This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/ucJ1_zYrzi1nLx5kRfVmT46FI44.roa File: ucJ1_zYrzi1nLx5kRfVmT46FI44.roa (raw, json) Hash identifier: OGbobFTa1UGQ3jiMyYpSA7txVQyFoJEkNipVQhXXZYI= Subject key identifier: B9:C2:75:FF:36:2B:CE:2D:67:2F:1E:64:45:F5:66:4F:8E:85:23:8E Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1 Certificate serial: 019B7F15C704DB13BCD6449194E01199C32F Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/ucJ1_zYrzi1nLx5kRfVmT46FI44.roa Signing time: Fri 02 Jan 2026 14:21:32 +0000 ROA not before: Fri 02 Jan 2026 14:21:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210995 IP address blocks: 195.53.239.0/24 maxlen: 24 195.76.62.0/23 maxlen: 23 195.76.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:c7:04:db:13:bc:d6:44:91:94:e0:11:99:c3:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1 Validity Not Before: Jan 2 14:21:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9c275ff362bce2d672f1e6445f5664f8e85238e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1c:c8:3e:7a:11:10:7f:ac:f8:f6:b1:da:0a: 16:11:e0:ae:2a:e4:d1:99:6a:ec:b5:0d:bc:43:16: b7:7c:3a:86:15:e0:6e:9f:7f:58:f4:39:94:fe:bb: 7f:2d:5e:2e:c2:ba:52:16:6c:a6:8f:bc:e1:fa:9f: 4e:b4:b5:c1:7b:36:8b:d2:64:b5:fa:f5:6b:86:bd: eb:fc:39:22:3a:4a:77:2e:bd:6a:38:ad:df:1a:6f: b9:6a:a8:af:7e:e4:8b:34:cd:6f:63:c1:e9:2b:98: 11:42:3b:d6:b1:3e:d8:76:13:50:08:48:b9:c7:dd: 78:4b:31:c2:c0:0a:87:e2:e3:31:d6:4b:05:c4:fa: 6e:3d:fd:f7:d5:a9:bc:ec:e5:0e:f9:0f:f1:e0:a7: be:31:de:bc:83:4f:48:0f:3f:91:e1:5b:9d:b6:17: 16:80:6a:6a:6f:23:ae:ed:db:73:da:31:be:1c:3c: 55:3c:75:33:c6:77:02:05:0e:fa:7c:b1:ea:1d:41: f6:03:88:0c:66:f0:a3:db:47:3c:55:2b:ff:da:c0: be:84:96:f8:d7:e5:c7:d0:98:25:5f:5e:59:75:d7: 02:fa:95:09:50:c2:78:87:80:8b:c4:43:d7:e5:d7: d4:8a:a6:72:56:dd:7e:0a:84:6f:fd:2d:fe:e5:87: 4e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:C2:75:FF:36:2B:CE:2D:67:2F:1E:64:45:F5:66:4F:8E:85:23:8E X509v3 Authority Key Identifier: keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/ucJ1_zYrzi1nLx5kRfVmT46FI44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.53.239.0/24 195.76.62.0/23 Signature Algorithm: sha256WithRSAEncryption bb:bc:ea:26:ef:58:7e:50:23:7d:4a:ac:d1:ea:70:ea:82:12: 4e:77:bc:a6:4c:1d:9b:aa:6d:b1:fd:5f:f5:15:cb:bc:57:e9: 29:21:25:7f:71:f1:cb:82:a6:d5:0c:8b:24:c3:30:66:a7:f4: 11:05:4e:a0:1a:a8:47:c3:a8:a6:b0:8b:39:4d:dd:45:56:b4: a8:36:78:5d:0f:6a:f4:aa:e3:21:eb:8e:7f:aa:9f:21:dc:93: 1e:15:1c:29:3f:58:79:50:14:54:3a:e7:7c:48:85:63:11:9c: cf:ec:c0:e7:a8:78:da:c1:78:dd:f8:01:b9:91:ee:4c:a9:ce: 8d:b7:f0:4b:5d:b7:61:34:8b:3c:fe:da:3d:0e:0c:73:12:bb: 5a:83:86:a1:ba:b6:a5:58:da:73:f3:81:70:f4:9d:df:b7:63: 2d:96:ac:cc:9b:a8:bc:7d:21:dc:4b:61:e0:f0:0c:87:42:54: 58:ce:99:90:07:11:79:32:9b:74:a1:a9:c0:67:4e:c8:96:bd: 63:d2:b3:fc:45:33:c5:bb:e6:3d:06:63:a8:b0:37:5a:27:f3: 08:1a:75:6f:77:27:17:a8:8e:b4:4a:cb:b1:3e:eb:2c:33:0c: fd:d6:29:6c:ea:52:d1:41:4f:29:00:a6:b7:b0:06:5f:69:f1: 1f:18:52:1e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FccE2xO81kSRlOARmcMvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2Y1ZmUyNzQwYTJiNmRlNGMzNzA5ZDI5NjQxMTViM2M5 NjdkYTEwHhcNMjYwMTAyMTQyMTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWMyNzVmZjM2MmJjZTJkNjcyZjFlNjQ0NWY1NjY0ZjhlODUyMzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBzIPnoREH+s+Pax2goWEeCuKuTR mWrstQ28Qxa3fDqGFeBun39Y9DmU/rt/LV4uwrpSFmymj7zh+p9OtLXBezaL0mS1 +vVrhr3r/DkiOkp3Lr1qOK3fGm+5aqivfuSLNM1vY8HpK5gRQjvWsT7YdhNQCEi5 x914SzHCwAqH4uMx1ksFxPpuPf331am87OUO+Q/x4Ke+Md68g09IDz+R4VudthcW gGpqbyOu7dtz2jG+HDxVPHUzxncCBQ76fLHqHUH2A4gMZvCj20c8VSv/2sC+hJb4 1+XH0JglX15ZddcC+pUJUMJ4h4CLxEPX5dfUiqZyVt1+CoRv/S3+5YdOEQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLnCdf82K84tZy8eZEX1Zk+OhSOOMB8GA1UdIwQY MBaAFDB/X+J0Citt5MNwnSlkEVs8ln2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQt NGJhMmY4ZjFmODNiLzEvdWNKMV96WXJ6aTFuTHg1a1JmVm1UNDZGSTQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQtNGJhMmY4ZjFmODNi LzEvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwzXvAwQB w0w+MA0GCSqGSIb3DQEBCwUAA4IBAQC7vOom71h+UCN9SqzR6nDqghJOd7ymTB2b qm2x/V/1Fcu8V+kpISV/cfHLgqbVDIskwzBmp/QRBU6gGqhHw6imsIs5Td1FVrSo NnhdD2r0quMh645/qp8h3JMeFRwpP1h5UBRUOud8SIVjEZzP7MDnqHjawXjd+AG5 ke5Mqc6Nt/BLXbdhNIs8/to9DgxzErtag4ahuralWNpz84Fw9J3ft2MtlqzMm6i8 fSHcS2Hg8AyHQlRYzpmQBxF5Mpt0oanAZ07Ilr1j0rP8RTPFu+Y9BmOosDdaJ/MI GnVvdycXqI60SsuxPussMwz91ils6lLRQU8pAKa3sAZfafEfGFIe -----END CERTIFICATE-----Generated at Sun Jan 25 18:08:12 2026 by rpki-client