This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/Ue_ex91Wx7ZgS5Ut_yw50dy3Kus.roa File: Ue_ex91Wx7ZgS5Ut_yw50dy3Kus.roa (raw, json) Hash identifier: ME8w3BueP73JCqBn5Tuam33su5W75EsAbAVULP0Vw6k= Subject key identifier: 51:EF:DE:C7:DD:56:C7:B6:60:4B:95:2D:FF:2C:39:D1:DC:B7:2A:EB Certificate issuer: /CN=33ae399984d7374b2a8e0af72d2bfcf105c86154 Certificate serial: 019B7C1126B519D8A9785AE4275817A3F51D Authority key identifier: 33:AE:39:99:84:D7:37:4B:2A:8E:0A:F7:2D:2B:FC:F1:05:C8:61:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M645mYTXN0sqjgr3LSv88QXIYVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/Ue_ex91Wx7ZgS5Ut_yw50dy3Kus.roa Signing time: Fri 02 Jan 2026 00:17:37 +0000 ROA not before: Fri 02 Jan 2026 00:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213237 IP address blocks: 2001:678:45c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/M645mYTXN0sqjgr3LSv88QXIYVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:26:b5:19:d8:a9:78:5a:e4:27:58:17:a3:f5:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33ae399984d7374b2a8e0af72d2bfcf105c86154 Validity Not Before: Jan 2 00:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51efdec7dd56c7b6604b952dff2c39d1dcb72aeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c3:6a:29:81:d8:3a:cb:4c:44:d6:9f:23:aa: 4b:e4:ad:e8:33:14:14:06:bd:9e:a2:6e:bf:ef:a5: 89:55:dd:85:f9:28:4d:0f:30:83:87:db:b5:83:4e: 52:61:df:77:39:15:6c:8d:b4:35:a5:89:db:c1:d3: d5:87:f7:22:34:df:c2:da:f4:65:10:7e:f7:40:50: 90:d0:ff:67:92:de:c7:2d:9f:c7:82:12:fa:6c:9f: fc:bc:74:49:96:a8:5c:e3:6e:87:f1:a9:b1:c8:cb: b8:e5:f3:ca:67:fd:8d:e9:25:d2:33:f0:18:67:72: a4:01:a3:be:b0:53:f9:7a:40:91:3a:af:09:74:30: c2:9e:f5:c5:05:b8:28:a9:b9:42:13:20:fd:60:b2: f3:7c:3e:26:99:63:f1:ca:24:af:c7:ae:92:69:25: 0f:db:5e:ef:51:d3:66:ff:2b:7a:12:bd:a9:a8:6d: 17:41:ad:49:df:7e:26:2e:53:61:12:30:69:fe:ea: 6a:ac:35:16:c6:9b:69:85:ec:e2:eb:52:02:b7:73: 9e:85:ae:9d:db:46:3e:a7:03:bc:66:79:b5:2d:70: ce:62:4d:74:ac:79:bc:d4:14:3f:3c:80:56:7d:df: 94:41:9f:6a:96:96:5d:cf:80:e0:e1:67:e3:25:93: ac:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:EF:DE:C7:DD:56:C7:B6:60:4B:95:2D:FF:2C:39:D1:DC:B7:2A:EB X509v3 Authority Key Identifier: keyid:33:AE:39:99:84:D7:37:4B:2A:8E:0A:F7:2D:2B:FC:F1:05:C8:61:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M645mYTXN0sqjgr3LSv88QXIYVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/Ue_ex91Wx7ZgS5Ut_yw50dy3Kus.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:45c::/48 Signature Algorithm: sha256WithRSAEncryption 5c:42:d9:11:fa:a1:03:63:97:ee:36:16:7f:b3:ac:d1:77:ad: b1:5d:53:63:79:d0:f7:71:75:ac:54:de:b8:73:4f:b8:75:8f: 08:87:3c:ec:86:58:f9:df:6a:6c:bd:c9:f6:6e:9f:ab:a5:5d: 46:d4:4d:8a:4d:f9:6a:c2:d8:f8:be:a8:3a:62:c4:c5:be:20: 60:5e:6c:8f:88:14:8c:97:1e:07:63:9e:82:38:ef:27:6e:59: c2:04:eb:9d:45:2f:18:71:e9:a5:2a:5e:a6:bf:1c:86:a8:d0: aa:ad:83:53:58:79:60:fa:23:85:bf:84:e8:aa:6e:2b:5b:ab: 0b:a9:b7:48:96:1b:64:b0:8b:e9:1f:a8:a7:fd:9a:50:4b:4d: 61:d8:37:93:5b:f1:a1:8a:3d:f4:d2:a0:46:5d:97:c3:6b:a5: 8b:83:c8:76:03:76:24:4a:cf:65:c0:f9:72:78:e0:b3:b0:a5: 63:9f:f4:c9:2e:08:a2:a2:54:63:ec:42:f8:4b:d9:ca:60:e7: eb:25:f8:f6:66:fb:fd:7c:47:4a:55:2f:a7:a9:d1:bf:a4:b3: bc:db:ec:ae:4b:b6:07:e5:2e:1a:3b:19:73:ee:39:75:8f:a0: 08:6c:e7:ab:ff:57:a8:5b:01:44:74:12:89:58:b8:83:b7:a1: 03:6c:41:ec -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8ESa1GdipeFrkJ1gXo/UdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYWUzOTk5ODRkNzM3NGIyYThlMGFmNzJkMmJmY2YxMDVj ODYxNTQwHhcNMjYwMTAyMDAxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MWVmZGVjN2RkNTZjN2I2NjA0Yjk1MmRmZjJjMzlkMWRjYjcyYWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38NqKYHYOstMRNafI6pL5K3oMxQU Br2eom6/76WJVd2F+ShNDzCDh9u1g05SYd93ORVsjbQ1pYnbwdPVh/ciNN/C2vRl EH73QFCQ0P9nkt7HLZ/HghL6bJ/8vHRJlqhc426H8amxyMu45fPKZ/2N6SXSM/AY Z3KkAaO+sFP5ekCROq8JdDDCnvXFBbgoqblCEyD9YLLzfD4mmWPxyiSvx66SaSUP 217vUdNm/yt6Er2pqG0XQa1J334mLlNhEjBp/upqrDUWxptphezi61ICt3Oeha6d 20Y+pwO8Znm1LXDOYk10rHm81BQ/PIBWfd+UQZ9qlpZdz4Dg4WfjJZOs2wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFHv3sfdVse2YEuVLf8sOdHctyrrMB8GA1UdIwQY MBaAFDOuOZmE1zdLKo4K9y0r/PEFyGFUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTY0NW1ZVFhOMHNxamdyM0xTdjg4UVhJWVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy82Mjg0NmUtMDE4OS00NjhkLWE4ZDMt MWE4ZGFmZjExZTBjLzEvVWVfZXg5MVd4N1pnUzVVdF95dzUwZHkzS3VzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy82Mjg0NmUtMDE4OS00NjhkLWE4ZDMtMWE4ZGFmZjExZTBj LzEvTTY0NW1ZVFhOMHNxamdyM0xTdjg4UVhJWVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeARc MA0GCSqGSIb3DQEBCwUAA4IBAQBcQtkR+qEDY5fuNhZ/s6zRd62xXVNjedD3cXWs VN64c0+4dY8Ihzzshlj532psvcn2bp+rpV1G1E2KTflqwtj4vqg6YsTFviBgXmyP iBSMlx4HY56COO8nblnCBOudRS8YcemlKl6mvxyGqNCqrYNTWHlg+iOFv4Toqm4r W6sLqbdIlhtksIvpH6in/ZpQS01h2DeTW/Ghij300qBGXZfDa6WLg8h2A3YkSs9l wPlyeOCzsKVjn/TJLgiiolRj7EL4S9nKYOfrJfj2Zvv9fEdKVS+nqdG/pLO82+yu S7YH5S4aOxlz7jl1j6AIbOer/1eoWwFEdBKJWLiDt6EDbEHs -----END CERTIFICATE-----Generated at Mon Feb 9 23:44:06 2026 by rpki-client