This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/UPWe1Wug7fNHuCoRI5LkUE4bICs.roa File: UPWe1Wug7fNHuCoRI5LkUE4bICs.roa (raw, json) Hash identifier: RDVH/BCV293ZQWWctDV3PRotDWVexWOj6PnUwJgAPTM= Subject key identifier: 50:F5:9E:D5:6B:A0:ED:F3:47:B8:2A:11:23:92:E4:50:4E:1B:20:2B Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212 Certificate serial: 019B7E391F6EC39B5D6B34FA4F631F528AF8 Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/UPWe1Wug7fNHuCoRI5LkUE4bICs.roa Signing time: Fri 02 Jan 2026 10:20:31 +0000 ROA not before: Fri 02 Jan 2026 10:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210669 IP address blocks: 176.126.121.0/24 maxlen: 24 193.107.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:1f:6e:c3:9b:5d:6b:34:fa:4f:63:1f:52:8a:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212 Validity Not Before: Jan 2 10:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50f59ed56ba0edf347b82a112392e4504e1b202b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:32:d5:9e:eb:b8:e8:c7:3d:69:e0:12:55:8a: a6:9f:09:96:33:40:26:ad:aa:fb:f3:b4:45:df:92: b0:d4:92:3d:59:d4:10:2c:d3:34:66:ff:cf:74:80: a3:1f:09:70:70:ff:a9:bb:23:a9:f3:77:4a:55:a2: 64:ab:96:05:a9:9b:16:f6:0f:33:4a:c9:4c:8a:50: 12:48:3c:b7:21:17:b2:a6:c6:b0:32:73:3c:90:c3: 20:6d:36:9f:1a:2d:b5:64:82:c7:51:24:b5:c5:98: 52:5f:ec:0e:29:55:1a:91:84:b7:73:93:43:fa:df: 69:59:f3:dd:e0:3d:77:52:32:5e:e4:55:4f:5c:d7: a3:06:c1:35:ba:af:0b:97:14:fd:2d:d3:7e:5a:6e: 17:5b:9b:19:f9:5a:06:85:aa:c9:54:18:81:cc:5f: a0:b9:e3:2a:ae:11:84:f9:4f:2e:72:ba:12:ad:ea: 2d:b5:51:c2:d0:70:12:26:ab:38:a2:a5:b8:0d:84: bf:81:46:be:85:41:3a:ac:54:c8:9f:64:13:72:18: 7a:74:91:44:57:e0:c3:1e:90:66:d0:f5:7c:64:fe: 29:e0:fe:a8:43:0f:94:e2:3a:21:d0:93:1c:3d:b2: b2:4a:a1:b1:fd:52:7c:ef:eb:58:e2:e4:6b:71:b2: 1e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:F5:9E:D5:6B:A0:ED:F3:47:B8:2A:11:23:92:E4:50:4E:1B:20:2B X509v3 Authority Key Identifier: keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/UPWe1Wug7fNHuCoRI5LkUE4bICs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.126.121.0/24 193.107.81.0/24 Signature Algorithm: sha256WithRSAEncryption a0:3e:63:d8:a5:5e:76:63:0f:29:87:39:04:d9:c1:69:25:07: b5:a6:7b:70:47:af:f1:3b:1c:97:70:f4:25:86:d9:bb:ec:d9: 86:90:9d:47:76:8e:a5:d0:98:cd:eb:5f:b0:f4:37:17:eb:4f: e3:fd:f6:30:28:23:c4:15:a8:7f:a6:d4:5b:51:a6:a7:0c:62: e5:35:d3:37:2f:54:8f:d4:5f:fb:47:f3:f3:07:28:1e:36:55: 22:27:d3:c7:fe:72:30:8b:43:b8:c2:84:40:ac:f1:71:91:e6: 56:92:18:9f:bf:4b:d6:85:77:be:a0:4d:c5:d5:d7:97:93:7c: 18:9d:b8:b8:7b:a9:7c:37:cd:4e:93:20:b8:7e:66:b2:63:ea: 91:08:91:45:3e:9e:14:68:70:00:c5:c2:b8:b1:5c:19:02:2e: ad:e4:8d:c0:61:38:c7:4c:91:87:9d:5c:48:cf:98:64:5d:3b: 79:36:5c:e4:82:a8:6f:72:46:95:df:a7:7c:4e:95:82:a7:31: 7e:f1:b6:3c:cd:9d:0e:01:59:3d:5a:d0:82:ad:b3:b9:ce:bd: 63:55:2f:9c:e4:94:e9:3f:b5:5d:2d:68:84:0c:fa:7f:18:10: 46:bd:ab:71:aa:31:04:e1:f7:e2:07:fb:ef:68:9f:9c:ce:a4: 0a:51:8b:29 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OR9uw5tdazT6T2MfUor4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZTk3Y2Y0ZDhkMGJjMTdiM2FmMWQ2MmM0ZDcxNDg4NjYx YmQyMTIwHhcNMjYwMTAyMTAyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MGY1OWVkNTZiYTBlZGYzNDdiODJhMTEyMzkyZTQ1MDRlMWIyMDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTLVnuu46Mc9aeASVYqmnwmWM0Am rar787RF35Kw1JI9WdQQLNM0Zv/PdICjHwlwcP+puyOp83dKVaJkq5YFqZsW9g8z SslMilASSDy3IReypsawMnM8kMMgbTafGi21ZILHUSS1xZhSX+wOKVUakYS3c5ND +t9pWfPd4D13UjJe5FVPXNejBsE1uq8LlxT9LdN+Wm4XW5sZ+VoGharJVBiBzF+g ueMqrhGE+U8ucroSreottVHC0HASJqs4oqW4DYS/gUa+hUE6rFTIn2QTchh6dJFE V+DDHpBm0PV8ZP4p4P6oQw+U4joh0JMcPbKySqGx/VJ87+tY4uRrcbIeDQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFD1ntVroO3zR7gqESOS5FBOGyArMB8GA1UdIwQY MBaAFGzpfPTY0LwXs68dYsTXFIhmG9ISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9lNGNjYjEtY2EyNS00MDk5LTgyNzMt Mzk5M2FhMzI0ZTFmLzEvVVBXZTFXdWc3Zk5IdUNvUkk1TGtVRTRiSUNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9lNGNjYjEtY2EyNS00MDk5LTgyNzMtMzk5M2FhMzI0ZTFm LzEvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsH55AwQA wWtRMA0GCSqGSIb3DQEBCwUAA4IBAQCgPmPYpV52Yw8phzkE2cFpJQe1pntwR6/x OxyXcPQlhtm77NmGkJ1Hdo6l0JjN61+w9DcX60/j/fYwKCPEFah/ptRbUaanDGLl NdM3L1SP1F/7R/PzBygeNlUiJ9PH/nIwi0O4woRArPFxkeZWkhifv0vWhXe+oE3F 1deXk3wYnbi4e6l8N81OkyC4fmayY+qRCJFFPp4UaHAAxcK4sVwZAi6t5I3AYTjH TJGHnVxIz5hkXTt5NlzkgqhvckaV36d8TpWCpzF+8bY8zZ0OAVk9WtCCrbO5zr1j VS+c5JTpP7VdLWiEDPp/GBBGvatxqjEE4ffiB/vvaJ+czqQKUYsp -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:18 2026 by rpki-client