This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/UxsbNkBxV5Z06pGcubFBR8uKdLw.roa File: UxsbNkBxV5Z06pGcubFBR8uKdLw.roa (raw, json) Hash identifier: tbWLve0j2n3BjQjOZ6pgmALHAdTE4wxSO/sJbmSQFxs= Subject key identifier: 53:1B:1B:36:40:71:57:96:74:EA:91:9C:B9:B1:41:47:CB:8A:74:BC Certificate issuer: /CN=454bf58119cfe99f1749bcd9bd124702ba9cb713 Certificate serial: 019B7B368ACDE01BEC99C2CF6C68C158FBF4 Authority key identifier: 45:4B:F5:81:19:CF:E9:9F:17:49:BC:D9:BD:12:47:02:BA:9C:B7:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/UxsbNkBxV5Z06pGcubFBR8uKdLw.roa Signing time: Thu 01 Jan 2026 20:18:50 +0000 ROA not before: Thu 01 Jan 2026 20:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201863 IP address blocks: 185.225.164.0/24 maxlen: 24 185.225.165.0/24 maxlen: 24 185.225.166.0/24 maxlen: 24 185.225.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.crl rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:8a:cd:e0:1b:ec:99:c2:cf:6c:68:c1:58:fb:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=454bf58119cfe99f1749bcd9bd124702ba9cb713 Validity Not Before: Jan 1 20:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=531b1b364071579674ea919cb9b14147cb8a74bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:85:38:49:18:86:e0:bc:aa:b2:be:72:8f:73: 78:58:bf:90:62:b3:2d:eb:3f:71:fd:b7:e6:d9:9c: 35:62:25:ce:e6:3c:50:94:93:f9:8f:a9:d6:05:8c: 4a:3a:a0:c6:6d:ea:0a:55:18:63:e0:3c:a1:a4:77: fc:73:45:d3:44:72:a3:b9:89:8a:ba:cc:bb:dd:c2: 83:8b:17:f0:40:4e:22:a0:0d:9b:59:3c:26:a8:0f: 4a:bb:88:da:d2:b1:05:6c:a1:14:4d:a4:b4:47:64: 30:3e:85:91:ba:4a:62:cf:d6:5d:b8:5a:6a:fe:ad: 97:1b:af:ca:29:02:53:01:ad:03:9b:9f:00:d7:8d: 69:74:0e:94:81:e4:e4:e2:7d:d8:2b:d3:07:bb:9c: 82:d7:2b:ad:8b:8d:29:c4:f8:eb:ad:25:82:d2:fb: 66:58:1d:b8:8e:9f:48:1e:fa:3e:43:58:a5:df:b7: b0:ea:56:ab:62:b4:39:44:01:57:82:9d:bb:45:c3: 16:7f:06:a9:d2:58:62:c0:e1:4b:ce:32:04:9e:00: ea:0c:4d:cc:79:88:58:29:67:ff:00:a6:7d:b8:5d: 40:b0:5c:2d:da:3c:25:b7:f2:65:b9:31:e3:78:c6: 19:0a:86:ce:f7:31:83:f0:60:8d:ff:61:df:89:e8: a5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:1B:1B:36:40:71:57:96:74:EA:91:9C:B9:B1:41:47:CB:8A:74:BC X509v3 Authority Key Identifier: keyid:45:4B:F5:81:19:CF:E9:9F:17:49:BC:D9:BD:12:47:02:BA:9C:B7:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/UxsbNkBxV5Z06pGcubFBR8uKdLw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.225.164.0/22 Signature Algorithm: sha256WithRSAEncryption 31:db:86:46:83:06:fe:cd:91:c0:63:3d:17:ac:af:7a:da:46: 7e:a5:d2:2f:a5:13:ee:9e:41:a8:38:5f:c7:a1:30:36:4b:48: 10:d7:df:09:d1:5a:9e:97:2a:cd:9b:f1:e2:ff:89:9e:57:f5: 84:53:55:97:c8:d3:58:08:60:10:3b:7e:d2:dc:32:65:0e:9b: 43:75:8d:dc:21:f7:1f:96:4b:da:43:91:82:42:53:aa:ec:7b: 3d:29:3f:28:93:66:d8:2b:9e:52:f3:8e:42:c9:80:fd:88:46: 81:aa:b8:4c:75:86:3e:86:9c:20:35:ab:57:e9:f9:ea:3e:29: f1:25:b8:02:56:81:d4:9d:6b:27:b1:55:e8:28:82:03:7a:af: d0:bc:4e:fa:92:56:dc:09:d1:1f:80:b6:6d:eb:f2:0d:5f:87: 92:47:07:fc:0a:45:20:3c:81:cd:58:12:31:dc:cc:fa:9a:ae: b3:65:16:d3:71:05:18:ad:80:54:41:0a:73:49:01:49:5c:01: 88:6e:05:33:43:b8:a8:36:51:98:9f:e3:1e:20:e5:e8:57:dd: 59:0d:b7:10:1d:d2:dc:40:3c:74:b9:2c:5a:d6:8a:17:f4:be: b5:97:80:a0:05:ee:8a:5b:0f:c7:4f:9a:9d:aa:45:65:70:5e: d4:02:a0:f8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NorN4BvsmcLPbGjBWPv0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1NGJmNTgxMTljZmU5OWYxNzQ5YmNkOWJkMTI0NzAyYmE5 Y2I3MTMwHhcNMjYwMTAxMjAxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzFiMWIzNjQwNzE1Nzk2NzRlYTkxOWNiOWIxNDE0N2NiOGE3NGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44U4SRiG4Lyqsr5yj3N4WL+QYrMt 6z9x/bfm2Zw1YiXO5jxQlJP5j6nWBYxKOqDGbeoKVRhj4DyhpHf8c0XTRHKjuYmK usy73cKDixfwQE4ioA2bWTwmqA9Ku4ja0rEFbKEUTaS0R2QwPoWRukpiz9ZduFpq /q2XG6/KKQJTAa0Dm58A141pdA6UgeTk4n3YK9MHu5yC1yuti40pxPjrrSWC0vtm WB24jp9IHvo+Q1il37ew6larYrQ5RAFXgp27RcMWfwap0lhiwOFLzjIEngDqDE3M eYhYKWf/AKZ9uF1AsFwt2jwlt/JluTHjeMYZCobO9zGD8GCN/2HfieiltQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFMbGzZAcVeWdOqRnLmxQUfLinS8MB8GA1UdIwQY MBaAFEVL9YEZz+mfF0m82b0SRwK6nLcTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlV2MWdSblA2WjhYU2J6WnZSSkhBcnFjdHhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9jNmQwOTItY2M2MC00YTUxLWIwMTAt MGE2ZTZkZmJkMmUzLzEvVXhzYk5rQnhWNVowNnBHY3ViRkJSOHVLZEx3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9jNmQwOTItY2M2MC00YTUxLWIwMTAtMGE2ZTZkZmJkMmUz LzEvUlV2MWdSblA2WjhYU2J6WnZSSkhBcnFjdHhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCueGkMA0G CSqGSIb3DQEBCwUAA4IBAQAx24ZGgwb+zZHAYz0XrK962kZ+pdIvpRPunkGoOF/H oTA2S0gQ198J0VqelyrNm/Hi/4meV/WEU1WXyNNYCGAQO37S3DJlDptDdY3cIfcf lkvaQ5GCQlOq7Hs9KT8ok2bYK55S845CyYD9iEaBqrhMdYY+hpwgNatX6fnqPinx JbgCVoHUnWsnsVXoKIIDeq/QvE76klbcCdEfgLZt6/INX4eSRwf8CkUgPIHNWBIx 3Mz6mq6zZRbTcQUYrYBUQQpzSQFJXAGIbgUzQ7ioNlGYn+MeIOXoV91ZDbcQHdLc QDx0uSxa1ooX9L61l4CgBe6KWw/HT5qdqkVlcF7UAqD4 -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:06 2026 by rpki-client