This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/Ul_Wf7zGibMnBoONOBmC-CbebuE.roa File: Ul_Wf7zGibMnBoONOBmC-CbebuE.roa (raw, json) Hash identifier: rHROysQB1FOGTFZPpOKof8CKn+9ezFraJbOm+zE4tGw= Subject key identifier: 52:5F:D6:7F:BC:C6:89:B3:27:06:83:8D:38:19:82:F8:26:DE:6E:E1 Certificate issuer: /CN=bfc470e9b58e557ea8c1dbedaeb9c6a5fc455125 Certificate serial: 019B7E38F1F9E9000C4945C8F245262F5A4C Authority key identifier: BF:C4:70:E9:B5:8E:55:7E:A8:C1:DB:ED:AE:B9:C6:A5:FC:45:51:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/Ul_Wf7zGibMnBoONOBmC-CbebuE.roa Signing time: Fri 02 Jan 2026 10:20:19 +0000 ROA not before: Fri 02 Jan 2026 10:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208864 IP address blocks: 185.192.144.0/24 maxlen: 24 185.192.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:f1:f9:e9:00:0c:49:45:c8:f2:45:26:2f:5a:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfc470e9b58e557ea8c1dbedaeb9c6a5fc455125 Validity Not Before: Jan 2 10:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=525fd67fbcc689b32706838d381982f826de6ee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:38:dc:a1:d9:eb:f8:07:97:92:4c:ba:f0:f9: d6:35:1f:ca:31:ca:09:1a:cc:50:4f:1c:c4:69:1e: 85:09:5d:e7:9e:34:4b:c5:5b:d6:b7:ae:4e:38:5d: 3c:28:76:f0:37:a1:9c:3e:61:c2:2d:6f:1b:13:00: 0b:9a:b0:33:0d:68:ca:da:d9:34:b4:73:94:24:83: cf:1d:d0:0c:14:7f:c2:58:82:5c:1d:0c:1a:d0:ce: b2:b5:92:08:92:18:a1:e4:da:53:06:33:55:2a:44: 50:f7:12:f9:ab:3c:a2:26:3c:69:7b:49:f9:62:82: f4:97:2e:42:36:3f:fb:e7:ac:c8:bf:e9:b4:fb:6d: fe:df:6b:c2:f4:15:bf:63:6d:46:19:cb:dc:90:79: aa:53:81:a8:28:91:12:46:31:37:c7:45:4e:bf:d9: 6d:f7:c5:9a:3b:d6:d6:91:e4:77:ed:e5:b3:57:86: bf:03:50:c8:d2:8c:7a:5d:21:15:48:50:4d:87:2e: f7:6a:51:23:be:03:b2:18:68:fe:40:f4:fa:3f:ab: cb:76:87:4b:6f:43:56:2c:db:c7:f6:1f:51:35:c3: 51:52:85:70:12:d8:fb:f9:98:5a:52:8c:2d:6d:f8: 72:b2:a5:67:e6:0a:e1:5e:25:db:2d:09:b2:97:1f: 11:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:5F:D6:7F:BC:C6:89:B3:27:06:83:8D:38:19:82:F8:26:DE:6E:E1 X509v3 Authority Key Identifier: keyid:BF:C4:70:E9:B5:8E:55:7E:A8:C1:DB:ED:AE:B9:C6:A5:FC:45:51:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/Ul_Wf7zGibMnBoONOBmC-CbebuE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.192.144.0/23 Signature Algorithm: sha256WithRSAEncryption 49:95:6b:e2:d9:3e:40:90:09:2c:4d:a3:ce:73:a2:a9:d4:58: e2:a7:90:2f:4e:d6:2d:01:43:6a:40:27:26:d2:9a:0a:25:3b: 0f:d9:6f:57:64:bb:a1:df:40:4b:6f:c7:b6:8a:1c:d1:af:74: 62:1a:a5:bb:02:d9:b8:06:c7:09:f0:4e:ca:a2:4d:3e:46:a8: 2b:c3:99:56:c2:66:28:02:6a:cc:ef:f0:2d:d3:db:66:5d:c6: ba:a0:fc:6c:be:6c:af:9b:6c:bd:b7:7d:ed:c5:ff:b7:c5:76: 3e:69:c0:1b:e5:dd:7a:85:e0:0d:b1:8b:4a:81:ac:66:86:8e: e1:b1:ff:4a:a8:d5:a1:b7:28:53:e5:b2:a2:3a:07:4e:c3:d9: bc:f7:88:0b:03:f8:96:7f:7b:7a:12:15:6c:9c:a5:30:f5:44: 23:77:6c:6c:ed:7f:6c:b4:07:e0:a6:60:eb:0e:b9:0d:12:ed: 68:7b:6a:3f:40:d0:85:55:32:d3:2c:d4:ec:bf:bd:51:b4:be: b5:7e:ac:dd:d9:b2:a8:79:bf:53:d4:54:b6:50:f6:11:4f:1c: c2:9f:20:3c:12:06:17:be:13:eb:73:42:4f:e3:51:26:1b:e4: f3:c4:32:f4:b1:c4:e0:91:1c:e1:41:97:ef:79:f6:76:80:4c: be:fa:aa:c0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OPH56QAMSUXI8kUmL1pMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYzQ3MGU5YjU4ZTU1N2VhOGMxZGJlZGFlYjljNmE1ZmM0 NTUxMjUwHhcNMjYwMTAyMTAyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjVmZDY3ZmJjYzY4OWIzMjcwNjgzOGQzODE5ODJmODI2ZGU2ZWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zjcodnr+AeXkky68PnWNR/KMcoJ GsxQTxzEaR6FCV3nnjRLxVvWt65OOF08KHbwN6GcPmHCLW8bEwALmrAzDWjK2tk0 tHOUJIPPHdAMFH/CWIJcHQwa0M6ytZIIkhih5NpTBjNVKkRQ9xL5qzyiJjxpe0n5 YoL0ly5CNj/756zIv+m0+23+32vC9BW/Y21GGcvckHmqU4GoKJESRjE3x0VOv9lt 98WaO9bWkeR37eWzV4a/A1DI0ox6XSEVSFBNhy73alEjvgOyGGj+QPT6P6vLdodL b0NWLNvH9h9RNcNRUoVwEtj7+ZhaUowtbfhysqVn5grhXiXbLQmylx8RZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFJf1n+8xomzJwaDjTgZgvgm3m7hMB8GA1UdIwQY MBaAFL/EcOm1jlV+qMHb7a65xqX8RVElMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjhSdzZiV09WWDZvd2R2dHJybkdwZnhGVVNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8yN2IzOWItMDQ0OS00YzY0LWJhNzkt YTJhYTY1NDBmODc1LzEvVWxfV2Y3ekdpYk1uQm9PTk9CbUMtQ2JlYnVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi8yN2IzOWItMDQ0OS00YzY0LWJhNzktYTJhYTY1NDBmODc1 LzEvdjhSdzZiV09WWDZvd2R2dHJybkdwZnhGVVNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBucCQMA0G CSqGSIb3DQEBCwUAA4IBAQBJlWvi2T5AkAksTaPOc6Kp1Fjip5AvTtYtAUNqQCcm 0poKJTsP2W9XZLuh30BLb8e2ihzRr3RiGqW7Atm4BscJ8E7Kok0+Rqgrw5lWwmYo AmrM7/At09tmXca6oPxsvmyvm2y9t33txf+3xXY+acAb5d16heANsYtKgaxmho7h sf9KqNWhtyhT5bKiOgdOw9m894gLA/iWf3t6EhVsnKUw9UQjd2xs7X9stAfgpmDr DrkNEu1oe2o/QNCFVTLTLNTsv71RtL61fqzd2bKoeb9T1FS2UPYRTxzCnyA8EgYX vhPrc0JP41EmG+TzxDL0scTgkRzhQZfvefZ2gEy++qrA -----END CERTIFICATE-----Generated at Sun Jan 25 16:53:45 2026 by rpki-client