This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/UAERni7WpWvns2q_WZ6vxo1ESzs.roa File: UAERni7WpWvns2q_WZ6vxo1ESzs.roa (raw, json) Hash identifier: 5eIb//p/DGg/7vA3WQMp+ufksOfuPVGq/a7CLQE9QPM= Subject key identifier: 50:01:11:9E:2E:D6:A5:6B:E7:B3:6A:BF:59:9E:AF:C6:8D:44:4B:3B Certificate issuer: /CN=f83272c0c32db004f078f874b99da9a0b7e63afd Certificate serial: 019B7C1294E7526D8B49743E61665A03CEEA Authority key identifier: F8:32:72:C0:C3:2D:B0:04:F0:78:F8:74:B9:9D:A9:A0:B7:E6:3A:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-DJywMMtsATwePh0uZ2poLfmOv0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/UAERni7WpWvns2q_WZ6vxo1ESzs.roa Signing time: Fri 02 Jan 2026 00:19:10 +0000 ROA not before: Fri 02 Jan 2026 00:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60501 IP address blocks: 77.72.87.0/24 maxlen: 24 2a11:dd00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.crl rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft rsync://rpki.ripe.net/repository/DEFAULT/1-DJywMMtsATwePh0uZ2poLfmOv0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:94:e7:52:6d:8b:49:74:3e:61:66:5a:03:ce:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f83272c0c32db004f078f874b99da9a0b7e63afd Validity Not Before: Jan 2 00:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5001119e2ed6a56be7b36abf599eafc68d444b3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:04:19:52:52:36:78:bc:47:6c:d0:65:21:08: 18:5c:3f:b5:06:48:14:6c:f0:b6:fa:9e:80:de:42: 46:28:58:3c:5f:6c:40:4d:45:77:15:30:ae:88:7d: 38:84:11:dd:26:6e:ce:5d:7c:e7:70:a3:2f:c8:1c: 44:9c:b3:a4:c8:f1:75:2d:be:ff:47:ab:52:7b:19: e6:3f:51:e4:cc:5a:6c:e5:5c:53:fc:c1:b4:60:04: e3:eb:d1:88:3f:8c:d7:18:b5:bd:73:67:13:e4:c5: 4b:52:50:63:b9:fa:0d:48:78:70:b3:aa:ea:7a:db: 85:bf:56:f6:92:89:bb:81:51:7d:5b:a2:a6:e4:7c: 5d:38:85:f1:41:68:6d:00:2b:e8:2e:1a:ca:c4:2d: 5d:b3:ec:74:0d:cf:02:15:b5:90:cf:17:2e:c5:75: 75:b6:d5:ee:83:fe:e4:44:a1:69:c2:99:b8:bd:7d: 2c:a5:7c:79:0e:fd:ec:66:3f:62:b6:f4:70:d0:f5: e3:9c:e6:6a:3b:72:a7:42:6b:de:0e:3b:49:93:14: 64:45:55:e0:16:a7:22:bb:ab:16:0a:84:05:b7:95: 20:9b:09:52:8c:c1:e1:77:de:f9:d5:38:1f:f6:3b: 07:d8:c5:98:ab:d0:0f:38:ec:57:b4:aa:bd:ac:3a: 80:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:01:11:9E:2E:D6:A5:6B:E7:B3:6A:BF:59:9E:AF:C6:8D:44:4B:3B X509v3 Authority Key Identifier: keyid:F8:32:72:C0:C3:2D:B0:04:F0:78:F8:74:B9:9D:A9:A0:B7:E6:3A:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-DJywMMtsATwePh0uZ2poLfmOv0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/UAERni7WpWvns2q_WZ6vxo1ESzs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.72.87.0/24 IPv6: 2a11:dd00::/29 Signature Algorithm: sha256WithRSAEncryption 2a:15:20:39:7b:f2:34:2d:54:a5:e2:d0:5f:aa:97:d0:40:96: a8:71:72:85:b4:ef:32:92:46:a1:99:4d:a8:55:c7:eb:56:6b: fe:4b:94:ad:93:c7:6c:f1:7b:25:65:15:05:4a:67:f7:46:d5: 50:09:56:63:70:5f:13:3b:53:2d:f3:8c:fb:df:7b:d6:16:3c: 61:54:4d:d4:0d:8d:d1:ac:05:eb:af:99:fe:83:6a:6a:d5:58: d1:79:51:eb:e0:94:09:a9:1b:9d:1f:17:9b:60:b4:d7:86:11: 79:62:a0:11:cc:89:1a:8a:4d:0f:9a:cf:49:93:83:67:15:c3: b9:20:a2:b7:a9:37:f1:74:fe:4a:83:9b:a5:94:f3:15:3e:eb: 80:27:53:c3:35:c4:31:70:39:a3:eb:cf:f8:ff:54:c1:58:a0: 1e:f3:99:19:75:d0:f1:f4:e0:13:26:fc:43:7c:6b:c7:0c:1c: 55:33:8b:17:31:94:72:6e:f6:bd:fd:7c:6b:ff:8d:17:d9:37: 87:77:ad:ee:56:0e:6c:61:18:7b:18:32:0b:e0:19:dc:88:62: d9:b8:a8:d4:08:6e:b2:20:61:25:c6:4f:40:b7:80:43:a7:f1: bf:b3:f6:62:28:0e:5b:93:e4:4f:b3:ef:6d:b9:ce:cf:c0:dc: 1d:46:6b:71 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8EpTnUm2LSXQ+YWZaA87qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MzI3MmMwYzMyZGIwMDRmMDc4Zjg3NGI5OWRhOWEwYjdl NjNhZmQwHhcNMjYwMTAyMDAxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDAxMTE5ZTJlZDZhNTZiZTdiMzZhYmY1OTllYWZjNjhkNDQ0YjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwQZUlI2eLxHbNBlIQgYXD+1BkgU bPC2+p6A3kJGKFg8X2xATUV3FTCuiH04hBHdJm7OXXzncKMvyBxEnLOkyPF1Lb7/ R6tSexnmP1HkzFps5VxT/MG0YATj69GIP4zXGLW9c2cT5MVLUlBjufoNSHhws6rq etuFv1b2kom7gVF9W6Km5HxdOIXxQWhtACvoLhrKxC1ds+x0Dc8CFbWQzxcuxXV1 ttXug/7kRKFpwpm4vX0spXx5Dv3sZj9itvRw0PXjnOZqO3KnQmveDjtJkxRkRVXg Fqciu6sWCoQFt5UgmwlSjMHhd9751Tgf9jsH2MWYq9APOOxXtKq9rDqAUwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFFABEZ4u1qVr57Nqv1mer8aNREs7MB8GA1UdIwQY MBaAFPgycsDDLbAE8Hj4dLmdqaC35jr9MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1ESnl3TU10c0FUd2VQaDB1WjJwb0xmbU92MC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTMvOTRhMWUwLWMxODAtNGJhZi05ZWEw LWY2N2U3MDc4ODc4ZS8xL1VBRVJuaTdXcFd2bnMycV9XWjZ2eG8xRVN6cy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOTMvOTRhMWUwLWMxODAtNGJhZi05ZWEwLWY2N2U3MDc4ODc4 ZS8xLzEtREp5d01NdHNBVHdlUGgwdVoycG9MZm1PdjAuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBABNSFcw DQQCAAIwBwMFAyoR3QAwDQYJKoZIhvcNAQELBQADggEBACoVIDl78jQtVKXi0F+q l9BAlqhxcoW07zKSRqGZTahVx+tWa/5LlK2Tx2zxeyVlFQVKZ/dG1VAJVmNwXxM7 Uy3zjPvfe9YWPGFUTdQNjdGsBeuvmf6DamrVWNF5UevglAmpG50fF5tgtNeGEXli oBHMiRqKTQ+az0mTg2cVw7kgorepN/F0/kqDm6WU8xU+64AnU8M1xDFwOaPrz/j/ VMFYoB7zmRl10PH04BMm/EN8a8cMHFUzixcxlHJu9r39fGv/jRfZN4d3re5WDmxh GHsYMgvgGdyIYtm4qNQIbrIgYSXGT0C3gEOn8b+z9mIoDluT5E+z7225zs/A3B1G a3E= -----END CERTIFICATE-----Generated at Mon Jan 26 21:06:19 2026 by rpki-client