This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/UjTF-iOQAXe4C3nZk-jwPq5ebdI.roa File: UjTF-iOQAXe4C3nZk-jwPq5ebdI.roa (raw, json) Hash identifier: tFcUi9io00Ps5a/Z3POpXjF44juMRJlgoOF7wGi0PbM= Subject key identifier: 52:34:C5:FA:23:90:01:77:B8:0B:79:D9:93:E8:F0:3E:AE:5E:6D:D2 Certificate issuer: /CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009 Certificate serial: 019B7DC9DF8145BA210D768FF8C134493E7F Authority key identifier: 16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/UjTF-iOQAXe4C3nZk-jwPq5ebdI.roa Signing time: Fri 02 Jan 2026 08:19:00 +0000 ROA not before: Fri 02 Jan 2026 08:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201086 IP address blocks: 2a0f:641::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:df:81:45:ba:21:0d:76:8f:f8:c1:34:49:3e:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009 Validity Not Before: Jan 2 08:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5234c5fa23900177b80b79d993e8f03eae5e6dd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:44:ff:ad:d8:f7:c0:87:bb:c7:47:6b:93:6e: 77:1f:08:c7:79:19:a4:36:cb:54:32:7d:56:b5:63: 60:af:ee:e0:50:52:92:24:46:40:02:7c:b8:28:28: 51:39:c5:40:2c:ca:e6:58:60:09:78:61:bf:02:51: 20:79:3a:ed:3e:f5:bb:af:1b:16:9b:29:5b:d5:f0: fb:ba:1f:48:34:28:e3:74:a4:86:eb:31:a6:74:80: 90:24:77:ad:02:1f:10:88:53:c0:9e:47:41:b0:31: 43:5e:9e:53:ce:a9:dd:d6:4b:46:01:16:b7:53:22: 2a:7d:e6:96:41:9f:4b:f1:aa:80:06:5f:40:69:b1: 0b:9d:0d:e6:d1:f3:c2:00:63:84:cb:47:24:81:a8: 9d:2a:20:65:27:d7:f2:62:d3:61:4a:f2:98:bc:2b: 88:86:d8:c2:7a:9b:21:ff:1a:8d:84:7f:d3:20:3f: 28:ca:b4:b7:99:fe:43:5d:de:34:f9:f4:46:ba:4f: 52:5b:b4:79:a4:e9:db:ee:e3:70:45:90:99:40:68: 30:49:f6:6f:0d:f2:7a:7a:88:55:bc:e6:bf:4f:1b: c0:22:f2:6a:36:e9:a4:a9:59:76:b6:cd:7f:d9:62: de:02:6e:89:fc:ee:7f:46:53:fb:e5:8d:db:05:88: 98:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:34:C5:FA:23:90:01:77:B8:0B:79:D9:93:E8:F0:3E:AE:5E:6D:D2 X509v3 Authority Key Identifier: keyid:16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/UjTF-iOQAXe4C3nZk-jwPq5ebdI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:641::/32 Signature Algorithm: sha256WithRSAEncryption b9:5e:77:98:dd:0f:91:26:9e:fb:7c:e4:b8:f2:84:7a:3b:94: 26:ab:26:79:3d:9e:dd:78:c0:97:35:66:47:78:53:9a:56:10: 2e:91:44:8a:fa:21:56:b0:eb:37:15:c7:f3:53:25:b7:85:d5: d5:27:6e:93:bc:9a:3c:ce:3b:58:aa:c9:a5:23:45:f0:93:45: 2b:90:c7:2c:c3:8e:f4:0b:d6:d9:74:55:ea:df:9d:37:d2:1b: 9a:cc:73:a4:4d:f9:6e:20:35:33:bc:87:f9:0f:ed:4c:ab:04: b4:f4:f1:77:42:c0:cb:c2:1a:5a:05:d2:eb:37:24:a6:7e:a5: c4:ea:4d:68:4b:2e:3f:d7:ad:3e:05:1d:c6:14:f6:f7:db:89: 3e:bd:07:b7:ce:0a:17:88:18:e6:7f:d3:b7:89:14:ae:9d:a0: 6d:3f:52:c9:e7:e3:61:3a:f1:69:e5:e2:85:ab:74:c5:a3:1f: f6:19:a6:a0:ad:2b:25:6f:01:81:87:d2:a1:a7:f3:7f:73:37: 5c:61:3c:26:81:ba:30:04:6e:a4:53:1a:74:e9:c1:99:23:1a: 60:a6:fd:01:2f:bb:00:59:76:39:50:cf:d5:a2:52:a1:ac:b5: a6:c8:89:b5:c4:16:68:84:5e:88:b6:78:64:ff:43:11:2d:02: f6:6f:99:d2 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9yd+BRbohDXaP+ME0ST5/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NDk3ZDg0NTNjNWVlM2ViYmIzODhlMWE0N2ExOTVmZjMw ZmUwMDkwHhcNMjYwMTAyMDgxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjM0YzVmYTIzOTAwMTc3YjgwYjc5ZDk5M2U4ZjAzZWFlNWU2ZGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0T/rdj3wIe7x0drk253HwjHeRmk NstUMn1WtWNgr+7gUFKSJEZAAny4KChROcVALMrmWGAJeGG/AlEgeTrtPvW7rxsW mylb1fD7uh9INCjjdKSG6zGmdICQJHetAh8QiFPAnkdBsDFDXp5Tzqnd1ktGARa3 UyIqfeaWQZ9L8aqABl9AabELnQ3m0fPCAGOEy0ckgaidKiBlJ9fyYtNhSvKYvCuI htjCepsh/xqNhH/TID8oyrS3mf5DXd40+fRGuk9SW7R5pOnb7uNwRZCZQGgwSfZv DfJ6eohVvOa/TxvAIvJqNumkqVl2ts1/2WLeAm6J/O5/RlP75Y3bBYiYGQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFFI0xfojkAF3uAt52ZPo8D6uXm3SMB8GA1UdIwQY MBaAFBZJfYRTxe4+u7OI4aR6GV/zD+AJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmtsOWhGUEY3ajY3czRqaHBIb1pYX01QNEFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jOTdmY2YtMWE4ZC00YWM5LWJmZWEt YjIzNGRkNmVkNjM3LzEvVWpURi1pT1FBWGU0QzNuWmstandQcTVlYmRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9jOTdmY2YtMWE4ZC00YWM5LWJmZWEtYjIzNGRkNmVkNjM3 LzEvRmtsOWhGUEY3ajY3czRqaHBIb1pYX01QNEFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg8GQTAN BgkqhkiG9w0BAQsFAAOCAQEAuV53mN0PkSae+3zkuPKEejuUJqsmeT2e3XjAlzVm R3hTmlYQLpFEivohVrDrNxXH81Mlt4XV1Sduk7yaPM47WKrJpSNF8JNFK5DHLMOO 9AvW2XRV6t+dN9IbmsxzpE35biA1M7yH+Q/tTKsEtPTxd0LAy8IaWgXS6zckpn6l xOpNaEsuP9etPgUdxhT299uJPr0Ht84KF4gY5n/Tt4kUrp2gbT9SyefjYTrxaeXi hat0xaMf9hmmoK0rJW8BgYfSoafzf3M3XGE8JoG6MARupFMadOnBmSMaYKb9AS+7 AFl2OVDP1aJSoay1psiJtcQWaIReiLZ4ZP9DES0C9m+Z0g== -----END CERTIFICATE-----Generated at Mon Jan 26 23:21:16 2026 by rpki-client