This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/UXXtGi4oxNDjahgVbsQFfeZIwU4.roa File: UXXtGi4oxNDjahgVbsQFfeZIwU4.roa (raw, json) Hash identifier: jdBHO4Fwd2CUANgRDo6QBZVoktY70KNazlVK3AC+4zE= Subject key identifier: 51:75:ED:1A:2E:28:C4:D0:E3:6A:18:15:6E:C4:05:7D:E6:48:C1:4E Certificate issuer: /CN=540f4a1b92338b49ca63021219059ce570ff5964 Certificate serial: 019B7758CA8DCAA1BA667A15C2E3A75BDA00 Authority key identifier: 54:0F:4A:1B:92:33:8B:49:CA:63:02:12:19:05:9C:E5:70:FF:59:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/UXXtGi4oxNDjahgVbsQFfeZIwU4.roa Signing time: Thu 01 Jan 2026 02:17:46 +0000 ROA not before: Thu 01 Jan 2026 02:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5089 IP address blocks: 195.211.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:ca:8d:ca:a1:ba:66:7a:15:c2:e3:a7:5b:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=540f4a1b92338b49ca63021219059ce570ff5964 Validity Not Before: Jan 1 02:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5175ed1a2e28c4d0e36a18156ec4057de648c14e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:26:04:78:ea:18:42:98:b5:82:02:11:48:9c: 7c:6c:5e:f0:ce:47:0d:f6:25:1e:33:46:af:fc:41: ff:59:dd:08:9c:19:c7:fe:e6:f5:85:43:e8:a5:d6: 22:ed:4e:1b:cd:ba:e2:e3:5a:db:3f:a7:a7:3a:98: 4f:66:aa:fd:53:5a:54:06:c9:b1:7d:a2:67:b0:67: 05:a9:ca:63:4b:06:3f:8f:93:c2:53:2e:d2:81:26: d8:16:d6:c9:ec:e1:ed:03:fd:27:43:0d:74:9e:ec: 00:9b:09:b6:09:4a:d0:26:df:2c:6a:f8:12:12:3a: cc:29:17:57:84:6c:4c:a1:71:46:d9:d5:2a:22:a7: 5b:ba:78:32:44:ff:37:80:5e:77:6a:93:59:12:44: 8f:c0:6f:37:42:ce:25:1d:cf:e0:59:43:3d:1b:a7: 1d:a5:86:23:25:18:0d:7a:51:9d:05:82:95:9d:90: 33:15:a7:06:13:16:ee:ef:c0:19:58:7b:3d:b3:f8: 86:9c:dc:35:5c:5e:20:4d:78:58:db:85:d4:ed:a2: 2e:a7:e9:a4:7d:9b:6c:c5:d9:ae:1f:51:6e:f7:c9: 0e:96:d0:7e:68:df:be:cc:ad:6d:05:ed:60:30:9c: f1:06:cf:b5:72:31:65:76:5f:ed:43:af:a1:dd:7d: 60:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:75:ED:1A:2E:28:C4:D0:E3:6A:18:15:6E:C4:05:7D:E6:48:C1:4E X509v3 Authority Key Identifier: keyid:54:0F:4A:1B:92:33:8B:49:CA:63:02:12:19:05:9C:E5:70:FF:59:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/UXXtGi4oxNDjahgVbsQFfeZIwU4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.211.92.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:5f:2c:a0:18:7d:c7:e9:82:e6:90:f7:30:40:81:d5:d0:9c: a2:0c:ff:92:68:65:a8:50:18:28:16:fb:e3:e2:f8:88:c7:7f: 21:1d:45:01:6c:ae:f4:f6:8d:1e:35:59:f9:65:70:e1:cc:04: 42:ac:21:48:e9:05:10:47:95:db:8b:fe:5a:80:b8:e0:f1:1d: c6:d6:7b:c3:e2:2f:f0:1d:29:91:0a:20:32:79:cb:c9:89:49: 0a:70:92:a8:86:7b:3a:00:c6:19:1e:c7:d6:26:f1:ab:0e:f0: a3:dd:6b:d5:3b:3f:53:78:d7:59:f4:d8:34:01:31:14:fa:62: 33:ad:79:2f:ff:96:2b:e9:b2:54:d7:66:45:b8:51:78:d8:d2: 7a:2c:57:73:7c:54:46:e7:5a:75:9a:b2:0a:ad:3d:81:2b:37: d5:a9:07:ab:1c:0e:7d:62:02:4e:d7:35:18:e6:a0:10:f4:8a: 54:b2:5f:fb:db:63:fc:28:7d:f5:1f:ad:f4:c6:f3:c7:b8:4a: e5:fe:97:5d:9e:12:50:17:da:90:b4:e6:41:67:49:99:2f:79: 68:3b:59:36:5c:e8:2f:61:d3:e2:f4:cf:7a:12:43:e8:97:d1: df:45:aa:b9:30:d7:ee:8d:a1:28:b9:d1:0d:84:b7:36:07:31: 7e:3c:87:37 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WMqNyqG6ZnoVwuOnW9oAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MGY0YTFiOTIzMzhiNDljYTYzMDIxMjE5MDU5Y2U1NzBm ZjU5NjQwHhcNMjYwMTAxMDIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTc1ZWQxYTJlMjhjNGQwZTM2YTE4MTU2ZWM0MDU3ZGU2NDhjMTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyYEeOoYQpi1ggIRSJx8bF7wzkcN 9iUeM0av/EH/Wd0InBnH/ub1hUPopdYi7U4bzbri41rbP6enOphPZqr9U1pUBsmx faJnsGcFqcpjSwY/j5PCUy7SgSbYFtbJ7OHtA/0nQw10nuwAmwm2CUrQJt8savgS EjrMKRdXhGxMoXFG2dUqIqdbungyRP83gF53apNZEkSPwG83Qs4lHc/gWUM9G6cd pYYjJRgNelGdBYKVnZAzFacGExbu78AZWHs9s/iGnNw1XF4gTXhY24XU7aIup+mk fZtsxdmuH1Fu98kOltB+aN++zK1tBe1gMJzxBs+1cjFldl/tQ6+h3X1gjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFF17RouKMTQ42oYFW7EBX3mSMFOMB8GA1UdIwQY MBaAFFQPShuSM4tJymMCEhkFnOVw/1lkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkE5S0c1SXppMG5LWXdJU0dRV2M1WERfV1dRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My84ZjZmMjYtODM1ZS00NTQ3LWI3NzAt ZTA1MjkwMTZjYmEwLzEvVVhYdEdpNG94TkRqYWhnVmJzUUZmZVpJd1U0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My84ZjZmMjYtODM1ZS00NTQ3LWI3NzAtZTA1MjkwMTZjYmEw LzEvVkE5S0c1SXppMG5LWXdJU0dRV2M1WERfV1dRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw9NcMA0G CSqGSIb3DQEBCwUAA4IBAQAcXyygGH3H6YLmkPcwQIHV0JyiDP+SaGWoUBgoFvvj 4viIx38hHUUBbK709o0eNVn5ZXDhzARCrCFI6QUQR5Xbi/5agLjg8R3G1nvD4i/w HSmRCiAyecvJiUkKcJKohns6AMYZHsfWJvGrDvCj3WvVOz9TeNdZ9Ng0ATEU+mIz rXkv/5Yr6bJU12ZFuFF42NJ6LFdzfFRG51p1mrIKrT2BKzfVqQerHA59YgJO1zUY 5qAQ9IpUsl/722P8KH31H630xvPHuErl/pddnhJQF9qQtOZBZ0mZL3loO1k2XOgv YdPi9M96EkPol9HfRaq5MNfujaEoudENhLc2BzF+PIc3 -----END CERTIFICATE-----Generated at Sun Jan 25 14:31:08 2026 by rpki-client