This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/uIfUkBd_2uvsZ7jS1ZsJEmyn92c.roa File: uIfUkBd_2uvsZ7jS1ZsJEmyn92c.roa (raw, json) Hash identifier: GOXOMoC6ne/A4gF/DBNRcpJh+oHhM3k8jJSQVwLmm48= Subject key identifier: B8:87:D4:90:17:7F:DA:EB:EC:67:B8:D2:D5:9B:09:12:6C:A7:F7:67 Certificate issuer: /CN=83df0cacb9fd50e1be7dfbf3d0ac854beed786be Certificate serial: 019B7FF208F135066FE2A7CDD49ABF6FBA2E Authority key identifier: 83:DF:0C:AC:B9:FD:50:E1:BE:7D:FB:F3:D0:AC:85:4B:EE:D7:86:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g98MrLn9UOG-ffvz0KyFS-7Xhr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/uIfUkBd_2uvsZ7jS1ZsJEmyn92c.roa Signing time: Fri 02 Jan 2026 18:22:07 +0000 ROA not before: Fri 02 Jan 2026 18:22:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210385 IP address blocks: 2a14:ee80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.mft rsync://rpki.ripe.net/repository/DEFAULT/g98MrLn9UOG-ffvz0KyFS-7Xhr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:08:f1:35:06:6f:e2:a7:cd:d4:9a:bf:6f:ba:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83df0cacb9fd50e1be7dfbf3d0ac854beed786be Validity Not Before: Jan 2 18:22:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b887d490177fdaebec67b8d2d59b09126ca7f767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fe:7b:d7:9f:0a:0b:14:86:57:c9:a7:08:8a: a9:cf:36:fe:23:df:5a:78:f6:51:cb:a9:a7:41:32: d2:58:64:d2:f8:79:9e:1e:b8:e3:c2:8e:df:a0:3a: 4c:e2:6e:75:79:f6:5b:e4:2c:7e:4d:f5:c3:9e:13: 1a:54:aa:90:e2:c7:0e:a7:f2:b1:56:da:e6:8b:5e: 28:70:22:be:6d:c2:68:0f:85:e5:aa:60:30:5f:c7: dd:9c:83:3a:dc:b1:22:f7:47:a8:13:35:c1:e4:90: c9:f0:2e:0c:96:a1:88:40:13:14:f8:fc:02:4c:80: 70:7f:14:3e:58:69:10:e9:f4:c8:2e:60:83:6a:4d: bb:a0:69:2c:f9:94:01:2a:55:6e:1f:5e:7b:54:58: d6:7b:06:b0:83:9b:5e:52:22:10:b1:f5:2d:f8:4e: 65:3a:23:d2:8a:39:00:6e:75:98:be:96:da:89:78: 07:9c:c3:09:b2:d4:00:05:6e:26:d7:fc:96:fc:fe: 4d:c3:09:42:3e:0e:dd:d5:d2:41:37:22:1c:99:17: d5:7a:99:ce:d4:ec:fe:63:b9:6a:39:b0:2d:4a:03: 6b:f7:a1:28:0d:58:b0:66:8d:5b:06:5f:9a:70:be: 8f:88:51:83:1d:ed:63:82:14:e8:0e:cd:da:51:88: 36:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:87:D4:90:17:7F:DA:EB:EC:67:B8:D2:D5:9B:09:12:6C:A7:F7:67 X509v3 Authority Key Identifier: keyid:83:DF:0C:AC:B9:FD:50:E1:BE:7D:FB:F3:D0:AC:85:4B:EE:D7:86:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g98MrLn9UOG-ffvz0KyFS-7Xhr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/uIfUkBd_2uvsZ7jS1ZsJEmyn92c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:ee80::/32 Signature Algorithm: sha256WithRSAEncryption 93:73:af:ed:77:d1:14:f0:91:d1:d0:fc:62:f8:bc:53:f1:f3: 87:94:6a:90:4d:c5:23:e6:bd:81:d2:ad:6b:50:07:5f:56:0c: a3:ba:51:0b:b4:6a:e7:54:cc:92:fe:6c:b7:6f:07:93:9e:b4: 63:a1:79:86:de:49:30:11:a9:e5:ae:39:4e:14:1b:61:c9:89: 86:40:71:21:ef:01:2d:e5:f4:2d:37:bb:ac:20:bc:7e:32:99: 7a:c6:a6:64:3a:74:0e:b9:fa:8d:7d:25:ee:75:f1:e0:a0:8b: e4:e1:ab:56:c8:6c:d8:44:05:98:44:62:2e:b7:f0:d8:a2:ef: 91:9f:97:0d:53:92:6c:cb:68:b4:d7:84:9f:3e:86:12:bc:14: 4d:31:55:a5:f6:b6:95:81:8c:c9:13:ae:1a:4f:d0:77:66:40: 06:7f:6b:31:b2:48:a9:82:e9:77:0d:97:4c:2b:e6:bd:5d:16: 86:39:36:ba:18:a2:63:fb:e4:d9:9e:83:6a:30:5c:57:54:88: 16:c5:58:38:ad:66:ec:6e:92:78:a8:b6:65:62:14:c3:fb:61: 4d:e7:44:99:db:8f:a0:12:dd:dc:d5:ba:25:b0:6d:9b:b6:2c: 83:26:8f:84:8f:51:3b:3a:a4:44:88:53:b2:58:e1:7a:cf:76: 15:70:6b:35 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/8gjxNQZv4qfN1Jq/b7ouMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzZGYwY2FjYjlmZDUwZTFiZTdkZmJmM2QwYWM4NTRiZWVk Nzg2YmUwHhcNMjYwMTAyMTgyMjA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODg3ZDQ5MDE3N2ZkYWViZWM2N2I4ZDJkNTliMDkxMjZjYTdmNzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxf57158KCxSGV8mnCIqpzzb+I99a ePZRy6mnQTLSWGTS+HmeHrjjwo7foDpM4m51efZb5Cx+TfXDnhMaVKqQ4scOp/Kx Vtrmi14ocCK+bcJoD4XlqmAwX8fdnIM63LEi90eoEzXB5JDJ8C4MlqGIQBMU+PwC TIBwfxQ+WGkQ6fTILmCDak27oGks+ZQBKlVuH157VFjWewawg5teUiIQsfUt+E5l OiPSijkAbnWYvpbaiXgHnMMJstQABW4m1/yW/P5NwwlCPg7d1dJBNyIcmRfVepnO 1Oz+Y7lqObAtSgNr96EoDViwZo1bBl+acL6PiFGDHe1jghToDs3aUYg2WQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFLiH1JAXf9rr7Ge40tWbCRJsp/dnMB8GA1UdIwQY MBaAFIPfDKy5/VDhvn3789CshUvu14a+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzk4TXJMbjlVT0ctZmZ2ejBLeUZTLTdYaHI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hYTFjNTEtOTI2NC00MDZlLWI3OTYt NGUwMGMzYjcwODc4LzEvdUlmVWtCZF8ydXZzWjdqUzFac0pFbXluOTJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9hYTFjNTEtOTI2NC00MDZlLWI3OTYtNGUwMGMzYjcwODc4 LzEvZzk4TXJMbjlVT0ctZmZ2ejBLeUZTLTdYaHI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhTugDAN BgkqhkiG9w0BAQsFAAOCAQEAk3Ov7XfRFPCR0dD8Yvi8U/Hzh5RqkE3FI+a9gdKt a1AHX1YMo7pRC7Rq51TMkv5st28Hk560Y6F5ht5JMBGp5a45ThQbYcmJhkBxIe8B LeX0LTe7rCC8fjKZesamZDp0Drn6jX0l7nXx4KCL5OGrVshs2EQFmERiLrfw2KLv kZ+XDVOSbMtotNeEnz6GErwUTTFVpfa2lYGMyROuGk/Qd2ZABn9rMbJIqYLpdw2X TCvmvV0Whjk2uhiiY/vk2Z6DajBcV1SIFsVYOK1m7G6SeKi2ZWIUw/thTedEmduP oBLd3NW6JbBtm7YsgyaPhI9ROzqkRIhTsljhes92FXBrNQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:28 2026 by rpki-client