This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/ujsftfvLfUwDJ11Q7jqPTwZHvjs.roa File: ujsftfvLfUwDJ11Q7jqPTwZHvjs.roa (raw, json) Hash identifier: b27HdQ5e99kb9xI2IR4xtsvZ4mT9ALpQe3hu34f+Ci0= Subject key identifier: BA:3B:1F:B5:FB:CB:7D:4C:03:27:5D:50:EE:3A:8F:4F:06:47:BE:3B Certificate issuer: /CN=373d8f557cae18e235d938bad3cfae17c91b9de6 Certificate serial: 019B7D5CF496589424ABA005DAFCD50AC1CF Authority key identifier: 37:3D:8F:55:7C:AE:18:E2:35:D9:38:BA:D3:CF:AE:17:C9:1B:9D:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/ujsftfvLfUwDJ11Q7jqPTwZHvjs.roa Signing time: Fri 02 Jan 2026 06:20:02 +0000 ROA not before: Fri 02 Jan 2026 06:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209488 IP address blocks: 2a12:61c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:f4:96:58:94:24:ab:a0:05:da:fc:d5:0a:c1:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=373d8f557cae18e235d938bad3cfae17c91b9de6 Validity Not Before: Jan 2 06:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba3b1fb5fbcb7d4c03275d50ee3a8f4f0647be3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:e4:37:67:af:1e:0a:2f:fc:49:20:ac:8e:86: ad:e3:dd:e5:bd:a5:87:67:41:85:72:37:d8:20:78: 92:54:07:5e:53:21:d1:8e:71:1e:cc:97:a7:86:95: df:a9:6f:31:c9:35:59:2c:f8:d7:70:24:e7:d1:39: de:1d:87:01:29:1c:19:ed:2e:ed:6b:f9:01:c8:69: e2:89:14:64:99:1c:dc:6b:af:0f:d9:33:b9:39:14: 6e:9e:b6:bf:57:68:d7:2f:e9:e6:f9:91:e0:34:bc: 9b:a4:be:1a:51:47:a5:78:22:9a:a3:19:d2:ad:3b: 43:cd:c0:d3:58:05:dc:3a:46:2e:18:bc:e3:7b:54: 2d:3c:23:28:c0:fe:db:25:cb:fe:02:a2:a1:31:77: 62:55:78:2e:b7:4c:30:a8:ac:aa:d0:89:19:94:ad: b7:2d:f0:00:ce:cd:de:da:36:36:f5:c9:f2:ad:26: ea:56:ab:bb:bc:75:f6:5c:cb:52:d5:54:ab:5d:fd: 65:22:6b:ac:cc:e2:1e:77:83:a8:3c:d9:1d:4f:bc: 42:89:0c:80:c0:f5:3f:73:cb:6a:04:b4:b4:3d:66: 84:26:e3:2d:89:21:13:26:0a:f7:7e:a7:6c:9a:cf: 89:dd:d2:cc:42:2b:30:80:c2:3f:71:c3:6e:ce:93: 87:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:3B:1F:B5:FB:CB:7D:4C:03:27:5D:50:EE:3A:8F:4F:06:47:BE:3B X509v3 Authority Key Identifier: keyid:37:3D:8F:55:7C:AE:18:E2:35:D9:38:BA:D3:CF:AE:17:C9:1B:9D:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/ujsftfvLfUwDJ11Q7jqPTwZHvjs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:61c0::/29 Signature Algorithm: sha256WithRSAEncryption 23:85:96:a7:47:3e:bd:ee:f3:90:74:3e:70:fc:5f:bb:1f:d6: 83:65:3a:2e:98:ff:9d:64:0e:38:94:12:d2:90:df:ac:15:42: 36:79:e7:55:eb:f6:2b:20:90:b5:4f:8f:91:0b:a9:39:ae:66: c8:15:ea:63:05:f7:e0:6e:de:8b:38:26:4f:5e:31:47:f6:8d: 96:46:ac:9d:f0:cb:9b:30:38:08:ad:60:86:02:4b:67:58:74: 2a:03:5a:bd:74:56:4d:59:e6:b9:46:75:33:c1:da:bc:c2:e5: ec:51:7a:fa:1f:0b:6a:65:d1:cf:60:3b:22:5a:a3:1e:30:08: b9:1c:cd:b6:d1:cd:85:0d:31:cf:d8:2d:fa:5f:0c:03:9e:2e: 25:08:dd:f9:52:0b:7b:4b:bd:b0:62:96:8c:ac:31:8a:31:9e: 75:f6:a7:da:be:2c:3b:aa:40:0b:e7:52:83:0d:a2:f9:96:60: e7:c5:ed:37:d3:c4:a7:58:93:3a:fd:93:6f:98:cb:28:15:79: ab:f7:14:50:c6:1a:87:56:10:6a:60:11:53:a8:26:da:5d:97: 68:79:02:d3:d5:02:90:16:ad:e1:a9:ae:a8:03:8b:09:1b:3c: a5:4e:6b:f9:34:4c:de:e9:b6:5e:b5:17:2e:a6:28:76:2e:52: bd:db:d0:1a -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9XPSWWJQkq6AF2vzVCsHPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3M2Q4ZjU1N2NhZTE4ZTIzNWQ5MzhiYWQzY2ZhZTE3Yzkx YjlkZTYwHhcNMjYwMTAyMDYyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTNiMWZiNWZiY2I3ZDRjMDMyNzVkNTBlZTNhOGY0ZjA2NDdiZTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/OQ3Z68eCi/8SSCsjoat493lvaWH Z0GFcjfYIHiSVAdeUyHRjnEezJenhpXfqW8xyTVZLPjXcCTn0TneHYcBKRwZ7S7t a/kByGniiRRkmRzca68P2TO5ORRunra/V2jXL+nm+ZHgNLybpL4aUUeleCKaoxnS rTtDzcDTWAXcOkYuGLzje1QtPCMowP7bJcv+AqKhMXdiVXgut0wwqKyq0IkZlK23 LfAAzs3e2jY29cnyrSbqVqu7vHX2XMtS1VSrXf1lImuszOIed4OoPNkdT7xCiQyA wPU/c8tqBLS0PWaEJuMtiSETJgr3fqdsms+J3dLMQiswgMI/ccNuzpOHkwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFLo7H7X7y31MAyddUO46j08GR747MB8GA1UdIwQY MBaAFDc9j1V8rhjiNdk4utPPrhfJG53mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnoyUFZYeXVHT0kxMlRpNjA4LXVGOGtibmVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy81MTc0MTEtMGM0Mi00ZDE4LTkwMzkt Yzk5ZGQzOTBhN2Q2LzEvdWpzZnRmdkxmVXdESjExUTdqcVBUd1pIdmpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy81MTc0MTEtMGM0Mi00ZDE4LTkwMzktYzk5ZGQzOTBhN2Q2 LzEvTnoyUFZYeXVHT0kxMlRpNjA4LXVGOGtibmVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhJhwDAN BgkqhkiG9w0BAQsFAAOCAQEAI4WWp0c+ve7zkHQ+cPxfux/Wg2U6Lpj/nWQOOJQS 0pDfrBVCNnnnVev2KyCQtU+PkQupOa5myBXqYwX34G7eizgmT14xR/aNlkasnfDL mzA4CK1ghgJLZ1h0KgNavXRWTVnmuUZ1M8HavMLl7FF6+h8LamXRz2A7IlqjHjAI uRzNttHNhQ0xz9gt+l8MA54uJQjd+VILe0u9sGKWjKwxijGedfan2r4sO6pAC+dS gw2i+ZZg58XtN9PEp1iTOv2Tb5jLKBV5q/cUUMYah1YQamARU6gm2l2XaHkC09UC kBat4amuqAOLCRs8pU5r+TRM3um2XrUXLqYodi5SvdvQGg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:29 2026 by rpki-client