This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/UNn5xwOI4pjWBM6seGSkeIWT0Nc.roa File: UNn5xwOI4pjWBM6seGSkeIWT0Nc.roa (raw, json) Hash identifier: t97vMIzTWrcDPs3sy3oo5iwIaLusws7qeRkc875GNOM= Subject key identifier: 50:D9:F9:C7:03:88:E2:98:D6:04:CE:AC:78:64:A4:78:85:93:D0:D7 Certificate issuer: /CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5 Certificate serial: 019B7EA6A65A34BF5691A55828539D4EEE2B Authority key identifier: 1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/UNn5xwOI4pjWBM6seGSkeIWT0Nc.roa Signing time: Fri 02 Jan 2026 12:20:09 +0000 ROA not before: Fri 02 Jan 2026 12:20:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3302 IP address blocks: 62.100.76.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:a6:5a:34:bf:56:91:a5:58:28:53:9d:4e:ee:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5 Validity Not Before: Jan 2 12:20:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50d9f9c70388e298d604ceac7864a4788593d0d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:88:8e:22:56:a0:c7:ee:68:60:53:fc:fc:b4: 6a:4c:f3:cc:52:85:d2:e5:48:d5:c1:5f:17:f7:80: 5d:f9:d0:2c:22:72:8e:c6:60:8f:7b:0f:0c:d7:6f: f3:09:a7:7a:bc:c0:09:8f:8b:62:66:f0:5e:77:2c: 36:e5:14:ac:21:3c:9c:90:68:b5:76:9e:e2:49:1f: f6:02:61:7a:47:1a:f5:4a:00:78:88:69:78:6a:af: 28:7e:12:67:d9:ac:11:8b:a4:81:23:c4:d4:14:6b: 6d:be:51:ad:9a:f7:ac:57:52:9b:44:1d:a5:22:75: d0:88:a3:a5:74:79:01:5b:a4:b7:fd:80:9d:7e:c0: 92:12:1f:d7:f7:6e:5f:50:b6:f8:1c:68:2b:88:fa: 2e:83:c8:31:4b:29:aa:e5:eb:7c:c2:63:7e:dc:56: 58:5e:10:f1:df:3e:e7:b7:a1:1c:15:7c:6f:32:fe: 1d:8f:f6:ca:53:f0:28:78:07:ca:14:1b:14:20:21: 2d:2b:55:83:f9:0a:53:05:f4:58:16:a1:8d:a8:cb: 6a:20:2b:ca:25:f3:6a:a8:db:71:0e:4b:57:fd:d1: bb:2c:bb:a9:14:e4:5f:98:18:00:26:9e:6f:b3:e1: ae:6f:69:b8:52:0f:63:46:12:fc:5a:e9:b5:c7:d0: bc:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D9:F9:C7:03:88:E2:98:D6:04:CE:AC:78:64:A4:78:85:93:D0:D7 X509v3 Authority Key Identifier: keyid:1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/UNn5xwOI4pjWBM6seGSkeIWT0Nc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.100.76.0/23 Signature Algorithm: sha256WithRSAEncryption 4b:02:c6:2d:a1:c1:a0:e9:6e:b8:32:da:7c:65:bf:2c:7e:44: ed:19:ef:1c:0b:39:35:07:2f:84:1d:64:22:7e:51:d5:6e:a5: b1:0b:68:2e:ad:9b:fc:07:d8:1f:de:f1:a3:c3:63:92:79:ec: 5b:8d:fd:10:7e:23:fe:7c:1b:45:47:52:7d:e0:ba:00:60:42: d9:1f:d0:13:13:f3:90:d7:14:d4:22:11:e8:20:01:67:4a:1f: 86:3f:df:8a:85:17:b7:c8:e4:91:cd:00:e7:ab:cb:b3:7d:04: 45:0b:8f:d7:8f:e6:f2:44:56:30:75:42:18:e4:f1:17:a6:8e: 10:c7:1e:23:05:d0:0a:70:73:e6:ba:24:79:05:18:1b:84:1a: 8d:e5:66:fe:11:1f:04:33:27:c1:fb:89:31:3b:bb:44:ea:10: 4d:dd:9a:b6:a0:3f:66:c2:36:92:05:2f:1e:e7:62:43:24:33: 11:87:41:ff:89:43:2f:97:8d:8e:e5:9c:45:86:ef:7b:13:a1: 18:54:76:02:d7:10:06:d4:a0:a9:86:c6:b1:47:83:8b:d6:e4: 63:71:01:a2:39:1a:97:fa:2a:fc:80:e1:20:7e:7c:b9:3b:2a: 49:18:8d:90:e0:d1:13:05:50:78:90:3c:c1:f1:1c:fe:30:ee: 4e:a1:be:13 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pqZaNL9WkaVYKFOdTu4rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmYzQ5MjdhYjE5NGFlMTIzN2ZkZTJkM2JlZjY5MDM4ODkz ZjBkYzUwHhcNMjYwMTAyMTIyMDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MGQ5ZjljNzAzODhlMjk4ZDYwNGNlYWM3ODY0YTQ3ODg1OTNkMGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIiOIlagx+5oYFP8/LRqTPPMUoXS 5UjVwV8X94Bd+dAsInKOxmCPew8M12/zCad6vMAJj4tiZvBedyw25RSsITyckGi1 dp7iSR/2AmF6Rxr1SgB4iGl4aq8ofhJn2awRi6SBI8TUFGttvlGtmvesV1KbRB2l InXQiKOldHkBW6S3/YCdfsCSEh/X925fULb4HGgriPoug8gxSymq5et8wmN+3FZY XhDx3z7nt6EcFXxvMv4dj/bKU/AoeAfKFBsUICEtK1WD+QpTBfRYFqGNqMtqICvK JfNqqNtxDktX/dG7LLupFORfmBgAJp5vs+Gub2m4Ug9jRhL8Wum1x9C88QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFDZ+ccDiOKY1gTOrHhkpHiFk9DXMB8GA1UdIwQY MBaAFB/EknqxlK4SN/3i0772kDiJPw3FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDhTU2VyR1VyaEkzX2VMVHZ2YVFPSWtfRGNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS85NDNkNWQtNTYwYy00MzE0LWFmODIt OGI4YTAxYmQ3NDE0LzEvVU5uNXh3T0k0cGpXQk02c2VHU2tlSVdUME5jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS85NDNkNWQtNTYwYy00MzE0LWFmODItOGI4YTAxYmQ3NDE0 LzEvSDhTU2VyR1VyaEkzX2VMVHZ2YVFPSWtfRGNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBPmRMMA0G CSqGSIb3DQEBCwUAA4IBAQBLAsYtocGg6W64Mtp8Zb8sfkTtGe8cCzk1By+EHWQi flHVbqWxC2gurZv8B9gf3vGjw2OSeexbjf0QfiP+fBtFR1J94LoAYELZH9ATE/OQ 1xTUIhHoIAFnSh+GP9+KhRe3yOSRzQDnq8uzfQRFC4/Xj+byRFYwdUIY5PEXpo4Q xx4jBdAKcHPmuiR5BRgbhBqN5Wb+ER8EMyfB+4kxO7tE6hBN3Zq2oD9mwjaSBS8e 52JDJDMRh0H/iUMvl42O5ZxFhu97E6EYVHYC1xAG1KCphsaxR4OL1uRjcQGiORqX +ir8gOEgfny5OypJGI2Q4NETBVB4kDzB8Rz+MO5Oob4T -----END CERTIFICATE-----Generated at Mon Jan 26 04:42:00 2026 by rpki-client