This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/zz_UCRRefM6imBv_CoSvLx-eFO4.roa File: zz_UCRRefM6imBv_CoSvLx-eFO4.roa (raw, json) Hash identifier: /T25xJQSR6UeswHjk+VE1c3w9pu3Q8+SWMmg9H+vkmk= Subject key identifier: CF:3F:D4:09:14:5E:7C:CE:A2:98:1B:FF:0A:84:AF:2F:1F:9E:14:EE Certificate issuer: /CN=0562d5a67b7a20f865e753163a6ed0e5f347e839 Certificate serial: 019B77589ECD5D1357915D00D03B11BC4B53 Authority key identifier: 05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/zz_UCRRefM6imBv_CoSvLx-eFO4.roa Signing time: Thu 01 Jan 2026 02:17:35 +0000 ROA not before: Thu 01 Jan 2026 02:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34820 IP address blocks: 195.146.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:9e:cd:5d:13:57:91:5d:00:d0:3b:11:bc:4b:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0562d5a67b7a20f865e753163a6ed0e5f347e839 Validity Not Before: Jan 1 02:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf3fd409145e7ccea2981bff0a84af2f1f9e14ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4e:22:b5:c7:22:40:a1:a4:0e:93:83:0b:67: 0a:43:f2:27:32:26:b4:06:cc:ed:68:a1:98:40:b8: c6:87:62:d3:06:c1:9d:66:c3:4c:e7:57:4f:42:2a: 63:bd:dc:e1:09:ad:56:4c:60:34:95:84:d3:c6:28: 84:2e:f9:44:56:05:b4:ef:06:c6:f2:6a:d5:36:24: 81:a1:bb:d6:6b:f0:01:2e:a8:91:16:b4:90:3d:e4: 53:02:ae:ee:ae:3c:52:29:3e:18:bb:1e:ac:02:d0: f0:7d:58:0e:fc:d7:d3:b4:ce:34:cf:31:47:b6:db: c8:ba:1a:d7:8d:58:c7:b9:8f:03:60:66:26:5b:b3: ef:d4:ee:53:a9:70:a4:cd:d3:7f:95:85:07:9b:15: 7b:76:10:04:01:b6:aa:7d:78:32:40:a7:fc:ee:eb: 4f:44:68:6c:fc:24:92:21:07:ee:c8:7f:a1:1d:65: 91:8d:ee:3c:fa:ee:c1:04:ce:2a:33:8c:e0:35:b5: 6f:30:4b:ae:f6:17:47:aa:46:48:e0:da:72:f4:92: 20:09:f7:43:da:e6:b7:b3:7f:71:b7:fd:32:da:d1: 67:4b:88:f5:50:cd:da:b2:e2:14:02:27:ef:87:20: d7:de:40:80:ea:0d:d5:74:cb:77:f2:38:d8:1b:62: 38:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:3F:D4:09:14:5E:7C:CE:A2:98:1B:FF:0A:84:AF:2F:1F:9E:14:EE X509v3 Authority Key Identifier: keyid:05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/zz_UCRRefM6imBv_CoSvLx-eFO4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.146.10.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:56:9b:6e:1e:6e:a3:b4:98:8b:73:1d:b0:d4:d2:7a:ab:98: 34:69:eb:12:ae:db:16:99:d8:67:a7:86:fc:c0:c3:60:d4:cf: 1e:29:9a:f4:6b:5a:ec:ec:9f:11:1d:94:17:cd:22:a6:0f:77: c2:e1:f6:e2:1e:f0:78:3d:12:7f:a4:23:3e:ae:1d:72:a1:55: 77:e0:7a:d7:c3:3a:96:01:19:54:eb:42:06:ac:3b:3b:f8:09: dc:72:b2:d1:b8:75:40:98:7f:19:ac:52:cc:11:e4:9d:a4:75: 1d:95:df:3d:b2:c7:99:58:45:e0:6c:c1:83:fa:a6:8d:d9:83: d4:a5:c3:f5:ff:27:50:21:63:74:20:d5:4b:cf:d2:1c:c7:65: cd:be:48:97:2b:25:35:26:55:0f:a3:84:7d:8a:85:a5:68:88: 22:ae:fd:df:4d:f6:b7:17:21:b6:9c:c0:52:ee:4d:6c:8b:96: 3f:7b:dc:45:d2:08:c7:82:a2:27:26:59:8b:70:03:1c:f9:1a: c0:0c:19:ce:16:75:9c:b8:43:fd:00:0b:9c:da:0d:c7:67:b3: 74:c1:7d:ac:7c:5c:bd:c2:7f:cb:d4:77:09:3b:49:20:f6:30: 57:c6:fe:bf:32:16:1b:d5:14:3e:d5:50:76:95:27:e4:49:33: e7:67:5b:93 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WJ7NXRNXkV0A0DsRvEtTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NjJkNWE2N2I3YTIwZjg2NWU3NTMxNjNhNmVkMGU1ZjM0 N2U4MzkwHhcNMjYwMTAxMDIxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjNmZDQwOTE0NWU3Y2NlYTI5ODFiZmYwYTg0YWYyZjFmOWUxNGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3U4itcciQKGkDpODC2cKQ/InMia0 BsztaKGYQLjGh2LTBsGdZsNM51dPQipjvdzhCa1WTGA0lYTTxiiELvlEVgW07wbG 8mrVNiSBobvWa/ABLqiRFrSQPeRTAq7urjxSKT4Yux6sAtDwfVgO/NfTtM40zzFH ttvIuhrXjVjHuY8DYGYmW7Pv1O5TqXCkzdN/lYUHmxV7dhAEAbaqfXgyQKf87utP RGhs/CSSIQfuyH+hHWWRje48+u7BBM4qM4zgNbVvMEuu9hdHqkZI4Npy9JIgCfdD 2ua3s39xt/0y2tFnS4j1UM3asuIUAifvhyDX3kCA6g3VdMt38jjYG2I4FwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM8/1AkUXnzOopgb/wqEry8fnhTuMB8GA1UdIwQY MBaAFAVi1aZ7eiD4ZedTFjpu0OXzR+g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQldMVnBudDZJUGhsNTFNV09tN1E1Zk5INkRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi84YjAxYzItZWNiZS00Zjg4LWFlMzct NTA0YzhmYzIyMGVhLzEvenpfVUNSUmVmTTZpbUJ2X0NvU3ZMeC1lRk80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi84YjAxYzItZWNiZS00Zjg4LWFlMzctNTA0YzhmYzIyMGVh LzEvQldMVnBudDZJUGhsNTFNV09tN1E1Zk5INkRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw5IKMA0G CSqGSIb3DQEBCwUAA4IBAQCbVptuHm6jtJiLcx2w1NJ6q5g0aesSrtsWmdhnp4b8 wMNg1M8eKZr0a1rs7J8RHZQXzSKmD3fC4fbiHvB4PRJ/pCM+rh1yoVV34HrXwzqW ARlU60IGrDs7+AnccrLRuHVAmH8ZrFLMEeSdpHUdld89sseZWEXgbMGD+qaN2YPU pcP1/ydQIWN0INVLz9Icx2XNvkiXKyU1JlUPo4R9ioWlaIgirv3fTfa3FyG2nMBS 7k1si5Y/e9xF0gjHgqInJlmLcAMc+RrADBnOFnWcuEP9AAuc2g3HZ7N0wX2sfFy9 wn/L1HcJO0kg9jBXxv6/MhYb1RQ+1VB2lSfkSTPnZ1uT -----END CERTIFICATE-----Generated at Mon Jan 26 08:37:51 2026 by rpki-client