This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/UBfX_Q_ESiqvVw7XJAwKhDzOiYc.roa File: UBfX_Q_ESiqvVw7XJAwKhDzOiYc.roa (raw, json) Hash identifier: yij0Gcg4VWx0ybKs3NoqtbhVEj3lt3YcAj0EyqPh7VY= Subject key identifier: 50:17:D7:FD:0F:C4:4A:2A:AF:57:0E:D7:24:0C:0A:84:3C:CE:89:87 Certificate issuer: /CN=aca1f4713024804c445403af63fa644b2a935d24 Certificate serial: 019B7F138AC3B880E2D25F26CED6EDF6D547 Authority key identifier: AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/UBfX_Q_ESiqvVw7XJAwKhDzOiYc.roa Signing time: Fri 02 Jan 2026 14:19:05 +0000 ROA not before: Fri 02 Jan 2026 14:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200020 IP address blocks: 194.180.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:8a:c3:b8:80:e2:d2:5f:26:ce:d6:ed:f6:d5:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aca1f4713024804c445403af63fa644b2a935d24 Validity Not Before: Jan 2 14:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5017d7fd0fc44a2aaf570ed7240c0a843cce8987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ec:40:03:98:c1:e2:08:8c:d0:12:23:dc:1c: 95:df:a8:a8:e6:c2:87:d9:3c:b6:1d:a3:6b:18:63: 6c:a6:04:e2:4d:f8:e2:25:b6:7f:04:7e:20:32:ea: 3b:d1:1e:53:49:db:c6:09:c0:cc:66:8c:8e:be:57: d9:91:e0:87:d5:66:bb:af:36:66:88:66:9b:ae:ef: b0:60:43:cb:8b:51:99:d3:1d:4f:df:9b:69:9b:24: 7f:9d:30:a3:5a:4c:9f:db:71:31:e1:a3:5f:72:50: c0:4c:ad:df:98:39:e7:17:f3:8e:f7:f9:d2:d5:8b: 7b:e1:3b:e4:7f:2b:1e:bc:92:fc:ab:67:d4:23:2b: 07:89:b8:6a:85:d6:ac:3f:bf:8f:e8:32:c7:c5:1d: 4f:ac:00:a4:04:96:62:69:7e:76:2c:81:e0:b0:cc: 9c:1d:5d:5a:d0:9f:63:fd:cb:43:a5:d6:64:ae:6e: c8:f2:1b:fb:16:84:b3:7c:a0:77:98:aa:58:3a:8e: 70:eb:ce:bd:d7:ca:72:67:8f:50:1f:22:07:3d:66: 10:7d:77:21:30:87:90:ac:8f:8a:a2:4a:49:54:5b: b6:f1:f7:b8:d5:15:50:f1:af:89:79:17:84:a8:c7: 13:c0:4b:7c:ae:48:4f:71:d3:21:0b:5a:53:de:ac: ac:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:17:D7:FD:0F:C4:4A:2A:AF:57:0E:D7:24:0C:0A:84:3C:CE:89:87 X509v3 Authority Key Identifier: keyid:AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/UBfX_Q_ESiqvVw7XJAwKhDzOiYc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.180.216.0/24 Signature Algorithm: sha256WithRSAEncryption d1:e1:e1:12:f5:9f:29:7d:a0:b7:20:ba:2d:79:ea:c2:50:39: d7:fd:0a:55:e5:bf:9e:50:e4:0b:56:3c:c1:c6:48:52:d4:3a: e2:5d:51:84:ee:3d:a5:29:54:f4:73:b0:24:d9:1c:27:4c:c2: aa:aa:64:83:6f:e7:97:f9:25:d3:6c:3b:75:e1:ac:d8:5f:0a: 7d:7f:57:b5:b1:42:97:c9:03:51:04:98:83:ff:bf:a9:62:be: f8:85:98:a4:aa:fe:e9:83:dc:77:12:55:a6:29:6a:11:e8:5a: f6:69:bd:87:1e:80:34:32:47:ba:72:d9:cc:13:03:de:dc:ee: 67:5f:30:c4:ec:35:52:1c:a0:a5:21:78:f3:8b:cb:38:33:61: 75:1a:f4:ed:70:5e:e0:4e:61:b7:7f:43:9d:23:5e:6e:ce:a8: 63:b8:05:1c:e8:de:86:c9:b5:aa:21:d2:a4:f0:24:c1:5a:62: 7b:79:ef:78:36:48:91:42:00:35:fc:2f:4a:22:b7:d7:15:33: 75:c1:0c:59:36:83:ba:5c:8d:e8:9c:72:0a:e7:03:8d:b5:05: eb:80:64:3f:c9:bb:e5:4d:f7:fa:25:03:c2:26:7e:c4:8d:95: a7:6b:4c:7b:2b:7e:f4:ad:4d:7d:ce:7f:9e:ab:4a:3e:c0:29: b0:0c:9c:76 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E4rDuIDi0l8mztbt9tVHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYTFmNDcxMzAyNDgwNGM0NDU0MDNhZjYzZmE2NDRiMmE5 MzVkMjQwHhcNMjYwMTAyMTQxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDE3ZDdmZDBmYzQ0YTJhYWY1NzBlZDcyNDBjMGE4NDNjY2U4OTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOxAA5jB4giM0BIj3ByV36io5sKH 2Ty2HaNrGGNspgTiTfjiJbZ/BH4gMuo70R5TSdvGCcDMZoyOvlfZkeCH1Wa7rzZm iGabru+wYEPLi1GZ0x1P35tpmyR/nTCjWkyf23Ex4aNfclDATK3fmDnnF/OO9/nS 1Yt74TvkfysevJL8q2fUIysHibhqhdasP7+P6DLHxR1PrACkBJZiaX52LIHgsMyc HV1a0J9j/ctDpdZkrm7I8hv7FoSzfKB3mKpYOo5w686918pyZ49QHyIHPWYQfXch MIeQrI+KokpJVFu28fe41RVQ8a+JeReEqMcTwEt8rkhPcdMhC1pT3qys4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFAX1/0PxEoqr1cO1yQMCoQ8zomHMB8GA1UdIwQY MBaAFKyh9HEwJIBMRFQDr2P6ZEsqk10kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcktIMGNUQWtnRXhFVkFPdllfcGtTeXFUWFNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9jNmQ2YmUtYmY0YS00M2U1LWE5MDgt NWNhMDE2YTEwMDU0LzEvVUJmWF9RX0VTaXF2Vnc3WEpBd0toRHpPaVljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9jNmQ2YmUtYmY0YS00M2U1LWE5MDgtNWNhMDE2YTEwMDU0 LzEvcktIMGNUQWtnRXhFVkFPdllfcGtTeXFUWFNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwrTYMA0G CSqGSIb3DQEBCwUAA4IBAQDR4eES9Z8pfaC3ILoteerCUDnX/QpV5b+eUOQLVjzB xkhS1DriXVGE7j2lKVT0c7Ak2RwnTMKqqmSDb+eX+SXTbDt14azYXwp9f1e1sUKX yQNRBJiD/7+pYr74hZikqv7pg9x3ElWmKWoR6Fr2ab2HHoA0Mke6ctnMEwPe3O5n XzDE7DVSHKClIXjzi8s4M2F1GvTtcF7gTmG3f0OdI15uzqhjuAUc6N6GybWqIdKk 8CTBWmJ7ee94NkiRQgA1/C9KIrfXFTN1wQxZNoO6XI3onHIK5wONtQXrgGQ/ybvl Tff6JQPCJn7EjZWna0x7K370rU19zn+eq0o+wCmwDJx2 -----END CERTIFICATE-----Generated at Sun Jan 25 18:08:11 2026 by rpki-client