This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/UA7gHJC_Z2p982U68NF8E3UG9U0.roa File: UA7gHJC_Z2p982U68NF8E3UG9U0.roa (raw, json) Hash identifier: ZEl+7GoQK71F1LLwY1ArVXJBbCVjWwxvhpEbDOY6rzo= Subject key identifier: 50:0E:E0:1C:90:BF:67:6A:7D:F3:65:3A:F0:D1:7C:13:75:06:F5:4D Certificate issuer: /CN=8bdac18a7ad501ba7ea13567909f17e4f7327413 Certificate serial: 019B78A22BB4BAF355342F6DF5FE901B1C33 Authority key identifier: 8B:DA:C1:8A:7A:D5:01:BA:7E:A1:35:67:90:9F:17:E4:F7:32:74:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9rBinrVAbp-oTVnkJ8X5PcydBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/UA7gHJC_Z2p982U68NF8E3UG9U0.roa Signing time: Thu 01 Jan 2026 08:17:32 +0000 ROA not before: Thu 01 Jan 2026 08:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205959 IP address blocks: 185.151.164.0/22 maxlen: 22 2a07:7980::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.mft rsync://rpki.ripe.net/repository/DEFAULT/i9rBinrVAbp-oTVnkJ8X5PcydBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:2b:b4:ba:f3:55:34:2f:6d:f5:fe:90:1b:1c:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bdac18a7ad501ba7ea13567909f17e4f7327413 Validity Not Before: Jan 1 08:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=500ee01c90bf676a7df3653af0d17c137506f54d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6d:8c:4f:3e:29:cf:c8:84:d1:dc:d3:26:6a: e5:06:24:85:52:c8:29:8e:d8:0a:45:3b:2b:1e:22: ab:72:00:c3:f9:43:82:26:e0:5f:68:cf:63:65:d2: 27:83:8d:de:53:78:63:10:4f:13:5e:50:e0:08:dc: fa:3c:f2:1f:16:87:ce:23:9a:64:d4:84:51:a0:5b: 5b:5e:01:0a:89:7f:12:6e:32:f4:64:1b:bc:be:d8: 79:c1:80:70:4e:ba:2a:10:1a:07:f3:21:38:78:35: e4:f3:59:d0:64:6d:8d:f8:b2:25:01:fc:a2:18:68: 42:a0:26:e6:70:d7:0a:de:68:d5:14:79:d6:7b:b5: a5:96:5c:fc:7a:88:77:82:e9:39:de:9f:d9:3f:49: e3:d2:30:1d:5d:45:91:54:de:c4:d2:15:82:e5:fd: 48:41:1a:ee:83:8f:23:5d:18:a9:1f:4d:17:6c:2d: 31:8e:62:e6:33:b1:f1:7b:ba:68:7f:97:b7:80:00: 27:e4:51:e1:5b:06:8e:cb:36:51:4a:7f:13:68:6c: 2c:53:42:dd:1f:83:dd:12:09:14:27:1f:b0:ff:79: 81:f5:54:cd:08:42:ab:7f:46:c6:ff:41:50:f5:65: 77:42:9e:b7:7c:e4:e5:d8:45:45:bd:03:ff:4f:b3: e1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:0E:E0:1C:90:BF:67:6A:7D:F3:65:3A:F0:D1:7C:13:75:06:F5:4D X509v3 Authority Key Identifier: keyid:8B:DA:C1:8A:7A:D5:01:BA:7E:A1:35:67:90:9F:17:E4:F7:32:74:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9rBinrVAbp-oTVnkJ8X5PcydBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/UA7gHJC_Z2p982U68NF8E3UG9U0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.151.164.0/22 IPv6: 2a07:7980::/29 Signature Algorithm: sha256WithRSAEncryption 2f:e3:dd:b4:33:36:78:52:a6:13:3c:9e:be:9d:00:84:41:62: 6f:0f:04:4c:f5:e1:45:86:a5:ad:e7:56:a7:77:12:8a:a8:df: 52:19:da:5e:ff:0e:29:e4:22:b9:0d:d7:9f:64:18:9e:f4:60: f0:f3:1a:20:64:90:9a:d4:4e:c5:64:f8:f1:ad:19:87:f7:b0: a7:37:9f:07:c2:d4:8a:dd:68:28:74:11:71:b8:10:86:31:e1: cd:97:a7:19:ef:43:c6:22:c8:3a:dd:3c:64:19:01:87:20:de: 56:84:40:67:e2:38:94:f4:70:a7:28:5b:0b:15:b5:21:0e:81: ba:78:a4:3a:3e:40:3e:c1:81:88:0d:14:e5:07:11:79:c7:4d: da:c4:54:9f:21:cb:f8:4b:50:d7:d4:40:ed:10:25:da:df:0d: 39:83:f1:cc:ed:d1:65:70:f5:29:f5:af:87:e3:43:d5:b8:b2: 49:9b:14:d6:8c:97:bb:a2:fc:03:65:05:c7:58:67:b8:96:a8: 4c:7d:0e:08:35:89:e5:a9:47:d0:8b:7b:f7:3e:65:54:e5:6c: 7f:7c:35:d3:09:88:c8:ec:97:4b:8c:c8:5b:30:af:52:8b:5e: e6:0b:77:74:c7:a3:88:f6:25:91:80:f1:0d:09:77:8e:78:15: 70:33:e4:89 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4oiu0uvNVNC9t9f6QGxwzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiZGFjMThhN2FkNTAxYmE3ZWExMzU2NzkwOWYxN2U0Zjcz Mjc0MTMwHhcNMjYwMTAxMDgxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDBlZTAxYzkwYmY2NzZhN2RmMzY1M2FmMGQxN2MxMzc1MDZmNTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwm2MTz4pz8iE0dzTJmrlBiSFUsgp jtgKRTsrHiKrcgDD+UOCJuBfaM9jZdIng43eU3hjEE8TXlDgCNz6PPIfFofOI5pk 1IRRoFtbXgEKiX8SbjL0ZBu8vth5wYBwTroqEBoH8yE4eDXk81nQZG2N+LIlAfyi GGhCoCbmcNcK3mjVFHnWe7Wlllz8eoh3guk53p/ZP0nj0jAdXUWRVN7E0hWC5f1I QRrug48jXRipH00XbC0xjmLmM7Hxe7pof5e3gAAn5FHhWwaOyzZRSn8TaGwsU0Ld H4PdEgkUJx+w/3mB9VTNCEKrf0bG/0FQ9WV3Qp63fOTl2EVFvQP/T7PhQQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFAO4ByQv2dqffNlOvDRfBN1BvVNMB8GA1UdIwQY MBaAFIvawYp61QG6fqE1Z5CfF+T3MnQTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTlyQmluclZBYnAtb1RWbmtKOFg1UGN5ZEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8zNzRmZDEtMDJjMi00NjcxLWJkYzkt YzNjYzVkZTFlY2U5LzEvVUE3Z0hKQ19aMnA5ODJVNjhORjhFM1VHOVUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS8zNzRmZDEtMDJjMi00NjcxLWJkYzktYzNjYzVkZTFlY2U5 LzEvaTlyQmluclZBYnAtb1RWbmtKOFg1UGN5ZEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZekMA0E AgACMAcDBQMqB3mAMA0GCSqGSIb3DQEBCwUAA4IBAQAv4920MzZ4UqYTPJ6+nQCE QWJvDwRM9eFFhqWt51andxKKqN9SGdpe/w4p5CK5DdefZBie9GDw8xogZJCa1E7F ZPjxrRmH97CnN58HwtSK3WgodBFxuBCGMeHNl6cZ70PGIsg63TxkGQGHIN5WhEBn 4jiU9HCnKFsLFbUhDoG6eKQ6PkA+wYGIDRTlBxF5x03axFSfIcv4S1DX1EDtECXa 3w05g/HM7dFlcPUp9a+H40PVuLJJmxTWjJe7ovwDZQXHWGe4lqhMfQ4INYnlqUfQ i3v3PmVU5Wx/fDXTCYjI7JdLjMhbMK9Si17mC3d0x6OI9iWRgPENCXeOeBVwM+SJ -----END CERTIFICATE-----Generated at Sun Jan 25 23:54:30 2026 by rpki-client