This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/ua_e8PovLDNf56za3RBEa7cuuaQ.roa File: ua_e8PovLDNf56za3RBEa7cuuaQ.roa (raw, json) Hash identifier: AeMBv+klAL3WpkSagPgkjuVi+j0J2ixa7AC/uv/cJ9s= Subject key identifier: B9:AF:DE:F0:FA:2F:2C:33:5F:E7:AC:DA:DD:10:44:6B:B7:2E:B9:A4 Certificate issuer: /CN=5df9e856f0495c8490d5124e8cfbaf08d70dfb17 Certificate serial: 019B76EADAC535CEE8B91762CA0260594525 Authority key identifier: 5D:F9:E8:56:F0:49:5C:84:90:D5:12:4E:8C:FB:AF:08:D7:0D:FB:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfnoVvBJXISQ1RJOjPuvCNcN-xc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/ua_e8PovLDNf56za3RBEa7cuuaQ.roa Signing time: Thu 01 Jan 2026 00:17:41 +0000 ROA not before: Thu 01 Jan 2026 00:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209836 IP address blocks: 185.228.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.crl rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft rsync://rpki.ripe.net/repository/DEFAULT/XfnoVvBJXISQ1RJOjPuvCNcN-xc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:da:c5:35:ce:e8:b9:17:62:ca:02:60:59:45:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5df9e856f0495c8490d5124e8cfbaf08d70dfb17 Validity Not Before: Jan 1 00:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9afdef0fa2f2c335fe7acdadd10446bb72eb9a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:03:7f:48:b5:b3:cc:24:e2:ae:01:ef:09:8e: ed:d0:53:25:23:e2:0c:a0:78:21:78:c3:1b:9c:25: 50:42:2e:ed:a2:ff:8f:49:ed:52:60:86:bc:63:93: dd:6d:0b:e5:56:c2:35:35:3e:73:c4:23:aa:7b:03: 7e:c1:47:46:1e:75:bd:33:c5:85:98:b5:39:66:2f: 6f:cd:17:bb:e1:30:bc:bc:fa:a2:ef:04:a2:c5:86: 36:a2:ea:87:87:4d:0c:54:01:15:70:4a:3a:aa:c7: 46:3b:f4:5b:d1:9c:8a:ef:ff:34:09:84:75:e4:db: 57:72:91:a8:94:93:ab:81:16:06:dc:dc:02:83:e7: 5e:da:cd:00:1a:b8:2e:54:84:de:44:f4:10:d4:25: 49:f2:59:4d:2a:53:e5:77:6a:25:46:b5:ff:07:93: d2:0e:d7:c8:96:fd:d4:92:9c:61:36:c0:57:c2:60: e7:30:c6:d5:25:23:ad:3b:94:ac:53:fd:e9:73:72: ed:eb:88:c3:c5:39:f8:ef:78:66:9a:00:31:ba:86: 48:dd:6f:7e:9b:5b:ad:fc:c5:0c:3b:cf:a9:39:a7: ef:7a:86:02:14:d0:53:c6:03:71:62:1e:26:91:32: 13:7c:f9:0c:fd:74:54:28:31:41:cd:bc:15:0b:0f: cb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:AF:DE:F0:FA:2F:2C:33:5F:E7:AC:DA:DD:10:44:6B:B7:2E:B9:A4 X509v3 Authority Key Identifier: keyid:5D:F9:E8:56:F0:49:5C:84:90:D5:12:4E:8C:FB:AF:08:D7:0D:FB:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfnoVvBJXISQ1RJOjPuvCNcN-xc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/ua_e8PovLDNf56za3RBEa7cuuaQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.228.59.0/24 Signature Algorithm: sha256WithRSAEncryption bf:a0:2e:77:ab:93:cd:60:d2:af:9c:ba:44:b2:75:81:fa:05: 75:a2:4c:0d:9e:ac:a6:08:70:69:cf:bc:df:7b:a5:c1:a4:63: a1:c5:5e:80:49:fd:bf:94:ab:5c:45:6d:24:fa:60:68:e1:41: 07:fe:d7:6f:a8:84:52:54:e6:d0:7f:3c:2a:8d:aa:a7:95:d6: f7:a9:24:0c:ba:eb:8a:71:16:37:c6:1d:8b:68:57:e3:eb:90: 9d:9e:51:be:70:6a:b6:7c:b7:43:f5:e7:90:6d:01:22:04:d8: 65:f1:24:8f:bd:10:ca:69:da:41:f1:ec:ff:0f:31:f3:eb:fb: 80:18:52:90:d8:f4:82:48:bb:d7:eb:a5:a2:d1:1f:e6:1f:9d: 2b:bb:5a:67:1f:9b:5c:b3:f5:75:00:d3:66:2b:88:47:82:74: 6c:cb:48:09:61:55:ad:8c:f0:bd:1d:40:9e:54:da:9b:41:5d: fd:e1:aa:45:5d:10:3d:8a:69:5a:9d:e2:27:65:09:90:b4:ce: ef:23:40:d4:6a:b6:31:29:f1:e7:8d:2b:3a:ff:09:5c:3f:d4: f0:97:40:04:1d:b4:0c:23:4b:a1:12:c9:13:cf:71:be:aa:47: e9:f0:b4:b3:51:21:b3:3c:d4:7d:c4:c3:e0:68:9b:16:96:65: 0b:c1:e3:0b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26trFNc7ouRdiygJgWUUlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZjllODU2ZjA0OTVjODQ5MGQ1MTI0ZThjZmJhZjA4ZDcw ZGZiMTcwHhcNMjYwMTAxMDAxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWFmZGVmMGZhMmYyYzMzNWZlN2FjZGFkZDEwNDQ2YmI3MmViOWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgN/SLWzzCTirgHvCY7t0FMlI+IM oHgheMMbnCVQQi7tov+PSe1SYIa8Y5PdbQvlVsI1NT5zxCOqewN+wUdGHnW9M8WF mLU5Zi9vzRe74TC8vPqi7wSixYY2ouqHh00MVAEVcEo6qsdGO/Rb0ZyK7/80CYR1 5NtXcpGolJOrgRYG3NwCg+de2s0AGrguVITeRPQQ1CVJ8llNKlPld2olRrX/B5PS DtfIlv3UkpxhNsBXwmDnMMbVJSOtO5SsU/3pc3Lt64jDxTn473hmmgAxuoZI3W9+ m1ut/MUMO8+pOafveoYCFNBTxgNxYh4mkTITfPkM/XRUKDFBzbwVCw/LsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLmv3vD6LywzX+es2t0QRGu3LrmkMB8GA1UdIwQY MBaAFF356FbwSVyEkNUSToz7rwjXDfsXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGZub1Z2QkpYSVNRMVJKT2pQdXZDTmNOLXhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8xM2RjMzgtMmU3NS00YjA3LWJlZjAt ZTFlYTQ1M2M1MjU3LzEvdWFfZThQb3ZMRE5mNTZ6YTNSQkVhN2N1dWFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS8xM2RjMzgtMmU3NS00YjA3LWJlZjAtZTFlYTQ1M2M1MjU3 LzEvWGZub1Z2QkpYSVNRMVJKT2pQdXZDTmNOLXhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueQ7MA0G CSqGSIb3DQEBCwUAA4IBAQC/oC53q5PNYNKvnLpEsnWB+gV1okwNnqymCHBpz7zf e6XBpGOhxV6ASf2/lKtcRW0k+mBo4UEH/tdvqIRSVObQfzwqjaqnldb3qSQMuuuK cRY3xh2LaFfj65CdnlG+cGq2fLdD9eeQbQEiBNhl8SSPvRDKadpB8ez/DzHz6/uA GFKQ2PSCSLvX66Wi0R/mH50ru1pnH5tcs/V1ANNmK4hHgnRsy0gJYVWtjPC9HUCe VNqbQV394apFXRA9imlaneInZQmQtM7vI0DUarYxKfHnjSs6/wlcP9Twl0AEHbQM I0uhEskTz3G+qkfp8LSzUSGzPNR9xMPgaJsWlmULweML -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:43 2026 by rpki-client