This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/UZU-y9KjwHBRwAFBMLEzFqF8gQE.roa File: UZU-y9KjwHBRwAFBMLEzFqF8gQE.roa (raw, json) Hash identifier: 8IesYOSWF04JS1YDSdciYf6tHgm62U6HhGDalYAE7s8= Subject key identifier: 51:95:3E:CB:D2:A3:C0:70:51:C0:01:41:30:B1:33:16:A1:7C:81:01 Certificate issuer: /CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b Certificate serial: 019B79100263B11974D71C161B18AC30309D Authority key identifier: 3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/UZU-y9KjwHBRwAFBMLEzFqF8gQE.roa Signing time: Thu 01 Jan 2026 10:17:30 +0000 ROA not before: Thu 01 Jan 2026 10:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20546 IP address blocks: 195.170.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.crl rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:02:63:b1:19:74:d7:1c:16:1b:18:ac:30:30:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b Validity Not Before: Jan 1 10:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51953ecbd2a3c07051c0014130b13316a17c8101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d2:69:8e:d1:00:01:11:dc:39:1d:9c:54:d1: a5:4a:18:85:b0:14:08:d6:03:f5:63:6b:cc:e3:e0: 44:87:5e:f5:19:f4:78:b7:84:ac:7c:87:19:5f:6b: a5:f5:75:5d:7f:0a:1f:e2:1f:60:3d:4f:4f:c0:2f: 2c:56:20:31:86:00:3d:23:f5:08:ef:64:3f:6c:6d: 35:ca:90:db:d3:8b:06:ba:18:94:f6:a2:03:7f:7f: 0e:52:92:9e:0d:ab:4b:98:33:64:aa:2a:9e:8b:4e: be:e2:83:e1:2c:b0:8d:c1:9b:46:3d:0a:a4:30:62: 37:21:91:28:6e:21:fa:38:e4:dc:26:ad:16:eb:11: ef:89:56:cc:59:f7:ae:6a:96:cb:0d:04:8d:54:1d: 53:e7:f7:dd:29:15:78:1a:1c:ed:6a:af:09:ed:6a: 9d:19:b1:fb:db:52:98:03:0f:90:53:f9:e5:d2:34: b1:65:92:2f:ed:42:5a:3f:31:27:52:fa:dd:aa:78: 29:c1:4f:9a:d2:12:30:93:49:f6:38:fd:b7:73:23: de:2b:18:bf:7a:3c:d4:1f:80:e7:d5:92:2b:e6:be: 0e:4e:64:bd:15:13:ed:95:15:78:7c:08:f0:d0:3f: 91:2c:36:5f:ae:84:78:23:8a:ec:78:2b:87:a7:36: 85:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:95:3E:CB:D2:A3:C0:70:51:C0:01:41:30:B1:33:16:A1:7C:81:01 X509v3 Authority Key Identifier: keyid:3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/UZU-y9KjwHBRwAFBMLEzFqF8gQE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.170.185.0/24 Signature Algorithm: sha256WithRSAEncryption 93:64:9a:22:24:b5:a9:d3:2a:63:3d:b3:ed:f8:fa:53:75:8b: 59:75:41:9f:1e:cb:b5:54:35:cd:26:97:f2:43:32:c2:de:62: 22:9a:f0:a5:83:63:b7:5d:1f:d3:0b:b7:a5:97:02:0c:0c:3f: b9:ee:3e:b3:7f:fa:6a:78:21:6f:5d:b7:5a:79:21:26:20:29: 64:e9:1d:88:6d:fd:dc:19:00:d6:14:d6:eb:37:7b:86:01:1c: e8:de:9f:fb:e9:07:12:e4:ab:8e:5e:56:df:7b:e6:33:11:f0: d6:ee:a2:e4:74:a8:bc:02:c9:2c:fe:ab:a6:0b:7f:5d:75:b5: f2:0d:a4:d9:24:96:b1:1d:0c:c8:1a:ad:82:01:3f:15:b0:ec: 3e:8a:3c:18:74:19:02:87:00:20:a5:c9:e2:1a:8e:e0:df:5e: 56:ce:55:39:d5:ac:cb:b4:d9:1e:3a:06:71:0d:33:be:1a:77: 42:74:39:57:6d:0a:f2:1d:f6:6d:a0:92:ff:5a:ae:b9:3e:15: 6e:43:d1:d6:d2:af:70:bc:60:87:fc:97:9a:a1:4d:bf:2c:e6: 46:04:53:57:4b:81:fc:82:a9:c3:24:1e:37:ec:ed:b4:41:93: b9:dd:fc:3c:08:30:e3:6c:6c:ab:aa:b8:ad:56:ed:b9:0d:11: 7b:43:b1:96 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EAJjsRl01xwWGxisMDCdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmNWJjNDQwMTQyODViNmYzZTI4NzJhZWNmNWQ0ZjMzZTI2 OGNlOGIwHhcNMjYwMTAxMTAxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTk1M2VjYmQyYTNjMDcwNTFjMDAxNDEzMGIxMzMxNmExN2M4MTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNJpjtEAARHcOR2cVNGlShiFsBQI 1gP1Y2vM4+BEh171GfR4t4SsfIcZX2ul9XVdfwof4h9gPU9PwC8sViAxhgA9I/UI 72Q/bG01ypDb04sGuhiU9qIDf38OUpKeDatLmDNkqiqei06+4oPhLLCNwZtGPQqk MGI3IZEobiH6OOTcJq0W6xHviVbMWfeuapbLDQSNVB1T5/fdKRV4Ghztaq8J7Wqd GbH721KYAw+QU/nl0jSxZZIv7UJaPzEnUvrdqngpwU+a0hIwk0n2OP23cyPeKxi/ ejzUH4Dn1ZIr5r4OTmS9FRPtlRV4fAjw0D+RLDZfroR4I4rseCuHpzaFlQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFGVPsvSo8BwUcABQTCxMxahfIEBMB8GA1UdIwQY MBaAFD9bxEAUKFtvPihyrs9dTzPiaM6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDF2RVFCUW9XMjgtS0hLdXoxMVBNLUpvem9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zMjI2OTMtZTU4Yi00OGUyLWJkZDkt MDI5NTNjZTYzODQzLzEvVVpVLXk5S2p3SEJSd0FGQk1MRXpGcUY4Z1FFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8zMjI2OTMtZTU4Yi00OGUyLWJkZDktMDI5NTNjZTYzODQz LzEvUDF2RVFCUW9XMjgtS0hLdXoxMVBNLUpvem9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw6q5MA0G CSqGSIb3DQEBCwUAA4IBAQCTZJoiJLWp0ypjPbPt+PpTdYtZdUGfHsu1VDXNJpfy QzLC3mIimvClg2O3XR/TC7ellwIMDD+57j6zf/pqeCFvXbdaeSEmIClk6R2Ibf3c GQDWFNbrN3uGARzo3p/76QcS5KuOXlbfe+YzEfDW7qLkdKi8Asks/qumC39ddbXy DaTZJJaxHQzIGq2CAT8VsOw+ijwYdBkChwAgpcniGo7g315WzlU51azLtNkeOgZx DTO+GndCdDlXbQryHfZtoJL/Wq65PhVuQ9HW0q9wvGCH/JeaoU2/LOZGBFNXS4H8 gqnDJB437O20QZO53fw8CDDjbGyrqritVu25DRF7Q7GW -----END CERTIFICATE-----Generated at Sun Jan 25 11:01:34 2026 by rpki-client