This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/uaxh8U0jVTA13VbI4dqjzJRrb6c.roa File: uaxh8U0jVTA13VbI4dqjzJRrb6c.roa (raw, json) Hash identifier: mKgAzv+fNzwcauULBu1C+QLYeE57KlSGUy875oXXIUU= Subject key identifier: B9:AC:61:F1:4D:23:55:30:35:DD:56:C8:E1:DA:A3:CC:94:6B:6F:A7 Certificate issuer: /CN=14a3de4b7e66c87cf9c33e008a02d1a46e3fc766 Certificate serial: 019B7834D0AAD31762D65D219637ED36D00D Authority key identifier: 14:A3:DE:4B:7E:66:C8:7C:F9:C3:3E:00:8A:02:D1:A4:6E:3F:C7:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/uaxh8U0jVTA13VbI4dqjzJRrb6c.roa Signing time: Thu 01 Jan 2026 06:18:05 +0000 ROA not before: Thu 01 Jan 2026 06:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198515 IP address blocks: 2a0d:70c0::/29 maxlen: 29 2a0d:70c0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:d0:aa:d3:17:62:d6:5d:21:96:37:ed:36:d0:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14a3de4b7e66c87cf9c33e008a02d1a46e3fc766 Validity Not Before: Jan 1 06:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9ac61f14d23553035dd56c8e1daa3cc946b6fa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:86:7a:3f:f0:6c:c9:40:e2:4d:fd:cb:ae:fb: c9:72:78:86:7f:d8:bf:d2:b2:45:db:19:8d:dd:5c: a9:35:6a:72:44:5a:42:8b:4e:a8:d0:e3:61:56:29: 61:a7:a2:c7:10:ee:03:32:26:72:f0:9d:ba:53:77: 1e:1f:ad:12:05:6d:10:0e:7d:32:4b:f2:72:19:32: 7b:55:a4:d3:c5:11:24:0f:da:85:ab:8c:72:9f:57: 90:1d:3d:5c:fd:51:bd:6a:f3:b1:67:04:d3:df:00: dc:20:fd:65:06:01:b3:bd:bb:db:34:06:6d:0b:b4: ff:b3:34:0c:b0:71:00:9e:f2:a6:ae:8d:b2:c2:0b: 58:bf:97:a4:f4:07:23:7e:b2:79:3b:10:a1:b7:10: ee:fc:da:56:f8:94:19:37:03:23:8f:6c:fa:64:47: f1:eb:dd:5f:b3:a3:4e:3d:e1:53:bf:60:26:cd:86: be:92:37:b3:d4:71:7a:bd:c2:2c:3d:d4:18:4b:4f: 30:2a:b1:84:6e:9e:15:cd:34:bf:bb:e5:fb:d3:dd: fd:fb:e1:03:c0:eb:28:03:ed:3c:22:ff:02:fe:24: fa:b3:7b:67:c0:cd:91:e0:2a:93:db:8a:c3:55:8c: 31:69:45:ee:95:d9:82:79:79:d4:53:b4:d8:5f:dc: 2b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:AC:61:F1:4D:23:55:30:35:DD:56:C8:E1:DA:A3:CC:94:6B:6F:A7 X509v3 Authority Key Identifier: keyid:14:A3:DE:4B:7E:66:C8:7C:F9:C3:3E:00:8A:02:D1:A4:6E:3F:C7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/uaxh8U0jVTA13VbI4dqjzJRrb6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:70c0::/29 Signature Algorithm: sha256WithRSAEncryption a7:05:81:bb:f4:ca:35:e9:ba:97:a3:0b:2f:df:d9:33:a1:bc: c4:5e:e1:f8:cd:5e:e7:74:2a:a7:66:b9:82:4e:06:57:c0:7f: d8:33:04:e5:8b:a1:78:f5:3f:3b:84:1b:d1:b5:dd:1e:c6:81: 49:6b:87:51:22:1e:13:16:73:84:3f:06:d0:06:b2:57:24:d7: f7:3d:41:e6:43:3f:e0:22:51:11:fe:02:76:5f:a0:22:07:7e: b6:85:73:d6:1a:27:e8:78:5d:04:61:33:c9:7a:40:65:f3:08: c8:58:91:4f:f0:0d:62:1f:e6:48:38:73:ae:1e:1a:f6:6e:77: e7:b1:1e:22:78:fc:26:b3:dd:1f:84:ab:d2:f0:6f:19:96:a2: 34:d9:35:80:b2:e0:4d:5c:0b:2b:38:d0:63:30:19:fb:23:57: e4:c6:cf:bd:35:d5:c0:99:b5:c3:25:74:eb:2d:b7:93:38:10: dc:6f:30:52:0b:6c:d8:b5:3f:6c:15:72:e0:74:91:6e:ef:d9: 75:cb:72:55:36:b9:2a:71:77:87:a6:57:b5:7c:7d:19:3b:95: 72:2d:98:3c:b7:16:84:c3:00:d4:d0:19:22:ba:57:3f:cd:e4: a6:33:b7:f3:21:5b:e4:4f:b5:5c:e7:8d:da:2d:7b:99:1f:79: e3:13:e3:eb -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4NNCq0xdi1l0hljftNtANMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YTNkZTRiN2U2NmM4N2NmOWMzM2UwMDhhMDJkMWE0NmUz ZmM3NjYwHhcNMjYwMTAxMDYxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWFjNjFmMTRkMjM1NTMwMzVkZDU2YzhlMWRhYTNjYzk0NmI2ZmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoZ6P/BsyUDiTf3LrvvJcniGf9i/ 0rJF2xmN3VypNWpyRFpCi06o0ONhVilhp6LHEO4DMiZy8J26U3ceH60SBW0QDn0y S/JyGTJ7VaTTxREkD9qFq4xyn1eQHT1c/VG9avOxZwTT3wDcIP1lBgGzvbvbNAZt C7T/szQMsHEAnvKmro2ywgtYv5ek9AcjfrJ5OxChtxDu/NpW+JQZNwMjj2z6ZEfx 691fs6NOPeFTv2AmzYa+kjez1HF6vcIsPdQYS08wKrGEbp4VzTS/u+X70939++ED wOsoA+08Iv8C/iT6s3tnwM2R4CqT24rDVYwxaUXuldmCeXnUU7TYX9wrkwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFLmsYfFNI1UwNd1WyOHao8yUa2+nMB8GA1UdIwQY MBaAFBSj3kt+Zsh8+cM+AIoC0aRuP8dmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRktQZVMzNW15SHo1d3o0QWlnTFJwRzRfeDJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8wYjU1NmItZWQyMi00NDUzLTkyNWQt NWRiYjM2ZjdhMDMzLzEvdWF4aDhVMGpWVEExM1ZiSTRkcWp6SlJyYjZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi8wYjU1NmItZWQyMi00NDUzLTkyNWQtNWRiYjM2ZjdhMDMz LzEvRktQZVMzNW15SHo1d3o0QWlnTFJwRzRfeDJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg1wwDAN BgkqhkiG9w0BAQsFAAOCAQEApwWBu/TKNem6l6MLL9/ZM6G8xF7h+M1e53Qqp2a5 gk4GV8B/2DME5YuhePU/O4Qb0bXdHsaBSWuHUSIeExZzhD8G0AayVyTX9z1B5kM/ 4CJREf4Cdl+gIgd+toVz1hon6HhdBGEzyXpAZfMIyFiRT/ANYh/mSDhzrh4a9m53 57EeInj8JrPdH4Sr0vBvGZaiNNk1gLLgTVwLKzjQYzAZ+yNX5MbPvTXVwJm1wyV0 6y23kzgQ3G8wUgts2LU/bBVy4HSRbu/ZdctyVTa5KnF3h6ZXtXx9GTuVci2YPLcW hMMA1NAZIrpXP83kpjO38yFb5E+1XOeN2i17mR954xPj6w== -----END CERTIFICATE-----Generated at Mon Feb 9 21:25:49 2026 by rpki-client