This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/UhjMuilgxrHuJbG_v5PNxnq08SY.roa File: UhjMuilgxrHuJbG_v5PNxnq08SY.roa (raw, json) Hash identifier: Xd2IZu005wTJgMzbjP6ZPuNUygMnfEV45FJoAZWWctE= Subject key identifier: 52:18:CC:BA:29:60:C6:B1:EE:25:B1:BF:BF:93:CD:C6:7A:B4:F1:26 Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506 Certificate serial: 019B77C710D8D52A8D8848E93EA26B6B56C0 Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/UhjMuilgxrHuJbG_v5PNxnq08SY.roa Signing time: Thu 01 Jan 2026 04:18:13 +0000 ROA not before: Thu 01 Jan 2026 04:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13008 IP address blocks: 185.86.24.0/24 maxlen: 24 185.86.25.0/24 maxlen: 24 185.86.26.0/24 maxlen: 24 185.86.27.0/24 maxlen: 24 217.175.204.0/24 maxlen: 24 217.175.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:10:d8:d5:2a:8d:88:48:e9:3e:a2:6b:6b:56:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506 Validity Not Before: Jan 1 04:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5218ccba2960c6b1ee25b1bfbf93cdc67ab4f126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:57:13:4b:fd:6a:c8:91:9c:4f:90:c4:99:d1: 1a:0b:95:10:cc:07:89:34:54:8d:6c:28:2c:39:8d: 24:5d:47:0f:61:46:27:7e:e4:dd:b5:6e:ba:6a:7e: ce:1a:f6:89:06:0e:54:57:49:87:94:34:69:3b:59: 82:e0:46:e7:19:bf:3b:52:3e:27:9f:ec:b8:e8:3f: 76:32:4f:a2:73:40:10:e7:a1:17:1f:cc:88:31:6a: af:2b:ee:2b:9a:a5:90:a1:36:49:2d:e1:2c:63:b7: 78:6c:1b:ca:35:b7:92:3f:98:0c:f9:06:b6:4f:ba: 9a:09:14:95:e5:b3:10:65:18:cd:d8:3c:fb:4f:5a: 90:7e:94:9b:b5:1b:ad:90:88:8c:c4:b7:d2:42:2b: 36:b8:61:60:54:a5:a7:42:63:c1:63:9a:56:57:b5: 87:88:9a:9c:da:db:4f:93:60:16:94:a3:cd:97:86: bd:e1:07:24:4c:a7:2f:6a:4e:f7:0c:52:0d:15:6a: 2f:91:03:f2:2b:e9:8e:cf:bb:80:51:0d:ca:69:30: 77:63:7e:5a:44:25:0d:53:83:9f:13:87:db:44:21: 49:8e:66:f7:ff:62:5e:cb:09:7a:51:52:a6:e7:b2: bb:7e:e2:18:04:bc:2e:45:e4:52:a6:77:8a:4d:3a: 17:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:18:CC:BA:29:60:C6:B1:EE:25:B1:BF:BF:93:CD:C6:7A:B4:F1:26 X509v3 Authority Key Identifier: keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/UhjMuilgxrHuJbG_v5PNxnq08SY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.86.24.0/22 217.175.204.0/23 Signature Algorithm: sha256WithRSAEncryption b8:49:74:0d:ff:5e:67:d1:15:ad:99:44:a6:ba:d4:20:81:47: b2:08:dc:66:db:67:da:f7:88:4e:25:48:ca:76:11:bf:cc:02: 1b:a0:0e:1e:cc:38:0c:e6:71:7a:4e:06:0b:7c:6d:d2:1f:f5: 7d:f9:2d:b6:75:48:3c:47:10:0e:2a:e7:a7:f1:1b:90:f5:71: ff:80:7b:44:87:6f:aa:95:6e:b4:85:0a:72:aa:6c:08:61:66: 89:d6:bb:d1:f0:b4:ea:82:ea:67:df:6c:b7:c7:3a:07:b0:be: 12:79:f3:d2:a4:0e:90:df:2f:13:9f:69:bb:a9:20:1d:40:65: 84:62:f1:60:14:70:aa:9d:a8:7e:b5:7e:81:aa:bf:2b:7e:81: 10:8a:61:3b:a7:2d:73:25:cc:4a:6e:70:42:65:f8:1d:23:00: fe:37:4c:9a:a3:b0:2e:4d:9d:5d:6c:64:6f:73:3a:93:0f:26: d5:70:fd:4a:2a:ed:58:e9:a0:cd:f9:4a:b5:73:aa:8a:50:fd: 7f:e1:28:bb:76:09:cd:93:4a:a4:2b:dc:89:96:b2:2e:62:da: 8d:b9:fc:7e:7b:bf:de:9d:14:a4:e0:c7:f3:31:5f:54:bf:bb: 1a:b8:ca:c6:be:83:dc:e1:cf:72:e1:25:7f:02:4b:75:c0:ee: 64:ed:14:e7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xxDY1SqNiEjpPqJra1bAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NzNkODQ5YjdkNTA0NzM3NmQ1N2U2Zjc5NmYwMDE4Yjcw YjQ1MDYwHhcNMjYwMTAxMDQxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjE4Y2NiYTI5NjBjNmIxZWUyNWIxYmZiZjkzY2RjNjdhYjRmMTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFcTS/1qyJGcT5DEmdEaC5UQzAeJ NFSNbCgsOY0kXUcPYUYnfuTdtW66an7OGvaJBg5UV0mHlDRpO1mC4EbnGb87Uj4n n+y46D92Mk+ic0AQ56EXH8yIMWqvK+4rmqWQoTZJLeEsY7d4bBvKNbeSP5gM+Qa2 T7qaCRSV5bMQZRjN2Dz7T1qQfpSbtRutkIiMxLfSQis2uGFgVKWnQmPBY5pWV7WH iJqc2ttPk2AWlKPNl4a94QckTKcvak73DFINFWovkQPyK+mOz7uAUQ3KaTB3Y35a RCUNU4OfE4fbRCFJjmb3/2Jeywl6UVKm57K7fuIYBLwuReRSpneKTToXXQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFIYzLopYMax7iWxv7+TzcZ6tPEmMB8GA1UdIwQY MBaAFNZz2Em31QRzdtV+b3lvABi3C0UGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgt OGVlYjc1N2NmNTQ1LzEvVWhqTXVpbGd4ckh1SmJHX3Y1UE54bnEwOFNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgtOGVlYjc1N2NmNTQ1 LzEvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuVYYAwQB 2a/MMA0GCSqGSIb3DQEBCwUAA4IBAQC4SXQN/15n0RWtmUSmutQggUeyCNxm22fa 94hOJUjKdhG/zAIboA4ezDgM5nF6TgYLfG3SH/V9+S22dUg8RxAOKuen8RuQ9XH/ gHtEh2+qlW60hQpyqmwIYWaJ1rvR8LTqgupn32y3xzoHsL4SefPSpA6Q3y8Tn2m7 qSAdQGWEYvFgFHCqnah+tX6Bqr8rfoEQimE7py1zJcxKbnBCZfgdIwD+N0yao7Au TZ1dbGRvczqTDybVcP1KKu1Y6aDN+Uq1c6qKUP1/4Si7dgnNk0qkK9yJlrIuYtqN ufx+e7/enRSk4MfzMV9Uv7sauMrGvoPc4c9y4SV/Akt1wO5k7RTn -----END CERTIFICATE-----Generated at Mon Jan 26 02:43:37 2026 by rpki-client