This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/UBcqPXEQnKrJnYhEGTvOR6j6EUo.roa File: UBcqPXEQnKrJnYhEGTvOR6j6EUo.roa (raw, json) Hash identifier: wZthjYgNfjrS6L37NpRR1qXSrJcuxPFMsxRLKIg6JX8= Subject key identifier: 50:17:2A:3D:71:10:9C:AA:C9:9D:88:44:19:3B:CE:47:A8:FA:11:4A Certificate issuer: /CN=4f152900b0d323d36d94510ab0b01c93f4517c89 Certificate serial: 019B7D5B6E1EF6FFD9828C0A3F4A9AE24758 Authority key identifier: 4F:15:29:00:B0:D3:23:D3:6D:94:51:0A:B0:B0:1C:93:F4:51:7C:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/UBcqPXEQnKrJnYhEGTvOR6j6EUo.roa Signing time: Fri 02 Jan 2026 06:18:22 +0000 ROA not before: Fri 02 Jan 2026 06:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203736 IP address blocks: 185.102.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:6e:1e:f6:ff:d9:82:8c:0a:3f:4a:9a:e2:47:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f152900b0d323d36d94510ab0b01c93f4517c89 Validity Not Before: Jan 2 06:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50172a3d71109caac99d8844193bce47a8fa114a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:06:2f:14:11:5e:ce:0c:8f:8d:d4:d0:1d:97: 6e:c7:a7:c0:e0:74:83:e3:55:8a:fa:3c:5b:6c:25: 90:3e:24:ca:67:00:60:60:14:5b:94:c4:4d:ec:11: 61:3d:3a:1a:6b:d9:27:05:24:f4:64:77:4e:f4:d5: 78:95:6e:d1:5e:f6:b4:c6:e1:85:09:30:7b:b5:6e: dd:89:89:62:4e:80:58:3e:01:0c:86:29:41:51:6d: fd:54:83:5c:c0:c7:72:da:67:db:86:3f:f5:c9:e5: c5:85:63:42:e5:1b:e6:5b:78:25:11:28:9e:50:30: 25:4e:54:33:a1:1b:2c:09:a6:ef:b4:b0:a8:3f:52: 6e:db:67:0f:da:75:51:d7:ff:9a:12:2b:19:e5:c9: 49:e7:d9:2f:3e:bf:e0:e1:40:e6:41:34:1e:2f:f0: cc:c3:22:ca:c3:8b:9b:47:ab:d5:f3:cf:d8:64:2d: 6e:87:a6:74:55:55:4d:ae:84:f0:6f:48:ef:c2:f6: c7:eb:49:21:7d:cf:7d:30:f2:34:f3:a4:1c:6a:7e: 85:67:d9:88:2c:15:18:00:1f:4d:67:61:e6:3e:be: cf:82:31:2a:58:fe:ab:cf:be:72:bd:89:df:2b:5a: f9:a9:1b:b6:73:f5:35:9e:b6:be:db:cc:d6:4b:1c: 7a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:17:2A:3D:71:10:9C:AA:C9:9D:88:44:19:3B:CE:47:A8:FA:11:4A X509v3 Authority Key Identifier: keyid:4F:15:29:00:B0:D3:23:D3:6D:94:51:0A:B0:B0:1C:93:F4:51:7C:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/UBcqPXEQnKrJnYhEGTvOR6j6EUo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.102.32.0/22 Signature Algorithm: sha256WithRSAEncryption 83:2e:9c:13:d9:14:9d:28:61:ac:30:d3:42:fc:30:19:a6:8f: d5:e0:9b:9e:a5:8b:0d:02:0c:70:f7:54:1e:0f:91:ed:7e:9f: 53:0a:d1:ef:d4:c7:67:1d:be:8e:17:35:8a:8b:d2:22:b4:be: e7:ad:93:bf:ca:c0:68:86:ed:da:89:27:fd:eb:38:0c:d7:55: de:4f:2f:dc:2a:0a:26:29:47:34:5b:20:27:80:99:31:18:61: 3c:6d:03:b8:82:db:90:7d:d1:ea:f5:af:bd:00:cf:13:af:fa: f3:ca:40:23:94:41:5a:a1:b4:4a:cc:5f:20:45:3e:d5:9b:08: 1e:15:0e:5e:a4:46:2b:73:33:6c:1a:90:89:1a:b5:c6:b8:7d: 8d:8d:c9:68:2d:37:f6:13:08:89:be:bb:c1:f2:54:f7:5d:20: 1a:39:28:25:62:d8:06:fa:6d:26:89:23:73:c2:fc:5a:a0:70: a1:19:22:82:b6:e8:ef:71:f9:b1:e2:51:0c:0f:51:55:c9:c9: 67:68:f6:8d:cf:50:79:fa:d0:1e:8e:ff:88:2e:06:3f:42:7c: ff:1f:6c:d9:17:bc:03:fc:ac:80:7c:19:ad:e2:3a:75:b2:e6: 74:2f:cf:74:a7:bb:27:69:64:3c:a8:18:5f:6a:70:b5:a9:3f: 22:31:43:fe -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W24e9v/ZgowKP0qa4kdYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTUyOTAwYjBkMzIzZDM2ZDk0NTEwYWIwYjAxYzkzZjQ1 MTdjODkwHhcNMjYwMTAyMDYxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDE3MmEzZDcxMTA5Y2FhYzk5ZDg4NDQxOTNiY2U0N2E4ZmExMTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gYvFBFezgyPjdTQHZdux6fA4HSD 41WK+jxbbCWQPiTKZwBgYBRblMRN7BFhPToaa9knBST0ZHdO9NV4lW7RXva0xuGF CTB7tW7diYliToBYPgEMhilBUW39VINcwMdy2mfbhj/1yeXFhWNC5RvmW3glESie UDAlTlQzoRssCabvtLCoP1Ju22cP2nVR1/+aEisZ5clJ59kvPr/g4UDmQTQeL/DM wyLKw4ubR6vV88/YZC1uh6Z0VVVNroTwb0jvwvbH60khfc99MPI086Qcan6FZ9mI LBUYAB9NZ2HmPr7PgjEqWP6rz75yvYnfK1r5qRu2c/U1nra+28zWSxx6OQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFAXKj1xEJyqyZ2IRBk7zkeo+hFKMB8GA1UdIwQY MBaAFE8VKQCw0yPTbZRRCrCwHJP0UXyJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhVcEFMRFRJOU50bEZFS3NMQWNrX1JSZklrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC84OWZmM2ItMTI2My00Y2RkLTljYWQt MjNkZjhkZGRmOTc4LzEvVUJjcVBYRVFuS3JKblloRUdUdk9SNmo2RVVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC84OWZmM2ItMTI2My00Y2RkLTljYWQtMjNkZjhkZGRmOTc4 LzEvVHhVcEFMRFRJOU50bEZFS3NMQWNrX1JSZklrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuWYgMA0G CSqGSIb3DQEBCwUAA4IBAQCDLpwT2RSdKGGsMNNC/DAZpo/V4JuepYsNAgxw91Qe D5Htfp9TCtHv1MdnHb6OFzWKi9IitL7nrZO/ysBohu3aiSf96zgM11XeTy/cKgom KUc0WyAngJkxGGE8bQO4gtuQfdHq9a+9AM8Tr/rzykAjlEFaobRKzF8gRT7Vmwge FQ5epEYrczNsGpCJGrXGuH2NjcloLTf2EwiJvrvB8lT3XSAaOSglYtgG+m0miSNz wvxaoHChGSKCtujvcfmx4lEMD1FVyclnaPaNz1B5+tAejv+ILgY/Qnz/H2zZF7wD /KyAfBmt4jp1suZ0L890p7snaWQ8qBhfanC1qT8iMUP+ -----END CERTIFICATE-----Generated at Mon Jan 26 00:15:45 2026 by rpki-client