This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/pu-UgW_Q2cFgM0pOWInLhJbpeKM.roa File: pu-UgW_Q2cFgM0pOWInLhJbpeKM.roa (raw, json) Hash identifier: 4oLksXSEVHaPDbxyGvb1DqU/O7KaV8DE9hMEjVq9SCo= Subject key identifier: A6:EF:94:81:6F:D0:D9:C1:60:33:4A:4E:58:89:CB:84:96:E9:78:A3 Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B7F14B38243F1E5A3C1902F47270DDEC0 Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/pu-UgW_Q2cFgM0pOWInLhJbpeKM.roa Signing time: Fri 02 Jan 2026 14:20:21 +0000 ROA not before: Fri 02 Jan 2026 14:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49849 IP address blocks: 77.77.128.0/21 maxlen: 24 87.119.108.0/22 maxlen: 24 87.119.112.0/21 maxlen: 21 87.119.112.0/24 maxlen: 24 87.119.113.0/24 maxlen: 24 87.119.114.0/24 maxlen: 24 87.119.115.0/24 maxlen: 24 87.119.116.0/24 maxlen: 24 87.119.117.0/24 maxlen: 24 87.119.118.0/24 maxlen: 24 87.119.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:b3:82:43:f1:e5:a3:c1:90:2f:47:27:0d:de:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 2 14:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6ef94816fd0d9c160334a4e5889cb8496e978a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e5:ea:fe:ba:5a:39:d9:3d:4e:59:7b:79:b2: d9:78:97:c7:91:60:ba:e3:b4:dd:aa:92:92:9d:42: 15:79:6e:da:29:9e:3a:e3:1a:5c:5f:1a:80:f2:23: 1f:8b:7c:42:7f:ba:98:16:b8:6e:6b:ac:3a:d6:69: a8:d4:fd:79:b8:49:4c:61:99:a0:74:01:e8:a4:a3: b7:30:18:df:b4:de:4b:64:3b:95:7f:05:f5:67:3f: bf:e8:f6:6d:d3:39:0e:32:2f:3c:5f:42:4b:43:c0: 06:7e:26:e0:99:0b:cb:07:3b:1a:4b:6f:47:fe:0c: 41:5f:ce:08:1c:27:1e:32:5e:51:46:22:8a:6a:ed: 56:be:40:52:37:e7:b9:72:8c:85:c9:64:7e:50:52: ac:4d:0a:4d:1f:63:8b:db:a1:b3:36:5b:ba:e9:6a: 8a:37:69:2d:a0:05:62:8e:4d:3a:61:bb:ca:f4:5f: 7e:d0:6c:d8:19:19:da:b2:0f:fa:64:1f:cc:c4:c3: e4:f0:ba:71:f8:51:82:5f:d6:58:3e:13:eb:c6:9c: 07:b7:8e:6f:01:ad:f9:5a:5a:49:1a:30:a1:87:c1: 53:4e:4e:91:4a:bd:03:b8:38:1d:60:d2:17:dd:55: 1a:86:a6:69:b4:9c:84:d6:9d:df:76:bf:17:b1:7c: 32:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:EF:94:81:6F:D0:D9:C1:60:33:4A:4E:58:89:CB:84:96:E9:78:A3 X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/pu-UgW_Q2cFgM0pOWInLhJbpeKM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.77.128.0/21 87.119.108.0-87.119.119.255 Signature Algorithm: sha256WithRSAEncryption 6b:44:23:f5:5f:92:60:38:a7:0f:3f:d4:33:0a:73:4e:19:1d: 22:e2:da:06:ad:a1:5f:56:85:8b:98:44:a5:3d:d4:d8:0a:57: 54:0d:51:3d:d5:ce:72:5c:8d:5e:9e:f8:30:3a:5b:39:b4:2b: 41:f9:67:d5:dc:24:93:5e:83:66:26:05:04:be:49:13:fb:b6: 08:d7:98:d2:46:0e:53:5c:b0:2c:60:8c:23:28:3d:e0:0e:de: b6:a6:fb:1f:25:21:44:c4:73:5f:7a:1c:34:10:af:84:ff:ba: 1b:d2:40:7b:f1:03:a3:22:1a:9e:70:f9:b7:8e:80:15:96:57: 62:25:97:17:a8:87:23:0e:d5:8f:29:38:b9:cf:d5:ca:54:0e: 36:9d:9b:b4:85:05:7c:6b:96:d2:b6:5e:a0:9f:8e:e5:fe:e6: fc:2b:db:d6:59:59:e6:d7:21:17:10:9d:40:58:90:49:5a:23: 02:e3:b0:97:94:6f:9f:30:1d:55:9d:a3:70:c9:9b:99:ab:0a: 4c:ce:07:9a:d8:56:c0:a6:c5:87:7a:06:06:cc:38:58:96:38: ef:2f:0c:72:4b:f4:53:73:ca:e3:01:33:c8:18:ad:4a:24:38: d6:ef:fd:92:3c:c7:c0:b5:29:fb:4e:02:bf:86:31:3a:06:79: f3:85:64:a6 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt/FLOCQ/Hlo8GQL0cnDd7AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTAyMTQyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmVmOTQ4MTZmZDBkOWMxNjAzMzRhNGU1ODg5Y2I4NDk2ZTk3OGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOXq/rpaOdk9Tll7ebLZeJfHkWC6 47TdqpKSnUIVeW7aKZ464xpcXxqA8iMfi3xCf7qYFrhua6w61mmo1P15uElMYZmg dAHopKO3MBjftN5LZDuVfwX1Zz+/6PZt0zkOMi88X0JLQ8AGfibgmQvLBzsaS29H /gxBX84IHCceMl5RRiKKau1WvkBSN+e5coyFyWR+UFKsTQpNH2OL26GzNlu66WqK N2ktoAVijk06YbvK9F9+0GzYGRnasg/6ZB/MxMPk8Lpx+FGCX9ZYPhPrxpwHt45v Aa35WlpJGjChh8FTTk6RSr0DuDgdYNIX3VUahqZptJyE1p3fdr8XsXwyvQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFKbvlIFv0NnBYDNKTliJy4SW6XijMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvcHUtVWdXX1EyY0ZnTTBwT1dJbkxoSmJwZUtNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQDTU2AMAwD BAJXd2wDBANXd3AwDQYJKoZIhvcNAQELBQADggEBAGtEI/VfkmA4pw8/1DMKc04Z HSLi2gatoV9WhYuYRKU91NgKV1QNUT3VznJcjV6e+DA6Wzm0K0H5Z9XcJJNeg2Ym BQS+SRP7tgjXmNJGDlNcsCxgjCMoPeAO3ram+x8lIUTEc196HDQQr4T/uhvSQHvx A6MiGp5w+beOgBWWV2IllxeohyMO1Y8pOLnP1cpUDjadm7SFBXxrltK2XqCfjuX+ 5vwr29ZZWebXIRcQnUBYkElaIwLjsJeUb58wHVWdo3DJm5mrCkzOB5rYVsCmxYd6 BgbMOFiWOO8vDHJL9FNzyuMBM8gYrUokONbv/ZI8x8C1KftOAr+GMToGefOFZKY= -----END CERTIFICATE-----Generated at Sun Jan 25 12:02:51 2026 by rpki-client