithRSAEncryption 00:be:a1:01:c1:93:5d:f8:26:1e:6d:de:77:6e:be:3b:a6:86: 51:69:41:bf:a4:b9:f3:0a:17:f5:97:ef:f9:e1:2c:2c:4c:90: 9b:83:82:12:a3:c7:58:e9:de:00:d1:41:bc:f0:6b:0d:30:00: ea:b6:3d:3c:ec:92:51:a9:2f:20:f6:7e:6d:29:55:ca:26:10: ed:ee:58:1a:cc:51:29:1b:6a:9e:56:1f:c0:bb:2c:ed:f2:0e: 4e:06:8a:07:02:6a:d3:3a:e1:fb:10:e8:b0:ec:36:f4:52:93: c5:36:16:38:d3:30:95:80:eb:54:0e:ae:27:e0:25:6a:99:1b: 42:b3:25:69:c4:63:9d:de:aa:fe:65:dd:63:e6:b2:3b:1c:0a: f6:e9:9a:d1:cd:93:5b:39:27:08:5f:f9:4f:e3:6c:2f:73:b9: 02:df:5d:50:46:2c:d1:93:a5:c9:e0:4b:63:5f:db:bd:18:f6: 67:09:52:ec:cd:f4:ff:31:26:b4:29:52:df:98:ea:7b:de:05: 01:b3:0f:e4:b5:68:62:f8:fb:89:5c:ff:01:dc:20:7a:67:01: 9b:a8:97:fd:3f:7b:e7:c8:8a:d9:d0:3b:9d:19:e2:a1:71:01: 2b:79:09:27:8a:09:b8:fd:29:99:04:57:3b:49:1d:78:0e:0c: 74:cc:e5:57 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4NIzjsCw1mqIfdERAAolSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YWY0MzM5NzRkZjM3M2I3MGFiZDc2YjEzZTFjNzBjNzc1 ZjU1NGIwHhcNMjYwMTAxMDYxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTA3OTk4NjJjNWY1ZGZmZDg5MWY2MDZjOGVkOGI3ZjVlMTllYmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvg0G8eqqNgWdiqZoKlFYchuxXpb8 4DykUgcAS8gLDYeQcuRWpAVpJeVeUso9zUCuF3aXurUf9JgoasTZjSLom/sjOvNm 7ut4Ojdm50bcRZwU/iAmfDuzgr01gcoa2cjpUUE+AGmhVuAA42SeP/BWV4rsX6mL 4ZFDlmbINp+wioPvZ5sRtqE6YuVbMSk091152gLjQuZPnb5cafqYr/aZjHow0dJe lFhwhIz3pUifN2JRAlK2XNpIy7WNfbh8crVvVY6yPdHHiDA1Vu+jbyyn+UyNJsZF BLzh9qCifliWs+Xn3BsKnJ5IxFZS9FftaN1OV8Lra3vrt7G1QLEOMsbxHwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFEHmYYsX13/2JH2Bsjti39eGev7MB8GA1UdIwQY MBaAFPavQzl03zc7cKvXaxPhxwx3X1VLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXE5RE9YVGZOenR3cTlkckUtSEhESGRmVlVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mOWNhZjAtMmMyZS00ODk3LThhM2It YTI2YmM2NTNiMDZiLzEvVVFlWmhpeGZYZl9Za2ZZR3lPMkxmMTRaNl9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9mOWNhZjAtMmMyZS00ODk3LThhM2ItYTI2YmM2NTNiMDZi LzEvOXE5RE9YVGZOenR3cTlkckUtSEhESGRmVlVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhI+gAQB MA0GCSqGSIb3DQEBCwUAA4IBAQAAvqEBwZNd+CYebd53br47poZRaUG/pLnzChf1 l+/54SwsTJCbg4ISo8dY6d4A0UG88GsNMADqtj087JJRqS8g9n5tKVXKJhDt7lga zFEpG2qeVh/Auyzt8g5OBooHAmrTOuH7EOiw7Db0UpPFNhY40zCVgOtUDq4n4CVq mRtCsyVpxGOd3qr+Zd1j5rI7HAr26ZrRzZNbOScIX/lP42wvc7kC311QRizRk6XJ 4EtjX9u9GPZnCVLszfT/MSa0KVLfmOp73gUBsw/ktWhi+PuJXP8B3CB6ZwGbqJf9 P3vnyIrZ0DudGeKhcQEreQknigm4/SmZBFc7SR14Dgx0zOVX -----END CERTIFICATE-----Generated at Mon Jan 19 23:20:37 2026 by rpki-client