This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/uYot5tEJfj6hFOwNQEImMW--BM0.roa File: uYot5tEJfj6hFOwNQEImMW--BM0.roa (raw, json) Hash identifier: ecbB/eDwUVf9YE82kPBIYgrYl7TjhzTaHG92py1d/js= Subject key identifier: B9:8A:2D:E6:D1:09:7E:3E:A1:14:EC:0D:40:42:26:31:6F:BE:04:CD Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071 Certificate serial: 019B7E389798D9AE6350B0A19AC3E070D3A7 Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/uYot5tEJfj6hFOwNQEImMW--BM0.roa Signing time: Fri 02 Jan 2026 10:19:56 +0000 ROA not before: Fri 02 Jan 2026 10:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21286 IP address blocks: 2a07:3502:1120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 19:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:97:98:d9:ae:63:50:b0:a1:9a:c3:e0:70:d3:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071 Validity Not Before: Jan 2 10:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b98a2de6d1097e3ea114ec0d404226316fbe04cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b3:c2:18:0a:47:cf:f0:92:24:83:42:5a:6d: a6:c1:f3:f4:02:87:0c:61:54:f3:e8:6e:13:5c:67: 54:ed:2f:7b:29:25:fe:ab:21:e0:9b:af:42:38:54: 29:53:7f:dc:f0:de:1e:20:1d:b8:98:a1:81:62:93: c7:bc:0c:96:b1:e4:ea:d9:13:0f:dc:ff:f3:f8:31: 6a:47:3f:9e:18:58:47:ed:2d:bb:63:66:40:e1:46: 5b:04:61:61:e7:c9:bf:e0:99:a5:2b:8c:f5:20:86: e2:54:c9:71:07:07:a2:3a:d6:3d:0e:bd:9f:7c:08: b9:62:ab:43:c8:5a:00:eb:3d:76:dc:28:8b:34:f1: ad:0e:fb:af:ef:74:7a:96:9f:98:2e:8c:0c:c6:eb: db:ed:d4:40:43:18:b5:6b:04:10:fa:2e:ea:62:b4: e8:00:22:5a:a1:be:c1:ce:6a:c9:28:79:b7:12:74: dd:aa:2d:4d:8b:63:5c:da:33:29:92:cd:30:2c:47: 71:41:6d:f1:7f:f8:6d:32:c3:8d:12:04:9b:d1:22: 18:1f:94:d4:cc:41:06:45:6c:59:1b:c0:e1:dc:52: 52:32:56:fc:03:79:03:30:7b:58:c3:30:9d:dc:12: 5c:3c:5a:34:0c:84:ef:26:a8:c1:4b:ec:a2:00:4a: 2a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:8A:2D:E6:D1:09:7E:3E:A1:14:EC:0D:40:42:26:31:6F:BE:04:CD X509v3 Authority Key Identifier: keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/uYot5tEJfj6hFOwNQEImMW--BM0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:3502:1120::/48 Signature Algorithm: sha256WithRSAEncryption 9f:1f:c8:ed:2f:60:85:ca:70:f5:51:63:80:9c:2a:0b:9c:4c: b8:6d:b4:10:66:74:f0:a0:7c:73:83:dd:19:04:2c:f4:d4:61: 28:7d:95:63:75:79:36:0d:be:89:2f:07:3b:c1:61:22:a2:56: a4:1b:45:74:50:03:cd:af:84:df:74:8e:40:36:5f:17:79:3e: 4a:9c:5c:68:9a:77:b9:32:cc:80:d7:fd:39:44:dc:e5:17:87: 84:0a:0a:aa:71:34:51:23:84:56:b7:0e:98:a7:74:e9:c8:12: c7:fa:53:05:35:a6:9f:b0:ec:3b:84:96:e7:7b:26:6f:89:5a: 32:e5:31:76:5d:6a:6f:a8:11:fb:23:10:a7:7f:7b:36:f3:0a: bc:12:70:70:e8:1e:a8:bf:1e:70:9e:c8:b8:ba:cb:a4:dd:a7: 8d:1d:b7:78:83:bf:b4:73:5b:c9:8f:6e:59:f5:e5:99:38:19: 96:27:35:5e:9e:5e:34:08:76:b1:83:ce:b6:15:2d:23:5d:22: be:a0:e9:13:24:e4:66:43:a7:8d:5f:78:0f:9a:b1:b2:ed:f9: 19:d5:c7:7c:46:ab:7f:23:87:79:86:f2:bf:b5:6e:0b:5c:85: 7f:f9:4b:e7:80:e3:99:5c:6e:bd:d2:dd:fb:b3:b6:32:3a:74: c7:c4:c1:47 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OJeY2a5jULChmsPgcNOnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNWQyOGQxNjYyNmJjNWRjYWJmMmU5MTU0MzU3ODJiOTZl MTQwNzEwHhcNMjYwMTAyMTAxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOThhMmRlNmQxMDk3ZTNlYTExNGVjMGQ0MDQyMjYzMTZmYmUwNGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprPCGApHz/CSJINCWm2mwfP0AocM YVTz6G4TXGdU7S97KSX+qyHgm69COFQpU3/c8N4eIB24mKGBYpPHvAyWseTq2RMP 3P/z+DFqRz+eGFhH7S27Y2ZA4UZbBGFh58m/4JmlK4z1IIbiVMlxBweiOtY9Dr2f fAi5YqtDyFoA6z123CiLNPGtDvuv73R6lp+YLowMxuvb7dRAQxi1awQQ+i7qYrTo ACJaob7BzmrJKHm3EnTdqi1Ni2Nc2jMpks0wLEdxQW3xf/htMsONEgSb0SIYH5TU zEEGRWxZG8Dh3FJSMlb8A3kDMHtYwzCd3BJcPFo0DITvJqjBS+yiAEoqFwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLmKLebRCX4+oRTsDUBCJjFvvgTNMB8GA1UdIwQY MBaAFLBdKNFmJrxdyr8ukVQ1eCuW4UBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEt YWQ1NzU1MjJiMzY1LzEvdVlvdDV0RUpmajZoRk93TlFFSW1NVy0tQk0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEtYWQ1NzU1MjJiMzY1 LzEvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgc1AhEg MA0GCSqGSIb3DQEBCwUAA4IBAQCfH8jtL2CFynD1UWOAnCoLnEy4bbQQZnTwoHxz g90ZBCz01GEofZVjdXk2Db6JLwc7wWEiolakG0V0UAPNr4TfdI5ANl8XeT5KnFxo mne5MsyA1/05RNzlF4eECgqqcTRRI4RWtw6Yp3TpyBLH+lMFNaafsOw7hJbneyZv iVoy5TF2XWpvqBH7IxCnf3s28wq8EnBw6B6ovx5wnsi4usuk3aeNHbd4g7+0c1vJ j25Z9eWZOBmWJzVenl40CHaxg862FS0jXSK+oOkTJORmQ6eNX3gPmrGy7fkZ1cd8 Rqt/I4d5hvK/tW4LXIV/+UvngOOZXG690t37s7YyOnTHxMFH -----END CERTIFICATE-----Generated at Tue Jan 20 04:48:48 2026 by rpki-client