This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/UYvNce8rP-ANh79nfgJHbUQJoEQ.roa File: UYvNce8rP-ANh79nfgJHbUQJoEQ.roa (raw, json) Hash identifier: nt53AklYGxBq4O6SPyUr/5P+7H0miCp5rCG20NQj4fU= Subject key identifier: 51:8B:CD:71:EF:2B:3F:E0:0D:87:BF:67:7E:02:47:6D:44:09:A0:44 Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B7C801E5D4A484A4DBBDF0F1E99F50EDF Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/UYvNce8rP-ANh79nfgJHbUQJoEQ.roa Signing time: Fri 02 Jan 2026 02:18:49 +0000 ROA not before: Fri 02 Jan 2026 02:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 151673 IP address blocks: 2a0f:7803:fc00::/40 maxlen: 48 2a0f:7803:fd00::/40 maxlen: 48 2a0f:7803:fd12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:1e:5d:4a:48:4a:4d:bb:df:0f:1e:99:f5:0e:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Jan 2 02:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=518bcd71ef2b3fe00d87bf677e02476d4409a044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a5:2c:7e:70:46:5c:ad:b1:10:a8:8a:45:c1: e0:26:2b:b3:3d:6d:a7:3f:98:9f:de:00:cb:cd:a0: 7e:2e:94:4c:09:cb:ff:8b:94:fd:11:09:85:5a:14: c8:9b:a6:01:91:a7:f1:de:d8:e4:ad:5c:b9:2a:70: e0:e7:1f:42:9d:1b:bb:6f:63:62:e1:59:04:c8:d1: 72:8c:ab:69:11:50:b6:48:1f:de:49:a2:cd:88:58: bb:b9:c5:53:34:ba:87:6c:23:40:56:bb:a7:ae:cd: fa:da:7f:20:ba:d7:14:0e:53:2b:01:0c:99:d3:48: 70:7a:f0:a2:52:51:80:c9:41:2d:8b:95:1a:44:55: 4d:8c:76:b1:58:4a:1c:85:31:b7:f4:7e:7d:da:bf: 5d:79:3d:ff:c6:0e:c6:8b:79:7b:00:d4:e2:cd:29: 08:64:49:73:cc:97:1e:03:4d:86:db:7a:f6:98:bb: 56:d5:cf:d4:8f:fd:96:bc:3e:56:67:8c:e2:1e:01: 12:64:35:fc:e8:7e:13:09:6f:c9:51:7b:6e:42:33: 7d:91:13:3c:8f:70:56:cf:e9:80:21:16:4e:6b:09: e4:5b:73:60:be:da:54:97:c0:42:1a:c8:b9:16:89: 89:32:59:0a:81:d7:52:8d:c0:ff:58:1e:68:b9:91: e8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:8B:CD:71:EF:2B:3F:E0:0D:87:BF:67:7E:02:47:6D:44:09:A0:44 X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/UYvNce8rP-ANh79nfgJHbUQJoEQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7803:fc00::/39 Signature Algorithm: sha256WithRSAEncryption 3d:70:ec:44:ef:48:10:24:9d:b2:6b:c3:a5:6a:92:ca:ad:05: 26:39:98:0d:56:78:0a:1f:ac:4a:c4:bf:44:f7:d1:a9:db:12: 47:6e:2c:de:9d:9e:08:fa:1f:b6:33:91:0e:98:62:02:7e:71: 25:a7:62:7c:9d:42:e3:74:29:c6:9c:97:4c:4d:76:1e:d9:66: 50:ab:8a:f9:e5:7e:27:08:6a:01:ea:43:18:95:df:66:4b:9b: fe:31:d0:f1:ae:42:47:2b:f7:b0:13:4b:82:30:15:db:73:91: fb:a8:3e:19:a9:38:58:53:d7:04:56:e0:e3:33:9c:90:bf:40: 36:6e:3d:dd:bc:7c:5b:c6:1f:55:79:05:ca:ba:80:2f:d2:80: a8:fe:da:33:21:8e:6c:92:bb:56:43:b6:47:93:f2:c8:b3:f5: ba:1f:22:e9:08:c1:11:16:b3:e5:6b:d0:c5:c3:a2:3c:a2:52: 72:de:1d:a5:20:7e:28:db:e1:16:72:5a:7f:f1:b7:24:67:fe: f9:2a:25:57:9d:08:12:ab:b1:05:fd:d2:a1:1b:9d:b6:02:95: 4c:f6:54:8d:f1:eb:02:4c:ee:77:62:75:d6:b5:13:97:28:92: 95:3b:af:ae:3d:3f:2b:60:57:9c:77:59:a5:36:a5:08:cc:cf: 4d:05:c6:cb -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt8gB5dSkhKTbvfDx6Z9Q7fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjYwMTAyMDIxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MThiY2Q3MWVmMmIzZmUwMGQ4N2JmNjc3ZTAyNDc2ZDQ0MDlhMDQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKUsfnBGXK2xEKiKRcHgJiuzPW2n P5if3gDLzaB+LpRMCcv/i5T9EQmFWhTIm6YBkafx3tjkrVy5KnDg5x9CnRu7b2Ni 4VkEyNFyjKtpEVC2SB/eSaLNiFi7ucVTNLqHbCNAVrunrs362n8gutcUDlMrAQyZ 00hwevCiUlGAyUEti5UaRFVNjHaxWEochTG39H592r9deT3/xg7Gi3l7ANTizSkI ZElzzJceA02G23r2mLtW1c/Uj/2WvD5WZ4ziHgESZDX86H4TCW/JUXtuQjN9kRM8 j3BWz+mAIRZOawnkW3NgvtpUl8BCGsi5FomJMlkKgddSjcD/WB5ouZHokQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFFGLzXHvKz/gDYe/Z34CR21ECaBEMB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvVVl2TmNlOHJQLUFOaDc5bmZnSkhiVVFKb0VRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBKg94A/ww DQYJKoZIhvcNAQELBQADggEBAD1w7ETvSBAknbJrw6VqksqtBSY5mA1WeAofrErE v0T30anbEkduLN6dngj6H7YzkQ6YYgJ+cSWnYnydQuN0Kcacl0xNdh7ZZlCrivnl ficIagHqQxiV32ZLm/4x0PGuQkcr97ATS4IwFdtzkfuoPhmpOFhT1wRW4OMznJC/ QDZuPd28fFvGH1V5Bcq6gC/SgKj+2jMhjmySu1ZDtkeT8siz9bofIukIwREWs+Vr 0MXDojyiUnLeHaUgfijb4RZyWn/xtyRn/vkqJVedCBKrsQX90qEbnbYClUz2VI3x 6wJM7ndidda1E5cokpU7r649PytgV5x3WaU2pQjMz00Fxss= -----END CERTIFICATE-----Generated at Wed Jan 21 17:00:55 2026 by rpki-client