This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/UgUlbA4Ymig1Dt7HwmQu6F99hKM.roa File: UgUlbA4Ymig1Dt7HwmQu6F99hKM.roa (raw, json) Hash identifier: f9lP8pXxVTYPvjjr2VNmvzkO+lSuR++Kin/e+V01V5k= Subject key identifier: 52:05:25:6C:0E:18:9A:28:35:0E:DE:C7:C2:64:2E:E8:5F:7D:84:A3 Certificate issuer: /CN=7d149f62447853689c12fb288afeb6b681cfebc1 Certificate serial: 019B79EBF755B5675C13D60ACAE813360393 Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/UgUlbA4Ymig1Dt7HwmQu6F99hKM.roa Signing time: Thu 01 Jan 2026 14:17:46 +0000 ROA not before: Thu 01 Jan 2026 14:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51276 IP address blocks: 93.125.70.0/24 maxlen: 24 213.184.247.0/24 maxlen: 24 217.21.50.0/24 maxlen: 24 2a04:2e80:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:f7:55:b5:67:5c:13:d6:0a:ca:e8:13:36:03:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1 Validity Not Before: Jan 1 14:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5205256c0e189a28350edec7c2642ee85f7d84a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d3:91:48:fa:17:fe:11:bf:94:61:a1:32:38: be:99:38:4f:03:65:eb:e5:37:bc:89:38:48:61:e3: 8e:39:80:91:57:6d:3f:7e:70:4f:23:b2:55:b4:6d: 55:c1:99:37:51:e3:66:ee:73:0f:0e:cc:ea:72:a0: c2:95:dd:af:d9:bd:4c:f2:c0:dd:c8:8e:84:09:a0: ba:09:33:3d:5a:12:97:5f:e2:03:cf:6f:0b:92:b2: 1d:d4:a4:a3:10:97:b6:0b:42:5c:31:67:b3:ca:10: ae:d2:3d:5b:2e:7b:48:a8:77:51:93:ea:9f:60:67: 26:5b:28:0c:52:bc:a1:a9:16:7f:75:95:cf:b8:3b: 95:54:84:85:72:f0:c5:1b:3b:76:20:0e:b4:ed:ac: ba:83:23:ef:30:4b:87:da:03:33:6f:68:2e:18:25: aa:c3:5d:42:52:7a:ae:32:0a:7b:f3:ef:90:04:48: 9a:5e:e6:ba:23:83:f2:f1:ca:73:d4:d5:df:93:e2: 8f:13:5e:6b:a1:cc:7b:1d:ea:fb:4c:f8:c0:5c:34: fb:ab:41:fd:e8:7a:b0:04:79:34:06:07:80:22:d4: c2:72:62:fe:19:db:fc:3d:ce:a4:31:1d:81:0e:68: 2c:af:48:6d:c0:de:52:75:73:84:99:82:db:e6:11: aa:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:05:25:6C:0E:18:9A:28:35:0E:DE:C7:C2:64:2E:E8:5F:7D:84:A3 X509v3 Authority Key Identifier: keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/UgUlbA4Ymig1Dt7HwmQu6F99hKM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.125.70.0/24 213.184.247.0/24 217.21.50.0/24 IPv6: 2a04:2e80:8::/48 Signature Algorithm: sha256WithRSAEncryption 45:e6:aa:a6:4e:c6:0b:0b:4f:c6:83:9f:57:a9:9e:f3:10:3b: 4c:3d:8b:3e:0e:1f:37:62:a5:63:e3:af:26:a5:7e:f0:41:29: f5:52:46:2a:30:cb:94:55:c9:f9:5f:4a:46:65:c4:53:93:de: 1f:4c:2a:d6:92:e8:42:35:c0:48:47:cf:36:fd:b5:ce:f6:97: d8:1a:66:23:03:85:dd:5e:4e:49:b3:a6:70:6e:dd:3b:1e:9d: 01:1c:bf:95:f7:44:f1:b1:be:31:9a:22:31:48:f9:43:ae:aa: 49:31:b6:52:dd:67:e1:f0:61:c9:af:5f:92:1b:1d:c5:e5:94: 63:a2:23:0f:b8:ba:49:74:b1:4a:a7:18:69:dc:1e:7d:d4:2c: 6c:47:ef:f0:1d:d8:85:e4:a3:ad:0c:8c:25:34:79:53:74:66: 01:5d:4a:24:de:fe:e1:2f:68:40:20:b5:aa:06:25:4a:55:13: 82:79:a7:65:c9:a3:00:01:69:40:91:b8:da:34:15:ae:40:00: 1a:fa:3f:8d:9c:e8:d7:a9:59:a3:b4:ec:62:9d:17:a0:f3:e8: 61:c0:ea:c3:54:9a:49:45:6a:9d:75:af:0c:3f:15:05:c8:13: d5:14:8d:2b:60:dd:14:ad:47:ba:40:05:3c:bb:7a:e8:a4:44: a4:b4:43:45 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt56/dVtWdcE9YKyugTNgOTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMTQ5ZjYyNDQ3ODUzNjg5YzEyZmIyODhhZmViNmI2ODFj ZmViYzEwHhcNMjYwMTAxMTQxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjA1MjU2YzBlMTg5YTI4MzUwZWRlYzdjMjY0MmVlODVmN2Q4NGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndORSPoX/hG/lGGhMji+mThPA2Xr 5Te8iThIYeOOOYCRV20/fnBPI7JVtG1VwZk3UeNm7nMPDszqcqDCld2v2b1M8sDd yI6ECaC6CTM9WhKXX+IDz28LkrId1KSjEJe2C0JcMWezyhCu0j1bLntIqHdRk+qf YGcmWygMUryhqRZ/dZXPuDuVVISFcvDFGzt2IA607ay6gyPvMEuH2gMzb2guGCWq w11CUnquMgp78++QBEiaXua6I4Py8cpz1NXfk+KPE15rocx7Her7TPjAXDT7q0H9 6HqwBHk0BgeAItTCcmL+Gdv8Pc6kMR2BDmgsr0htwN5SdXOEmYLb5hGq4QIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFFIFJWwOGJooNQ7ex8JkLuhffYSjMB8GA1UdIwQY MBaAFH0Un2JEeFNonBL7KIr+traBz+vBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTct YWFiMGU0MTRjYzYzLzEvVWdVbGJBNFltaWcxRHQ3SHdtUXU2Rjk5aEtNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTctYWFiMGU0MTRjYzYz LzEvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQAXX1GAwQA 1bj3AwQA2RUyMA8EAgACMAkDBwAqBC6AAAgwDQYJKoZIhvcNAQELBQADggEBAEXm qqZOxgsLT8aDn1epnvMQO0w9iz4OHzdipWPjryalfvBBKfVSRiowy5RVyflfSkZl xFOT3h9MKtaS6EI1wEhHzzb9tc72l9gaZiMDhd1eTkmzpnBu3TsenQEcv5X3RPGx vjGaIjFI+UOuqkkxtlLdZ+HwYcmvX5IbHcXllGOiIw+4ukl0sUqnGGncHn3ULGxH 7/Ad2IXko60MjCU0eVN0ZgFdSiTe/uEvaEAgtaoGJUpVE4J5p2XJowABaUCRuNo0 Fa5AABr6P42c6NepWaO07GKdF6Dz6GHA6sNUmklFap11rww/FQXIE9UUjStg3RSt R7pABTy7euikRKS0Q0U= -----END CERTIFICATE-----Generated at Sun Jan 25 16:28:40 2026 by rpki-client