This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/UfCAkeXS16U-O0tnGDUi2biM96c.roa File: UfCAkeXS16U-O0tnGDUi2biM96c.roa (raw, json) Hash identifier: rKJ1KQWN6U0GI2Z4ebJcTGG2Hqs65XmTgZkq/7LOYI0= Subject key identifier: 51:F0:80:91:E5:D2:D7:A5:3E:3B:4B:67:18:35:22:D9:B8:8C:F7:A7 Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c Certificate serial: 019B7B3601D2B7BFA3BCDB5E49A335635ADF Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/UfCAkeXS16U-O0tnGDUi2biM96c.roa Signing time: Thu 01 Jan 2026 20:18:15 +0000 ROA not before: Thu 01 Jan 2026 20:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31102 IP address blocks: 86.107.20.0/24 maxlen: 24 86.107.52.0/24 maxlen: 24 89.42.9.0/24 maxlen: 24 89.47.255.0/24 maxlen: 24 92.114.39.0/24 maxlen: 24 92.114.52.0/24 maxlen: 24 188.215.70.0/23 maxlen: 23 188.240.202.0/23 maxlen: 23 188.241.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:01:d2:b7:bf:a3:bc:db:5e:49:a3:35:63:5a:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c Validity Not Before: Jan 1 20:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51f08091e5d2d7a53e3b4b67183522d9b88cf7a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:17:c7:43:d9:9d:e0:20:de:8c:1a:78:b5:ff: 33:e1:d6:cf:08:06:8c:d7:ff:b2:c1:f7:0e:f0:65: d8:a2:27:a2:8c:18:3f:1b:3a:c2:fd:e6:34:ea:5b: 7b:f9:12:cc:1f:25:ac:9c:7a:55:4a:c4:df:2b:56: 1d:b6:29:c3:2a:a1:24:08:0f:2f:ae:d2:39:a7:f8: 5a:ca:8e:21:e2:ea:08:06:41:76:19:2b:4f:7d:1d: 5d:42:7d:a6:b0:75:a1:ed:15:38:ec:2e:16:95:e5: 9c:41:8b:f3:fc:c2:3e:08:f9:6a:a7:25:9f:f7:f5: ef:49:bf:d9:86:dd:8c:13:08:a6:f6:76:8a:e4:02: 94:b9:fa:9b:04:dc:8e:7d:d8:4c:ba:05:94:98:73: af:4b:6f:6d:e5:03:56:51:fa:a9:ae:36:c8:c7:60: a0:7f:38:c4:29:82:d4:cd:4d:32:d3:98:eb:1e:6f: f2:74:01:7a:75:0f:9b:a2:c4:a7:10:29:2b:ae:71: ed:e2:94:bd:7b:d5:15:05:92:6f:a4:cb:45:66:07: 36:bc:65:fa:59:5c:5a:32:d3:13:20:cf:5d:f9:a3: 0a:d4:c5:cc:2d:13:d1:e8:36:36:85:01:af:c3:dc: fd:0b:eb:58:c8:89:d2:1a:47:eb:ce:4c:f1:d5:79: 09:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:F0:80:91:E5:D2:D7:A5:3E:3B:4B:67:18:35:22:D9:B8:8C:F7:A7 X509v3 Authority Key Identifier: keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/UfCAkeXS16U-O0tnGDUi2biM96c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.107.20.0/24 86.107.52.0/24 89.42.9.0/24 89.47.255.0/24 92.114.39.0/24 92.114.52.0/24 188.215.70.0/23 188.240.202.0/23 188.241.134.0/23 Signature Algorithm: sha256WithRSAEncryption 93:c3:73:de:3c:4c:71:fb:e4:06:67:1f:a7:71:0d:a6:59:36: 0a:dd:fc:31:a8:d7:6b:14:b8:1a:e4:9c:98:bc:86:74:9c:af: d0:4b:6e:19:92:c9:2f:09:d1:69:d1:9e:b7:aa:40:02:f1:b9: a8:8d:4f:4a:b8:c3:a9:ec:cd:1a:d4:c6:3a:40:2d:8e:42:3c: b2:d3:a9:36:a0:bc:30:c1:ad:b7:79:e3:4a:85:2e:65:c0:64: 44:64:32:6c:83:7c:a0:fd:4d:df:50:47:b8:f4:e2:d8:4d:38: a6:9c:35:73:16:3f:67:e9:f9:5b:88:31:13:a5:72:3d:2d:83: f8:93:67:58:eb:51:e8:fe:57:06:a7:e7:0f:80:29:ac:a6:59: 80:54:7a:d4:2d:a7:0e:e7:dc:5e:83:e1:08:f5:03:4b:2f:73: 7f:7a:93:f7:70:ae:77:53:4a:9d:45:3a:fe:85:4e:5b:c4:16: 75:bf:4f:83:75:77:52:6e:a3:1e:4f:65:dd:25:43:89:00:fa: 21:d5:c1:c6:28:8d:5c:8c:f0:35:db:a9:a0:6d:2e:0c:5c:b9: 03:0a:7c:20:84:22:56:02:24:b8:8c:90:e0:b4:9a:bd:48:e3: 8d:96:14:90:b7:f7:5f:54:0c:a8:ef:11:87:47:9f:33:61:66: 2e:16:3a:8e -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt7NgHSt7+jvNteSaM1Y1rfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZjEzMmRmMTNlNGJlNTNkODI1MGM4YzQ4NDIwMjY0ZWVm NmMxNGMwHhcNMjYwMTAxMjAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MWYwODA5MWU1ZDJkN2E1M2UzYjRiNjcxODM1MjJkOWI4OGNmN2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xfHQ9md4CDejBp4tf8z4dbPCAaM 1/+ywfcO8GXYoieijBg/GzrC/eY06lt7+RLMHyWsnHpVSsTfK1YdtinDKqEkCA8v rtI5p/hayo4h4uoIBkF2GStPfR1dQn2msHWh7RU47C4WleWcQYvz/MI+CPlqpyWf 9/XvSb/Zht2MEwim9naK5AKUufqbBNyOfdhMugWUmHOvS29t5QNWUfqprjbIx2Cg fzjEKYLUzU0y05jrHm/ydAF6dQ+bosSnECkrrnHt4pS9e9UVBZJvpMtFZgc2vGX6 WVxaMtMTIM9d+aMK1MXMLRPR6DY2hQGvw9z9C+tYyInSGkfrzkzx1XkJtQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFFHwgJHl0telPjtLZxg1Itm4jPenMB8GA1UdIwQY MBaAFH3xMt8T5L5T2CUMjEhCAmTu9sFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYt OTc3ODY3NGVkYzk3LzEvVWZDQWtlWFMxNlUtTzB0bkdEVWkyYmlNOTZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYtOTc3ODY3NGVkYzk3 LzEvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAVmsUAwQA Vms0AwQAWSoJAwQAWS//AwQAXHInAwQAXHI0AwQBvNdGAwQBvPDKAwQBvPGGMA0G CSqGSIb3DQEBCwUAA4IBAQCTw3PePExx++QGZx+ncQ2mWTYK3fwxqNdrFLga5JyY vIZ0nK/QS24ZkskvCdFp0Z63qkAC8bmojU9KuMOp7M0a1MY6QC2OQjyy06k2oLww wa23eeNKhS5lwGREZDJsg3yg/U3fUEe49OLYTTimnDVzFj9n6flbiDETpXI9LYP4 k2dY61Ho/lcGp+cPgCmsplmAVHrULacO59xeg+EI9QNLL3N/epP3cK53U0qdRTr+ hU5bxBZ1v0+DdXdSbqMeT2XdJUOJAPoh1cHGKI1cjPA126mgbS4MXLkDCnwghCJW AiS4jJDgtJq9SOONlhSQt/dfVAyo7xGHR58zYWYuFjqO -----END CERTIFICATE-----Generated at Sun Jan 25 21:19:36 2026 by rpki-client