This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/by-UGjZnPxHASghfMrX3xMxAH0U.roa File: by-UGjZnPxHASghfMrX3xMxAH0U.roa (raw, json) Hash identifier: E+h5Wx406s4BfDje+75V+He27RZ6hOR4CfZDRt1lPHI= Subject key identifier: 6F:2F:94:1A:36:67:3F:11:C0:4A:08:5F:32:B5:F7:C4:CC:40:1F:45 Certificate issuer: /CN=672f0e42b08aa451fc583a358ec370ffbd2dac68 Certificate serial: 019B7DCABD2895D454C85AA5F10BAB68D377 Authority key identifier: 67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/by-UGjZnPxHASghfMrX3xMxAH0U.roa Signing time: Fri 02 Jan 2026 08:19:57 +0000 ROA not before: Fri 02 Jan 2026 08:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60385 IP address blocks: 87.238.139.0/24 maxlen: 24 185.18.248.0/24 maxlen: 24 185.18.249.0/24 maxlen: 24 185.18.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.mft rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:bd:28:95:d4:54:c8:5a:a5:f1:0b:ab:68:d3:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=672f0e42b08aa451fc583a358ec370ffbd2dac68 Validity Not Before: Jan 2 08:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f2f941a36673f11c04a085f32b5f7c4cc401f45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cd:31:31:a7:21:27:38:3e:85:3e:0a:f1:e1: e6:a5:df:99:2d:d2:47:40:dd:49:1c:4a:6c:cb:e6: 7d:0f:fc:6e:f0:31:bb:d5:1c:9d:2b:d9:84:1a:9d: 3b:b1:c3:77:47:93:01:6f:1a:5f:be:8b:e6:c9:b0: 1a:4a:b3:f9:a2:d1:c5:f1:00:20:a2:14:50:30:29: 59:cd:d9:58:61:72:6c:5b:cc:fa:33:f0:0f:51:40: 51:ea:38:33:05:77:55:50:23:b2:93:50:d1:0d:1a: 62:63:b4:ee:42:14:10:8a:3f:f2:f2:ff:f8:fb:c1: 28:3e:ce:d7:d3:85:f1:76:c6:92:ca:a4:2a:31:2f: ec:26:44:75:1a:0b:43:54:65:3e:a8:0a:8f:18:e4: c4:62:a9:22:61:bf:ba:6d:24:7a:d9:99:98:d0:10: 9d:36:e4:25:2f:a6:0c:6e:66:bd:d0:b8:74:6d:ed: 86:1c:0c:d2:bd:4f:08:fe:55:7d:96:ae:b5:1d:d3: c5:3b:ad:b6:bb:df:5a:fd:35:0d:de:11:54:4d:33: 0b:0c:39:50:82:d7:35:6c:47:58:e2:d8:c6:25:ad: 5b:b8:7d:fc:fe:2d:67:c4:b2:6e:0e:ed:14:bd:17: 91:a5:1e:59:3c:d4:77:0f:d6:f6:26:01:27:1b:c6: d3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:2F:94:1A:36:67:3F:11:C0:4A:08:5F:32:B5:F7:C4:CC:40:1F:45 X509v3 Authority Key Identifier: keyid:67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/by-UGjZnPxHASghfMrX3xMxAH0U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.238.139.0/24 185.18.248.0/23 185.18.251.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:aa:d2:f3:b5:20:de:b8:51:87:07:9e:60:94:41:8d:4b:16: 86:95:ae:a2:c7:1a:80:22:f5:01:34:4d:33:c8:1c:32:d3:84: 59:97:c0:d7:07:6a:cb:5e:bb:37:49:80:2a:37:8c:6b:a7:ea: 63:ca:23:16:3e:82:bc:9a:f6:e7:84:70:e6:b4:bf:3c:bc:99: 7a:c4:37:fa:ec:1d:0d:2b:49:74:72:3e:51:c3:40:42:c6:a0: e0:81:16:7d:5d:a8:3d:74:19:6d:70:80:bd:f4:8d:4c:ac:a3: ba:9a:61:c4:19:f8:38:44:f7:ab:88:65:fc:b8:0f:86:c1:67: ad:07:7e:b1:1b:fb:90:c3:38:a3:4e:94:3c:84:b8:10:c4:57: 62:d6:30:98:ce:7d:41:2f:bf:76:e6:44:a1:9a:93:3e:d7:c8: ad:26:c3:e8:81:27:53:98:fe:ab:9d:bd:f0:eb:4a:79:3e:e8: 80:51:64:9f:f5:a6:e8:ba:0c:46:39:41:be:2b:39:16:26:ae: 4c:1a:32:46:05:6f:53:60:f9:e7:1b:ac:90:ff:cc:88:c2:ad: b2:17:69:a7:5d:12:92:d6:d4:35:22:31:a0:bf:7f:de:6c:8f: b5:70:d5:53:4c:1e:15:11:8f:36:be:ec:3a:c2:bc:73:6b:a7: 84:91:ad:e5 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9yr0oldRUyFql8QuraNN3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3MmYwZTQyYjA4YWE0NTFmYzU4M2EzNThlYzM3MGZmYmQy ZGFjNjgwHhcNMjYwMTAyMDgxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjJmOTQxYTM2NjczZjExYzA0YTA4NWYzMmI1ZjdjNGNjNDAxZjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAys0xMachJzg+hT4K8eHmpd+ZLdJH QN1JHEpsy+Z9D/xu8DG71RydK9mEGp07scN3R5MBbxpfvovmybAaSrP5otHF8QAg ohRQMClZzdlYYXJsW8z6M/APUUBR6jgzBXdVUCOyk1DRDRpiY7TuQhQQij/y8v/4 +8EoPs7X04XxdsaSyqQqMS/sJkR1GgtDVGU+qAqPGOTEYqkiYb+6bSR62ZmY0BCd NuQlL6YMbma90Lh0be2GHAzSvU8I/lV9lq61HdPFO622u99a/TUN3hFUTTMLDDlQ gtc1bEdY4tjGJa1buH38/i1nxLJuDu0UvReRpR5ZPNR3D9b2JgEnG8bT1QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFG8vlBo2Zz8RwEoIXzK198TMQB9FMB8GA1UdIwQY MBaAFGcvDkKwiqRR/Fg6NY7DcP+9LaxoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnk4T1FyQ0twRkg4V0RvMWpzTndfNzB0ckdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My81OWE2YjktY2QyMC00Y2Q3LWI0YTct ZjBiOTYyZjUyNDE0LzEvYnktVUdqWm5QeEhBU2doZk1yWDN4TXhBSDBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My81OWE2YjktY2QyMC00Y2Q3LWI0YTctZjBiOTYyZjUyNDE0 LzEvWnk4T1FyQ0twRkg4V0RvMWpzTndfNzB0ckdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAV+6LAwQB uRL4AwQAuRL7MA0GCSqGSIb3DQEBCwUAA4IBAQB7qtLztSDeuFGHB55glEGNSxaG la6ixxqAIvUBNE0zyBwy04RZl8DXB2rLXrs3SYAqN4xrp+pjyiMWPoK8mvbnhHDm tL88vJl6xDf67B0NK0l0cj5Rw0BCxqDggRZ9Xag9dBltcIC99I1MrKO6mmHEGfg4 RPeriGX8uA+GwWetB36xG/uQwzijTpQ8hLgQxFdi1jCYzn1BL7925kShmpM+18it JsPogSdTmP6rnb3w60p5PuiAUWSf9abougxGOUG+KzkWJq5MGjJGBW9TYPnnG6yQ /8yIwq2yF2mnXRKS1tQ1IjGgv3/ebI+1cNVTTB4VEY82vuw6wrxza6eEka3l -----END CERTIFICATE-----Generated at Sun Jan 25 15:06:15 2026 by rpki-client