This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/uYoTXFQQP3pJz7Mg1yRumrwJMY4.roa File: uYoTXFQQP3pJz7Mg1yRumrwJMY4.roa (raw, json) Hash identifier: NKUUkF68wcAdT8G2mdJxZKykA/h3XcBsr6zGW1P8l6o= Subject key identifier: B9:8A:13:5C:54:10:3F:7A:49:CF:B3:20:D7:24:6E:9A:BC:09:31:8E Certificate issuer: /CN=6a4623f76bd5bb2df0af66f360ff74ff1c00db02 Certificate serial: 019B7834BEF229C632368D2E4553A25C111E Authority key identifier: 6A:46:23:F7:6B:D5:BB:2D:F0:AF:66:F3:60:FF:74:FF:1C:00:DB:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/uYoTXFQQP3pJz7Mg1yRumrwJMY4.roa Signing time: Thu 01 Jan 2026 06:18:01 +0000 ROA not before: Thu 01 Jan 2026 06:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20857 IP address blocks: 185.4.132.0/22 maxlen: 24 185.138.40.0/22 maxlen: 24 2a02:c500::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.crl rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:be:f2:29:c6:32:36:8d:2e:45:53:a2:5c:11:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a4623f76bd5bb2df0af66f360ff74ff1c00db02 Validity Not Before: Jan 1 06:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b98a135c54103f7a49cfb320d7246e9abc09318e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a1:3c:9d:10:e5:50:62:6c:2f:e5:9f:18:bb: ed:34:67:c9:8b:75:81:2d:d4:5c:30:8a:46:b3:aa: 6f:d4:5c:bc:3f:3e:f7:aa:0c:42:44:00:8c:b2:54: 41:24:a4:70:0d:6c:a2:e2:69:cd:a9:28:d6:18:de: 7e:d2:cf:04:a2:79:52:d2:1d:58:37:4c:45:15:41: 80:0c:e3:f2:6e:13:95:f1:3f:b2:b6:35:a3:ea:c9: aa:91:8b:06:0c:0a:b3:fd:a4:d5:c8:42:4c:96:8d: c9:dc:8a:6c:52:0e:a0:ef:77:b6:38:44:4e:87:56: fe:40:77:e6:2b:3b:3f:fa:3e:6c:db:0e:d4:75:b4: 4e:01:dd:16:6a:7b:c0:b4:8f:51:a9:d6:f6:6b:4b: 90:13:59:51:40:14:ba:75:02:2c:23:1f:5e:90:d4: a9:31:76:76:7a:c5:5b:45:7c:98:57:cd:6f:e5:fd: ff:c3:32:4a:30:36:2b:d6:7b:ef:c8:5a:83:5a:17: 83:15:8a:e7:0d:80:e7:f7:5e:e8:14:8c:88:d9:b2: ed:10:54:f0:8d:f3:b0:5c:c0:6b:91:5f:af:5b:7f: c4:7f:81:fe:03:37:55:96:c3:cd:87:09:c8:57:a5: 63:76:c2:6e:d6:89:b0:78:83:46:ce:0f:e3:d4:85: 79:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:8A:13:5C:54:10:3F:7A:49:CF:B3:20:D7:24:6E:9A:BC:09:31:8E X509v3 Authority Key Identifier: keyid:6A:46:23:F7:6B:D5:BB:2D:F0:AF:66:F3:60:FF:74:FF:1C:00:DB:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/uYoTXFQQP3pJz7Mg1yRumrwJMY4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.4.132.0/22 185.138.40.0/22 IPv6: 2a02:c500::/29 Signature Algorithm: sha256WithRSAEncryption 30:8f:40:00:93:71:c0:3a:7b:a1:f0:63:d3:73:7c:dc:10:7d: 3d:99:a0:24:0a:9b:e1:88:03:49:19:68:5b:2d:82:4e:60:93: 01:e1:fd:d9:99:11:ac:0f:f8:24:80:14:5e:70:5a:e5:9a:93: d0:d7:fd:c5:a4:3e:36:79:37:c9:d7:ff:2c:46:5a:72:56:03: 4a:20:78:e3:3c:56:68:5a:51:e6:88:7f:71:23:6e:07:93:89: 2c:58:d6:90:60:35:0d:dc:50:85:a9:23:ad:ed:3c:c1:9b:76: b4:ca:e4:fe:a7:78:1e:27:8f:26:93:57:0d:ad:56:b5:90:b8: 7c:83:04:68:d9:4a:a5:6b:db:7e:e0:8f:8f:3e:55:7a:e5:d4: eb:53:5a:90:78:99:29:7a:a8:11:72:6a:03:80:12:03:46:9c: 25:80:cd:30:cf:00:41:4d:8f:7b:26:62:a6:23:29:82:8f:ae: a2:69:3e:3a:9a:b7:a6:d8:30:5f:37:f1:06:9d:54:20:70:2d: f8:d6:49:90:79:1f:5f:ba:6c:31:81:81:fe:d1:f8:af:48:37: a8:31:4f:b3:38:6a:37:a3:02:81:b0:88:8b:21:43:e7:ab:c7: 9d:b2:c6:46:fd:49:d3:42:0d:77:ae:dc:3b:44:5c:e5:9f:62: 6e:99:4a:19 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt4NL7yKcYyNo0uRVOiXBEeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhNDYyM2Y3NmJkNWJiMmRmMGFmNjZmMzYwZmY3NGZmMWMw MGRiMDIwHhcNMjYwMTAxMDYxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOThhMTM1YzU0MTAzZjdhNDljZmIzMjBkNzI0NmU5YWJjMDkzMThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqE8nRDlUGJsL+WfGLvtNGfJi3WB LdRcMIpGs6pv1Fy8Pz73qgxCRACMslRBJKRwDWyi4mnNqSjWGN5+0s8EonlS0h1Y N0xFFUGADOPybhOV8T+ytjWj6smqkYsGDAqz/aTVyEJMlo3J3IpsUg6g73e2OERO h1b+QHfmKzs/+j5s2w7UdbROAd0WanvAtI9Rqdb2a0uQE1lRQBS6dQIsIx9ekNSp MXZ2esVbRXyYV81v5f3/wzJKMDYr1nvvyFqDWheDFYrnDYDn917oFIyI2bLtEFTw jfOwXMBrkV+vW3/Ef4H+AzdVlsPNhwnIV6VjdsJu1omweINGzg/j1IV56QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFLmKE1xUED96Sc+zINckbpq8CTGOMB8GA1UdIwQY MBaAFGpGI/dr1bst8K9m82D/dP8cANsCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWtZajkydlZ1eTN3cjJiellQOTBfeHdBMndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81OTk1MjgtYjg5ZC00NDAyLWE4MDgt NmM4MzIwNTBlNzdhLzEvdVlvVFhGUVFQM3BKejdNZzF5UnVtcndKTVk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS81OTk1MjgtYjg5ZC00NDAyLWE4MDgtNmM4MzIwNTBlNzdh LzEvYWtZajkydlZ1eTN3cjJiellQOTBfeHdBMndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuQSEAwQC uYooMA0EAgACMAcDBQMqAsUAMA0GCSqGSIb3DQEBCwUAA4IBAQAwj0AAk3HAOnuh 8GPTc3zcEH09maAkCpvhiANJGWhbLYJOYJMB4f3ZmRGsD/gkgBRecFrlmpPQ1/3F pD42eTfJ1/8sRlpyVgNKIHjjPFZoWlHmiH9xI24Hk4ksWNaQYDUN3FCFqSOt7TzB m3a0yuT+p3geJ48mk1cNrVa1kLh8gwRo2Uqla9t+4I+PPlV65dTrU1qQeJkpeqgR cmoDgBIDRpwlgM0wzwBBTY97JmKmIymCj66iaT46mrem2DBfN/EGnVQgcC341kmQ eR9fumwxgYH+0fivSDeoMU+zOGo3owKBsIiLIUPnq8edssZG/UnTQg13rtw7RFzl n2JumUoZ -----END CERTIFICATE-----Generated at Mon Jan 26 04:42:52 2026 by rpki-client