This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/UET1a8V82jVZjnsiMPaDJshQePU.roa File: UET1a8V82jVZjnsiMPaDJshQePU.roa (raw, json) Hash identifier: /A8Ykurm8F86bjaeLphiBKdfzuSXJ1hhNjDM9g1WZgU= Subject key identifier: 50:44:F5:6B:C5:7C:DA:35:59:8E:7B:22:30:F6:83:26:C8:50:78:F5 Certificate issuer: /CN=5758cb11e842bcaf1323647f3befeee2fc6f0e2c Certificate serial: 019B7FF2306E39C00FB2966BAA5869BB70C4 Authority key identifier: 57:58:CB:11:E8:42:BC:AF:13:23:64:7F:3B:EF:EE:E2:FC:6F:0E:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1jLEehCvK8TI2R_O-_u4vxvDiw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/UET1a8V82jVZjnsiMPaDJshQePU.roa Signing time: Fri 02 Jan 2026 18:22:17 +0000 ROA not before: Fri 02 Jan 2026 18:22:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48129 IP address blocks: 81.30.117.0/24 maxlen: 24 81.30.124.0/24 maxlen: 24 81.30.125.0/24 maxlen: 24 81.30.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/V1jLEehCvK8TI2R_O-_u4vxvDiw.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/V1jLEehCvK8TI2R_O-_u4vxvDiw.mft rsync://rpki.ripe.net/repository/DEFAULT/V1jLEehCvK8TI2R_O-_u4vxvDiw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:30:6e:39:c0:0f:b2:96:6b:aa:58:69:bb:70:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5758cb11e842bcaf1323647f3befeee2fc6f0e2c Validity Not Before: Jan 2 18:22:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5044f56bc57cda35598e7b2230f68326c85078f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:99:60:78:50:92:36:62:af:b9:92:c0:d1:fd: 01:21:10:27:8e:94:7e:34:a9:bf:56:66:46:a4:f1: b7:94:6e:2d:68:77:60:1a:c9:fa:ee:6a:2d:0b:61: b8:1f:de:6f:40:7f:29:0f:be:15:73:d4:44:01:c7: c9:bd:5b:a1:2e:25:f2:7c:eb:67:c8:17:aa:f3:4c: fb:45:b1:24:b2:91:51:6b:2c:cb:01:fe:bd:03:56: 7c:0f:3a:64:75:38:e1:07:1f:c5:c4:34:68:47:bc: 36:6a:cb:9e:59:38:96:5d:66:19:76:72:bc:55:a5: bd:c9:67:a6:17:b7:f8:ad:3e:03:68:ba:e6:13:8d: 47:9d:fe:87:25:d2:30:c9:25:2b:29:02:91:3d:8c: 48:bc:fd:6c:da:78:5e:8a:41:3d:d8:56:d4:96:e3: 50:60:59:ac:4b:6b:4e:91:7a:22:8f:05:d6:6e:e1: 4d:d7:73:92:11:9c:fa:39:d5:f8:2d:aa:58:f6:e7: 30:8c:51:0d:97:90:ba:e6:29:93:1d:60:8e:3e:ab: c2:c3:52:63:31:0b:ad:89:e4:20:90:d3:8b:27:01: c2:d7:39:e8:38:56:b7:ef:e6:d2:48:15:35:fd:04: fc:71:00:7a:2b:d9:6d:fe:13:8c:95:be:e6:ab:32: e2:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:44:F5:6B:C5:7C:DA:35:59:8E:7B:22:30:F6:83:26:C8:50:78:F5 X509v3 Authority Key Identifier: keyid:57:58:CB:11:E8:42:BC:AF:13:23:64:7F:3B:EF:EE:E2:FC:6F:0E:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1jLEehCvK8TI2R_O-_u4vxvDiw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/UET1a8V82jVZjnsiMPaDJshQePU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/V1jLEehCvK8TI2R_O-_u4vxvDiw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.30.117.0/24 81.30.124.0-81.30.126.255 Signature Algorithm: sha256WithRSAEncryption 44:90:42:28:99:71:a8:a0:68:1c:f2:cc:d9:ca:04:0d:26:3e: c1:c7:6e:be:c1:de:2c:79:f2:20:12:b9:3b:34:fd:f0:ff:47: 76:00:27:33:9d:c3:c1:ba:c2:ef:05:ee:c3:1f:a6:f5:41:24: 8f:0f:d3:5b:4f:47:89:7a:09:20:17:85:29:ee:58:f4:05:d1: 50:e9:de:7a:65:4f:c7:3a:b0:04:3a:f4:1e:11:be:bb:96:54: 0c:b5:d2:dd:78:74:05:d4:be:d0:db:4d:19:5d:ba:8a:db:88: ac:0f:31:52:49:d7:e3:be:a5:11:6c:39:9c:bf:c8:e8:9e:27: 2f:da:99:80:d5:eb:20:7e:6c:be:49:43:2a:9d:91:79:fd:2f: eb:49:22:fe:bb:08:e0:45:34:d2:7d:cf:a5:f5:c6:59:df:3e: 38:2e:84:2e:05:ab:d0:51:12:6b:37:20:11:f5:6f:72:52:73: 40:24:83:31:27:c9:33:bd:e9:ab:b9:0b:c3:5f:2a:be:90:0c: 77:f6:b7:55:75:11:40:4f:ca:28:fe:bc:5b:bc:02:7a:14:d5: 71:77:45:da:76:fa:51:db:d2:53:7c:51:f1:09:20:a1:4e:0e: 32:06:74:e5:3d:c5:6f:36:be:1e:18:65:5b:8f:e1:ce:93:f3: 4e:c3:d7:02 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt/8jBuOcAPspZrqlhpu3DEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NThjYjExZTg0MmJjYWYxMzIzNjQ3ZjNiZWZlZWUyZmM2 ZjBlMmMwHhcNMjYwMTAyMTgyMjE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDQ0ZjU2YmM1N2NkYTM1NTk4ZTdiMjIzMGY2ODMyNmM4NTA3OGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZlgeFCSNmKvuZLA0f0BIRAnjpR+ NKm/VmZGpPG3lG4taHdgGsn67motC2G4H95vQH8pD74Vc9REAcfJvVuhLiXyfOtn yBeq80z7RbEkspFRayzLAf69A1Z8DzpkdTjhBx/FxDRoR7w2asueWTiWXWYZdnK8 VaW9yWemF7f4rT4DaLrmE41Hnf6HJdIwySUrKQKRPYxIvP1s2nheikE92FbUluNQ YFmsS2tOkXoijwXWbuFN13OSEZz6OdX4LapY9ucwjFENl5C65imTHWCOPqvCw1Jj MQutieQgkNOLJwHC1znoOFa37+bSSBU1/QT8cQB6K9lt/hOMlb7mqzLieQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFFBE9WvFfNo1WY57IjD2gybIUHj1MB8GA1UdIwQY MBaAFFdYyxHoQryvEyNkfzvv7uL8bw4sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjFqTEVlaEN2SzhUSTJSX08tX3U0dnh2RGl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9hMjgzMzAtOGJhMC00Yjg4LWE3YWMt OGJiZjhiZmM2ZDhlLzEvVUVUMWE4VjgyalZaam5zaU1QYURKc2hRZVBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9hMjgzMzAtOGJhMC00Yjg4LWE3YWMtOGJiZjhiZmM2ZDhl LzEvVjFqTEVlaEN2SzhUSTJSX08tX3U0dnh2RGl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAUR51MAwD BAJRHnwDBABRHn4wDQYJKoZIhvcNAQELBQADggEBAESQQiiZcaigaBzyzNnKBA0m PsHHbr7B3ix58iASuTs0/fD/R3YAJzOdw8G6wu8F7sMfpvVBJI8P01tPR4l6CSAX hSnuWPQF0VDp3nplT8c6sAQ69B4RvruWVAy10t14dAXUvtDbTRlduorbiKwPMVJJ 1+O+pRFsOZy/yOieJy/amYDV6yB+bL5JQyqdkXn9L+tJIv67COBFNNJ9z6X1xlnf PjguhC4Fq9BREms3IBH1b3JSc0AkgzEnyTO96au5C8NfKr6QDHf2t1V1EUBPyij+ vFu8AnoU1XF3Rdp2+lHb0lN8UfEJIKFODjIGdOU9xW82vh4YZVuP4c6T807D1wI= -----END CERTIFICATE-----Generated at Mon Jan 26 05:30:39 2026 by rpki-client