This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/UfwQoD3H9RO1VBsH4VcKiUZ6d7c.roa File: UfwQoD3H9RO1VBsH4VcKiUZ6d7c.roa (raw, json) Hash identifier: FQM5F0H/ecM7WRQG+jl0AADrt13xVpxjs7nJeFzMGHM= Subject key identifier: 51:FC:10:A0:3D:C7:F5:13:B5:54:1B:07:E1:57:0A:89:46:7A:77:B7 Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Certificate serial: 019B775912DBD4E18803B2F59C9B93A1A69D Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/UfwQoD3H9RO1VBsH4VcKiUZ6d7c.roa Signing time: Thu 01 Jan 2026 02:18:04 +0000 ROA not before: Thu 01 Jan 2026 02:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209563 IP address blocks: 85.202.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:12:db:d4:e1:88:03:b2:f5:9c:9b:93:a1:a6:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Validity Not Before: Jan 1 02:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51fc10a03dc7f513b5541b07e1570a89467a77b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:10:bc:e3:cc:87:a0:d8:3c:b2:11:28:08:65: 42:1c:e8:0e:a2:5e:60:38:96:90:f9:67:3f:40:5b: 31:a9:f3:86:31:56:b3:2f:5f:9d:fc:5c:2b:6f:50: d7:a1:2c:09:4f:2f:6f:47:a9:5d:12:1a:56:4e:80: d4:ab:45:2b:a9:35:9e:32:48:29:0b:c7:2e:df:47: c3:6c:f4:a9:90:ed:48:1f:36:9d:bf:e4:c9:b3:9d: 79:5b:0f:48:5b:84:a1:05:34:cd:d9:0a:34:e7:7f: 01:9d:48:a5:43:e6:6a:79:27:01:14:0d:95:1e:47: ff:58:3a:86:86:f4:76:72:0a:5c:9d:45:a2:d7:87: 9c:df:b0:65:5a:48:73:80:8b:b0:e6:dc:60:4e:49: 85:4e:48:a8:16:1f:fa:0d:7e:59:3a:a8:9b:bd:a2: 68:90:96:02:be:00:7d:4d:93:a0:68:84:09:04:91: ba:ee:dd:7c:70:80:ca:1f:ec:65:f6:a7:fb:b0:43: 34:08:ba:1a:6c:f0:13:5c:f0:f5:7a:14:f3:f4:43: 46:1a:d2:e2:b0:28:79:a6:99:88:e2:10:d6:5c:98: 1e:c1:c1:a4:cd:f1:06:cf:9f:ab:84:69:34:1a:61: b0:b9:cb:8a:2e:3c:87:d9:d3:16:65:77:7b:62:f8: e5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:FC:10:A0:3D:C7:F5:13:B5:54:1B:07:E1:57:0A:89:46:7A:77:B7 X509v3 Authority Key Identifier: keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/UfwQoD3H9RO1VBsH4VcKiUZ6d7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.202.53.0/24 Signature Algorithm: sha256WithRSAEncryption 25:b2:e8:d7:2c:79:2e:90:84:41:6f:bc:1c:e5:9b:bd:65:c4: d5:09:fc:f5:c1:9f:a2:5a:7e:9c:5d:8a:a3:6b:5e:da:27:41: 14:f7:d6:c1:c8:46:a3:30:b0:45:f9:15:e1:03:c4:e0:5d:0d: e9:eb:fb:81:70:d9:9f:bf:50:ae:86:71:19:9e:a8:d3:a4:ce: 31:9d:c5:a1:cf:f2:85:96:ab:f9:ad:8d:6c:36:32:69:af:34: 21:07:d8:2d:8b:db:43:6e:52:3a:3d:fc:5a:48:73:ae:70:b9: 2c:b7:01:f0:98:98:5b:a6:e1:95:c2:a2:96:3f:55:c2:ca:28: 97:c3:02:39:16:8d:7c:3f:86:9f:0a:a0:cf:a1:5f:4e:e4:4a: 6c:ca:39:ca:d7:2b:f0:09:e5:5e:1d:be:fb:3d:c5:0f:51:37: 10:41:d2:c5:a0:43:b3:df:b9:dc:63:c7:0e:06:da:53:5e:ec: 0c:ec:39:ca:8c:91:08:77:a1:cc:07:5d:1a:36:ac:b7:3d:95: 70:42:c1:9c:d8:ab:90:d5:f3:fb:28:41:c9:65:4b:08:da:71: a4:66:c9:94:12:e7:64:ce:6c:da:04:10:0b:63:ec:b1:3e:0f: e2:0c:47:50:fb:44:a3:9e:68:89:11:75:63:17:26:ac:89:c7: 6c:40:55:54 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WRLb1OGIA7L1nJuToaadMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx YjM2ZTgwHhcNMjYwMTAxMDIxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MWZjMTBhMDNkYzdmNTEzYjU1NDFiMDdlMTU3MGE4OTQ2N2E3N2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxC848yHoNg8shEoCGVCHOgOol5g OJaQ+Wc/QFsxqfOGMVazL1+d/Fwrb1DXoSwJTy9vR6ldEhpWToDUq0UrqTWeMkgp C8cu30fDbPSpkO1IHzadv+TJs515Ww9IW4ShBTTN2Qo0538BnUilQ+ZqeScBFA2V Hkf/WDqGhvR2cgpcnUWi14ec37BlWkhzgIuw5txgTkmFTkioFh/6DX5ZOqibvaJo kJYCvgB9TZOgaIQJBJG67t18cIDKH+xl9qf7sEM0CLoabPATXPD1ehTz9ENGGtLi sCh5ppmI4hDWXJgewcGkzfEGz5+rhGk0GmGwucuKLjyH2dMWZXd7YvjlMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFH8EKA9x/UTtVQbB+FXColGene3MB8GA1UdIwQY MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt MDI0YjE2NTVjMjQ3LzEvVWZ3UW9EM0g5Uk8xVkJzSDRWY0tpVVo2ZDdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3 LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVco1MA0G CSqGSIb3DQEBCwUAA4IBAQAlsujXLHkukIRBb7wc5Zu9ZcTVCfz1wZ+iWn6cXYqj a17aJ0EU99bByEajMLBF+RXhA8TgXQ3p6/uBcNmfv1CuhnEZnqjTpM4xncWhz/KF lqv5rY1sNjJprzQhB9gti9tDblI6PfxaSHOucLkstwHwmJhbpuGVwqKWP1XCyiiX wwI5Fo18P4afCqDPoV9O5EpsyjnK1yvwCeVeHb77PcUPUTcQQdLFoEOz37ncY8cO BtpTXuwM7DnKjJEId6HMB10aNqy3PZVwQsGc2KuQ1fP7KEHJZUsI2nGkZsmUEudk zmzaBBALY+yxPg/iDEdQ+0SjnmiJEXVjFyasicdsQFVU -----END CERTIFICATE-----Generated at Sun Jan 25 20:29:53 2026 by rpki-client