This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/UPdzNxR0uZ6CID5zN-n8qf29a3E.roa File: UPdzNxR0uZ6CID5zN-n8qf29a3E.roa (raw, json) Hash identifier: 4zFYXr+PKYSKus1bdAueT7jUuu+jBMtlJB+KAD79w4o= Subject key identifier: 50:F7:73:37:14:74:B9:9E:82:20:3E:73:37:E9:FC:A9:FD:BD:6B:71 Certificate issuer: /CN=ead799026094d60516b527d842b6166805668e9e Certificate serial: 019B7F154819EBE633EFDF7C8459104B851D Authority key identifier: EA:D7:99:02:60:94:D6:05:16:B5:27:D8:42:B6:16:68:05:66:8E:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6teZAmCU1gUWtSfYQrYWaAVmjp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/UPdzNxR0uZ6CID5zN-n8qf29a3E.roa Signing time: Fri 02 Jan 2026 14:20:59 +0000 ROA not before: Fri 02 Jan 2026 14:20:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3360 IP address blocks: 159.101.128.0/21 maxlen: 21 159.101.236.0/22 maxlen: 22 159.101.240.0/22 maxlen: 22 159.101.252.0/23 maxlen: 23 159.101.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/6teZAmCU1gUWtSfYQrYWaAVmjp4.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/6teZAmCU1gUWtSfYQrYWaAVmjp4.mft rsync://rpki.ripe.net/repository/DEFAULT/6teZAmCU1gUWtSfYQrYWaAVmjp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:48:19:eb:e6:33:ef:df:7c:84:59:10:4b:85:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ead799026094d60516b527d842b6166805668e9e Validity Not Before: Jan 2 14:20:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50f773371474b99e82203e7337e9fca9fdbd6b71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d4:0d:d7:e0:8e:e6:a5:87:66:47:3e:ed:fa: b2:8b:18:38:be:08:69:ff:82:76:22:9f:48:ac:23: e5:b9:10:b6:2f:33:da:d4:5d:58:04:21:a4:0f:a1: 36:9a:14:44:b7:86:f4:ee:a1:dc:04:c8:a1:f9:a5: ec:c8:59:44:e1:9f:67:8e:3e:b4:50:d9:34:2c:a1: 2a:65:11:a2:58:e9:5a:a1:1b:07:4f:c1:7e:08:c5: 38:30:c1:58:4a:0e:ac:3f:48:bf:86:03:54:d5:f0: 1f:8c:8c:bd:65:6f:23:6a:3b:0e:77:44:1b:fe:13: 04:5e:5c:14:a9:7f:f6:9d:7a:47:36:f6:80:66:a8: d9:4b:fb:91:1f:45:44:06:15:7c:9f:2b:95:82:45: 8a:d0:c0:ce:c9:61:7a:2b:47:78:2c:57:51:11:37: 9a:b1:88:0e:84:41:d8:2a:6b:c4:83:59:85:d7:0c: ed:4d:da:31:e7:8d:76:be:00:1d:60:57:bf:43:22: 7e:b3:c4:c1:f5:b5:c0:ec:ad:4a:0c:03:f4:71:97: f0:0e:bc:21:22:da:dc:4b:31:9d:e9:02:5c:30:de: 65:5b:6b:52:87:d3:c3:8d:5b:e3:de:38:b6:08:38: 57:1e:8d:9e:90:10:2c:86:3e:c8:3d:6d:8f:cd:a0: 35:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:F7:73:37:14:74:B9:9E:82:20:3E:73:37:E9:FC:A9:FD:BD:6B:71 X509v3 Authority Key Identifier: keyid:EA:D7:99:02:60:94:D6:05:16:B5:27:D8:42:B6:16:68:05:66:8E:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6teZAmCU1gUWtSfYQrYWaAVmjp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/UPdzNxR0uZ6CID5zN-n8qf29a3E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/6teZAmCU1gUWtSfYQrYWaAVmjp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.101.128.0/21 159.101.236.0-159.101.243.255 159.101.252.0/22 Signature Algorithm: sha256WithRSAEncryption 2f:a4:47:6b:5f:53:10:96:c1:c8:ab:54:02:46:03:0c:d8:ee: 5a:8d:68:4c:3d:a3:85:be:ce:54:36:d4:c4:66:d4:6a:38:a6: 93:07:dd:4b:2e:af:0a:16:9a:05:2f:04:b3:fc:fa:bd:a8:2e: 51:e1:75:d0:2b:a9:d4:21:a6:fe:52:03:a5:c2:62:e8:11:ef: 09:f4:9c:8b:87:a0:d7:a3:cb:1d:3f:9f:90:8f:8e:e5:c8:7c: 03:36:b7:54:83:08:74:5c:4a:74:99:ae:c7:d3:17:47:9a:a2: d8:6c:93:28:14:f6:e3:79:99:a1:3c:2e:d4:f1:bd:fc:c7:ff: 5a:7a:db:94:70:7a:47:04:54:49:db:6e:a0:f6:ed:15:0a:f3: 38:fb:81:5c:06:14:b7:df:4f:b7:0d:00:ab:c1:d8:27:b4:35: db:50:81:f7:48:dd:dd:1e:1c:4b:ae:f0:ec:ac:7f:75:88:de: 7a:67:65:b3:8a:3d:6f:8f:1e:7e:9e:24:28:ea:00:7c:9a:6b: 08:8d:b1:10:32:8d:8b:34:df:c4:bb:54:71:7d:9b:25:d4:70: 3d:3e:cf:8b:be:bc:3f:15:df:e8:b4:da:90:15:18:66:4d:f5: 9c:78:cf:c7:f4:37:94:49:4b:07:fc:1c:8a:75:bc:1b:62:f6: 09:61:0c:f9 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt/FUgZ6+Yz7998hFkQS4UdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhZDc5OTAyNjA5NGQ2MDUxNmI1MjdkODQyYjYxNjY4MDU2 NjhlOWUwHhcNMjYwMTAyMTQyMDU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MGY3NzMzNzE0NzRiOTllODIyMDNlNzMzN2U5ZmNhOWZkYmQ2YjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNQN1+CO5qWHZkc+7fqyixg4vghp /4J2Ip9IrCPluRC2LzPa1F1YBCGkD6E2mhREt4b07qHcBMih+aXsyFlE4Z9njj60 UNk0LKEqZRGiWOlaoRsHT8F+CMU4MMFYSg6sP0i/hgNU1fAfjIy9ZW8jajsOd0Qb /hMEXlwUqX/2nXpHNvaAZqjZS/uRH0VEBhV8nyuVgkWK0MDOyWF6K0d4LFdRETea sYgOhEHYKmvEg1mF1wztTdox5412vgAdYFe/QyJ+s8TB9bXA7K1KDAP0cZfwDrwh ItrcSzGd6QJcMN5lW2tSh9PDjVvj3ji2CDhXHo2ekBAshj7IPW2PzaA1UwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFFD3czcUdLmegiA+czfp/Kn9vWtxMB8GA1UdIwQY MBaAFOrXmQJglNYFFrUn2EK2FmgFZo6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnRlWkFtQ1UxZ1VXdFNmWVFyWVdhQVZtanA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xOTg3MGYtODY2Yy00NDIwLWFkMDgt MzBjOWUyMDJlOTk1LzEvVVBkek54UjB1WjZDSUQ1ek4tbjhxZjI5YTNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8xOTg3MGYtODY2Yy00NDIwLWFkMDgtMzBjOWUyMDJlOTk1 LzEvNnRlWkFtQ1UxZ1VXdFNmWVFyWVdhQVZtanA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQDn2WAMAwD BAKfZewDBAKfZfADBAKfZfwwDQYJKoZIhvcNAQELBQADggEBAC+kR2tfUxCWwcir VAJGAwzY7lqNaEw9o4W+zlQ21MRm1Go4ppMH3UsurwoWmgUvBLP8+r2oLlHhddAr qdQhpv5SA6XCYugR7wn0nIuHoNejyx0/n5CPjuXIfAM2t1SDCHRcSnSZrsfTF0ea othskygU9uN5maE8LtTxvfzH/1p625RwekcEVEnbbqD27RUK8zj7gVwGFLffT7cN AKvB2Ce0NdtQgfdI3d0eHEuu8Oysf3WI3npnZbOKPW+PHn6eJCjqAHyaawiNsRAy jYs038S7VHF9myXUcD0+z4u+vD8V3+i02pAVGGZN9Zx4z8f0N5RJSwf8HIp1vBti 9glhDPk= -----END CERTIFICATE-----Generated at Sun Jan 25 16:27:29 2026 by rpki-client