This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/UBjaQjSsvCaMWIObSymTDrfellU.roa File: UBjaQjSsvCaMWIObSymTDrfellU.roa (raw, json) Hash identifier: FakZBVr4LoPzsh/Z6oDhedet2QWrNOrHB6+ZNqqvw9I= Subject key identifier: 50:18:DA:42:34:AC:BC:26:8C:58:83:9B:4B:29:93:0E:B7:DE:96:55 Certificate issuer: /CN=29b79380fe407439cc2ecd3fac18157db36cf768 Certificate serial: 019B7834CE497B09E91A3E9F3EF12EDFF3E9 Authority key identifier: 29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/UBjaQjSsvCaMWIObSymTDrfellU.roa Signing time: Thu 01 Jan 2026 06:18:04 +0000 ROA not before: Thu 01 Jan 2026 06:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206228 IP address blocks: 185.77.252.0/23 maxlen: 23 185.77.254.0/23 maxlen: 23 2a05:6740:4060::/46 maxlen: 46 2a05:6740:40c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:ce:49:7b:09:e9:1a:3e:9f:3e:f1:2e:df:f3:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29b79380fe407439cc2ecd3fac18157db36cf768 Validity Not Before: Jan 1 06:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5018da4234acbc268c58839b4b29930eb7de9655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:2f:03:e9:0f:5f:53:a5:c3:b6:6b:a5:01:72: c4:e1:81:ae:53:ed:c1:a6:1a:4b:49:af:c5:61:a5: ce:c4:34:ea:3e:64:b7:65:f8:d4:5b:44:a5:3c:10: 41:a7:84:00:95:f7:c7:3c:bf:81:ce:07:a0:6c:25: a9:78:d6:68:7e:ba:cf:44:00:c8:88:44:e7:4e:db: b8:f0:5d:04:9b:30:f9:5c:7e:1f:a6:66:ef:bb:26: 53:89:fe:cb:09:30:f5:78:3b:89:02:25:76:b8:31: 02:cf:49:50:cd:7c:d9:a5:a6:b8:13:b0:c2:be:62: cb:41:55:b9:f3:08:8a:1a:fd:b0:77:df:8b:74:17: d1:a1:54:b5:a9:5c:55:2e:bf:75:04:fc:3d:be:43: c5:3a:ad:e9:46:a4:3b:bc:56:24:b9:a4:9f:5e:83: 82:59:e4:4b:63:b4:a4:8f:b6:bc:82:84:14:0a:f4: dc:b2:92:16:ef:fa:2e:d5:6a:12:2b:0b:ba:29:57: 1e:39:b7:a8:a6:6e:73:63:86:43:82:07:f0:b5:85: 69:3b:cb:48:80:54:47:33:aa:79:33:76:e6:2f:1c: 5b:8f:7f:60:f6:b5:bc:de:79:3f:e0:fc:86:7e:de: a3:ba:93:b5:17:f8:40:0b:db:cf:6b:db:4f:7d:21: 00:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:18:DA:42:34:AC:BC:26:8C:58:83:9B:4B:29:93:0E:B7:DE:96:55 X509v3 Authority Key Identifier: keyid:29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/UBjaQjSsvCaMWIObSymTDrfellU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.77.252.0/22 IPv6: 2a05:6740:4060::/46 2a05:6740:40c0::/48 Signature Algorithm: sha256WithRSAEncryption 7c:92:5d:23:7c:bf:c1:bc:22:92:9e:7b:f9:f4:1c:18:3b:15: 66:2d:5f:29:44:14:75:27:7c:1a:93:b3:71:99:ba:f9:6e:87: a2:12:16:6f:2c:1b:1d:94:63:cb:db:69:45:7f:cf:64:d5:9c: 27:a3:47:08:59:67:e8:e2:00:d5:68:80:4e:4d:c8:96:5b:0d: 1a:39:c8:cc:83:2e:06:cb:14:e8:05:e1:e1:d5:a3:e8:ec:f5: 46:87:58:f5:8a:a7:2f:ee:1c:72:e5:8a:ec:21:a4:11:9d:06: 4e:cf:57:5b:7d:ce:58:78:83:2f:3c:96:bc:ba:8b:7e:84:c7: df:fe:bd:2a:1c:5f:6e:0c:fe:4a:13:09:0c:39:53:40:81:30: 24:49:53:ef:7c:35:a4:f8:f9:34:a0:4f:4b:6e:53:b1:a7:ef: 84:92:9c:6b:19:b0:c5:b1:26:29:ee:c0:19:bb:95:7c:f4:b4: 9c:9b:a0:68:10:e8:7b:63:55:6e:00:b1:2f:12:f6:f0:f8:19: 8a:c9:17:0b:6f:24:61:c0:89:b7:4b:cb:c6:4a:e1:74:7b:22: 86:d2:49:c4:11:91:0e:9d:c5:4a:d2:be:dc:74:6f:ba:f7:ff: 00:ea:26:61:bc:0b:05:6d:c3:ea:a7:26:8a:8b:11:98:c4:6e: 82:3c:e5:ee -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt4NM5JewnpGj6fPvEu3/PpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5Yjc5MzgwZmU0MDc0MzljYzJlY2QzZmFjMTgxNTdkYjM2 Y2Y3NjgwHhcNMjYwMTAxMDYxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDE4ZGE0MjM0YWNiYzI2OGM1ODgzOWI0YjI5OTMwZWI3ZGU5NjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8i8D6Q9fU6XDtmulAXLE4YGuU+3B phpLSa/FYaXOxDTqPmS3ZfjUW0SlPBBBp4QAlffHPL+BzgegbCWpeNZofrrPRADI iETnTtu48F0EmzD5XH4fpmbvuyZTif7LCTD1eDuJAiV2uDECz0lQzXzZpaa4E7DC vmLLQVW58wiKGv2wd9+LdBfRoVS1qVxVLr91BPw9vkPFOq3pRqQ7vFYkuaSfXoOC WeRLY7Skj7a8goQUCvTcspIW7/ou1WoSKwu6KVceObeopm5zY4ZDggfwtYVpO8tI gFRHM6p5M3bmLxxbj39g9rW83nk/4PyGft6jupO1F/hAC9vPa9tPfSEARwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFFAY2kI0rLwmjFiDm0spkw633pZVMB8GA1UdIwQY MBaAFCm3k4D+QHQ5zC7NP6wYFX2zbPdoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2JlVGdQNUFkRG5NTHMwX3JCZ1ZmYk5zOTJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zOTM4NDItZTdlZi00ODkzLTljMWIt MWU4NDIxMThkYjZmLzEvVUJqYVFqU3N2Q2FNV0lPYlN5bVREcmZlbGxVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi8zOTM4NDItZTdlZi00ODkzLTljMWItMWU4NDIxMThkYjZm LzEvS2JlVGdQNUFkRG5NTHMwX3JCZ1ZmYk5zOTJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQCuU38MBgE AgACMBIDBwIqBWdAQGADBwAqBWdAQMAwDQYJKoZIhvcNAQELBQADggEBAHySXSN8 v8G8IpKee/n0HBg7FWYtXylEFHUnfBqTs3GZuvluh6ISFm8sGx2UY8vbaUV/z2TV nCejRwhZZ+jiANVogE5NyJZbDRo5yMyDLgbLFOgF4eHVo+js9UaHWPWKpy/uHHLl iuwhpBGdBk7PV1t9zlh4gy88lry6i36Ex9/+vSocX24M/koTCQw5U0CBMCRJU+98 NaT4+TSgT0tuU7Gn74SSnGsZsMWxJinuwBm7lXz0tJyboGgQ6HtjVW4AsS8S9vD4 GYrJFwtvJGHAibdLy8ZK4XR7IobSScQRkQ6dxUrSvtx0b7r3/wDqJmG8CwVtw+qn JoqLEZjEboI85e4= -----END CERTIFICATE-----Generated at Mon Jan 26 00:24:27 2026 by rpki-client